My nixos configs repo
Setup as per https://grahamc.com/blog/erase-your-darlings/ and https://carjorvaz.com/posts/installing-nixos-with-root-on-tmpfs-and-encrypted-zfs-on-a-netcup-vps/
sudo zpool create \
-o ashift=12 \
-O encryption=on \
-O keylocation=file:https://{keyFile} \
-O keyformat=passphrase \
z \
{diskId}nixos-rebuild switch --use-remote-sudo --refresh --show-trace --flake github:HippocampusGirl/nixos#laptop-wslsudo mount -t tmpfs none /mnt
sudo mkdir -p /mnt/{boot,nix,persist,work,lea}
sudo mount /dev/nvme1n1p1 /mnt/boot
sudo zpool import x -f
sudo zfs load-key -a
sudo mount -t zfs x/nix /mnt/nix
sudo mount -t zfs x/persist /mnt/persist
sudo mkdir -p /mnt/etc/nixos /mnt/var/{log,lib}
sudo mount -o bind /mnt/persist/var/log /mnt/var/log
sudo mount -o bind /mnt/persist/var/lib /mnt/var/lib
sudo ln -s /mnt/var/lib/key-file /var/lib/key-file
sudo zpool import z -f
sudo zfs load-key -a
sudo mount -t zfs z/lea /mnt/lea
sudo mount -t zfs z/work /mnt/work
sudo nixos-install --no-channel-copy --root /mnt --flake path:https:///work/nixos#laptop --show-tracehttps://carjorvaz.com/posts/installing-nixos-with-root-on-tmpfs-and-encrypted-zfs-on-a-netcup-vps/
sudo zpool create \
-o ashift=12 \
-o autotrim=on \
-O acltype=posixacl \
-O atime=off \
-O canmount=off \
-O compression=zstd \
-O dnodesize=auto \
-O normalization=formD \
-O xattr=sa \
-O mountpoint=none \
-O encryption=on \
-O keylocation=prompt \
-O keyformat=passphrase \
z \
/dev/disk/by-partuuid/...
sudo zfs create z/nixfor dataset in z/www z/postgres z/lea z/persist; do
first=$(zfs list -t snapshot -o name -S creation "z/server.dzo-owl.ts.net/${dataset}" | tail --lines=1)
last=$(zfs list -t snapshot -o name -s creation "z/server.dzo-owl.ts.net/${dataset}" | tail --lines=1)
sudo zfs send "${first}" | pv | ssh -p 22 [email protected] sudo zfs recv -v -x compression "${dataset}"
sudo zfs send -I "${first}" "${last}" | pv | ssh -p 22 [email protected] sudo zfs recv -v "${dataset}"
donesudo mount -t tmpfs none /mnt
sudo mkdir -p /mnt/{boot,nix,persist}
sudo mount /dev/sda1 /mnt/boot
sudo zpool import z -f
sudo zfs load-key -a
sudo zfs mount z/lea
sudo mount -t zfs z/nix /mnt/nix
sudo mount -t zfs z/persist /mnt/persist
sudo mkdir -p /mnt/etc/nixos /mnt/var/log
sudo mount -o bind /mnt/persist/var/log /mnt/var/log
sudo mount -o bind /lea /mnt/lea
sudo nixos-install --no-channel-copy --root /mnt --flake path:https:///lea/nixos#server --show-trace
sudo umount -Rl /mnt
sudo zpool export -a
sudo reboot
nixos-rebuild switch -L --use-remote-sudo --fast --flake /mnt/etc/nixos#serversudo nixos-rebuild switch -L --use-remote-sudo --flake path:https:///lea/nixos#server --show-trace --refreshvolume.zfs.block_mode: "true"
volume.size: "96GiB"
sudo mkfs.vfat /dev/nvme0n1p1
sudo zpool create \
-o ashift=12 \
-o autotrim=on \
-O acltype=posixacl \
-O canmount=off \
-O compression=zstd \
-O dnodesize=auto \
-O normalization=formD \
-O relatime=on \
-O xattr=sa \
-O special_small_blocks=1M \
-o encryption=on \
-o keylocation=prompt \
-o keyformat=passphrase \
z mirror \
/dev/disk/by-id/ata-*
sudo zpool add z \
-o ashift=12 \
special mirror \
/dev/disk/by-id/nvme-*
sudo zfs set dedup=on z
sudo zfs create -o mountpoint=/lea z/lea
sudo zfs create -o mountpoint=legacy z/nix
sudo zfs create -o mountpoint=legacy z/persistmkdir .ssh
cat <<EOF > .ssh/authorized_keys
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIETA8z05h0cx/Zma9WRKNcG+ckBJ1k35dGYLnAew1BXZ
EOF
sudo mount -t tmpfs none /mnt
sudo mkdir -p /mnt/{boot,nix,persist}
sudo mount /dev/nvme0n1p1 /mnt/boot
sudo zpool import z -f
sudo zfs load-key -a
sudo zfs mount z/lea
sudo mount -t zfs z/nix /mnt/nix
sudo mount -t zfs z/persist /mnt/persist
sudo mkdir -p /mnt/etc/nixos /mnt/var/log /mnt/persist/var/log /mnt/lea
sudo mount -o bind /mnt/persist/var/log /mnt/var/log
sudo mount -o bind /lea /mnt/lea
sudo nixos-install --impure --no-channel-copy --root /mnt --flake path:https:///lea/nixos#home
sudo umount -Rl /mnt
sudo zpool export -a
sudo reboot
sudo nixos-rebuild switch -L --use-remote-sudo --flake path:https:///lea/nixos#home