mirror of
https://git.selfprivacy.org/SelfPrivacy/selfprivacy-nixos-config.git
synced 2024-11-23 03:51:29 +00:00
9370d17b82
The inevitable `--override-input` nix build (and nixos-rebuild) option induces dirty state of the NixOS flake, thus `self.rev` couldn't be used together.
54 lines
1.7 KiB
Nix
54 lines
1.7 KiB
Nix
{
|
|
description = "Selfprivacy NixOS configuration flake";
|
|
|
|
inputs = {
|
|
nixpkgs.url = "github:nixos/nixpkgs";
|
|
|
|
selfprivacy-overlay.url =
|
|
"git+https://git.selfprivacy.org/SelfPrivacy/selfprivacy-nix-repo.git";
|
|
|
|
# these inputs are expected to be set by the caller
|
|
# for example, upon nix build using --override-input
|
|
userdata-json.flake = false; # userdata.json
|
|
hardware-configuration-nix.flake = false; # hardware-configuration.nix
|
|
};
|
|
|
|
outputs =
|
|
{ self
|
|
, nixpkgs
|
|
, selfprivacy-overlay
|
|
, userdata-json
|
|
, hardware-configuration-nix
|
|
}:
|
|
let
|
|
system = "x86_64-linux";
|
|
# (only "dirty", because userdata.json and others are overriden)
|
|
cfgShortRev = builtins.substring 0 7 self.dirtyRev;
|
|
nixosLabel = config:
|
|
"${config.system.nixos.release}.${cfgShortRev}.${nixpkgs.shortRev}";
|
|
userdata = builtins.fromJSON (builtins.readFile userdata-json);
|
|
hardware-configuration = import hardware-configuration-nix;
|
|
in
|
|
{
|
|
nixosConfigurations = {
|
|
just-nixos = nixpkgs.lib.nixosSystem {
|
|
specialArgs = { inherit system userdata; };
|
|
modules = [
|
|
# SelfPrivacy overlay
|
|
{ nixpkgs.overlays = [ selfprivacy-overlay.overlay ]; }
|
|
# machine specifics
|
|
hardware-configuration
|
|
# main configuration part
|
|
./configuration.nix
|
|
# we need NixOS repository git commit sha1 embedded
|
|
({ config, ... }: {
|
|
system.nixos.label = nixosLabel config;
|
|
system.nixos.version = nixosLabel config;
|
|
system.configurationRevision = self.dirtyRev;
|
|
})
|
|
];
|
|
};
|
|
};
|
|
};
|
|
}
|