Differences

This shows you the differences between two versions of the page.

--- tech:cheatsheets:linux:nixos [2025/02/21 18:36] – waldemar
+++ tech:cheatsheets:linux:nixos [2025/05/07 04:55] (current) – [System is not lustrated] waldemar
@@ Line 6: / Line 6: @@
 ==== Infect system using nixos-infect ====
 Ensure you're root when executing the commands (''sudo -i'')
+<note important>
+If any profile is installed for root (re)move the existing profile at ''/nix/var/nix/profiles/per-user/root'' before infecting.
+</note>
 <code bash>
 touch /etc/ssh/ssh_host_placeholder_key
@@ Line 15: / Line 20: @@
 <code bash>
 git clone <NIXOS-GIT-REPOSITORY> /etc/nixos
-curl -sSf -L https://install.lix.systems/lix | sh -s -- install
+/nix/var/nix/profiles/per-user/root/profile/bin/nix-shell \
-nixos-generate-config --show-hardware-config > /etc/nixos/hardware-configuration.nix
-nix-env --set \
     -I nixpkgs=$(realpath $HOME/.nix-defexpr/channels/nixos) \
-    -f '<nixpkgs/nixos>' \
+    -p nixos-install-tools \
-    -p /nix/var/nix/profiles/system \
+    --run 'nixos-generate-config --show-hardware-config' \
-    -A system
+    > /etc/nixos/hardware-configuration.nix
-/nix/var/nix/profiles/system/bin/switch-to-configuration boot
+# If your configuration is flake-based
+/nix/var/nix/profiles/per-user/root/profile/bin/nix-shell \
+    -I nixpkgs=$(realpath $HOME/.nix-defexpr/channels/nixos) \
+    -p nixos-rebuild \
+    --run 'nixos-rebuild boot --flake /etc/nixos'
+# For legacy configurations
+/nix/var/nix/profiles/per-user/root/profile/bin/nix-shell \
+    -I nixpkgs=$(realpath $HOME/.nix-defexpr/channels/nixos) \
+    -p nixos-rebuild \
+    --run 'nixos-rebuild boot -I nixpkgs=$(realpath $HOME/.nix-defexpr/channels/nixos) -I nixos-config=/etc/nixos/configuration.nix'
 </code>
-Add directories and files you want to keep to ''/etc/NIXOS_LUSTRATE''. This directories and files will not be moved into ''/old-root'' upon replacement.
+Add directories and files you want to keep to ''/etc/NIXOS_LUSTRATE''. These directories and files will not be moved into ''/old-root'' upon replacement.
+Also ensure that if your primary partition is an encrypted partition to add relevant configuration to your ''hardware-configuration.nix''.
 ==== Rescue ====
@@ Line 54: / Line 70: @@
 # nixos-rebuild boot
 </code>
+===== Troubleshooting =====
+==== System is not lustrated ====
+For some reason a system is not lustrated (NOTE: system must boot via GRUB for lustrate to work aparently). If that happens a boot might fail due to systemd not finding ''default.target''.
+If that happens a manual lustration might help (= move files manually from root into subfolder).
+Apparently systemd must also not be enabled in initrd for it work.