make * composable; add install medium; archive prevoius code

_archive/container-images/build.sh

@@ -0,0 +1,7 @@
+#!/usr/bin/env bash
+set -xe
+[ ! -z "$NAME" ]
+
+nix-build . --show-trace -A "$NAME"
+docker image rm "$NAME":latest --force 
+docker load -i result

_archive/container-images/default.nix

@@ -0,0 +1,158 @@
+{ pkgs ? import <nixpkgs> {}
+}:
+
+let
+  baseEnv = [
+    "SSL_CERT_FILE=${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"
+  ];
+
+
+in rec {
+
+  base = pkgs.dockerTools.buildImage rec {
+    name = "base";
+
+    # Requires a VM to boot
+    runAsRoot = ''
+      #!${pkgs.stdenv.shell}
+      ${pkgs.dockerTools.shadowSetup}
+      groupadd users --gid 100
+      useradd -g users -d /home/user -M --uid 1000 user
+    '';
+
+    config = {
+      Env = baseEnv;
+      WorkingDir = "/";
+    };
+  };
+
+  interactive_base = pkgs.dockerTools.buildImage {
+    name = "interactive_base";
+    fromImage = base;
+    contents = with pkgs; [
+      procps
+      zsh
+      coreutils
+      neovim
+    ];
+
+    config = {
+      Cmd = [ "/bin/zsh" ];
+    };
+  };
+
+  s3ql = let 
+    entrypoint = pkgs.writeScript "entrypoint" ''
+      #!${pkgs.stdenv.shell}
+
+      if [ -z "$S3QL_BUCKET" ]; then
+        echo S3QL_BUCKET not set
+        exit 1
+      fi
+
+      if [ -z "$S3QL_STORAGE_URL" ]; then
+        echo S3QL_STORAGE_URL not set
+        exit 1
+      fi
+
+      if [ -z "$S3QL_CACHESIZE" ]; then
+        echo S3QL_CACHESIZE not set
+        exit 1
+      fi
+
+      set -x
+
+      if [ "$S3QL_SKIP_FSCK" != "1" ]; then 
+        fsck.s3ql \
+          --authfile $S3QL_AUTHINFO2 \
+          --log none \
+          --cachedir $S3QL_CACHE_DIR \
+          $S3QL_STORAGE_URL
+      fi
+
+      exec mount.s3ql \
+        --cachedir "$S3QL_CACHE_DIR" \
+        --authfile "$S3QL_AUTHINFO2" \
+        --cachesize "$S3QL_CACHESIZE" \
+        --fg \
+        --compress lzma-6 \
+        --threads 4 \
+        --log none \
+        --allow-root \
+        "$S3QL_STORAGE_URL" \
+        /bucket
+
+      # FIXME: touch .isbucket after mount 
+    '';
+    in pkgs.dockerTools.buildImage {
+      name = "s3ql";
+      fromImage = interactive_base;
+      contents = [
+        pkgs.s3ql
+        pkgs.fuse
+      ];
+
+      runAsRoot = ''
+        #!${pkgs.stdenv.shell}
+        mkdir -p /usr/bin
+        cp -a ${pkgs.fuse}/bin/fusermount /usr/bin 
+        chmod +s /usr/bin/fusermount
+        echo user_allow_other >> /etc/fuse.conf
+      '';
+      
+      config = {
+        Env = baseEnv ++ [
+          "HOME=/home/s3ql"
+          "S3QL_CACHE_DIR=/var/cache/s3ql"
+          "S3QL_AUTHINFO2=/etc/s3ql/authinfo2"
+          "CONTAINER_ENTRYPOINT=${entrypoint}"
+        ];
+        Cmd = [ entrypoint ];
+        Volumes = {
+          "/var/cache/s3ql" = {};
+          "/etc/s3ql/authinfo2" = {};
+          "/buckets" = {};
+          "/tmp" = {};
+      };
+    };
+  };
+
+  syncthing = let 
+    entrypoint = pkgs.writeScript "entrypoint" ''
+      #!${pkgs.stdenv.shell}
+      set -x
+      if [ ! -e /data/.isbucket ]; then
+        echo ERROR: Bucket not mounted at /data
+        exit 1
+      fi
+
+      if [ -z "$SYNCTHING_GUI_ADDRESS" ]; then
+        echo ERROR: SYNCTHING_GUI_ADDRESS is not set
+        exit 1
+      fi
+
+      if [ ! -w "$SYNCTHING_HOME" ]; then
+        echo ERROR : SYNCTHING_HOME is not writable
+      fi
+
+      exec syncthing \
+        -home $SYNCTHING_HOME \
+        -gui-address=$SYNCTHING_GUI_ADDRESS \
+        -no-browser
+    '';
+    in pkgs.dockerTools.buildImage {
+      name = "syncthing";
+      fromImage = interactive_base;
+      contents = pkgs.syncthing;
+      
+      config = {
+        Env = baseEnv ++ [
+          "SYNCTHING_HOME=/home/syncthing"
+        ];
+        Cmd = [ entrypoint ];
+        Volumes = {
+          "/data" = {};
+        };
+      };
+    };
+}

