Skip to content

Commit

Permalink
Migrate nixos-install to btrfs
Browse files Browse the repository at this point in the history
  • Loading branch information
rake5k committed Sep 22, 2023
1 parent 9e39da2 commit b52c4f8
Show file tree
Hide file tree
Showing 2 changed files with 65 additions and 71 deletions.
2 changes: 1 addition & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -130,7 +130,7 @@ sudo su # become root
mkdir -p ~/.config/nix
echo "experimental-features = nix-command flakes" > ~/.config/nix/nix.conf

nix run github:rake5k/nixcfg#nixos-install -- <hostname> <disk>
nix run github:rake5k/nixcfg#nixos-install -- <hostname> <disk> github:rake5k/nixcfg-home
```

Where:
Expand Down
134 changes: 64 additions & 70 deletions lib/apps/nixos-install.sh
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,7 @@ set -x
echo '1'
readonly HOSTNAME="${1}"
readonly DISK="${2}"
readonly FLAKE="${3}"

# Validate arguments

Expand Down Expand Up @@ -53,32 +54,17 @@ get_partition() {
echo '8'
BOOT_PARTITION="$(get_partition 1)"
readonly BOOT_PARTITION
LVM_PARTITION="$(get_partition 2)"
readonly LVM_PARTITION

echo '9'
get_ram_size() {
local mem_summary
mem_summary="$(lsmem --summary=only)"
local mem_summary_online
mem_summary_online="$(echo "${mem_summary}" | grep "Total online memory:")"
local mem_online_size
mem_online_size="$(echo "${mem_summary_online}" | grep -Po "[0-9]+[kKmMgGtTpPeE]")"
echo "${mem_online_size}"
}

echo '10'
RAM_SIZE="$(get_ram_size)"
readonly RAM_SIZE
ROOT_PARTITION="$(get_partition 2)"
readonly ROOT_PARTITION


### Declare functions

echo '11'
readonly LVM_PV="nixos-enc"
readonly LVM_VG="nixos-vg"
readonly LVM_LV_ROOT="/dev/${LVM_VG}/root"
readonly LVM_LV_SWAP="/dev/${LVM_VG}/swap"
readonly ROOT_CRYPT="root"
readonly BOOT_FS="BOOT"
readonly ROOT_FS="root"
readonly MOUNT_ROOT="/mnt"

partition() {
_log "[partition] Deleting partitions..."
Expand All @@ -95,64 +81,73 @@ partition() {
}

echo '12'
encrypt_partition() {
_log "[encrypt_partition] Encrypting LVM partition..."
cryptsetup luksFormat "${LVM_PARTITION}"
cryptsetup luksOpen "${LVM_PARTITION}" "${LVM_PV}"
}

create_volumes() {
_log "[create_volumes] Creating LVM volumes..."
pvcreate "/dev/mapper/${LVM_PV}"
vgcreate "${LVM_VG}" "/dev/mapper/${LVM_PV}"
lvcreate -L "${RAM_SIZE}" -n swap "${LVM_VG}"
lvcreate -l 100%FREE -n root "${LVM_VG}"
crypt_setup() {
_log "[crypt_setup] Encrypting LVM partition..."
cryptsetup luksFormat "${ROOT_PARTITION}"
cryptsetup luksOpen "${ROOT_PARTITION}" "${ROOT_CRYPT}"
}

echo '13'
create_filesystems() {
# TODO: Switch to btrfs (https://github.com/wiltaylor/dotfiles/blob/master/tools/makefs-nixos)
_log "[create_filesystems] Creating filesystems..."
mkfs.vfat -n boot "${BOOT_PARTITION}"
mkfs.ext4 -L nixos "${LVM_LV_ROOT}"
mkswap -L swap "${LVM_LV_SWAP}"
mkfs.vfat -n "${BOOT_FS}" "${BOOT_PARTITION}"
mkfs.btrfs -L "${ROOT_FS}" "/dev/mapper/${ROOT_CRYPT}"

_log "[create_filesystems] Creating sub volumes"
mount "/dev/disk/by-label/${ROOT_FS}" "${MOUNT_ROOT}"
btrfs subvolume create "${MOUNT_ROOT}/@"
btrfs subvolume create "${MOUNT_ROOT}/@home"
btrfs subvolume create "${MOUNT_ROOT}/@nix"
btrfs subvolume create "${MOUNT_ROOT}/@swap"
umount "${MOUNT_ROOT}"

