Mostly Grey former ginger with a preference for Rust. Leads wg-rustup, sorry about the mess. He/Him or They/Their Now @kinnison@fosstodon.org too

Manchester
Joined December 2008
Well, my disgusting shell script which sets up a #nixos box now uses bitwarden-cli to acquire the 'recovery' FDE password to set into the LUKS header. Next step is yubikey slot setup, but eesh, I wish this was already available as an installer. @grhmc any suggestions?
2
Replying to @thommay
It didn't take me very long to get a desktop I was comfortable with on a throwaway laptop; *but* it has taken me a very long time to not get to the point of adding my yubikey as a 2nd factor for the luks.
Replying to @thommay
I've been treating the exploration I've been doing as a "Linux from Scratch" and so far I've enjoyed it at least a little. But the utter lack of installer, and the pitiful amount of setup scripting which comes "as standard" really betrays the incredibly high quality of nixpkgs.
1
So far my biggest complaint with NixOS is the incredible disparity between support for *using* some feature and for *setting up* said feature. Case in point, Yubikey+LUKS. The initrd support is very nice and clean and clever. But actually setting it up requires so much faff.
1
1
Replying to @nuxeh @grhmc
Rough desktop working, so now I need to work out how to make it all declarative. It's not nice to have to faff with `dconf-editor` even if I can `nix-shell -p dconf-editor dconf-editor` :D
Replying to @ag_dubs
Hear hear. Are you aware of the Open Source Security Foundation? (A Linux Foundation effort which in part wants to find ways to ameliorate that situation)
5
Replying to @grhmc
Whenever I see someone say 'cyber' I assume '..sex' and whenever I see someone say 'crypto' I assume '..fascist' because otherwise I'm never certain what they mean. I'd have assumed cybersex was almost entirely a male-dominated field. And yes, that demotivates me :D
Yesterday's NixOS experiments were left with a functional computer whose desktop felt like home \o/. But it's a big mess of hacks. After some more hacks tonight I need to start turning all that into proper declarative config including home-manager. Any suggested examples?
Replying to @nuxeh @grhmc
Right now I'm trying to learn *enough* to get a basic familiar desktop environment going. Once I've managed that I'll consider what to do afterwards.
1
Replying to @jogbert
Looks like with thinkfan installed it copes - I think the thermal performance of this laptop has failed to cope with being in a box for five years. Maybe the paste has all dried out. Still it's working now and I have a laptop with encrypted disk and LVM, so experiment continues
1
Urgh, I know this test laptop (x201) is ancient, but why is nixos shutting down during install? No hints shown that I can catch before it's too late :( I now can't even get the USB to boot all the way to the nixos desktop before it shuts down. (overheating?)
1
Replying to @jogbert
I'm going to make the effort to *try* on a real laptop if this x201's battery will take some charge, but I don't yet have any warm fuzzies.
I suppose in some senses I'm utterly spoiled by the Debian installer. I get the feeling that from a scriptable-PoV nixos will be lovely, but from an "I want to setup a laptop with a reasonable default so I can experiment" it's a pig.
1
Replying to @jogbert
Yeah, I feel like I've done my dues with linux-from-scratch so many times that I simply just don't want to do it all by hand, especially if it'd be over-and-over in experiments to find what I want.
2