_archive/environments/dev/cross.nix

@@ -0,0 +1,89 @@
+import /home/steveej/src/github/NixOS/nixpkgs/default.nix {
+  crossSystem = rec {
+    config = "armv7l-unknown-linux-gnueabi";  
+    bigEndian = false;
+    arch = "arm";
+    float = "hard";
+    fpu = "vfpv3-d16";
+    withTLS = true;
+    libc = "glibc";
+    platform = {
+      name = "armv7l-hf-multiplatform";
+      gcc = {
+        arch = "armv7-a";
+        fpu = "neon";
+        float = "hard";
+      };
+      kernelMajor = "2.6"; # Using "2.6" enables 2.6 kernel syscalls in glibc.
+      kernelHeadersBaseConfig = "multi_v7_defconfig";
+      kernelBaseConfig = "multi_v7_defconfig";
+      kernelArch = "arm";
+      kernelDTB = true;
+      kernelAutoModules = false;
+      kernelExtraConfig = ''
+         NAMESPACES y
+           BTRFS_FS y
+           BTRFS_FS_POSIX_ACL y
+           OVERLAY_FS y
+           FUSE_FS y
+        '';
+      kernelTarget = "zImage";
+      uboot = null;
+    };
+    openssl.system = "linux-generic32";
+    gcc = {
+      arch = "armv7-a";
+      fpu = "neon";
+      float = "hard";
+    };
+  };
+}
+#  pkgs.config = {
+#    packageOverrides = super: let self = super.pkgs; in {
+#      linux_4_0 = super.linux_3_18.override {
+#        kernelPatches = super.linux_3_18.kernelPatches ++ [
+#          # we'll also add one of our own patches
+#          { patch = ./dts.patch; name = "dts-fix"; }
+#        ];
+#   
+#        # add "CONFIG_PPP_FILTER y" option to the set of kernel options
+#        extraConfig = ''
+#           HAVE_IMX_ANATOP y
+#           HAVE_IMX_GPC y
+#           HAVE_IMX_MMDC y
+#           HAVE_IMX_SRC y
+#           SOC_IMX6 y
+#           SOC_IMX6Q y
+#           SOC_IMX6SL y
+#           PCI_IMX6 y
+#           ARM_IMX6Q_CPUFREQ y
+#           IMX_WEIM y
+#           AHCI_IMX y
+#           SERIAL_IMX y
+#           SERIAL_IMX_CONSOLE y
+#           I2C_IMX y
+#           SPI_IMX y
+#           PINCTRL_IMX y
+#           PINCTRL_IMX6Q y
+#           PINCTRL_IMX6SL y
+#           POWER_RESET_IMX y
+#           IMX_THERMAL y
+#           IMX2_WDT y
+#           IMX_IPUV3_CORE y
+#           DRM_IMX y
+#           DRM_IMX_FB_HELPER y
+#           DRM_IMX_PARALLEL_DISPLAY y
+#           DRM_IMX_TVE y
+#           DRM_IMX_LDB y
+#           DRM_IMX_IPUV3 y
+#           DRM_IMX_HDMI y
+#           MMC_SDHCI_ESDHC_IMX y
+#           IMX_SDMA y
+#           PWM_IMX y
+#           DEBUG_IMX6Q_UART y
+#
+#           PPP_FILTER y
+#        '';
+#      };
+#    };
+#  };

