diff options
| -rwxr-xr-x | deploy.sh | 48 | ||||
| -rw-r--r-- | modules/ryan-config/base-system.scm | 9 |
2 files changed, 50 insertions, 7 deletions
| @@ -61,14 +61,14 @@ copy_and_prepare() { | |||
| 61 | # Install the non-guix signing keys | 61 | # Install the non-guix signing keys |
| 62 | echo "Installing non-guix signing keys for substitutes..." | 62 | echo "Installing non-guix signing keys for substitutes..." |
| 63 | curl -o sign-key.pub https://substitutes.nonguix.org/signing-key.pub | 63 | curl -o sign-key.pub https://substitutes.nonguix.org/signing-key.pub |
| 64 | curl -o sign-key-r.pub http://129.21.92.78:8000/signing-key.pub | 64 | curl -o sign-key-r.pub http://129.21.94.53:8000/signing-key.pub |
| 65 | guix archive --authorize < sign-key.pub | 65 | guix archive --authorize < sign-key.pub |
| 66 | guix archive --authorize < sign-key-r.pub | 66 | guix archive --authorize < sign-key-r.pub |
| 67 | } | 67 | } |
| 68 | 68 | ||
| 69 | install_system() { | 69 | install_system() { |
| 70 | echo "Beginning install!" | 70 | echo "Beginning install!" |
| 71 | guix time-machine -C ./channels.scm -- system -L ./modules --substitute-urls='http://129.21.92.78:8080/ https://substitutes.nonguix.org https://bordeaux.guix.gnu.org https://ci.guix.gnu.org' init $install_hostname.scm /mnt | 71 | guix time-machine -C ./channels.scm -- system -L ./modules --substitute-urls='http://129.21.94.53:8080/ https://substitutes.nonguix.org https://bordeaux.guix.gnu.org https://ci.guix.gnu.org' init $install_hostname.scm /mnt |
| 72 | } | 72 | } |
| 73 | 73 | ||
| 74 | install_user_env() { | 74 | install_user_env() { |
| @@ -90,16 +90,54 @@ if [[ $* == *-p ]] | |||
| 90 | then | 90 | then |
| 91 | echo "Installing non-guix signing keys for substitutes..." | 91 | echo "Installing non-guix signing keys for substitutes..." |
| 92 | curl -o sign-key.pub https://substitutes.nonguix.org/signing-key.pub | 92 | curl -o sign-key.pub https://substitutes.nonguix.org/signing-key.pub |
| 93 | #curl -o sign-key-r.pub http://129.21.92.78:8000/signing-key.pub | 93 | curl -o sign-key-r.pub http://129.21.94.53:8000/signing-key.pub |
| 94 | #guix archive --authorize < sign-key.pub | 94 | guix archive --authorize < sign-key.pub |
| 95 | #guix archive --authorize < sign-key-r.pub | 95 | guix archive --authorize < sign-key-r.pub |
| 96 | guix time-machine -C ./channels.scm -- pull | 96 | guix time-machine -C ./channels.scm -- pull |
| 97 | exit 0 | 97 | exit 0 |
| 98 | elif [[ $* == *-i ]] | 98 | elif [[ $* == *-i ]] |
| 99 | then | 99 | then |
| 100 | gather_env | 100 | gather_env |
| 101 | # Associate devs with uuids | ||
| 102 | root_uuid=`blkid $root_dev | awk -F\" '{print $2}'` | ||
| 103 | boot_uuid=`blkid $boot_dev | awk -F\" '{print $2}'` | ||
| 104 | swap_uuid=`blkid $swap_dev | awk -F\" '{print $2}'` | ||
| 105 | # Let's a go! | ||
| 106 | echo "Information gathered. Deploying Guix on $root_dev ($root_uuid) with boot on $boot_dev ($boot_uuid) and swap on $swap_dev ($swap_uuid)" | ||
