2018-10-30 13:38:36 +01:00
|
|
|
# steveej's infra
|
|
|
|
|
This repository helps me to manage all computer infrastructure.
|
|
|
|
|
This is mostly achieved with the help of [Nix](https://nixos.org).
|
|
|
|
|
|
|
|
|
|
In the unlikely case that you actually read this and have any questions please don't hesitate to reach out.
|
|
|
|
|
|
2019-02-09 00:13:04 +01:00
|
|
|
## Initial Roadmap
|
2018-11-03 18:47:47 +01:00
|
|
|
|
2018-10-30 13:38:36 +01:00
|
|
|
- All graphical systems (incl. install media) must have
|
2018-10-31 19:52:39 +01:00
|
|
|
- [x] Full-disk encryption by default
|
2018-10-30 13:38:36 +01:00
|
|
|
- [x] Yubikey support with SSH auth
|
2018-11-10 21:34:04 +01:00
|
|
|
- [x] Migrate all devices to new structure
|
2018-10-30 13:38:36 +01:00
|
|
|
- [x] Encrypted Install media
|
2018-11-03 18:47:47 +01:00
|
|
|
- [x] steveej-laptop
|
2018-11-10 21:34:04 +01:00
|
|
|
- [x] steveej-laptop-work
|
2018-10-31 19:52:39 +01:00
|
|
|
- [ ] Migrate home environment to new structure
|
|
|
|
|
- [x] home-manager
|
|
|
|
|
- [x] pkgs-configuration
|
|
|
|
|
- [ ] development environments
|
2019-02-09 00:13:04 +01:00
|
|
|
- [x] (Semi-) automatic synchronization of important repositories
|
2018-11-10 21:34:04 +01:00
|
|
|
- [x] Modification strategy
|
2019-02-09 00:13:04 +01:00
|
|
|
The approach is to use vcsh for the dotfiles
|
2018-11-10 21:34:04 +01:00
|
|
|
- [x] dotfiles
|
|
|
|
|
- [x] Toplevel Justfile for simple actions
|
2018-10-30 13:38:36 +01:00
|
|
|
- [x] mount/umount disks
|
|
|
|
|
- [x] install to mounted disk
|
|
|
|
|
- [x] rebuild running system
|
2018-11-03 18:47:47 +01:00
|
|
|
- [x] update running system
|
|
|
|
|
- [x] annotate recipes with some documentation
|
2018-10-31 22:49:43 +01:00
|
|
|
- [x] declare shell.nix with runtime deps
|
2018-11-10 21:34:04 +01:00
|
|
|
- [x] partition/encrypt/format disks
|
2018-10-30 13:38:36 +01:00
|
|
|
- [ ] Document bootstrap process
|
2022-11-03 16:48:06 +01:00
|
|
|
- [ ] `apt install sudo cryptsetup` as a requirements on a deb admin machine
|
2018-11-04 01:39:37 +01:00
|
|
|
- [ ] a new machine
|
|
|
|
|
- [ ] an install media
|
|
|
|
|
- [ ] Design disaster recovery
|
2018-11-10 21:34:04 +01:00
|
|
|
- [ ] Automatic synchronization of other state files - see https://gitlab.com/steveeJ/nix-expressions/issues/2
|
2018-10-30 13:38:36 +01:00
|
|
|
- [ ] Recycle *\_archived*
|
2019-02-09 00:13:04 +01:00
|
|
|
- [x] Maybe make this a nix-overlay
|
2022-11-03 16:48:06 +01:00
|
|
|
- [ ] container migrations
|
|
|
|
|
- [ ] ensure DDNS is updated _before_ the containers are started
|
|
|
|
|
|
2018-10-30 13:38:36 +01:00
|
|
|
|
2018-11-05 13:58:06 +01:00
|
|
|
## Bugs
|
|
|
|
|
- [ ] home-manager leaves ~/.gnupg at 0755
|
|
|
|
|
|
2018-10-30 13:38:36 +01:00
|
|
|
## Usage
|
|
|
|
|
*(These are reminders for my future self)*
|
|
|
|
|
|
|
|
|
|
```
|
|
|
|
|
just --list
|
|
|
|
|
```
|
2018-11-04 01:39:37 +01:00
|
|
|
|
|
|
|
|
## Bootstrap
|
|
|
|
|
|
|
|
|
|
### A new machine
|
2019-11-28 01:05:57 +01:00
|
|
|
* ensure the dotfiles repo has a branch with the new machine's hostname
|
2018-11-04 01:39:37 +01:00
|
|
|
|
2019-11-28 01:05:57 +01:00
|
|
|
* boot with an install media and go through setup
|
|
|
|
|
|
|
|
|
|
#### Post-Install Setup
|
2020-12-21 14:35:50 +01:00
|
|
|
* `chmod --recursive g-rwx,o-rwx ~/.gnupg`
|
2019-11-28 01:05:57 +01:00
|
|
|
* `gpg2 --edit-card; fetch`
|
2020-12-22 00:51:23 +01:00
|
|
|
* clone password-manager and infra repositories
|
|
|
|
|
* gpg2: ultimately trust my own key
|
2022-10-30 15:40:58 +01:00
|
|
|
|
|
|
|
|
## Swapping out a disk
|
|
|
|
|
|
|
|
|
|
1. offline-bitwise copy of drive
|
|
|
|
|
2. disconnect remove the previous drive
|
|
|
|
|
3. replace the driveId in the device's hw.nix
|
|
|
|
|
4. run the `just disk-relabel nix/os/devices/<deviceName> <prevDiskId>` command to rename the filesystem and volume group
|
2022-11-03 16:48:06 +01:00
|
|
|
|
|
|
|
|
## Backup
|
|
|
|
|
|
|
|
|
|
### Copy existing subvolumes to new backup target
|
|
|
|
|
|
|
|
|
|
```
|
|
|
|
|
`systemctl cat bkp-run | grep ExecStart | awk -F '=' '{print $2}'` --verbose --progress archive /var/lib/container-volumes ssh://[IP]:[PORT]/mnt/backup/container-volumes/
|
|
|
|
|
```
|
