ngkz / dotfiles

NixOS Full disk encryption + Secure Boot with TPM unlock + tmpfs as (root|home) + Wayland setup

My NixOS configuration

Installation

See hosts/<HOSTNAME>/README.md.

Development shell

nix develop
OR
direnv allow

Open a shell with specific packages available

nix shell "<flake>#<package>"

Locate the package providing a certain file

nix-locate "<file>"

Acknowledgements

• Nix command/flake
• Nix Flakes, Part 3: Managing NixOS systems
• hlissner/dotfiles
• pinpox/nixos
• gytis-ivaskevicius/flake-utils-plus
• berbiche/dotfiles
• jpas/etc-nixos
• pimeys/nixos
• leanprover/lean4
• erpalma/throttled
• mihic/linux-intel-undervolt
• swaywm/sway
• Melkor333/milkOS
• Secure Boot
  • Secure Boot - ArchWiki
  • Sakaki's EFI Install Guide/Configuring Secure Boot under OpenRC
  • Secure Boot with GRUB 2 and signed Linux images and initrds
• tmpfs as root setup
  • Erase your darlings: immutable infrastructure for mutable systems - Graham Christensen
  • NixOS ❄: tmpfs as root
  • Encrypted Btrfs Root with Opt-in State On NixOS
• BTRFS: Finding and fixing highly fragmented files
• balsoft/nixos-fhs-compat
• Ricing up Org Mode