its time to merge to master... its too big now xD #76

gortium · 2026-06-22T01:23:58Z

gortium commented

2026-06-22 01:23:58 +00:00

No description provided.

gortium added 158 commits 2026-06-22 01:23:59 +00:00

WIP on home manager 0ca7a74653

Merge branch 'master' into home_manager 1ca58d3da3

feat(uconsole): add cm5 cross-compiled nixosConfiguration 1f99ca0d37

- New host: uconsole-cm5 (aarch64-linux, cross-built from x86_64)
- SSH authorizedKeys: gortium.main + ai-worker.main
- NetworkManager enabled (WiFi password via agenix later)
- Display: vc4/panel_cwu50/rp1_dsi with empty initrd
- Config.txt [pi5] section (not [cm5])
- Backlight fix service
- nixos-raspberrypi → gortium/cm5-cross-v1 fork (PR #197)
- nixpkgs-uconsole pinned to nixos-25.11 (kernel patch compat)

V3 branch saved as archive/uconsole-cm5-v3 (Reticulum/SDR/HAM config).

feat(uconsole): add agenix secret for WiFi credentials 698d3f91eb

- age.secrets.uconsole-wifi (SSID+password in encrypted file)
- systemd service ensure-wifi reads decrypted secret and configures NM
- agenix.nixosModules.default imported for uconsole-cm5
- uconsole-wifi.age declared in secrets/secrets.nix

fix(uconsole): rename secret to home_wifi (shared across hosts, not uconsole-specific) a527b65eae

Added home wifi infos efc50d23c4

feat(uconsole): add rpi-cross-overlay module + Lix 5ee644e9dd

- rpi-cross-overlay.nix: override pkgs.rpi with cross-compilation
  when buildPlatform != hostPlatform (0 QEMU)
- Lix nix daemon for uConsole (aarch64-linux)
- Remove broken inline overlay from flake.nix

fix(uconsole): resolve conflicting SSH options + properly override nixos-uconsole's nixos-raspberrypi input 16acc6a153

- mkForce on PermitRootLogin and PasswordAuthentication
- nixos-uconsole.inputs.nixos-raspberrypi follows our fork

chore: ignore hyperspace files from feat/hyperspace-pods-module ec44012a64

Revert "chore: ignore hyperspace files from feat/hyperspace-pods-module" eb5e64ec67

This reverts commit ec44012a64.

feat: enable ca-derivations experimental feature on lazyworkhorse ce7c594562

chore: remove rpi-cross-overlay — fork nixpkgs-rpi.nix already handles cross-compile b455bf6866

fix: remove rpi-cross-overlay import from uconsole-cm5 modules 8ea6be7ac1

refactor(uconsole): use standard inject-overlays helpers instead of manual overlay list 7da46d5769

fix(uconsole): cross-compile Lix instead of using native aarch64 flake package 9319e32683

fix: remove self.submodules (not supported by Lix) 5202bc1fcb

Revert "fix: remove self.submodules (not supported by Lix)" d3d7cdff44

This reverts commit 5202bc1fcb.

test: remove self.submodules to check Lix compatibility 052081616c

fix(uconsole): clean config.txt — clear conflicting defaults, single [pi5] section 931ed2ac27

fix(uconsole): set ignore_lcd=0 + disable conflicting dt-overlays e8218c322a

fix(uconsole): remove configtxt module (conflicting overlays) — use extra-config only 35e4155b8c

deploy1(uconsole): minimal config — no rasberry-pi-5.base, just SSH + WiFi + keys 053dd535d3

fix: remove boot.loader.raspberry-pi reference (option removed with rasberry-pi-5.base) a312c29221

deploy1(uconsole): revert rasberry-pi-5.base removal — keep minimal SSH+WiFi config 8b6990ceee

fix: use plain string for bootloader setting 656570b39e

fix: remove non-existent ssh opts for nixpkgs-25.11 3d86af76b9

feat(uconsole): add flashable SD image package (SSH+WiFi+keys) 80efb68428

fix: use nixos-raspberrypi.lib.nixosSystem + sd-image module directly 7e3b2520eb

fix: remove dead rpi-pkgs line 9038863728

fix: correct sd-image module path 0db8071300

fix: correct sd-image module to nixosModules.sd-image 6543de3a45

fix: apply DSI burst mode fix as kernel patch overlay 4d8087badf

feat: add CWU50 display patch (no-burst) + fix flake syntax 0f765d99cb

Remove extra '};' that broke flake.nix parsing.
Apply kernel patch '0008-panel-cwu50-no-burst.patch' to remove
MIPI_DSI_MODE_VIDEO_BURST flag in panel-cwu50.c.
Switch nixos-uconsole module to consolidated uconsole-cm5 module.
Keep patches/0008-panel-cwu50-remove-sync-pulse.patch as variant.

