dust: use immutable /etc

This commit is contained in:
Guanran Wang 2024-10-20 14:45:52 +08:00
parent c09ca82a99
commit 52c3fa4772
Signed by: nyancat
GPG key ID: 91F97D9ED12639CF
2 changed files with 20 additions and 5 deletions

View file

@ -18,11 +18,12 @@
programs = {
jq.enable = true;
man.generateCaches = false;
mangohud.enable = true;
obs-studio.enable = true;
ripgrep.enable = true;
skim.enable = true;
zoxide.enable = true;
mangohud.enable = true;
};
services = {

View file

@ -44,6 +44,8 @@
}
);
boot.kernelPackages = lib.mkForce pkgs.linuxPackages_testing;
nix.extraOptions = "!include ${config.sops.secrets.nix-access-tokens.path}";
networking.hostName = "dust";
@ -51,11 +53,23 @@
system.stateVersion = "24.05";
# TODO: move to 'core' profile
system.etc.overlay.enable = true;
services.userborn.enable = true;
# TODO: this is currently broken
# system.etc.overlay.mutable = false;
system.etc.overlay.enable = true;
system.etc.overlay.mutable = false;
# HACK: for impermanence
environment.etc =
lib.genAttrs
[
"ssh/ssh_host_rsa_key"
"ssh/ssh_host_rsa_key.pub"
"ssh/ssh_host_ed25519_key"
"ssh/ssh_host_ed25519_key.pub"
"secureboot/placeholder"
]
(_n: {
source = pkgs.emptyFile;
mode = "0644";
});
users.users."guanranwang" = {
isNormalUser = true;