feat: add delroth as root@ for capability building

Signed-off-by: Raito Bezarius <masterancpp@gmail.com>

hosts/epyc.nix

@@ -25,8 +25,9 @@ in
     rootless.enable = true;
   };
 
-  # We want to use EEVDF and AMD-related niceties.
-  boot.kernelPackages = pkgs.linuxPackages_latest;
+  # TODO: there's a critical bug on 6.8+ where btrfs won't mount the rootfs at all.
+  # Do not upgrade until it is fixed. Ping Raito when needed.
+  # boot.kernelPackages = pkgs.linuxPackage_latest;
 
   # Open public access to our PostgreSQL.
   services.postgresql.enable = true;

modules/hardware/supermicro-H12SSL-i.nix

@@ -8,12 +8,18 @@
     [ (modulesPath + "/installer/scan/not-detected.nix")
     ];
 
-  boot.kernelParams = [ "pci=realloc" ];
+  boot.kernelParams = [ "pci=realloc" "boot.shell_on_fail" ];
   boot.initrd.availableKernelModules = [ "xhci_pci" "nvme" "usbhid" "usb_storage" "sd_mod" ];
   boot.initrd.kernelModules = [ ];
   boot.kernelModules = [ "kvm-amd" ];
   boot.extraModulePackages = [ ];
 
+  boot.initrd.extraUtilsCommands = ''
+    copy_bin_and_libs ${pkgs.nvme-cli}/bin/nvme
+    copy_bin_and_libs ${pkgs.util-linux}/bin/blkzone
+    copy_bin_and_libs ${pkgs.util-linux}/bin/lsblk
+  '';
+
   boot.initrd.systemd.enable = lib.mkForce false;
 
   fileSystems."/" =
@@ -34,7 +40,7 @@
 
   swapDevices =
     [ { device = "/dev/disk/by-uuid/93e251e1-1bfc-4bd4-8585-ea2eae7795bf"; }
-    ];
+  ];
 
   nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
   hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;

modules/users/friends.nix

@@ -68,5 +68,17 @@ in
         "sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIK8icXjHkb4XzbIVN3djH4CE7RvgGd+3xbG4cgh0Yls5AAAABHNzaDo="
       ];
     };
+    # Raito: Temporary account until next year, for delroth, who is going to work on building capabilities for improving build infrastructure.
+    delroth = {
+      isNormalUser = true;
+      home = "/home/delroth";
+      shell = "/run/current-system/sw/bin/zsh";
+      uid = 2007;
+      # Raito: Allowed to spawn new VMs and do various stuff for isolating the workloads.
+      extraGroups = [ "wheel" ];
+      openssh.authorizedKeys.keys = [
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII3tjB4KYDok3KlWxdBp/yEmqhhmybd+w0VO4xUwLKKV"
+      ];
+    };
   };
 }