_archive/environments/dev/go/default.nix

@@ -0,0 +1,89 @@
+{ gitpkgs ? import /home/steveej/src/github/NixOS/nixpkgs {}
+, pkgs ? gitpkgs
+, name ? "generic"
+, version
+, extraBuildInputs ? []
+, extraShellHook ? ""
+}:
+let
+  go = builtins.getAttr "go_${version}" pkgs;
+  commonVimRC = ''
+    let g:tagbar_type_go = {
+      \ 'ctagstype' : 'go',
+      \ 'kinds'     : [
+          \ 'p:package',
+          \ 'i:imports:1',
+          \ 'c:constants',
+          \ 'v:variables',
+          \ 't:types',
+          \ 'n:interfaces',
+          \ 'w:fields',
+          \ 'e:embedded',
+          \ 'm:methods',
+          \ 'r:constructor',
+          \ 'f:functions'
+      \ ],
+      \ 'sro' : '.',
+      \ 'kind2scope' : {
+          \ 't' : 'ctype',
+          \ 'n' : 'ntype'
+      \ },
+      \ 'scope2kind' : {
+          \ 'ctype' : 't',
+          \ 'ntype' : 'n'
+      \ },
+      \ 'ctagsbin'  : 'gotags',
+      \ 'ctagsargs' : '-sort -silent'
+      \ }
+
+    " vim-go {
+    let g:go_highlight_functions = 1
+    let g:go_highlight_methods = 1
+    let g:go_highlight_structs = 1
+    let g:go_highlight_interfaces = 1
+    let g:go_highlight_operators = 1
+    let g:go_highlight_build_constraints = 1
+    let g:go_fmt_command = 'gofmt'
+    let g:go_fmt_options= '-s'
+    let g:go_def_mode = 'godef'
+    let g:go_def_reuse_buffer = 0
+
+    au FileType go nmap <Leader>gds <Plug>(go-def-split)
+    au FileType go nmap <Leader>gdv <Plug>(go-def-vertical)
+    au FileType go nmap <Leader>gdt <Plug>(go-def-tab)
+    au FileType go nmap <Leader>gi <Plug>(go-imports)
+    " }
+  '';
+  buildInputs = with pkgs; [
+      glibc.out
+      glibc.static
+
+      go
+      gotools
+      #gotools.bin
+      #gocode.bin
+      #godef godef.bin
+      godep
+      #godep.bin
+      gox.bin
+      #ginkgo ginkgo.bin
+      #gomega
+#      ( import ./vim-go.nix { pkgs=gitpkgs; commonRC=commonVimRC; } )
+#      ( import ./neovim-go.nix { pkgs=gitpkgs; commonRC=commonVimRC; } )
+  ];
+
+in pkgs.stdenv.mkDerivation {
+  inherit name;
+  buildInputs = extraBuildInputs ++ buildInputs;
+  shellHook = ''
+    goname=${go.version}_$name
+    # FIXME: setPS1 $goname
+    export GOROOT=${go}/share/go
+    export GOPATH="$HOME/.gopath_$goname"
+    export PATH="$HOME/.gopath_$goname/bin:$PATH"
+    unset name
+    unset SSL_CERT_FILE
+
+    ${extraShellHook}
+  '';
+}

_archive/environments/dev/go/neovim-go.nix

@@ -0,0 +1,15 @@
+{ commonRC, ... } @ args :
+
+(import ../../pkg-configuration/vim-derivates/neovim.nix args // {
+  additionalRC = commonRC + ''
+    " deoplete {
+    let g:deoplete#enable_at_startup = 1
+    let g:deoplete#enable_smart_case = 1
+    " }
+  '';
+  additionalPlugins = [
+    "deoplete-go"
+    "deoplete-nvim"
+    "vim-go"
+  ];
+})

_archive/environments/dev/pandoc.nix

@@ -0,0 +1,26 @@
+{ gitpkgs ? import /home/steveej/src/github/NixOS/nixpkgs {}
+, pkgs ? gitpkgs
+, name ? "generic"
+, version ? "Stable"
+, extraBuildInputs ? []
+}: 
+let 
+  commonVimRC = ''
+  '';
+in pkgs.stdenv.mkDerivation {
+  inherit name;
+  buildInputs = with pkgs; [
+    ( import ./vim-pandoc.nix { pkgs=gitpkgs; commonRC=commonVimRC; })
+    pandoc
+    texlive.combined.scheme-medium
+    python27Packages.pandocfilters
+    python27Packages.htmltreediff
+    python27Packages.html5lib
+    python27Packages.dbus-python
+  ] ++ extraBuildInputs;
+  shellHook = ''
+    pandocname=pandoc_${pkgs.pandoc.version}
+    setPS1 $pandocname
+    unset name
+  '';
+}