try: no-sync-pulse variant (keep BURST, remove SYNC_PULSE) 3a809938c9

try: no-burst-no-sync-pulse (VIDEO only) a4f4891236

revert: remove failed CWU50 display fix patches 6fac886598

fix: add DSI_INIT0 lane config to old panel init_sequence + fix mode_flags 2c9136d1dc

fix: correct patch format — blank line between hunks cb2b535fde

fix: add DSI_INIT0 lane config to old panel init seq + fix mode_flags 67aafe37db

switch to gortium/nixos-uconsole fork 3f985c72de

feat: add Hyprland Wayland compositor from archive/uconsole-cm5-v3 4610a08072

fix: disable libcamera in pipewire for cross-compile (rpi-pisp blocks) 86d8b7bf8b

fix: force -Dlibcamera=disabled in pipewire mesonFlags for cross-compile f00477dacc

fix: disable libcamera in pipewire via mesonFlags for both pkgs and rpi 9978ea36f4

fix: remove libcamera from pipewire buildInputs (both overlays) 6a1c26cac2

meta.platforms = [] on libcamera doesn't help because nixos-25.11 pipewire
has libcamera unconditionally in buildInputs. Must overrideAttrs to:
- filter libcamera out of buildInputs
- clear existing libcamera meson flags and set -Dlibcamera=disabled

fix: skip GTK tests in gjs cross-compile for Hyprland 11a4969028

fix: set Qt6Qml_DIR for hyprland-qt-support cross-compile 0372b37950

fix: correct qtdeclarative attr to qt6.qtdeclarative 8afca7315d

fix: skip hyprland qtutils (Qt6Quick missing in aarch64 cross-compile) 2476352fdf

Qt6Quick and its submodules are not built in the aarch64 qtdeclarative
cross-compile output. hyprland-qt-support can't find them and fails.

Hyprland only needs qtutils at runtime (added to PATH via wrapProgram).
Setting wrapRuntimeDeps = false skips the wrapping entirely, letting
Hyprland build without its QML UI support package.

fix: add hyprwayland-scanner native paths for xdg-desktop-portal-hyprland cross-compile 42202c8a40

chore: point nixos-uconsole input to pr/dcs-panel-detection branch 2ee616839e

Merge remote-tracking branch 'origin/home_manager' into uconsole-cm5-incremental f5d1732346

# Conflicts:
#	flake.lock
#	flake.nix
#	modules/nixos/services/default.nix

remove hyperspace files accidentally committed from feat/hyperspace-pods-module ce7f74c66f

These files were mixed into commit 16acc6a which was intended
to only fix SSH options for the uConsole configuration.

feat: add dotfiles submodule and home-manager config 02ffcdb55e

- Add dotfiles repo as submodule in assets/dotfiles/
- Rewrite home.nix with direct file references instead of stow service
- Remove old custom dotfiles.nix service (replaced by home-manager)
- Clean up services/default.nix import

feat: per-host Hyprland monitor config via home-manager f344739b94

- Split hyprland.conf into common (keybinds, looks, animations)
  and per-host (monitors, env, workspaces) configs
- Add uconsole.conf for CM5 DSI display (720x1280)
- Add laptop.conf for NVIDIA + external monitors
- home.nix links the correct host config based on hostname
- Remove NVIDIA env vars from common config

update dotfiles submodule: per-host hyprland config 7238e9d45c

rename host/ -> hosts/ in dotfiles submodule 8423a121eb

feat: add ai-worker user to uConsole for Hermes SSH access f06d9028f0

feat: add agenix secret for gortium password on uConsole 9004163891

- Add gortium_password.age entry in secrets.nix
- Add age.secrets.gortium_password in uConsole config
- Add hashedPasswordFile to existing gortium user
- Add ai-worker user for Hermes SSH access

fix: properly structure uConsole config (ai-worker, gortium password, age secret) cdbb7de04d

refactor: extract shared uconsole modules to eliminate toplevel/image duplication eb3fe42542

rename users/gortium/default.nix -> gortium.nix, add to uconsole modules e95baddb96

fix: use passwordFile instead of hashedPasswordFile (matches other secrets: plain text) fba52fa66d

add gortium password age secret e991359584

Fixed stuff maybe i guess not sure 8651295b0a

fix: move gortium passwordFile to shared user module (applies to all hosts) 6399196a2c

