# Usage: # NIX_PATH=secrets=/home/makefu/secrets/wry:nixpkgs=/var/src/nixpkgs nix-build -A users.makefu.pnp.config.system.build.vm # result/bin/run-pnp-vm -virtfs local,path=/home/makefu/secrets/pnp,security_model=none,mount_tag=secrets { config, pkgs, ... }: { imports = [ <stockholm/makefu> <stockholm/makefu/2configs/headless.nix> # these will be overwritten by qemu-vm.nix but will be used if the system # is directly deployed <nixpkgs/nixos/modules/profiles/qemu-guest.nix> <stockholm/makefu/2configs/fs/vm-single-partition.nix> <stockholm/makefu/2configs/tinc/retiolum.nix> # config.system.build.vm (toString <nixpkgs/nixos/modules/virtualisation/qemu-vm.nix>) ]; virtualisation.graphics = false; # also export secrets, see Usage above fileSystems = pkgs.lib.mkVMOverride { "${builtins.toString <secrets>}" = { device = "secrets"; fsType = "9p"; options = [ "trans=virtio" "version=9p2000.L" "cache=loose" ]; neededForBoot = true; }; }; krebs.Reaktor.debug = { debug = true; extraEnviron = { # TODO: remove hard-coded server REAKTOR_HOST = "irc.r"; }; plugins = with pkgs.ReaktorPlugins; [ stockholm-issue nixos-version sed-plugin ]; channels = [ "#xxx" ]; }; krebs.build.host = config.krebs.hosts.pnp; networking.firewall.allowedTCPPorts = [ 25 ]; }