os/hosts/chocolatebar/virtualisation/default.nix

{
  config,
  pkgs,
  lib,
  ...
}:
with lib; let
  psCfg = config.pub-solar;
  xdg = config.home-manager.users."${psCfg.user.name}".xdg;
  createService = import ./create-service.nix;
  generateXML = import ./guest-xml.nix;
  generateTailsXML = import ./tails-xml.nix;

  isolateGPU = "rx550x";
  memory = 64; # in GB
  handOverUSBDevices = false;

  isolateAnyGPU = isolateGPU != null;
in {
  boot.extraModprobeConfig = mkIf isolateAnyGPU (concatStringsSep "\n" [
    "softdep amdgpu pre: vfio vfio_pci"
    (
      if isolateGPU == "rx5700xt"
      then "options vfio-pci ids=1002:731f,1002:ab38"
      else "options vfio-pci ids=1002:699f,1002:aae0"
    )
  ]);

  systemd.user.services = {
    vm-windows = createService {
      inherit config;
      inherit pkgs;
      inherit lib;
      vm = {
        name = "windows";
        disk = "/dev/disk/by-id/ata-SanDisk_SDSSDA240G_162402455603";
        id = "http://microsoft.com/win/10";
        gpu = true;
        mountHome = false;
        memory = memory;
        isolateGPU = isolateGPU;
        handOverUSBDevices = handOverUSBDevices;
        generateXML = generateXML;
      };
    };
    vm-manjaro = createService {
      inherit config;
      inherit pkgs;
      inherit lib;
      vm = {
        name = "manjaro";
        disk = "/dev/disk/by-id/ata-KINGSTON_SM2280S3G2240G_50026B726B0265CE";
        id = "https://manjaro.org/download/#i3";
        gpu = true;
        mountHome = true;
        memory = memory;
        isolateGPU = isolateGPU;
        handOverUSBDevices = handOverUSBDevices;
        generateXML = generateXML;
      };
    };
    vm-tails = createService {
      inherit config;
      inherit pkgs;
      inherit lib;
      vm = {
        name = "tails";
        disk = "/var/lib/vms/tails/tails-amd64-5.4.iso";
        # disk = "/var/lib/vms/nixos/nixos-minimal.iso";
        id = "https://tails.boum.org/install/index.en.html";
        gpu = false;
        mountHome = false;
        memory = 16;
        isolateGPU = isolateGPU;
        handOverUSBDevices = false;
        generateXML = generateTailsXML;
      };
    };
  };
}