Compare commits
12 Commits
cbcabe89b6
...
fix/uconso
| Author | SHA1 | Date | |
|---|---|---|---|
| 2f081d3e19 | |||
| 5aca97e057 | |||
| a51e095717 | |||
| 9ebbb1c0c6 | |||
| 7f11da1878 | |||
| 29cc20bb04 | |||
| 1617ac9149 | |||
| 24f15c98cd | |||
| bdd6d03739 | |||
| a0a6663793 | |||
| b66ffadb79 | |||
| db2bd1d157 |
3
.gitmodules
vendored
3
.gitmodules
vendored
@@ -1,6 +1,3 @@
|
|||||||
[submodule "assets/compose"]
|
[submodule "assets/compose"]
|
||||||
path = assets/compose
|
path = assets/compose
|
||||||
url = ssh://git@code.lazyworkhorse.net:2222/gortium/compose.git
|
url = ssh://git@code.lazyworkhorse.net:2222/gortium/compose.git
|
||||||
[submodule "assets/dotfiles"]
|
|
||||||
path = assets/dotfiles
|
|
||||||
url = ssh://git@code.lazyworkhorse.net:2222/gortium/dotfiles.git
|
|
||||||
|
|||||||
Submodule assets/compose updated: 3c92d93366...d3f2e3b7b9
126
flake.lock
generated
126
flake.lock
generated
@@ -23,22 +23,6 @@
|
|||||||
"type": "github"
|
"type": "github"
|
||||||
}
|
}
|
||||||
},
|
},
|
||||||
"argononed": {
|
|
||||||
"flake": false,
|
|
||||||
"locked": {
|
|
||||||
"lastModified": 1729566243,
|
|
||||||
"narHash": "sha256-DPNI0Dpk5aym3Baf5UbEe5GENDrSmmXVdriRSWE+rgk=",
|
|
||||||
"owner": "nvmd",
|
|
||||||
"repo": "argononed",
|
|
||||||
"rev": "16dbee54d49b66d5654d228d1061246b440ef7cf",
|
|
||||||
"type": "github"
|
|
||||||
},
|
|
||||||
"original": {
|
|
||||||
"owner": "nvmd",
|
|
||||||
"repo": "argononed",
|
|
||||||
"type": "github"
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"flake-compat": {
|
"flake-compat": {
|
||||||
"flake": false,
|
"flake": false,
|
||||||
"locked": {
|
"locked": {
|
||||||
@@ -53,21 +37,6 @@
|
|||||||
"url": "https://git.lix.systems/lix-project/flake-compat/archive/main.tar.gz"
|
"url": "https://git.lix.systems/lix-project/flake-compat/archive/main.tar.gz"
|
||||||
}
|
}
|
||||||
},
|
},
|
||||||
"flake-compat_2": {
|
|
||||||
"locked": {
|
|
||||||
"lastModified": 1767039857,
|
|
||||||
"narHash": "sha256-vNpUSpF5Nuw8xvDLj2KCwwksIbjua2LZCqhV1LNRDns=",
|
|
||||||
"owner": "edolstra",
|
|
||||||
"repo": "flake-compat",
|
|
||||||
"rev": "5edf11c44bc78a0d334f6334cdaf7d60d732daab",
|
|
||||||
"type": "github"
|
|
||||||
},
|
|
||||||
"original": {
|
|
||||||
"owner": "edolstra",
|
|
||||||
"repo": "flake-compat",
|
|
||||||
"type": "github"
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"home-manager": {
|
"home-manager": {
|
||||||
"inputs": {
|
"inputs": {
|
||||||
"nixpkgs": [
|
"nixpkgs": [
|
||||||
@@ -175,80 +144,6 @@
|
|||||||
"type": "github"
|
"type": "github"
|
||||||
}
|
}
|
||||||
},
|
},
|
||||||
"nixos-images": {
|
|
||||||
"inputs": {
|
|
||||||
"nixos-stable": [
|
|
||||||
"nixos-raspberrypi",
|
|
||||||
"nixpkgs"
|
|
||||||
],
|
|
||||||
"nixos-unstable": [
|
|
||||||
"nixos-raspberrypi",
|
|
||||||
"nixpkgs"
|
|
||||||
]
|
|
||||||
},
|
|
||||||
"locked": {
|
|
||||||
"lastModified": 1747747741,
|
|
||||||
"narHash": "sha256-LUOH27unNWbGTvZFitHonraNx0JF/55h30r9WxqrznM=",
|
|
||||||
"owner": "nvmd",
|
|
||||||
"repo": "nixos-images",
|
|
||||||
"rev": "cbbd6db325775096680b65e2a32fb6187c09bbb4",
|
|
||||||
"type": "github"
|
|
||||||
},
|
|
||||||
"original": {
|
|
||||||
"owner": "nvmd",
|
|
||||||
"ref": "sdimage-installer",
|
|
||||||
"repo": "nixos-images",
|
|
||||||
"type": "github"
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"nixos-raspberrypi": {
|
|
||||||
"inputs": {
|
|
||||||
"argononed": "argononed",
|
|
||||||
"flake-compat": "flake-compat_2",
|
|
||||||
"nixos-images": "nixos-images",
|
|
||||||
