blob: ac8dc645bb09a60a735dbe75e5b3408df64571f0 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
|
SSH_OPTIONS := "-o PubkeyAuthentication=no -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no"
nixdisk := "vda"
nixaddr := ""
hostname := lowercase(`hostname -s`)
default:
@just --list
[group('nix')]
[doc('update dependencies')]
update-deps:
nix flake update --commit-lock-file
[group('nix')]
[doc('a simple check to ensure the nix configuration is OK')]
test-nix:
nix flake check
nix develop -c echo OK
[group('nix')]
[doc('run various formatting tools')]
fmt:
nix fmt
# Nix Store can contains corrupted entries if the nix store object has been modified unexpectedly.
# This command will verify all the store entries,
# and we need to fix the corrupted entries manually via `sudo nix store delete <store-path-1> <store-path-2> ...`
[group('nix')]
[doc('verify all the store entries')]
verify-store:
nix store verify --all
[group('nix')]
[doc('garbage collect all unused nix store entries (system-wide and home-manager)')]
gc:
# garbage collect all unused nix store entries(system-wide)
sudo nix-collect-garbage --delete-older-than 7d
# garbage collect all unused nix store entries(for the user - home-manager)
# https://github.com/NixOS/nix/issues/8508
nix-collect-garbage --delete-older-than 7d
[group('nix')]
[doc('list recent version')]
history:
nix profile history --profile /nix/var/nix/profiles/system
[group('nix')]
[doc('show all the auto gc roots in the nix store')]
gcroot:
ls -al /nix/var/nix/gcroots/auto/
[group('secrets')]
[doc('edit a secret')]
[macos]
secrets +args:
#!/usr/bin/env fish
cd secrets && agenix -e {{args}}.age -i (op read "op://Personal/nixos/private key?ssh-format=openssh"|psub)
[group('machines')]
[doc('build the configuration for the current host')]
[macos]
build:
darwin-rebuild build --flake .#{{hostname}}
[group('machines')]
[doc('switch the configuration for the current host')]
[macos]
switch:
darwin-rebuild switch --flake .#{{hostname}}
[group('machines')]
[doc('build the configuration for the current host')]
[linux]
build:
nixos-rebuild build --flake .#{{hostname}}
[group('machines')]
[doc('switch the configuration for the current host')]
[linux]
switch:
nixos-rebuild switch --flake .#{{hostname}}
[group('vm')]
vm-bootstrap:
#!/usr/bin/env bash
set -euxo pipefail
ssh {{SSH_OPTIONS}} root@{{nixaddr}} " \
parted /dev/{{nixdisk}} -- mklabel gpt; \
parted /dev/{{nixdisk}} -- mkpart primary 512MB 100%; \
parted /dev/{{nixdisk}} -- mkpart ESP fat32 1MB 512MB; \
parted /dev/{{nixdisk}} -- set 2 esp on; \
sleep 1; \
mkfs.ext4 -L nixos /dev/{{nixdisk}}1; \
mkfs.fat -F 32 -n boot /dev/{{nixdisk}}2; \
sleep 1; \
mount /dev/disk/by-label/nixos /mnt; \
mkdir -p /mnt/boot; \
mount /dev/disk/by-label/boot /mnt/boot; \
nixos-generate-config --root /mnt; \
sed --in-place '/system\.stateVersion = .*/a \
nix.extraOptions = \"experimental-features = nix-command flakes\";\n \
services.openssh.enable = true;\n \
services.openssh.settings.PasswordAuthentication = true;\n \
services.openssh.settings.PermitRootLogin = \"yes\";\n \
users.users.root.initialPassword = \"root\";\n \
' /mnt/etc/nixos/configuration.nix; \
nixos-install --no-root-passwd && reboot; \
"
[group('vm')]
vm-copy:
#!/usr/bin/env fish
rsync -av -e 'ssh {{SSH_OPTIONS}}' \
--exclude='.git/' \
--exclude='result' \
--exclude='.direnv/' \
--rsync-path="sudo rsync" \
$(dirname justfile)/ {{nixaddr}}:/nix-config
|
