diff --git a/hosts/epyc.nix b/hosts/epyc.nix index f84a8f4..10a8d07 100644 --- a/hosts/epyc.nix +++ b/hosts/epyc.nix @@ -25,8 +25,9 @@ in rootless.enable = true; }; - # We want to use EEVDF and AMD-related niceties. - boot.kernelPackages = pkgs.linuxPackages_latest; + # TODO: there's a critical bug on 6.8+ where btrfs won't mount the rootfs at all. + # Do not upgrade until it is fixed. Ping Raito when needed. + # boot.kernelPackages = pkgs.linuxPackage_latest; # Open public access to our PostgreSQL. services.postgresql.enable = true; diff --git a/modules/hardware/supermicro-H12SSL-i.nix b/modules/hardware/supermicro-H12SSL-i.nix index 455f2f4..68ffc38 100644 --- a/modules/hardware/supermicro-H12SSL-i.nix +++ b/modules/hardware/supermicro-H12SSL-i.nix @@ -8,12 +8,18 @@ [ (modulesPath + "/installer/scan/not-detected.nix") ]; - boot.kernelParams = [ "pci=realloc" ]; + boot.kernelParams = [ "pci=realloc" "boot.shell_on_fail" ]; boot.initrd.availableKernelModules = [ "xhci_pci" "nvme" "usbhid" "usb_storage" "sd_mod" ]; boot.initrd.kernelModules = [ ]; boot.kernelModules = [ "kvm-amd" ]; boot.extraModulePackages = [ ]; + boot.initrd.extraUtilsCommands = '' + copy_bin_and_libs ${pkgs.nvme-cli}/bin/nvme + copy_bin_and_libs ${pkgs.util-linux}/bin/blkzone + copy_bin_and_libs ${pkgs.util-linux}/bin/lsblk + ''; + boot.initrd.systemd.enable = lib.mkForce false; fileSystems."/" = @@ -34,7 +40,7 @@ swapDevices = [ { device = "/dev/disk/by-uuid/93e251e1-1bfc-4bd4-8585-ea2eae7795bf"; } - ]; + ]; nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux"; hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware; diff --git a/modules/users/friends.nix b/modules/users/friends.nix index d7aa355..932660f 100644 --- a/modules/users/friends.nix +++ b/modules/users/friends.nix @@ -68,5 +68,17 @@ in "sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIK8icXjHkb4XzbIVN3djH4CE7RvgGd+3xbG4cgh0Yls5AAAABHNzaDo=" ]; }; + # Raito: Temporary account until next year, for delroth, who is going to work on building capabilities for improving build infrastructure. + delroth = { + isNormalUser = true; + home = "/home/delroth"; + shell = "/run/current-system/sw/bin/zsh"; + uid = 2007; + # Raito: Allowed to spawn new VMs and do various stuff for isolating the workloads. + extraGroups = [ "wheel" ]; + openssh.authorizedKeys.keys = [ + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII3tjB4KYDok3KlWxdBp/yEmqhhmybd+w0VO4xUwLKKV" + ]; + }; }; }