"nixpkgs": [
|
|
||||||
"nixpkgs-uconsole"
|
|
||||||
]
|
|
||||||
},
|
|
||||||
"locked": {
|
|
||||||
"lastModified": 1781324200,
|
|
||||||
"narHash": "sha256-JWqxN2Yle86+4Q+GFh12SvB92ZyLeqalVsN9lfMh6eQ=",
|
|
||||||
"owner": "gortium",
|
|
||||||
"repo": "nixos-raspberrypi",
|
|
||||||
"rev": "721a6e9e67dca3a23133db650b87018646bca3e6",
|
|
||||||
"type": "github"
|
|
||||||
},
|
|
||||||
"original": {
|
|
||||||
"owner": "gortium",
|
|
||||||
"ref": "cm5-cross-v1",
|
|
||||||
"repo": "nixos-raspberrypi",
|
|
||||||
"type": "github"
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"nixos-uconsole": {
|
|
||||||
"inputs": {
|
|
||||||
"nixos-raspberrypi": [
|
|
||||||
"nixos-raspberrypi"
|
|
||||||
],
|
|
||||||
"nixpkgs": [
|
|
||||||
"nixpkgs-uconsole"
|
|
||||||
]
|
|
||||||
},
|
|
||||||
"locked": {
|
|
||||||
"lastModified": 1781476310,
|
|
||||||
"narHash": "sha256-jY6ujqLXNAWJGvt+pAuw1Wg/OiHRGd1B1Z7Czhiq7Q4=",
|
|
||||||
"owner": "gortium",
|
|
||||||
"repo": "nixos-uconsole",
|
|
||||||
"rev": "38a7fcbffbf2d2e122bc1e1c634fe25f66ecda13",
|
|
||||||
"type": "github"
|
|
||||||
},
|
|
||||||
"original": {
|
|
||||||
"owner": "gortium",
|
|
||||||
"ref": "pr/dcs-panel-detection",
|
|
||||||
"repo": "nixos-uconsole",
|
|
||||||
"type": "github"
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"nixpkgs": {
|
"nixpkgs": {
|
||||||
"locked": {
|
"locked": {
|
||||||
"lastModified": 1705033721,
|
"lastModified": 1705033721,
|
||||||
@@ -281,22 +176,6 @@
|
|||||||
"type": "github"
|
"type": "github"
|
||||||
}
|
}
|
||||||
},
|
},
|
||||||
"nixpkgs-uconsole": {
|
|
||||||
"locked": {
|
|
||||||
"lastModified": 1780952837,
|
|
||||||
"narHash": "sha256-Fwd1+spDtQ0hDyBwme6ufG3n4mY0UrjjFdYHv+G/Hds=",
|
|
||||||
"owner": "NixOS",
|
|
||||||
"repo": "nixpkgs",
|
|
||||||
"rev": "e820eb4a444b46a19b2e03e8dfd2359439ff30fe",
|
|
||||||
"type": "github"
|
|
||||||
},
|
|
||||||
"original": {
|
|
||||||
"owner": "NixOS",
|
|
||||||
"ref": "nixos-25.11",
|
|
||||||
"repo": "nixpkgs",
|
|
||||||
"type": "github"
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"nixpkgs_2": {
|
"nixpkgs_2": {
|
||||||
"locked": {
|
"locked": {
|
||||||
"lastModified": 1774386573,
|
"lastModified": 1774386573,
|
||||||
@@ -333,10 +212,7 @@
|
|||||||
"inputs": {
|
"inputs": {
|
||||||
"agenix": "agenix",
|
"agenix": "agenix",
|
||||||
"lix": "lix",
|
"lix": "lix",
|
||||||
"nixos-raspberrypi": "nixos-raspberrypi",
|
"nixpkgs": "nixpkgs_2"
|
||||||
"nixos-uconsole": "nixos-uconsole",
|
|
||||||
"nixpkgs": "nixpkgs_2",
|
|
||||||
"nixpkgs-uconsole": "nixpkgs-uconsole"
|
|
||||||
}
|
}
|
||||||
},
|
},
|
||||||
"systems": {
|
"systems": {
|
||||||
|
|||||||
59
flake.nix
59
flake.nix
@@ -14,7 +14,7 @@
|
|||||||
};
|
};
|
||||||
nixpkgs-uconsole.url = "github:NixOS/nixpkgs/nixos-25.11";
|
nixpkgs-uconsole.url = "github:NixOS/nixpkgs/nixos-25.11";
|
||||||
nixos-uconsole = {
|
nixos-uconsole = {
|
||||||
url = "github:gortium/nixos-uconsole/pr/dcs-panel-detection";
|
url = "github:nixos-uconsole/nixos-uconsole/v1.1.0";
|
||||||
inputs.nixpkgs.follows = "nixpkgs-uconsole";
|
inputs.nixpkgs.follows = "nixpkgs-uconsole";
|
||||||
inputs.nixos-raspberrypi.follows = "nixos-raspberrypi";
|
inputs.nixos-raspberrypi.follows = "nixos-raspberrypi";
|
||||||
};
|
};
|
||||||
@@ -99,59 +99,16 @@
|
|||||||
nixpkgs.hostPlatform = "aarch64-linux";
|
nixpkgs.hostPlatform = "aarch64-linux";
|
||||||
nixpkgs.config.allowUnfree = true;
|
nixpkgs.config.allowUnfree = true;
|
||||||
boot.loader.raspberry-pi.bootloader = "kernel";
|
