infra/nix/os/devices/disk.nix

{ pkgs
, ownLib
, dir
, gitRoot
, diskId ? (import ((builtins.getEnv "PWD")+"/${dir}/hw.nix") {}).hardware.opinionatedDisk.diskId
, encrypted ? (import ((builtins.getEnv "PWD")+"/${dir}/hw.nix") {}).hardware.opinionatedDisk.encrypted
, previousDiskId ? ""

, ...
}:

let
  mntRootVol="/mnt/${diskId}-root";

in rec {
  diskMount = pkgs.writeScript "script" ''
    #!/usr/bin/env bash
    set -xe
    echo Mounting ${diskId}
    ${pkgs.lib.strings.optionalString encrypted ''
      sudo cryptsetup luksOpen ${ownLib.disk.bootLuksDevice diskId} ${ownLib.disk.luksName diskId}
    ''}
    sleep 1
    sudo vgchange -ay ${ownLib.disk.volumeGroup diskId}
    sudo mkdir -p /mnt
    sudo mkdir ${mntRootVol}
    sudo mount ${ownLib.disk.rootFsDevice diskId} ${mntRootVol}
    sudo mount ${ownLib.disk.rootFsDevice diskId} ${mntRootVol}/nixos/home -o subvol=home
    sudo mount ${ownLib.disk.bootFsDevice diskId} ${mntRootVol}/nixos/boot
  '';

  diskUmount = pkgs.writeScript "script" ''
    #!/usr/bin/env bash
    set -x
    sudo umount -Rl ${mntRootVol}
    sudo rmdir ${mntRootVol}
    sudo vgchange -an ${ownLib.disk.volumeGroup diskId}
    ${pkgs.lib.strings.optionalString encrypted ''
      sudo cryptsetup close ${ownLib.disk.luksName diskId}
    ''}
    sync
  '';

  diskInstall = pkgs.writeScript "script" ''
    #!/usr/bin/env bash
    set -xe
    pushd ${gitRoot}/${dir}
    export NIXOS_CONFIG="$PWD"/configuration.nix

    [[ -e "''${NIXOS_CONFIG}" ]]
    [[ -e "${mntRootVol}/nixos" ]]

    sudo -E $SHELL <<EOF
    # 'having $system set breaks nixos-install'
    unset system
    nixos-install --max-jobs 5 --cores 4  --no-root-passwd --root ${mntRootVol}/nixos
    EOF
  '';

  diskPrepare = pkgs.writeScript "script" ''
    #!/usr/bin/env bash
    set -xe

    read -p "Continue to format ${ownLib.disk.bootGrubDevice diskId} (YES/n)? " choice
    case "$choice" in
      YES ) echo "Continuing in 3 seconds..."; sleep 3;;
      n|N ) echo "Exiting..."; exit 0;;
      * ) echo "Exiting..."; exit 1;;
    esac

    # Partition
    sync
    {
    sudo fdisk -w always -W always ${ownLib.disk.bootGrubDevice diskId} <<EOF
    g
    n
    1
   
    +1M
    n
    2
   
    +512M
    n
    3
   
   
    t
    1
    4
    x
    n
    2
    2-${diskId}
    n
    3
    3-${diskId}
    r
    w
    EOF
    } || {
      sync
      sudo partprobe  ${ownLib.disk.bootGrubDevice diskId}
    }

    sleep 1

    ${pkgs.lib.strings.optionalString encrypted ''
      # Encrypt
      sudo cryptsetup luksFormat ${ownLib.disk.bootLuksDevice diskId} -
      sudo cryptsetup luksOpen ${ownLib.disk.bootLuksDevice diskId} ${ownLib.disk.luksName diskId}
    ''}

    # LVM
    sudo vgcreate ${ownLib.disk.volumeGroup diskId} ${ownLib.disk.lvmPv diskId encrypted}
    sudo lvcreate ${ownLib.disk.volumeGroup diskId} -L 2G -n swap
    sudo lvcreate ${ownLib.disk.volumeGroup diskId} -l 100%FREE -n root

    # Filesystem
    sudo mkfs.vfat -F32 ${ownLib.disk.bootFsDevice diskId}
    sudo mkfs.btrfs ${ownLib.disk.rootFsDevice diskId}
    sudo mkswap ${ownLib.disk.swapFsDevice diskId}

    # Subvolume and FS hierharchy
    sudo mkdir -p /mnt
    sudo mkdir ${mntRootVol}
    sudo mount ${ownLib.disk.rootFsDevice diskId} ${mntRootVol}
    sudo btrfs subvolume create ${mntRootVol}/nixos
    sudo btrfs subvolume create ${mntRootVol}/home
    sudo mkdir ${mntRootVol}/nixos/{boot,home}

    ${diskUmount}
  '';

  diskRelabel = pkgs.writeScript "script" ''
    #!/usr/bin/env bash
    set -xe

    read -p "Continue to relabel ${ownLib.disk.bootGrubDevice diskId} (YES/n)?" choice
    case "$choice" in
      YES ) echo "Continuing in 3 seconds..."; sleep 3;;
      n|N ) echo "Exiting..."; exit 0;;
      * ) echo "Exiting..."; exit 1;;
    esac

    sync
    {
    sudo fdisk ${ownLib.disk.bootGrubDevice diskId} <<EOF
    x
    n
    2
    2-${diskId}
    n
    3
    3-${diskId}
    r
    i
    2
    i
    3
    w
    EOF
    } || {
      sync
      sudo partprobe  ${ownLib.disk.bootGrubDevice diskId}
    }


    if test "${previousDiskId}"; then
      ${pkgs.lib.strings.optionalString encrypted ''
        sudo cryptsetup luksOpen ${ownLib.disk.bootLuksDevice diskId} ${ownLib.disk.luksName diskId}
      ''}
      sync
      sleep 1
      if sudo vgs ${previousDiskId}; then
        sudo vgrename ${previousDiskId} ${diskId}
        sudo vgscan
      fi
    fi
    ${pkgs.lib.strings.optionalString encrypted ''
      sudo cryptsetup close ${ownLib.disk.luksName diskId}
    ''}
  '';
}