nilsandClaude Opus 5.5
f5909fbdcb
The installer ISO no longer needs a prebuilt system: `router-setup` asks for the disk, the WAN and LAN interfaces, DHCP or PPPoE (optionally on a VLAN), host name, LAN address and a password, writes settings.json and the secrets, builds that router offline (the ISO carries a reference router system whose closure has everything the build needs) and installs it with `router-install --system`. The password is used for the web UI and, hashed, as root's console password (routerSettings sets root's hashedPasswordFile; it applies when the account is created at installation). checks.setup answers router-setup on the console and checks the installed box: its settings, the web UI and console login with that password, and a rebuild that reproduces the installed system. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01AeFqV9dZrK6nipHkPfyM4F
41 lines
1.1 KiB
Nix
41 lines
1.1 KiB
Nix
# Bootable installer ISO: the live system, `router-install` and the target
|
|
# system's closure. SSH is open to the target's root keys so secrets can be
|
|
# copied over (`scp -r secrets root@<installer>:`) before installing.
|
|
{
|
|
config,
|
|
lib,
|
|
modulesPath,
|
|
...
|
|
}:
|
|
{
|
|
imports = [
|
|
(modulesPath + "/installer/cd-dvd/installation-cd-minimal.nix")
|
|
./install-script.nix
|
|
];
|
|
|
|
isoImage.volumeID = "ROUTER_INSTALL";
|
|
isoImage.squashfsCompression = "zstd -Xcompression-level 6";
|
|
|
|
services.openssh = {
|
|
enable = true;
|
|
settings.PermitRootLogin = "prohibit-password";
|
|
};
|
|
|
|
users.motd =
|
|
if config.router.installer.system != null then
|
|
''
|
|
|
|
nixos-router installer
|
|
1. (optional) scp -r secrets root@<this-host>:secrets
|
|
2. router-install --secrets /root/secrets /dev/<disk>
|
|
The disk is erased after confirmation.
|
|
''
|
|
else
|
|
''
|
|
|
|
nixos-router installer
|
|
Run `sudo router-setup`: it asks a few questions, erases the chosen disk
|
|
and installs the router. Everything else is set up in the web UI.
|
|
'';
|
|
}
|