boot.loader.raspberry-pi.bootloader = "kernel";
|
||||||
# Kill camera packages — not needed on uConsole, break cross-compile
|
|
||||||
nixpkgs.overlays = [
|
|
||||||
# Make camera packages "unavailable" so no pkgs depend on them
|
|
||||||
(final: prev: {
|
|
||||||
libcamera = prev.libcamera.overrideAttrs (_: { meta.platforms = []; });
|
|
||||||
libcamera-rpi = prev.libcamera-rpi.overrideAttrs (_: { meta.platforms = []; });
|
|
||||||
libpisp = prev.libpisp.overrideAttrs (_: { meta.platforms = []; });
|
|
||||||
# Pipewire in nixos-25.11 has libcamera unconditionally in buildInputs;
|
|
||||||
# meta.platforms trick doesn't help — must actually remove it
|
|
||||||
pipewire = prev.pipewire.overrideAttrs (old: {
|
|
||||||
buildInputs = builtins.filter
|
|
||||||
(x: !(x?pname && x.pname == "libcamera"))
|
|
||||||
(old.buildInputs or []);
|
|
||||||
mesonFlags = builtins.filter
|
|
||||||
(flag: !(builtins.isString flag && builtins.match ".*libcamera.*" flag != null))
|
|
||||||
(old.mesonFlags or []) ++ [ "-Dlibcamera=disabled" ];
|
|
||||||
});
|
|
||||||
# gjs cross-compile fails without GTK; skip intro tests
|
|
||||||
gjs = prev.gjs.overrideAttrs (old: {
|
|
||||||
mesonFlags = (old.mesonFlags or []) ++ [ "-Dskip_gtk_tests=true" ];
|
|
||||||
});
|
|
||||||
# Qt6Quick missing from aarch64 qtdeclarative cross-compile;
|
|
||||||
# skip qtutils runtime deps — Hyprland only needs it for QML UI
|
|
||||||
hyprland = prev.hyprland.override { wrapRuntimeDeps = false; };
|
|
||||||
# hyprwayland-scanner not found by cross pkg-config wrapper
|
|
||||||
xdg-desktop-portal-hyprland = prev.xdg-desktop-portal-hyprland.overrideAttrs (old: {
|
|
||||||
preConfigure = (old.preConfigure or "") + ''
|
|
||||||
# Point cmake to the correct hyprwayland-scanner pkgconfig
|
|
||||||
cmakeFlags="$cmakeFlags -Dhyprwayland-scanner_DIR=${prev.buildPackages.hyprwayland-scanner}/lib/cmake/hyprwayland-scanner" 2>/dev/null || true
|
|
||||||
export PKG_CONFIG_PATH="${prev.buildPackages.hyprwayland-scanner}/lib/pkgconfig:$PKG_CONFIG_PATH"
|
|
||||||
'';
|
|
||||||
});
|
|
||||||
})
|
|
||||||
];
|
|
||||||
}
|
}
|
||||||
nixos-raspberrypi.nixosModules.nixpkgs-rpi
|
nixos-raspberrypi.nixosModules.nixpkgs-rpi
|
||||||
# Disable libcamera in rpi pipewire too (separate nixpkgs instance)
|
# Fix display timings from Rex's kernel: native 720x1280 instead of
|
||||||
({ config, lib, pkgs, ... }: {
|
# rotated 1280x720, plus DCS-based panel detection.
|
||||||
nixpkgs.overlays = [
|
({ lib, ... }: {
|
||||||
(final: prev: {
|
boot.kernelPatches = [{
|
||||||
pipewire = prev.pipewire.overrideAttrs (old: {
|
name = "panel-cwu50-rex-timing-fix";
|
||||||
buildInputs = builtins.filter
|
patch = ./patches/0008-panel-cwu50-rex-timing-fix.patch;
|
||||||
(x: !(x?pname && x.pname == "libcamera"))
|
}];
|
||||||
(old.buildInputs or []);
|
|
||||||
mesonFlags = builtins.filter
|
|
||||||
(flag: !(builtins.isString flag && builtins.match ".*libcamera.*" flag != null))
|
|
||||||
(old.mesonFlags or []) ++ [ "-Dlibcamera=disabled" ];
|
|
||||||
});
|
|
||||||
})
|
})
|
||||||
];
|
|
||||||
})
|
|
||||||
|
|
||||||
# Patches are now in gortium/nixos-uconsole fork (pr/dcs-panel-detection branch)
|
|
||||||
nixos-raspberrypi.nixosModules.raspberry-pi-5.base
|
nixos-raspberrypi.nixosModules.raspberry-pi-5.base
|
||||||
nixos-raspberrypi.lib.inject-overlays
|
nixos-raspberrypi.lib.inject-overlays
|
||||||
nixos-raspberrypi.lib.inject-overlays-global
|
nixos-raspberrypi.lib.inject-overlays-global
|
||||||
|
|||||||
@@ -9,8 +9,12 @@
|
|||||||
hoardingcow-mount.enable = true;
