Well, my disgusting shell script which sets up a #nixos box now uses bitwarden-cli to acquire the 'recovery' FDE password to set into the LUKS header. Next step is yubikey slot setup, but eesh, I wish this was already available as an installer.
@grhmc any suggestions?
It didn't take me very long to get a desktop I was comfortable with on a throwaway laptop; *but* it has taken me a very long time to not get to the point of adding my yubikey as a 2nd factor for the luks.
I've been treating the exploration I've been doing as a "Linux from Scratch" and so far I've enjoyed it at least a little.
But the utter lack of installer, and the pitiful amount of setup scripting which comes "as standard" really betrays the incredibly high quality of nixpkgs.
So far my biggest complaint with NixOS is the incredible disparity between support for *using* some feature and for *setting up* said feature.
Case in point, Yubikey+LUKS. The initrd support is very nice and clean and clever. But actually setting it up requires so much faff.
Rough desktop working, so now I need to work out how to make it all declarative. It's not nice to have to faff with `dconf-editor` even if I can `nix-shell -p dconf-editor dconf-editor` :D
Hear hear. Are you aware of the Open Source Security Foundation? (A Linux Foundation effort which in part wants to find ways to ameliorate that situation)
Whenever I see someone say 'cyber' I assume '..sex' and whenever I see someone say 'crypto' I assume '..fascist' because otherwise I'm never certain what they mean.
I'd have assumed cybersex was almost entirely a male-dominated field. And yes, that demotivates me :D
Yesterday's NixOS experiments were left with a functional computer whose desktop felt like home \o/. But it's a big mess of hacks. After some more hacks tonight I need to start turning all that into proper declarative config including home-manager. Any suggested examples?
Looks like with thinkfan installed it copes - I think the thermal performance of this laptop has failed to cope with being in a box for five years. Maybe the paste has all dried out. Still it's working now and I have a laptop with encrypted disk and LVM, so experiment continues
Urgh, I know this test laptop (x201) is ancient, but why is nixos shutting down during install? No hints shown that I can catch before it's too late :( I now can't even get the USB to boot all the way to the nixos desktop before it shuts down. (overheating?)
I suppose in some senses I'm utterly spoiled by the Debian installer. I get the feeling that from a scriptable-PoV nixos will be lovely, but from an "I want to setup a laptop with a reasonable default so I can experiment" it's a pig.
Yeah, I feel like I've done my dues with linux-from-scratch so many times that I simply just don't want to do it all by hand, especially if it'd be over-and-over in experiments to find what I want.