Moved user ai-worker a6d88f2d41

fix: place passwordFile at correct attrset level in gortium.nix bd283de350

feat: add reusable wireguard-client NixOS module bd8b1c564e

- modules/nixos/services/wireguard-client.nix — optional module under
  gortium.wireguard-client namespace with enable, vpnIp, privateKeyFile,
  and presharedKeyFile options
- Added to lazyworkhorse, cyt-pi, and uconsoleBaseModules (covers both
  uconsole-cm5 toplevel and SD image)
- Migrated lazyworkhorse from inline networking.wireguard to module
- Split-tunnel: allowedIPs = [ "10.8.0.0/24" ]

Usage in a host config:
  gortium.wireguard-client = {
    enable = true;
    vpnIp = "10.8.0.X/24";
    privateKeyFile = config.age.secrets.wireguard_private_key.path;
    presharedKeyFile = config.age.secrets.wireguard_preshared_key.path;
  };

feat: add NixOS module for HackerGadgets AIO v2 board (uConsole CM5) 2572f47e41

- New module: hardware.uconsole-cm5-aio-v2
  - GPIO rail control for GPS (27), LORA (16), SDR (7), USB (23)
  - Systemd oneshot service (aiov2-rails-boot) to apply states at boot
  - aiov2_ctl CLI tool packaged from GitHub source
  - GPS UART support (ttyAMA0, 9600 baud) with dialout group
  - Optional systemd user service for system tray GUI
- Wired into uconsole-cm5 NixOS config + SD image

All rails default OFF — activate on demand with:
  aiov2_ctl <GPS|LORA|SDR|USB> on

Merge remote changes + feat: AIO v2 board module 1550219e77

- Cross-compile overlays for Hyprland (libcamera, pipewire, gjs)
- Refactor uconsoleBaseModules into reusable list
- Add wireguard-client service module
- Restructure users into subdirectories
- New: hardware.uconsole-cm5-aio-v2 module (GPIO rails, aiov2_ctl, GPS UART)
- Update configuration.nix with Hyprland + AIO v2
- Add AIO v2 module to both toplevel and SD image config

fix: add home-manager input for uConsole CM5 gortium user config 3f331e4bfb

The remote branch added users/gortium/gortium.nix which uses
home-manager module option, but home-manager wasn't imported.

fix: add ai-worker-restricted module to uConsole CM5 base modules 6c08958730

Required for services.aiWorkerAccess option used by users/ai-worker/ai-worker.nix

fix: remove duplicate ai-worker user definition in configuration.nix 820de72c0f

ai-worker is now defined in users/ai-worker/ai-worker.nix module

fix: remove programs.gitsign (not available in nixpkgs 25.11) bcf924408b

fix: zsh conflicts for gortium home-manager on uConsole 1d50b6455d

- Remove duplicate .zshrc from home.file (managed by programs.zsh)
- Enable programs.zsh system-wide for gortium user

fix: use libraspberrypi instead of raspberrypi-tools for pinctrl b9e89ce537

fix: pass hostName as extraSpecialArgs to home-manager 088a82d730

home.nix used config.networking.hostName but home-manager modules
don't have access to NixOS config. Fix by passing via extraSpecialArgs.

fix: correct dotfiles path in home.nix (relative to repo root) a2096efc3f

fix: correct secrets path in configuration.nix (../../secrets from hosts/uconsole-cm5/) e05ef66b8f

fix: set real hash for aiov2_ctl fetchFromGitHub f0ec375875

fix: convert hash to proper SRI base64 format 6aca5466b6

fix: correct aiov2_ctl hash from actual build 43f8d8a61c

fix: switch nixos-uconsole to cm5_fix branch (patches OK) 102586d7e8

- Remove local boot.kernelPatches (now in nixos-uconsole fork)
- Point to github:gortium/nixos-uconsole/cm5_fix instead of pr/dcs-panel-detection

chore: update nixos-uconsole flake.lock to latest pr/dcs-panel-detection 332f1cca1a

feat: add HackerGadgets AIO v2 board module + enable on uConsole CM5 33e98f32d7

fix: clean module and flake after merge b4b928a985

fix: remove duplicate extraSpecialArgs in gortium.nix 09add9f5e4

temp: remove nh to skip Haskell cross-compile ecbf226b01

feat: merge Reticulum overlay, poup-16t-disk, open_code_server, merged uConsole config 4989f9898c