|
hoardingcow-mount.enable = true;
|
||||||
|
|
||||||
# Flakesss
|
# Flakesss
|
||||||
nix.settings.experimental-features = [ "nix-command" "flakes" "flake-self-attrs" "ca-derivations" ];
|
nix.settings.experimental-features = [ "nix-command" "flakes" "flake-self-attrs" ];
|
||||||
nix.settings.trusted-users = [ "root" "gortium" ];
|
nix.settings.trusted-users = [ "root" "gortium" ];
|
||||||
|
nix.settings.extra-platforms = [ "aarch64-linux" ];
|
||||||
|
|
||||||
|
# QEMU binfmt for cross-building aarch64 NixOS targets
|
||||||
|
boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
|
||||||
|
|
||||||
# Garbage collection
|
# Garbage collection
|
||||||
nix.gc = {
|
nix.gc = {
|
||||||
|
|||||||
171
hosts/uConsole/configuration.nix
Normal file
171
hosts/uConsole/configuration.nix
Normal file
@@ -0,0 +1,171 @@
|
|||||||
|
{ config, lib, pkgs, paths, self, keys, ... }:
|
||||||
|
|
||||||
|
{
|
||||||
|
# Basic Host Info
|
||||||
|
networking.hostName = "uConsole";
|
||||||
|
time.timeZone = "America/Montreal";
|
||||||
|
i18n.defaultLocale = "en_CA.UTF-8";
|
||||||
|
|
||||||
|
# System State
|
||||||
|
system.stateVersion = "25.05";
|
||||||
|
|
||||||
|
# Boot & Hardware (migrated to kernel bootloader per nixos-raspberrypi deprecation notice)
|
||||||
|
boot.loader.raspberry-pi.bootloader = "kernel";
|
||||||
|
# kernel managed by nixos-raspberrypi module — don't override, patches are version-specific
|
||||||
|
# boot.kernelPackages = pkgs.linuxPackages_latest;
|
||||||
|
|
||||||
|
# Networking
|
||||||
|
networking.networkmanager.enable = true;
|
||||||
|
services.openssh = {
|
||||||
|
enable = true;
|
||||||
|
settings.PermitRootLogin = lib.mkForce "prohibit-password";
|
||||||
|
settings.PasswordAuthentication = lib.mkForce false;
|
||||||
|
};
|
||||||
|
|
||||||
|
# User
|
||||||
|
users.users.gortium = {
|
||||||
|
isNormalUser = true;
|
||||||
|
extraGroups = [ "wheel" "networkmanager" "video" "dialout" "kismet" ];
|
||||||
|
openssh.authorizedKeys.keys = [
|
||||||
|
keys.users.gortium.main
|
||||||
|
keys.users.gortium.gitea
|
||||||
|
];
|
||||||
|
};
|
||||||
|
security.sudo.extraRules = [
|
||||||
|
{
|
||||||
|
users = [ "gortium" ];
|
||||||
|
commands = [
|
||||||
|
{
|
||||||
|
command = "ALL";
|
||||||
|
options = [ "NOPASSWD" ];
|
||||||
|
}
|
||||||
|
];
|
||||||
|
}
|
||||||
|
];
|
||||||
|
|
||||||
|
# ============================================================
|
||||||
|
# Package groups
|
||||||
|
# ============================================================
|
||||||
|
|
||||||
|
environment.systemPackages = with pkgs; [
|
||||||
|
# ===== Base =====
|
||||||
|
emacs-pgtk
|
||||||
|
git
|
||||||
|
ripgrep
|
||||||
|
fd
|
||||||
|
htop
|
||||||
|
tmux
|
||||||
|
neovim
|
||||||
|
|
||||||
|
# ===== HAM Radio =====
|
||||||
|
js8call
|
||||||
|
wsjtx
|
||||||
|
fldigi
|
||||||
|
pat # Winlink client
|
||||||
|
direwolf # AX.25 packet modem
|
||||||
|
chirp # Radio programming tool
|
||||||
|
hamlib # Ham radio control libraries
|
||||||
|
trustedqsl # Logbook of the World (LoTW)
|
||||||
|
|
||||||
|
# ===== SDR / RF =====
|
||||||
|
sdrpp # SDR++ spectrum analyzer
|
||||||
|
gqrx # SDR receiver GUI
|
||||||
|
rtl-sdr # RTL-SDR drivers & utilities
|
||||||
|
inspectrum # Offline signal analysis
|
||||||
|
soapysdr-with-plugins # SoapySDR + hardware support plugins
|
||||||
|
|
||||||
|
# ===== Mesh / LoRa =====
|
||||||
|
meshtastic # Python CLI for Meshtastic devices
|
||||||
|
reticulumStack # Reticulum Network Stack (rnsd, rnsh, rncp, rnx, rnpath, etc.)
