absolute cinema

This commit is contained in:
uku 2025-03-04 17:29:13 +01:00
parent b19e3cd860
commit 87c2e38720
Signed by: uku
SSH key fingerprint: SHA256:4P0aN6M8ajKukNi6aPOaX0LacanGYtlfjmN+m/sHY/o
2 changed files with 29 additions and 13 deletions

View file

@ -196,6 +196,11 @@ in
};
};
system.activationScripts."upgrade-diff" = {
supportsDryActivation = true;
text = "${lib.getExe pkgs.nvd} --nix-bin-dir=${config.nix.package}/bin diff /run/current-system $systemConfig 1>&2";
};
systemd = {
services.NetworkManager-wait-online.enable = lib.mkForce false;

View file

@ -6,31 +6,42 @@ check:
switch *args:
#!/usr/bin/env bash
set -euxo pipefail
flake=$(nix build ".#nixosConfigurations.$(hostname).config.system.build.toplevel" --print-out-paths --no-link --keep-going)
nvd diff /run/current-system "$flake"
read -p "Activate new configuration? [y/N] " answer
set -euo pipefail
configuration=$(sudo nixos-rebuild dry-activate --flake . --keep-going {{args}})
echo $configuration
read -n1 -p "Activate new configuration? [y/N] " answer
if [[ $answer =~ ^[Yy]$ ]]; then
sudo "$flake/bin/switch-to-configuration" switch
sudo "$configuration/bin/switch-to-configuration" switch
else
echo "Not activating :("
exit 1
fi
rollback:
@sudo -v
sudo nixos-rebuild switch --rollback
boot *args:
@sudo -v
nh os boot --no-nom --ask . -- --keep-going {{args}}
sudo nixos-rebuild boot --flake . --keep-going {{args}}
deploy system user="leo":
#!/usr/bin/env bash
set -euxo pipefail
set -euo pipefail
flake=$(nix eval --impure --raw --expr "(builtins.getFlake \"git+file://$PWD\").outPath")
sshout=$(mktemp)
nix copy "$flake" --to "ssh://{{user}}@{{system}}"
# -R/--bypass-root-check is needed because of a Git CVE regression in Nix 2.20
# See NixOS/nix#10202, viperML/nh#200
ssh -t "{{user}}@{{system}}" "sudo flock -w 60 /dev/shm/deploy-{{system}} nix run n#nh -- os switch --no-nom -R -H {{system}} --ask $flake"
ssh -t "{{user}}@{{system}}" "sudo nixos-rebuild dry-activate --flake $flake --keep-going" | tee "$sshout"
configuration=$(tail -n1 "$sshout" | grep -Po "/nix/store/[\w\d\.\-]+")
echo "$configuration"
rm "$sshout"
read -n1 -p "Activate new configuration? [y/N] " answer
if [[ $answer =~ ^[Yy]$ ]]; then
ssh -t "{{user}}@{{system}}" "sudo \"$configuration/bin/switch-to-configuration\" switch"
else
echo "Not activating :("
exit 1
fi
lint *args:
statix check -i flake.nix **/hardware-configuration.nix {{args}}