fix: add reticulum overlay to uconsole nixpkgs 65241113cc

remove meshtastic (not in nixpkgs) 7e148791fb

fix: disable Boost MPI for aarch64 cross-compile (no b2 alternatives) ef3ad6bbcf

feat: add agenix-rekey + remote-builder module for distributed builds da691f0b4d

feat: add agenix-rekey config + remote builder to uConsole 050f2d4761

fix: place agenix-rekey config inside module (was outside closing brace) 932de1752d

fix: remove sshPort from buildMachines (use SSH config instead) c6fd58123e

fix: force perl-ldap to use buildPackages perl for cross-compile d9e56e8958

fix: proper perl-ldap cross-compile override bf9b3a7890

fix: try null perl for perl-ldap cross-compile 0772daf3ed

fix: replace perl.mini with native build perl for cross-compile (fixes all perl modules) 533de87069

fix: try final.buildPackages.perl for perl.mini cross-compile fix 9be5583750

fix: strip perl-ldap from john deps in cross-compile overlay e5188eb5b0

fix: remove broken perl-ldap hacks, keep only john perl-ldap filter e6d1b1bdab

fix: disable mailutils in emacs-pgtk to avoid broken gss cross-compile c8eb80b7f8

fix: stub qtquick3d install for aarch64 cross-compile (Qt::Quick unavailable) 4acd98c689

fix: use dontUseCmakeInstall + stub for qtquick3d cross-compile 16b9b1c866

fix: remove js8call + switch wireshark to CLI to drop qtquick3d dep b072e2052f

docs: add comprehensive cross-compile workaround tracker in overlay comment 570ab16243

feat: add ClamAV antivirus with daily auto-scan f14c74f50f

feat: add gortium.clamav NixOS module 8874f6ff66

- New module at modules/nixos/services/clamav.nix
- Options: enable (CLI-only), enableDaemon (full services),
  onAccessScanning (clamonacc), scanPaths, dailyScanTime
- All scans are logging-only — no auto-quarantine or deletion
- uConsole: CLI tools only (enableDaemon=false)
- lazyworkhorse: full setup with on-access scanning, daily 3 AM scan

Also: remove neovim from uConsole (fails cross-compile, emacs available)

docs: note neovim cross-compile failure in overlay comments ef8c92f05e

docs: add bidirectional remote builder setup notes to flake 317e908ab5

docs: correct maxJobs in remote builder notes (uConsole=4, server=36) a114cd859c

uConsole: remove hashcat (cross-compile failure — Makefile calls gcc directly, same issue as neovim) 016cf4aa53

fix: add clamav cross-compile workaround (cmake try_run for FD passing, uname POSIX, struct packing, SAR) a0875e9e0a

fix: set CC=gcc for clamav Rust proc-macro builds in cross-compile 42949532a3

fix: add native gcc for clamav Rust build scripts in cross-compile e54812c3c5

uConsole: remove clamav (cross-compile failure — cmake try_run + Rust proc-macro linker) e734102104

uConsole: remove failing cross-compile packages (round 3) 12af6bb643

Removed for aarch64 bootstrap:
  sdrpp     — glfw/wxPython cross-compile fails
  gqrx      — Qt5 cascade fails
  emacs-pgtk/nox — GTK3 + mailutils → gss → shishi chain
  viking    — GTK3 GPS
  foxtrotgps — GTK2 GPS

Leave remaining as native install after first switch.
Add consolidated removal tracking comment.

uConsole: consolidate removal tracking into single block 93dc4f1cac

uConsole: fix missing closing brace (sed cleanup mishap) 95833f4d28

uConsole: add neovim to cross-compile removal tracking comment eeb345b7e0

uConsole: remove accidental .bak file from tracking a8215ae441

uConsole: remove wsjtx + fldigi (qtbase/Qt5 linker fails) — add to removal comment 9f62dac106

fix: remove gpsbabel for aarch64 cross-compile (qmake can't find g++) 1b70f95038

fix: remove john for aarch64 cross-compile (configure needs python) e38908de74

chore: remove accidentally committed .bak files bfb521f684

fix: remove chirp for aarch64 cross-compile (wxPython fails with GTK3) da3363e894

fix: kismet --log-base -> --log-prefix (wrong flag), aiov2 pinctrl from raspberrypi-utils not libraspberrypi d765ead020

fix: dotfiles as flake input (not submodule path) so Nix gets actual files f443e79c17

fix: replace dotfiles flake input with self.submodules=true (git submodule) ceca908457