_archive/environments/dev/rkt.nix

@@ -0,0 +1,72 @@
+{
+pkgs ? import /home/steveej/src/github/NixOS/nixpkgs {},
+mkGoEnv ? import ./go.nix,
+rktPath,
+}:
+let 
+  rktBasebuildInputs = with pkgs; [
+    glibc.out
+    glibc.static
+    autoreconfHook
+    gnupg1
+    squashfsTools
+    cpio
+    tree
+    intltool
+    libtool
+    pkgconfig
+    libgcrypt
+    gperf
+    libcap
+    libseccomp
+    libzip
+    eject
+    iptables
+    bc
+    acl
+    trousers
+    systemd
+  ];
+  extraShellHook = ''
+    TARGET=$GOPATH/src/github.com/coreos/rkt
+    if [[ -e ${rktPath}/rkt/rkt.go ]]; then
+      pushd ${rktPath}
+    else 
+      echo rktPath must be run the rkt repository clone, but got '${rktPath}'
+      exit 1
+    fi
+    if ! [[ -e $TARGET/rkt/rkt.go ]]; then
+      mkdir -p $TARGET
+      echo $PWD
+      sudo -E mount -o bind $PWD $TARGET
+    fi
+    pushd $TARGET
+  '';
+in {
+  go15 = mkGoEnv {
+    inherit pkgs;
+
+    name = "rktGo15";
+    version = "1_5";
+    extraBuildInputs = rktBasebuildInputs;
+    inherit extraShellHook;
+  };
+
+  go16 = mkGoEnv {
+    inherit pkgs;
+
+    name = "rktGo16";
+    version = "1_6";
+    extraBuildInputs = rktBasebuildInputs;
+    inherit extraShellHook;
+  };
+
+  go17 = mkGoEnv {
+    inherit pkgs;
+
+    name = "rktGo17";
+    version = "1_7";
+    extraBuildInputs = rktBasebuildInputs;
+    inherit extraShellHook;
+  };
+}

_archive/environments/dev/rust/.envrc

@@ -0,0 +1 @@
+use nix

_archive/environments/dev/rust/default.nix

@@ -0,0 +1,32 @@
+{ gitpkgs ? import /home/steveej/src/github/NixOS/nixpkgs {}
+, pkgs ? gitpkgs
+, name ? "generic"
+, version ? "Stable"
+, extraBuildInputs ? []
+}: 
+let 
+  rustPackages = builtins.getAttr "rust${version}" pkgs;
+  rustc = rustPackages.rustc;
+  rustShellHook = { rustc, name }: ''
+    rustname=rust_${rustc.version}_${name}
+    setPS1 $rustname
+    unset name
+  '';
+  commonVimRC = ''
+  '';
+in pkgs.stdenv.mkDerivation {
+  inherit name;
+  buildInputs = with rustPackages;[
+    ( import ./vim-rust.nix { pkgs=gitpkgs; commonRC=commonVimRC;
+        inherit rustc;
+        racerd=pkgs.rustracerd;
+    })
+    rustc cargo
+  ] ++ [
+    pkgs.rustfmt
+  ] ++ extraBuildInputs;
+  shellHook = (rustShellHook){
+    inherit name;
+    inherit rustc;
+  };
+}

_archive/environments/dev/vim-go.nix

@@ -0,0 +1,20 @@
+{ commonRC, ... } @ args :
+
+import ../../pkg-configuration/vim-derivates/vim.nix (args // {
+  name = "vim-for-go";
+  additionalRC = commonRC + ''
+	  " Disable AutoComplPop.
+	  let g:acp_enableAtStartup = 0
+	  " Use neocomplete.
+	  let g:neocomplete#enable_at_startup = 1
+	  " Use smartcase.
+	  let g:neocomplete#enable_smart_case = 1
+      if !exists('g:neocomplete#sources#omni#input_patterns')
+		let g:neocomplete#sources#omni#input_patterns = {}
+	  endif
+ '';
+ additionalPlugins = [
+   "neocomplete"
+   "vim-go"
+ ];
+})

_archive/environments/dev/vim-pandoc.nix

@@ -0,0 +1,22 @@
+{ commonRC
+,
+... } @ args :
+
+import ../../pkg-configuration/vim-derivates/vim.nix (args // {
+  name = "vim-for-pandoc";
+  additionalRC = commonRC + ''
+    set statusline+=%#warningmsg#
+    set statusline+=%{SyntasticStatuslineFlag()}
+    set statusline+=%*
+
+    let g:syntastic_always_populate_loc_list = 1
+    let g:syntastic_auto_loc_list = 1
+    let g:syntastic_check_on_open = 1
+    let g:syntastic_check_on_wq = 0
+ '';
+ additionalPlugins = [
+    "vim-pandoc"
+    "vim-pandoc-syntax"
+    "vimpreviewpandoc"
+ ];
+})

