Enterprise is my gaming desktop, details to come later.
Creates 2 partitions on the NVMe drive, one for EFI Boot and one for the luks encrypted root.
$ sudo fdisk /dev/nvme0n1
> g (GPT Table)
> n (New Partition)
> <enter> (Default 1)
> <enter> (Default 2048)
> +500M
> t (Type)
> 1 (EFI)
> n (New Partition)
> <enter> (Default 2)
> <enter> (Default End of EFI)
> <enter> (Default End of Disk)
> w (Write)
$ sudo mkfs.fat -F 32 /dev/nvme0n1p1
$ sudo fatlabel /dev/nvm0n1p1 BOOTEFI
$ sudo cryptsetup luksFormat /dev/nvm0n1p2
> YES
> <password>
> <password>
$ sudo cryptsetup luksOpen /dev/nvm0n1p2 cryptroot
$ sudo mkfs.ext4 -L nixos /dev/mapper/cryptroot
$ sudo mount /dev/disk/by-label/nixos /mnt
$ sudo mkdir -p /mnt/boot
$ sudo mount /dev/disk/by-label/BOOTEFI /mnt/boot
Generate a config based on the currently detected hardware and disks.
$ sudo nixos-generate-config --root /mnt
Next I will normally open the hardware and configuration nix files to clean out comments and set basic information like hostname. Most of my other items are set by my profiles or modules so I will take care of those later.
Now, lets install:
$ cd /mnt
$ sudo nixos-install
> <root password when prompted>
$ sudo reboot
Here is where I will normally try and setup all the hardware and import the profiles/modules I want from this repo. Since I use the minimal install, I will kick things off like so:
$ nix-shell -p git vim
$ cd /etc/nixos
$ git clone https://github.com/wrmilling/nixos-configuration.git .
I will then copy in the new machine basic config into a new machine folder and setup the configuration.nix in root. I will then replace the generated config with the new setup.
$ mkdir -p hosts/donnager
$ mv ../configuration.nix hosts/donnager/default.nix
$ mv ../hardware-configuration.nix hosts/donnager/hardware.nix
$ vim hosts/donnager/default.nix
# Update the link to hardware.nix and add all modules/profiles as required.
I will then be able to update the nixos-configuration repo in github and just pull/rebuild as needed on the machine.
$ sudo sh -c "cd /etc/nixos && git pull && nixos-rebuild switch --flake ."
The above is aliased to nrs on my machines.
Good luck!