_log "[create_filesystems] Result of filesystems creation:"
lsblk -f "${DISK}"
}

echo '14'
decrypt_lvm() {
_log "[decrypt_lvm] Decrypting volumes..."
cryptsetup luksOpen "${LVM_PARTITION}" "${LVM_PV}"
lvscan
vgchange -ay
decrypt_volumes() {
_log "[decrypt_volumes] Decrypting volumes..."
cryptsetup luksOpen "${ROOT_PARTITION}" "${ROOT_CRYPT}"

_log "[decrypt_lvm] Volumes decrypted:"
_log "[decrypt_volumes] Volumes decrypted:"
lsblk -f "${DISK}"
}

echo '15'
install() {
local mount_root="/mnt"
local mount_boot="${mount_root}/boot"

_log "[install] Enabling swap..."
local swap_list
swap_list="$(swapon --noheadings)"
local num_swap
num_swap=$(echo "${swap_list}" | wc -l)
if [[ ${num_swap} -lt 1 ]]; then
swapon -v "${LVM_LV_SWAP}"
fi

_log "[install] Mounting volumes..."
mount "${LVM_LV_ROOT}" "${mount_root}"
mount_filesystems() {
_log "[mount_filesystems] Mounting file systems..."
mount -o noatime,compress=lzo,subvol=@ "/dev/disk/by-label/${ROOT_FS}" "${MOUNT_ROOT}"
mkdir -p "${MOUNT_ROOT}/{home,nix,swap}"
mount -o noatime,compress=lzo,subvol=@home "/dev/disk/by-label/${ROOT_FS}" "${MOUNT_ROOT}/home"
mount -o noatime,compress=zstd,subvol=@nix "/dev/disk/by-label/${ROOT_FS}" "${MOUNT_ROOT}/nix"
mount -o subvol=@swap "/dev/disk/by-label/${ROOT_FS}" "${MOUNT_ROOT}/swap"

local mount_boot="${MOUNT_ROOT}/boot"
mkdir -p "${mount_boot}"
mount "${BOOT_PARTITION}" "${mount_boot}"

_log "[mount_filesystems] File systems mounted:"
findmnt --real
}

enable_swap() {
local swap_dir="${MOUNT_ROOT}/swap"
local swap_file="${swap_dir}/swapfile"

_log "[enable_swap] Creating swap file..."
btrfs filesystem mkswapfile --size 4G "${swap_file}"

_log "[enable_swap] Enabling swap..."
swapon "${swap_file}"

_log "[enable_swap] Enabled swaps:"
cat /proc/swaps
}

install() {
_log "[install] Installing NixOS..."
nixos-install --root "${mount_root}" --flake "github:rake5k/nixcfg#${HOSTNAME}" --impure
nixos-install --root "${MOUNT_ROOT}" --flake "${FLAKE}#${HOSTNAME}" --impure
_log "[install] Installing NixOS... finished!"

_log "[install] Installation finished, please reboot and remove installation media..."
Expand All @@ -169,27 +164,26 @@ if _read_boolean "Do you want to DELETE ALL PARTITIONS?" N; then
echo '16-1'
# shellcheck disable=SC2310
if _read_boolean "Do you want to ENCRYPT THE DISK?" N; then
encrypt_partition
crypt_setup
fi

create_volumes
create_filesystems
fi

echo '17'
LVM_PV_STATUS="$(cryptsetup -q status "${LVM_PV}")"
readonly LVM_PV_STATUS
LVM_PV_NUM_ACTIVE=$(echo "${LVM_PV_STATUS}" | grep "^/dev/mapper/${LVM_PV} is active and is in use.$" -c)
readonly LVM_PV_NUM_ACTIVE
if [[ ${LVM_PV_NUM_ACTIVE} -lt 1 ]]; then
decrypt_lvm
CRYPT_VOL_STATUS="$(cryptsetup -q status "${ROOT_CRYPT}")"
readonly CRYPT_VOL_STATUS
CRYPT_VOL_NUM_ACTIVE=$(echo "${CRYPT_VOL_STATUS}" | grep "^/dev/mapper/${ROOT_CRYPT} is active.$" -c)
readonly CRYPT_VOL_NUM_ACTIVE
if [[ ${CRYPT_VOL_NUM_ACTIVE} -lt 1 ]]; then
decrypt_volumes
fi

echo '18'
# shellcheck disable=SC2310
DO_INSTALL="$(_read_boolean "Do you want to INSTALL NixOS now?" N)" || true
readonly DO_INSTALL
if "${DO_INSTALL}"; then
if _read_boolean "Do you want to INSTALL NixOS now?" N; then
mount_filesystems
enable_swap
install
fi

0 comments on commit b52c4f8

Please sign in to comment.