Setting up with Lanzaboote (secure-boot)

1. Disable secure boot and install NixOS
2. Install system from this flake e.g. sudo nixos-rebuild switch --flake .#surface
3. Generate secure boot keys with sudo sbctl create-keys
4. Enroll the keys with sudo sbctl enroll-keys
5. Reboot

Bootstrap fresh system (WSL)

nix shell nixpkgs#git --extra-experimental-features "nix-command flakes"
git clone https://git.pleunetowne.com/mitchpleune/nixflakes.git && cd nixflakes
sudo nixos-rebuild switch --flake .#wsl

Then from a new tab, confirm that NixOS still works with nixos -d nixos -u mitch. If so, restart WSL

wsl --shutdown

Then Re-open your nix tab, and transfer the repo over to the new user directory

sudo mv /home/nixos/nixflakes .
sudo chown -R $USER:users nixflakes/
sudo rm -rf /home/nixos

Running custom Neovim

nix run git+https://git.pleunetowne.com/mitchpleune/nixflakes.git#mitchvim --option substituters "https://nix.pleunetowne.com/?trusted=1"

Deploy to all nix homelab components

# optional update
nix flake update

# builds and deploys to every nix host
nix develop . -c deploy

Errata

nix build --rebuild nixpkgs#gitMinimal tests sometimes randomly fail on ZFS. higher disk priority and higher ulimit seems to help, but does not fix it.

TODO

• Change VMs to be very swappy since most times swap will be ram-compressed-cached and very fast

Notes

If font is broken after an update:

rm -r ~/.cache/fontconfig
fc-cache -vr