|
||||||
|
lxmf # LXMF messaging protocol
|
||||||
|
nomadnet # Nomad Network client
|
||||||
|
|
||||||
|
# ===== Security =====
|
||||||
|
nmap
|
||||||
|
aircrack-ng
|
||||||
|
kismet # Wi-Fi monitor / IDS
|
||||||
|
bettercap # MITM/network attack framework
|
||||||
|
wireshark # Packet analyzer
|
||||||
|
hashcat # GPU password cracker
|
||||||
|
john # John the Ripper
|
||||||
|
sqlmap # SQL injection tool
|
||||||
|
|
||||||
|
# ===== GPS / Maps =====
|
||||||
|
foxtrotgps
|
||||||
|
viking # GPS map editor
|
||||||
|
gpsbabel # GPS data conversion
|
||||||
|
];
|
||||||
|
|
||||||
|
# Packages noted but not in unstable nixpkgs:
|
||||||
|
# - metasploit: unfree; install manually via Git clone
|
||||||
|
# - burpsuite: unfree Java app (Community Edition available for download)
|
||||||
|
# - sidechannel: not a distinct PyPI package; functionality covered by
|
||||||
|
# the Reticulum stack. For LXMF GUI client, install Sideband manually
|
||||||
|
# from github.com/markqvist/Sideband
|
||||||
|
|
||||||
|
# ============================================================
|
||||||
|
# Reticulum Service (rnsd)
|
||||||
|
# ============================================================
|
||||||
|
systemd.services.rnsd = {
|
||||||
|
description = "Reticulum Network Stack Daemon";
|
||||||
|
wants = [ "network-online.target" ];
|
||||||
|
after = [ "network-online.target" ];
|
||||||
|
wantedBy = [ "multi-user.target" ];
|
||||||
|
serviceConfig = {
|
||||||
|
User = "gortium";
|
||||||
|
Group = "gortium";
|
||||||
|
ExecStart = "${pkgs.reticulumStack}/bin/rnsd";
|
||||||
|
Restart = "always";
|
||||||
|
RestartSec = "10s";
|
||||||
|
LimitNOFILE = 65536;
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
# ============================================================
|
||||||
|
# Kismet Service (Wi-Fi monitoring / mesh node)
|
||||||
|
# ============================================================
|
||||||
|
systemd.services.kismet = {
|
||||||
|
description = "Kismet Wi-Fi Monitor & IDS";
|
||||||
|
wants = [ "network-online.target" ];
|
||||||
|
after = [ "network-online.target" ];
|
||||||
|
wantedBy = [ "multi-user.target" ];
|
||||||
|
serviceConfig = {
|
||||||
|
User = "gortium";
|
||||||
|
Group = "kismet";
|
||||||
|
ExecStart = "${pkgs.kismet}/bin/kismet -c wlan0 --log-base=/home/gortium/kismet_logs --no-nc-ui";
|
||||||
|
Restart = "always";
|
||||||
|
RestartSec = "10s";
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
# ============================================================
|
||||||
|
# Kernel modules for SDR and radio
|
||||||
|
# ============================================================
|
||||||
|
boot.kernelModules = [
|
||||||
|
"88x2bu" # Realtek 8812/8821BU USB WiFi (common adapter)
|
||||||
|
"rtl8xxxu" # RTL8188/8192/8723 USB WiFi
|
||||||
|
"rtl2832_sdr" # RTL-SDR kernel module
|
||||||
|
"dvb_usb_rtl28xxu" # RTL-SDR DVB-T
|
||||||
|
];
|
||||||
|
|
||||||
|
boot.blacklistedKernelModules = [ ];
|
||||||
|
|
||||||
|
# ============================================================
|
||||||
|
# Extra udev rules for SDR and HAM radio devices
|
||||||
|
# ============================================================
|
||||||
|
services.udev.packages = with pkgs; [ rtl-sdr ];
|
||||||
|
|
||||||
|
# ============================================================
|
||||||
|
# Enable IPv6 for Reticulum mesh
|
||||||
|
# ============================================================
|
||||||
|
networking.enableIPv6 = true;
|
||||||
|
|
||||||
|
# ============================================================
|
||||||
|
# Firewall: open ports for Reticulum (optional)
|
||||||
|
# ============================================================
|
||||||
|
networking.firewall.allowedTCPPorts = [ 22 ]; # SSH only
|
||||||
|
networking.firewall.allowedUDPPorts = [ ];
|
||||||
|
# Reticulum uses its own encryption and doesn't need open ports
|
||||||
|
# for basic mesh operations (peer-to-peer discovery).
|
||||||
|
# For TCP interfaces, open additional ports as needed.
|
||||||
|
}
|
||||||
