85 lines
2 KiB
Nix
85 lines
2 KiB
Nix
{ ... }: {
|
|
disko.devices = {
|
|
disk = {
|
|
vda = {
|
|
type = "disk";
|
|
device = "/dev/vda";
|
|
content = {
|
|
type = "table";
|
|
format = "gpt";
|
|
partitions = [
|
|
{
|
|
name = "boot";
|
|
start = "0";
|
|
end = "1M";
|
|
part-type = "primary";
|
|
flags = [ "bios_grub" ];
|
|
}
|
|
{
|
|
name = "esp";
|
|
start = "1MiB";
|
|
end = "265MiB";
|
|
part-type = "primary";
|
|
bootable = true;
|
|
content = {
|
|
type = "filesystem";
|
|
format = "vfat";
|
|
mountpoint = "/boot";
|
|
mountOptions = [
|
|
"defaults"
|
|
];
|
|
};
|
|
}
|
|
{
|
|
name = "luks";
|
|
start = "265MiB";
|
|
end = "100%";
|
|
part-type = "primary";
|
|
content = {
|
|
type = "luks";
|
|
name = "crypted";
|
|
extraOpenArgs = [ "--allow-discards" ];
|
|
# if you want to use the key for interactive login be sure there is no trailing newline
|
|
# for example use `echo -n "password" > /tmp/secret.key`
|
|
keyFile = "/tmp/secret.key";
|
|
content = {
|
|
type = "lvm_pv";
|
|
vg = "pool";
|
|
};
|
|
};
|
|
}
|
|
|
|
];
|
|
};
|
|
};
|
|
};
|
|
lvm_vg = {
|
|
pool = {
|
|
type = "lvm_vg";
|
|
lvs = {
|
|
nix = {
|
|
size = "100%FREE";
|
|
content = {
|
|
type = "filesystem";
|
|
format = "xfs";
|
|
mountpoint = "/nix";
|
|
mountOptions = [
|
|
"defaults"
|
|
];
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|
|
nodev = {
|
|
"/" = {
|
|
fsType = "tmpfs";
|
|
mountOptions = [
|
|
"size=2G"
|
|
"defaults"
|
|
"mode=755"
|
|
];
|
|
};
|
|
};
|
|
};
|
|
}
|