2021-05-30 19:10:28 +00:00
|
|
|
{ config, pkgs, lib, ... }:
|
2021-10-24 20:03:28 +00:00
|
|
|
with lib;
|
2021-05-30 19:10:28 +00:00
|
|
|
let
|
2022-08-13 20:59:05 +00:00
|
|
|
cfg = config.pub-solar.core;
|
2021-05-30 19:10:28 +00:00
|
|
|
in
|
2021-10-23 23:18:33 +00:00
|
|
|
{
|
2022-08-13 20:59:05 +00:00
|
|
|
options.pub-solar.core.iso-options.enable = mkOption {
|
2021-10-25 23:06:13 +00:00
|
|
|
type = types.bool;
|
|
|
|
default = false;
|
|
|
|
description = "Feature flag for iso builds";
|
|
|
|
};
|
2022-08-13 20:59:05 +00:00
|
|
|
options.pub-solar.core.disk-encryption-active = mkOption {
|
2022-08-13 10:32:16 +00:00
|
|
|
type = types.bool;
|
|
|
|
default = true;
|
|
|
|
description = "Whether it should be assumed that there is a cryptroot device";
|
|
|
|
};
|
2021-05-30 19:10:28 +00:00
|
|
|
config = {
|
|
|
|
# Enable plymouth for better experience of booting
|
|
|
|
boot.plymouth.enable = true;
|
|
|
|
|
2021-10-23 23:18:33 +00:00
|
|
|
# Mount / luks device in initrd
|
2021-05-30 19:10:28 +00:00
|
|
|
# Allow fstrim to work on it.
|
2021-10-24 20:03:28 +00:00
|
|
|
# The ! makes this enabled by default
|
2022-08-13 10:32:16 +00:00
|
|
|
boot.initrd = mkIf (!cfg.iso-options.enable && cfg.disk-encryption-active) {
|
2021-05-30 19:10:28 +00:00
|
|
|
luks.devices."cryptroot" = {
|
|
|
|
allowDiscards = true;
|
|
|
|
};
|
|
|
|
};
|
|
|
|
|
2021-10-23 23:18:33 +00:00
|
|
|
boot.loader.systemd-boot.enable = true;
|
2022-08-13 20:35:43 +00:00
|
|
|
|
|
|
|
# Use latest LTS linux kernel by default
|
|
|
|
boot.kernelPackages = pkgs.linuxPackages_5_15;
|
|
|
|
|
|
|
|
# Support ntfs drives
|
|
|
|
boot.supportedFilesystems = [ "ntfs" ];
|
2021-05-30 19:10:28 +00:00
|
|
|
};
|
|
|
|
}
|