aboutsummaryrefslogtreecommitdiffstats
path: root/sys/boot
diff options
context:
space:
mode:
authorBenedikt Peetz <benedikt.peetz@b-peetz.de>2024-05-20 16:10:21 +0200
committerBenedikt Peetz <benedikt.peetz@b-peetz.de>2024-05-20 16:14:26 +0200
commit368cb6b0d25db2ae23be42ad51584de059997e51 (patch)
tree3282e45d3ebced63c8498a47e83a255c35de620b /sys/boot
parentrefactor(hm): Rename to `modules/home` (diff)
downloadnixos-config-368cb6b0d25db2ae23be42ad51584de059997e51.zip
refactor(sys): Modularize and move to `modules/system` or `pkgs`
Diffstat (limited to 'sys/boot')
-rw-r--r--sys/boot/archlive_iso.nix77
-rwxr-xr-xsys/boot/boot_pictures/gnu.pngbin327518 -> 0 bytes
-rwxr-xr-xsys/boot/boot_pictures/gnulin_emb_1.pngbin207444 -> 0 bytes
-rwxr-xr-xsys/boot/boot_pictures/gnulin_emb_2.pngbin208347 -> 0 bytes
-rw-r--r--sys/boot/default.nix117
-rw-r--r--sys/boot/signing_key.nix18
6 files changed, 0 insertions, 212 deletions
diff --git a/sys/boot/archlive_iso.nix b/sys/boot/archlive_iso.nix
deleted file mode 100644
index d19a4a87..00000000
--- a/sys/boot/archlive_iso.nix
+++ /dev/null
@@ -1,77 +0,0 @@
-{pkgs ? (builtins.getFlake "nixpkgs").legacyPackages."x86_64-linux"}: let
- signing_key = import ./signing_key.nix {inherit pkgs;};
-
- checked_iso = pkgs.stdenv.mkDerivation {
- pname = "archlinux-iso";
- version = "2024.05.01";
-
- srcs = [
- (pkgs.fetchurl {
- url = "https://archlinux.org/iso/2024.05.01/archlinux-2024.05.01-x86_64.iso.sig";
- hash = "sha256-QOGYng6a7zA5EJKGotDccJ7fD2MmPPXQEdVr1kjJvi4=";
- })
- (pkgs.fetchurl {
- url = "https://mirror.informatik.tu-freiberg.de/arch/iso/latest/archlinux-2024.05.01-x86_64.iso";
- hash = "sha256-G0oE74pzUIUqEwcO5JhEKwh6YHoYhAtN19mYZ+tfakw=";
- })
- (pkgs.fetchurl {
- url = "https://archlinux.org/iso/2024.05.01/b2sums.txt";
- hash = "sha256-HSMS13hHXFKKQsCA8spa7XtirHCBTmePwhOsStVPbHw=";
- })
- ];
-
- dontUnpack = true;
-
- nativeBuildInputs = with pkgs; [
- sequoia-sq
- ];
-
- buildPhase =
- /*
- bash
- */
- ''
- cp -r "${signing_key}" ./release-key.pgp
- for src in $srcs; do
- cp -r "$src" "$(stripHash "$src")"
- done
-
- sed '2d;3d;4d' b2sums.txt > b2sums_clean.txt
-
- # As per the directions from: https://archlinux.org/download/
-
- # blake hash check
- b2sum -c ./b2sums_clean.txt
-
- # pgp signature check
- sq verify --signer-file release-key.pgp --detached archlinux-2024.05.01-x86_64.iso.sig archlinux-2024.05.01-x86_64.iso
- '';
-
- installPhase = ''
- cp archlinux-2024.05.01-x86_64.iso "$out";
- '';
- };
-in
- pkgs.stdenv.mkDerivation {
- name = "live_iso_boot_entry";
-
- src = checked_iso;
-
- dontUnpack = true;
-
- nativeBuildInputs = with pkgs; [
- libarchive # for bsdtar
- ];
-
- buildPhase = ''
- mkdir iso
- bsdtar -xf "$src" -C iso
- '';
-
- installPhase = ''
- install -D ./iso/arch/boot/x86_64/initramfs-linux.img "$out/live/initramfs-linux.img"
- install -D ./iso/arch/boot/x86_64/vmlinuz-linux "$out/live/vmlinuz-linux"
-
- install -D "$src" "$out/archlinux.iso"
- '';
- }
diff --git a/sys/boot/boot_pictures/gnu.png b/sys/boot/boot_pictures/gnu.png
deleted file mode 100755
index d07dee3e..00000000
--- a/sys/boot/boot_pictures/gnu.png
+++ /dev/null
Binary files differ
diff --git a/sys/boot/boot_pictures/gnulin_emb_1.png b/sys/boot/boot_pictures/gnulin_emb_1.png
deleted file mode 100755
index 483f2681..00000000
--- a/sys/boot/boot_pictures/gnulin_emb_1.png
+++ /dev/null
Binary files differ
diff --git a/sys/boot/boot_pictures/gnulin_emb_2.png b/sys/boot/boot_pictures/gnulin_emb_2.png
deleted file mode 100755
index 48cd6ad7..00000000
--- a/sys/boot/boot_pictures/gnulin_emb_2.png
+++ /dev/null
Binary files differ
diff --git a/sys/boot/default.nix b/sys/boot/default.nix
deleted file mode 100644
index e5d05f31..00000000
--- a/sys/boot/default.nix
+++ /dev/null
@@ -1,117 +0,0 @@
-{
- pkgs,
- lib,
- config,
- ...
