summaryrefslogtreecommitdiffstats
path: root/example
diff options
context:
space:
mode:
authortv <tv@krebsco.de>2018-07-13 13:52:22 +0200
committertv <tv@krebsco.de>2018-07-13 13:53:46 +0200
commitc47d8972ad29f80472e9778e6db76838dd8c0cd3 (patch)
tree327a572ad696b75b8fa161f7d358baba15db6591 /example
parentdb6151ff06777deb05b345f1775c037d8671687d (diff)
move disko.nix to example/ and add usage
Diffstat (limited to 'example')
-rw-r--r--example/config.nix57
-rw-r--r--example/default.nix54
2 files changed, 111 insertions, 0 deletions
diff --git a/example/config.nix b/example/config.nix
new file mode 100644
index 0000000..e9766fe
--- /dev/null
+++ b/example/config.nix
@@ -0,0 +1,57 @@
+# usage: nix-instantiate --eval --json --strict example/config.nix | jq .
+{
+ type = "table";
+ format = "gpt";
+ partitions = [
+ {
+ type = "partition";
+ part-type = "ESP";
+ start = "1MiB";
+ end = "1024MiB";
+ fs-type = "fat32";
+ bootable = true;
+ content = {
+ type = "filesystem";
+ format = "vfat";
+ mountpoint = "/boot";
+ };
+ }
+ {
+ type = "partition";
+ part-type = "primary";
+ start = "1024MiB";
+ end = "100%";
+ content = {
+ type = "luks";
+ algo = "aes-xts...";
+ name = "crypted";
+ keyfile = "/tmp/secret.key";
+ content = {
+ type = "lvm";
+ name = "pool";
+ lvs = {
+ root = {
+ type = "lv";
+ size = "10G";
+ mountpoint = "/";
+ content = {
+ type = "filesystem";
+ format = "ext4";
+ mountpoint = "/";
+ };
+ };
+ home = {
+ type = "lv";
+ size = "10G";
+ content = {
+ type = "filesystem";
+ format = "ext4";
+ mountpoint = "/home";
+ };
+ };
+ };
+ };
+ };
+ }
+ ];
+}
diff --git a/example/default.nix b/example/default.nix
new file mode 100644
index 0000000..69ef936
--- /dev/null
+++ b/example/default.nix
@@ -0,0 +1,54 @@
+# usage: nix-instantiate --eval --json --strict example | jq -r .
+
+with import <nixpkgs/lib>;
+with builtins;
+
+let
+
+ fun.filesystem = q: x: ''
+ mkfs.${x.format} ${q.device}
+ '';
+
+ fun.lvm = q: x: ''
+ pvcreate ${q.device}
+ vgcreate ${x.name} ${q.device}
+ ${concatStringsSep "\n" (mapAttrsToList (name: f (q // { inherit name; vgname = x.name; device = null; /* ??? */ })) x.lvs)}
+ '';
+
+ fun.luks = q: x: ''
+ cryptsetup -q luksFormat ${q.device} ${x.keyfile}
+ cryptsetup luksOpen ${q.device} ${x.name} --key-file ${x.keyfile}
+
+ ${f (q // { device = "/dev/mapper/${x.name}"; }) x.content}
+ '';
+
+ fun.partition = q: x:
+ "(part ${toString (map (f q) (children x))})";
+
+ fun.table = q: x: ''
+ parted -s -a optimal ${q.device} mklabel ${x.format}
+ ${concatStrings (imap (i: part: " \nparted -s -a optimal ${q.device} mkpart ${part.part-type} ${part.fs-type or ""} ${part.start} ${part.end} ${optionalString (part.bootable or false) "\nparted -s -a optimal ${q.device} set ${toString i} boot on "}") x.partitions)}
+
+ ${concatStrings (imap (i: x: f (q // { device = q.device + toString i; }) x.content) x.partitions)}
+ '';
+
+ fun.lv = q: x: ''
+ lvcreate -L ${x.size} -n ${q.name} ${q.vgname}
+
+ ${f (q // { device = "/dev/${q.vgname}/${q.name}"; }) x.content}
+ '';
+
+ children = x: {
+ lvm = attrValues x.lvs;
+ luks = [x.content];
+ partition = [x.content];
+ table = x.partitions;
+ lv = [x.content];
+ }.${x.type};
+
+ f = q: x: fun.${x.type} q x;
+
+ q0.device = "/dev/sda";
+ x0 = import ./config.nix;
+in
+ f q0 x0