@@ -1,27 +1,23 @@
|
|||||||
{ config, lib, pkgs, modulesPath, ... }:
|
{ config, lib, pkgs, modulesPath, ... }:
|
||||||
|
|
||||||
{
|
{
|
||||||
imports = [
|
imports =
|
||||||
(modulesPath + "/installer/scan/not-detected.nix")
|
[ (modulesPath + "/installer/scan/not-detected.nix")
|
||||||
];
|
];
|
||||||
|
|
||||||
boot.initrd.availableKernelModules = [ "xhci_pci" "usbhid" "usb_storage" "sdhci_pci" "nvme" ];
|
boot.initrd.availableKernelModules = [ "xhci_pci" "usbhid" "usb_storage" "sdhci_pci" "nvme" ];
|
||||||
boot.initrd.kernelModules = [ ];
|
boot.initrd.kernelModules = [ ];
|
||||||
boot.extraModulePackages = [ ];
|
boot.extraModulePackages = [ ];
|
||||||
|
|
||||||
# SD card partitions (nixos-uconsole layout)
|
# uConsole CM5 uses NVMe or eMMC for boot storage
|
||||||
fileSystems."/" = {
|
# The uconsole-cm5 module sets up /boot/firmware and default /
|
||||||
device = "/dev/disk/by-label/NIXOS_SD";
|
# Override device label here if using different storage
|
||||||
|
fileSystems."/" = lib.mkDefault {
|
||||||
|
device = "/dev/disk/by-label/NIXOS_UCM5";
|
||||||
fsType = "ext4";
|
fsType = "ext4";
|
||||||
options = [ "noatime" ];
|
options = [ "noatime" ];
|
||||||
};
|
};
|
||||||
|
|
||||||
fileSystems."/boot/firmware" = {
|
|
||||||
device = "/dev/disk/by-label/FIRMWARE";
|
|
||||||
fsType = "vfat";
|
|
||||||
options = [ "fmask=0022" "dmask=0022" ];
|
|
||||||
};
|
|
||||||
|
|
||||||
swapDevices = [ ];
|
swapDevices = [ ];
|
||||||
|
|
||||||
nixpkgs.hostPlatform = lib.mkDefault "aarch64-linux";
|
nixpkgs.hostPlatform = lib.mkDefault "aarch64-linux";
|
||||||
@@ -1,36 +0,0 @@
|
|||||||
{ config, lib, pkgs, keys, ... }:
|
|
||||||
|
|
||||||
{
|
|
||||||
networking.hostName = "uConsole";
|
|
||||||
time.timeZone = "America/Montreal";
|
|
||||||
i18n.defaultLocale = "en_CA.UTF-8";
|
|
||||||
system.stateVersion = "25.11";
|
|
||||||
|
|
||||||
# SSH — root access avec clés gortium + ai-worker
|
|
||||||
services.openssh = {
|
|
||||||
enable = true;
|
|
||||||
settings = {
|
|
||||||
PermitRootLogin = lib.mkForce "prohibit-password";
|
|
||||||
PasswordAuthentication = lib.mkForce false;
|
|
||||||
};
|
|
||||||
};
|
|
||||||
|
|
||||||
users.users.root.openssh.authorizedKeys.keys = with keys; [
|
|
||||||
users.gortium.main
|
|
||||||
users.ai-worker.main
|
|
||||||
];
|
|
||||||
|
|
||||||
# WiFi via NetworkManager + secret agenix
|
|
||||||
networking.networkmanager.enable = true;
|
|
||||||
|
|
||||||
# Firmware
|
|
||||||
hardware.enableRedistributableFirmware = true;
|
|
||||||
|
|
||||||
# Hyprland Wayland compositor (manual start — no SDDM)
|
|
||||||
programs.hyprland = {
|
|
||||||
enable = true;
|
|
||||||
xwayland.enable = true;
|
|
||||||
};
|
|
||||||
|
|
||||||
|
|
||||||
}
|
|
||||||
@@ -1,6 +0,0 @@
|
|||||||
{
|
|
||||||
imports = [
|
|
||||||
./dotfiles.nix
|
|
||||||
./systemd
|
|
||||||
];
|
|
||||||
}
|
|
||||||
@@ -1,69 +0,0 @@
|
|||||||
{ config, lib, pkgs, ... }:
|
|
||||||
|
|
||||||
with lib;
|
|
||||||
|
|
||||||
let
|
|
||||||
cfg = config.services.dotfiles;
|
|
||||||
stowDir = cfg.stowDir;
|
|
||||||
|
|
||||||
# Function to recursively find all files in a directory
|
|
||||||
findFiles = dir:
|
|
||||||
let
|
|
||||||
files = builtins.attrNames (builtins.readDir dir);
|
|
||||||
in
|
|
||||||
concatMap (name:
|
|
||||||
let
|
|
||||||
path = dir + "/${name}";
|
|
||||||
in
|
|
||||||
if (builtins.typeOf (builtins.readDir path) == "set")
|
|
||||||
then findFiles path
|
|
||||||
else [ path ]
|
|
||||||
) files;
|
|
||||||
|
|
||||||
# Get a list of all packages (directories) in the stow directory
|
|
||||||
stowPackages = builtins.attrNames (builtins.readDir stowDir);
|
|
||||||
|
|
||||||
# Create an attribute set where each attribute is a package name
|
|
||||||
# and the value is a list of files to be linked.
|
|
||||||
homeManagerLinks = listToAttrs (map (pkg:
|
|
||||||
let
|
|
||||||
pkgPath = stowDir + "/${pkg}";
|
|
||||||
files = findFiles pkgPath;
|
|
||||||
in
|
|
||||||
nameValuePair pkg (map (file: {
|
|
||||||
source = file;
|
|
||||||