| 107 | echo -n "Proceed? (y/n): " | ||
| 108 | read install_choice | ||
| 109 | |||
| 110 | if [ "$install_choice" != "y" ] | ||
| 111 | then | ||
| 112 | echo "Bailing!" | ||
| 113 | exit 1 | ||
| 114 | fi | ||
| 115 | |||
| 116 | # We are installing! | ||
| 117 | # Copy template to root of repo | ||
| 118 | if [ "$install_type" == "e" ] | ||
| 119 | then | ||
| 120 | cp ./modules/ryan-config/deploy-templates/HostTemplateEncrypted ./$install_hostname.scm | ||
| 121 | elif [ "$install_type" == "d" ] | ||
| 122 | then | ||
| 123 | cp ./modules/ryan-config/deploy-templates/HostTemplate ./$install_hostname.scm | ||
| 124 | else | ||
| 125 | echo "Invalid install type (not d or e), bailing!" | ||
| 126 | exit 1 | ||
| 127 | fi | ||
| 128 | |||
| 129 | # Correct the information | ||
| 130 | sed -i "s/ChangeMe_ROOT/$root_uuid/" ./$install_hostname.scm | ||
| 131 | sed -i "s/ChangeMe_BOOTEFI/$boot_uuid/" ./$install_hostname.scm | ||
| 132 | sed -i "s/ChangeMe_SWAP/$swap_uuid/" ./$install_hostname.scm | ||
| 133 | sed -i "s/ChangeMe_HOST/$install_hostname/" ./$install_hostname.scm | ||
| 134 | |||
| 135 | # Install! | ||
| 136 | echo "Mounting /gnu/store to destination disk..." | ||
| 137 | herd start cow-store /mnt | ||
| 101 | install_system | 138 | install_system |
| 102 | install_user_env | 139 | install_user_env |
| 140 | exit 0 | ||
| 103 | fi | 141 | fi |
| 104 | 142 | ||
| 105 | gather_env | 143 | gather_env |
diff --git a/modules/ryan-config/base-system.scm b/modules/ryan-config/base-system.scm index bf16141..c6e5d0e 100644 --- a/modules/ryan-config/base-system.scm +++ b/modules/ryan-config/base-system.scm | |||
| @@ -186,7 +186,7 @@ | |||
| 186 | (guix-configuration | 186 | (guix-configuration |
| 187 | (inherit config) | 187 | (inherit config) |
| 188 | (substitute-urls | 188 | (substitute-urls |
| 189 | (append (list "https://substitutes.nonguix.org") | 189 | (append (list "https://substitutes.nonguix.org" "http://129.21.94.53:8080") |
| 190 | %default-substitute-urls)) | 190 | %default-substitute-urls)) |
| 191 | (authorized-keys | 191 | (authorized-keys |
| 192 | (cons* (plain-file "non-guix.pub" | 192 | (cons* (plain-file "non-guix.pub" |
| @@ -195,7 +195,12 @@ | |||
| 195 | (curve Ed25519) | 195 | (curve Ed25519) |
| 196 | (q #C1FD53E5D4CE971933EC50C9F307AE2171A2D3B52C804642A7A35F84F3A4EA98#) | 196 | (q #C1FD53E5D4CE971933EC50C9F307AE2171A2D3B52C804642A7A35F84F3A4EA98#) |
| 197 | ) | 197 | ) |
| 198 | )" ) %default-authorized-guix-keys)))) | 198 | )" ) |
| 199 | (plain-file "ryan-key.pub" | ||
| 200 | "(public-key | ||
| 201 | (ecc | ||
| 202 | (curve Ed25519) | ||
| 203 | (q #24ED64A7C001DAC05D47F586623EAC4C1F4BD2D267686D5781A9098808160ADC#)))" ) %default-authorized-guix-keys)))) | ||
| 199 | (udev-service-type config => | 204 | (udev-service-type config => |
| 200 | (udev-configuration | 205 | (udev-configuration |
| 201 | (inherit config) | 206 | (inherit config) |
