108 lines
3.2 KiB
Nix
108 lines
3.2 KiB
Nix
{
|
|
device ? throw "Set this to your disk device, e.g. /dev/sda",
|
|
lib,
|
|
...
|
|
}:
|
|
# IMPORTANT
|
|
# Calculate offset using https://wiki.archlinux.org/title/Power_management/Suspend_and_hibernate#Acquire_swap_file_offset
|
|
# AND create this config
|
|
# {
|
|
# boot = {
|
|
# kernelParams = [
|
|
# "resume_offset=YOUR_OFFSET"
|
|
# ];
|
|
# resumeDevice = "/dev/disk/by-label/nixos";
|
|
# };
|
|
#}
|
|
{
|
|
disko.devices = {
|
|
disk = {
|
|
nvme0n1 = {
|
|
type = "disk";
|
|
inherit device;
|
|
content = {
|
|
type = "gpt";
|
|
partitions = {
|
|
ESP = {
|
|
label = "boot";
|
|
name = "ESP";
|
|
size = "512M";
|
|
type = "EF00";
|
|
content = {
|
|
type = "filesystem";
|
|
format = "vfat";
|
|
mountpoint = "/boot";
|
|
mountOptions = [
|
|
"defaults"
|
|
];
|
|
};
|
|
};
|
|
luks = {
|
|
size = "100%";
|
|
label = "luks";
|
|
content = {
|
|
type = "luks";
|
|
name = "root_vg";
|
|
extraOpenArgs = [
|
|
"--allow-discards"
|
|
"--perf-no_read_workqueue"
|
|
"--perf-no_write_workqueue"
|
|
];
|
|
# https://0pointer.net/blog/unlocking-luks2-volumes-with-tpm2-fido2-pkcs11-security-hardware-on-systemd-248.html
|
|
settings = {crypttabExtraOpts = ["fido2-device=auto" "token-timeout=10"];};
|
|
content = {
|
|
type = "btrfs";
|
|
extraArgs = ["-L" "nixos" "-f"];
|
|
subvolumes = {
|
|
"/root" = {
|
|
mountpoint = "/";
|
|
mountOptions = ["subvol=root" "compress=zstd" "noatime"];
|
|
};
|
|
"/nix" = {
|
|
mountpoint = "/nix";
|
|
mountOptions = ["subvol=nix" "compress=zstd" "noatime"];
|
|
};
|
|
"/persist" = {
|
|
mountpoint = "/persist";
|
|
mountOptions = ["subvol=persist" "compress=zstd" "noatime"];
|
|
};
|
|
"/swap" = {
|
|
mountpoint = "/swap";
|
|
swap.swapfile.size = "64G";
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
fileSystems."/persist".neededForBoot = true;
|
|
boot.initrd.postResumeCommands = lib.mkAfter ''
|
|
mkdir -p /btrfs_tmp
|
|
mount /dev/disk/by-label/nixos /btrfs_tmp
|
|
if [[ -e /btrfs_tmp/root ]]; then
|
|
mkdir -p /btrfs_tmp/old_roots
|
|
timestamp=$(date --date="@$(stat -c %Y /btrfs_tmp/root)" "+%Y-%m-%-d_%H:%M:%S")
|
|
mv /btrfs_tmp/root "/btrfs_tmp/old_roots/$timestamp"
|
|
fi
|
|
|
|
delete_subvolume_recursively() {
|
|
IFS=$'\n'
|
|
for i in $(btrfs subvolume list -o "$1" | cut -f 9- -d ' '); do
|
|
delete_subvolume_recursively "/btrfs_tmp/$i"
|
|
done
|
|
btrfs subvolume delete "$1"
|
|
}
|
|
|
|
for i in $(find /btrfs_tmp/old_roots/ -maxdepth 1 -mtime +30); do
|
|
delete_subvolume_recursively "$i"
|
|
done
|
|
|
|
btrfs subvolume create /btrfs_tmp/root
|
|
umount /btrfs_tmp
|
|
'';
|
|
}
|