_archive/environments/dev/vim-rust.nix

@@ -0,0 +1,46 @@
+{ commonRC
+, rustc
+, racerd,
+... } @ args :
+
+import ../../pkg-configuration/vim-derivates/vim.nix (args // {
+  name = "vim-for-rust";
+  additionalRC = commonRC + ''
+    set statusline+=%#warningmsg#
+    set statusline+=%{SyntasticStatuslineFlag()}
+    set statusline+=%*
+
+    let g:syntastic_always_populate_loc_list = 1
+    let g:syntastic_auto_loc_list = 1
+    let g:syntastic_check_on_open = 1
+    let g:syntastic_check_on_wq = 0
+
+    " tagbar
+    let g:tagbar_type_rust = {
+        \ 'ctagstype' : 'rust',
+        \ 'kinds' : [
+            \'T:types,type definitions',
+            \'f:functions,function definitions',
+            \'g:enum,enumeration names',
+            \'s:structure names',
+            \'m:modules,module names',
+            \'c:consts,static constants',
+            \'t:traits,traits',
+            \'i:impls,trait implementations',
+        \]
+    \}
+
+    let g:syntastic_rust_checkers = ["rustc"]
+
+    "rustfmt
+    let g:rustfmt_autosave = 1
+
+    let g:ycm_auto_trigger = 1
+    let g:ycm_rust_src_path = '${rustc.src}/src'
+    let g:ycm_racerd_binary_path = '${racerd.out}/bin/racerd'
+
+ '';
+ additionalPlugins = [
+   "rust-vim"
+ ];
+})

_archive/environments/fhs/android.nix

@@ -0,0 +1,42 @@
+{ pkgs ? import <nixpkgs> {} }:                                                                                                                                                
+
+(pkgs.buildFHSUserEnv {
+  name = "devfhs";
+  multiPkgs = pkgs: (with pkgs; [
+    android-udev-rules
+    sudo
+    gawk
+    bzip2
+    file
+    gcc
+    getopt
+    git
+    gnumake
+    ncurses
+    openssl
+    patch
+    perl
+    pkgconfig
+    python
+    openssh
+    subversion
+    unzip
+    wget
+    which
+    vim
+    zlib
+    libusb
+    libusb1
+    systemd
+    strace
+    swt
+    xorg.libXtst
+    glib
+    gtk2
+    gnome.gtk
+  ]);
+  profile = ''
+    export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/lib:/lib64:/lib32:/usr/lib32:/usr/lib64:${pkgs.xorg.libXtst}/lib:${pkgs.glib}/lib:${pkgs.gtk2}/lib
+  '';
+  runScript = "bash";
+}).env

_archive/environments/fhs/vscode.nix

@@ -0,0 +1,38 @@
+{ pkgs ? import <nixpkgs> {} }:
+
+(pkgs.buildFHSUserEnv {
+  name = "everydayFHS";
+  targetPkgs = pkgs: (with pkgs;
+    [ which
+      gitFull
+      zsh
+      file
+      direnv
+
+      xdg_utils
+      xsel
+
+      vscode
+
+      # vscode live share
+      gnome3.gcr
+      libgnome_keyring3
+      liburcu
+      libunwind
+      lttng-ust
+      curl
+      openssl
+      libkrb5
+      libuuid
+      icu
+      zlib
+      libsecret
+    ]);
+  multiPkgs = pkgs: (with pkgs;
+    [ 
+    ]);
+  profile = ''
+    export SHELL=/bin/zsh
+  '';
+  # FIXME runScript = "$SHELL";
+}).env

_archive/nixos-configuration/common/pkg/neovim.nix

@@ -0,0 +1,10 @@
+{ config
+, pkgs
+, ... } @ args:
+
+{
+  environment.systemPackages = [
+    pkgs.xsel
+    (import ../../../pkg-configuration/vim-derivates/neovim.nix args)
+  ];
+}

_archive/nixos-configuration/common/pkg/vim.nix

@@ -0,0 +1,9 @@
+{ pkgs
+, ... } @ args:
+
+{
+  environment.systemPackages = [
+    pkgs.xsel
+    (import ../../../pkg-configuration/vim-derivates/vim.nix (args // { name = "vim"; }))
+  ];
+}

_archive/nixos-configuration/common/user/steveej.nix

@@ -0,0 +1,20 @@
+{ config
+, pkgs
+, ... }:
+
+let 
+  passwords = import ../passwords.crypt.nix;
+  keys = import ../keys.nix;
+  inherit (import ../lib) mkUser;
+in {
+  users.mutableUsers = false;
+  users.defaultUserShell = pkgs.zsh;
+
+  users.extraUsers.steveej = mkUser {
+    uid = 1000;
+    hashedPassword = passwords.users.steveej;
+  };
+
+  security.pam.enableU2F = true;
+  security.pam.services.steveej.u2fAuth = true;
+}