-}: let
- cfg = config.boot.loader.systemd-boot;
- inherit (config.boot.loader) efi;
-
- esa = n: lib.strings.escapeShellArg n;
-
- bootMountPoint =
- if cfg.xbootldrMountPoint != null
- then cfg.xbootldrMountPoint
- else efi.efiSysMountPoint;
-
- nixosDir = "/EFI/nixos";
-
- # FIXME: This system has two big problems:
- # 1. It does not updated files, which still have the same name
- # 2. It forgets about files, which were 'deleted' in this configuration (these just
- # stay on disk forever) <2024-05-11>
- copyExtraFiles = ''
- echo "[systemd-boot] copying files to ${bootMountPoint}"
- empty_file=$(mktemp)
-
- ${lib.concatStrings (lib.mapAttrsToList (n: v:
- /*
- bash
- */
- ''
- if ! [ -e ${esa "${bootMountPoint}/${n}"} ]; then
- install -Dp "${v}" ${esa "${bootMountPoint}/${n}"}
- install -D "$empty_file" ${esa "${bootMountPoint}/${nixosDir}/.extra-files/${n}"}
- fi
- '')
- cfg.extraFiles)}
-
- ${lib.concatStrings (lib.mapAttrsToList (n: v:
- /*
- bash
- */
- ''
- # if ! [ -e ${esa "${bootMountPoint}/loader/entries/${n}"} ]; then
- install -Dp "${pkgs.writeText n v}" ${esa "${bootMountPoint}/loader/entries/${n}"}
- install -D "$empty_file" ${esa "${bootMountPoint}/${nixosDir}/.extra-files/loader/entries/${n}"}
- # fi
- '')
- cfg.extraEntries)}
- '';
-in {
- # FIXME: Reactviate this whole iso thing when a disko redeploy is done.
- # (and switch to tails instead of arch)<2024-05-12>
- # system.activationScripts = {
- # copyExtraFilesForBoot = copyExtraFiles;
- # };
-
- boot = {
- initrd = {
- #compressor = "lz4";
- #compressorArgs = ["-9"];
- kernelModules = ["nvme" "btrfs"];
- };
-
- kernelPackages = pkgs.linuxPackages_latest;
-
- lanzaboote = {
- enable = true;
- pkiBundle = "/etc/secureboot";
-
- settings = {
- # Disable editing the kernel command line (which could allow someone to become root)
- editor = false;
- };
- };
-
- loader = {
- systemd-boot = {
- # Lanzaboote currently replaces the systemd-boot module.
- # This setting is usually set to true in configuration.nix
- # generated at installation time. So we force it to false
- # for now.
- enable = false;
-
- extraEntries = {
- "live.conf" = ''
- title Archlinux Live ISO
- linux /live/vmlinuz-linux
- initrd /live/initramfs-linux.img
- options img_dev=${config.soispha.disks.disk} img_loop=/archlinux.iso copytoram
- '';
- };
-
- extraFiles = let
- iso = import ./archlive_iso.nix {inherit pkgs;};
- in {
- "archlinux.iso" = "${iso}/archlinux.iso";
- "live/initramfs-linux.img" = "${iso}/live/initramfs-linux.img";
- "live/vmlinuz-linux" = "${iso}/live/vmlinuz-linux";
- };
- };
-
- grub = {
- enable = false;
- # theme = pkgs.nixos-grub2-theme;
- splashImage = ./boot_pictures/gnu.png;
- efiSupport = true;
- device = "nodev"; # only for efi
- };
-
- efi = {
- canTouchEfiVariables = true;
- efiSysMountPoint = "/boot";
- };
- };
- };
-}
diff --git a/sys/boot/signing_key.nix b/sys/boot/signing_key.nix
deleted file mode 100644
index 788447be..00000000
--- a/sys/boot/signing_key.nix
+++ /dev/null
@@ -1,18 +0,0 @@
-{pkgs ? (builtins.getFlake "nixpkgs").legacyPackages."x86_64-linux"}:
-pkgs.stdenv.mkDerivation {
- name = "archlinux_signing_keys";
-
- outputHash = "sha256-evGWzkxMaZw3rlixKsyWCS/ZvNuZ+OfXQb6sgiHz9XY=";
- outputHashAlgo = "sha256";
- NIX_SSL_CERT_FILE = "${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt";
-
- nativeBuildInputs = with pkgs; [
- sequoia-sq
- ];
-
- dontUnpack = true;
-
- buildPhase = ''
- sq --verbose --no-cert-store --no-key-store network wkd fetch pierre@archlinux.org --output "$out"
- '';
-}