target = removePrefix (pkgPath + "/") file;
|
|
||||||
}) files)
|
|
||||||
) stowPackages);
|
|
||||||
|
|
||||||
in
|
|
||||||
{
|
|
||||||
options.services.dotfiles = {
|
|
||||||
enable = mkEnableOption "Enable dotfiles management";
|
|
||||||
|
|
||||||
stowDir = mkOption {
|
|
||||||
type = types.path;
|
|
||||||
description = "The directory where your stow packages are located.";
|
|
||||||
};
|
|
||||||
|
|
||||||
user = mkOption {
|
|
||||||
type = types.str;
|
|
||||||
description = "The user to manage dotfiles for.";
|
|
||||||
};
|
|
||||||
};
|
|
||||||
|
|
||||||
config = mkIf cfg.enable {
|
|
||||||
home-manager.users.${cfg.user} = {
|
|
||||||
home.file =
|
|
||||||
let
|
|
||||||
allFiles = concatLists (attrValues homeManagerLinks);
|
|
||||||
in
|
|
||||||
listToAttrs (map (file:
|
|
||||||
nameValuePair file.target {
|
|
||||||
source = file.source;
|
|
||||||
}
|
|
||||||
) allFiles);
|
|
||||||
};
|
|
||||||
};
|
|
||||||
}
|
|
||||||
|
|
||||||
81
overlays/reticulum.nix
Normal file
81
overlays/reticulum.nix
Normal file
@@ -0,0 +1,81 @@
|
|||||||
|
final: prev: let
|
||||||
|
python3 = final.python3;
|
||||||
|
pyPkgs = python3.pkgs;
|
||||||
|
in {
|
||||||
|
reticulumStack = python3.pkgs.buildPythonApplication rec {
|
||||||
|
pname = "reticulum";
|
||||||
|
version = "1.2.9";
|
||||||
|
format = "setuptools";
|
||||||
|
src = pyPkgs.fetchPypi {
|
||||||
|
pname = "rns";
|
||||||
|
inherit version;
|
||||||
|
sha256 = "554814231c237b9caacf8df669312e57dd7d3f84b6d4810125087d1a79a75d75";
|
||||||
|
};
|
||||||
|
propagatedBuildInputs = with pyPkgs; [ cryptography pyserial ];
|
||||||
|
doCheck = false;
|
||||||
|
pythonImportsCheck = [ "RNS" ];
|
||||||
|
meta = with final.lib; {
|
||||||
|
description = "Self-configuring, encrypted and resilient mesh networking stack";
|
||||||
|
homepage = "https://reticulum.network/";
|
||||||
|
license = licenses.mit;
|
||||||
|
platforms = platforms.linux;
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
lxmf = python3.pkgs.buildPythonApplication rec {
|
||||||
|
pname = "lxmf";
|
||||||
|
version = "0.9.8";
|
||||||
|
format = "setuptools";
|
||||||
|
src = pyPkgs.fetchPypi {
|
||||||
|
inherit pname version;
|
||||||
|
sha256 = "30f39f3a975a049c12ee2cfceb3261d24cb5adec881c6821f7354464b3f3650c";
|
||||||
|
};
|
||||||
|
propagatedBuildInputs = [ final.reticulumStack ];
|
||||||
|
doCheck = false;
|
||||||
|
pythonImportsCheck = [ "LXMF" ];
|
||||||
|
meta = with final.lib; {
|
||||||
|
description = "Lightweight Extensible Message Format for Reticulum";
|
||||||
|
homepage = "https://github.com/markqvist/lxmf";
|
||||||
|
license = licenses.mit;
|
||||||
|
platforms = platforms.linux;
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
nomadnet = python3.pkgs.buildPythonApplication rec {
|
||||||
|
pname = "nomadnet";
|
||||||
|
version = "1.1.1";
|
||||||
|
format = "setuptools";
|
||||||
|
src = pyPkgs.fetchPypi {
|
||||||
|
inherit pname version;
|
||||||
|
sha256 = "fa13b64a10e75b705a58024815ab72451700aa726af96d415ba99dec28dfc40a";
|
||||||
|
};
|
||||||
|
propagatedBuildInputs = with pyPkgs; [ final.reticulumStack final.lxmf urwid qrcode ];
|
||||||
|
doCheck = false;
|
||||||
|
pythonImportsCheck = [ "nomadnet" ];
|
||||||
|
meta = with final.lib; {
|
||||||
|
description = "Nomad Network — resilient mesh communications platform";
|
||||||
|
homepage = "https://github.com/markqvist/NomadNet";
|
||||||
|
license = licenses.mit;
|
||||||
|
platforms = platforms.linux;
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
rnsh = python3.pkgs.buildPythonApplication rec {
|
||||||
|
pname = "rnsh";
|
||||||
|
version = "0.1.7";
|
||||||
|
format = "setuptools";
|
||||||
|
src = pyPkgs.fetchPypi {
|
||||||
|
inherit pname version;
|
||||||
|
sha256 = "9cb72f25abb1c6d300f8014b264184ff78f592fe88e36094938012990b797c93";
|
||||||
|
};
|
||||||
|
propagatedBuildInputs = [ final.reticulumStack ];
|
||||||
|
doCheck = false;
|
||||||
|
pythonImportsCheck = [ "rnsh" ];
|
||||||
|
meta = with final.lib; {
|
||||||
|
description = "Remote shell over Reticulum";
|
||||||
|
homepage = "https://github.com/acehoss/rnsh";
|
||||||
|
license = licenses.mit;
|
||||||
|
platforms = platforms.linux;
|
||||||
|
};
|
||||||
|
};
|
||||||
|
}
|
||||||
45
patches/0008-panel-cwu50-rex-timing-fix.patch
Normal file
45
patches/0008-panel-cwu50-rex-timing-fix.patch
Normal file
@@ -0,0 +1,45 @@
|
|||||||
|
--- a/drivers/gpu/drm/panel/panel-cwu50.c
|
||||||
|
+++ b/drivers/gpu/drm/panel/panel-cwu50.c
|
||||||
|
@@ -27,12 +27,12 @@ static const struct drm_display_mode default_mode = {
|
||||||
|
.clock = 61020,
|
||||||
|
- .hdisplay = 1280,
|
||||||
|
- .hsync_start = 1280 + 8,
|
||||||
|
- .hsync_end = 1280 + 8 + 2,
|
||||||
|
- .htotal = 1280 + 8 + 2 + 16,
|
||||||
|
- .vdisplay = 720,
|
||||||
|
- .vsync_start = 720 + 30,
|
||||||
|
- .vsync_end = 720 + 30 + 15,
|
||||||
|
- .vtotal = 720 + 30 + 15 + 15,
|
||||||
|
+ .hdisplay = 720,
|
||||||
|
+ .hsync_start = 720 + 30,
|
||||||
|
+ .hsync_end = 720 + 30 + 15,
|
||||||
|
+ .htotal = 720 + 30 + 15 + 15,
|
||||||
|
+ .vdisplay = 1280,
|
||||||
|
+ .vsync_start = 1280 + 8,
|
||||||
|
+ .vsync_end = 1280 + 8 + 2,
|
||||||
|
+ .vtotal = 1280 + 8 + 2 + 16,
|
||||||
|
};
|
||||||
|
|
||||||
|
static inline struct cwu50 *panel_to_cwu50(struct drm_panel *panel)
|
||||||
|
@@ -586,7 +586,8 @@ static int cwu50_init_sequence2(struct cwu50 *ctx)
|
||||||
|
{
|
||||||
|
struct mipi_dsi_device *dsi = to_mipi_dsi_device(ctx->dev);
|
||||||
|
- int err;
|
||||||
|
+ int err;
|
||||||
|
+ u8 buf[4];
|
||||||
|
|
||||||
|
dcs_write_seq(0xE0,0x00);
|
||||||
|
|
||||||
|
@@ -633,6 +634,12 @@ static int cwu50_init_sequence2(struct cwu50 *ctx)
|
||||||
|
|
||||||
|
dcs_write_seq(0x11);// SLPOUT
|
||||||
|
msleep (200);
|
||||||
|
+ dcs_write_seq(0xE0,0x00);
|
||||||
|
+ mipi_dsi_dcs_read(dsi, 0x04, buf, 3);
|
||||||
|
+
|
||||||
|
+ if(buf[0] == 0x39) ctx->is_new_panel = 1;
|
||||||
|
+
|
||||||
|
+ dcs_write_seq(0xE0,0x00);
|
||||||
|
|
||||||
|
dcs_write_seq(0x29);// DSiPON
|
||||||
|
msleep (100);
|
||||||
@@ -1,10 +0,0 @@
|
|||||||
-----BEGIN AGE ENCRYPTED FILE-----
|
|
||||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IEdoTUQ4QSAycE1Y
|
|
||||||
YmMvUWZpK2VKQVlqaHFtaERBRGROcFIyL0d6dEVRQmFxLzlqdFZNCkYxWkNIUXRZ
|
|
||||||
V0dQOG4zY3U3Nk1JelBtY0cwUGdxaEI3dmZaVTZId04rVTQKLT4geV1cZC4wMnst
|
|
||||||
Z3JlYXNlIDYgOG1IME1xCkQ0RGN1NU1FUWk0Y1RmamNEY0tJWmFQNGdoMkROcGVy
|
|
||||||
aU5UYVFobVRLMVVUQ1JicUM2c0tSVzRQdEZ0VE5YamQKZUxPeVpLWDZJR0hqemdD
|
|
||||||
cmkyUUdFZEZKZjBDNGhmNFR6bVUKLS0tIDRQUGR5RGI5UEhGNk5EQWw4dFk0R01k
|
|
||||||
TUJWOFpleXBUajFPckFmem52cGsKHzn+QnuYLI2NEh5WWZQHrNuvVzYk+kVjsAsn
|
|
||||||
KNS2dHjvadAopVY2Gypldf1p2RRtmgZkDHaPlNzv5Hk=
|
|
||||||
-----END AGE ENCRYPTED FILE-----
|
|
||||||
@@ -11,5 +11,4 @@ in
|
|||||||
"lazyworkhorse_host_ssh_key.age".publicKeys = authorizedKeys;
|
"lazyworkhorse_host_ssh_key.age".publicKeys = authorizedKeys;
|
||||||
"n8n_ssh_key.age".publicKeys = authorizedKeys;
|
"n8n_ssh_key.age".publicKeys = authorizedKeys;
|
||||||
"openclaw_gateway_token.age".publicKeys = authorizedKeys;
|
"openclaw_gateway_token.age".publicKeys = authorizedKeys;
|
||||||
"home_wifi.age".publicKeys = authorizedKeys;
|
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -1,5 +1,4 @@
|
|||||||
{ pkgs, inputs, config, keys, ... }: {
|
{ pkgs, inputs, config, keys, ... }: {
|
||||||
home-manager.users.gortium = import ./home.nix;
|
|
||||||
users.users.gortium = {
|
users.users.gortium = {
|
||||||
isNormalUser = true;
|
isNormalUser = true;
|
||||||
extraGroups = [ "wheel" "docker" "video" "render"];
|
extraGroups = [ "wheel" "docker" "video" "render"];
|
||||||
@@ -1,12 +0,0 @@
|
|||||||
{ pkgs, ... }: {
|
|
||||||
services.dotfiles = {
|
|
||||||
enable = true;
|
|
||||||
stowDir = ../../../assets/dotfiles;
|
|
||||||
user = "gortium";
|
|
||||||
};
|
|
||||||
|
|
||||||
home.username = "gortium";
|
|
||||||
home.homeDirectory = "/home/gortium";
|
|
||||||
home.stateVersion = "23.11"; # Please change this to your version.
|
|
||||||
programs.home-manager.enable = true;
|
|
||||||
}
|
|
||||||
Reference in New Issue
Block a user