Update install steps

This commit is contained in:
Zuckerberg 2023-04-19 21:15:58 -06:00
parent 40f0e5d2ac
commit 0bd42f1850

View File

@ -1,27 +1,34 @@
# New Machine Setup
### Prepare Shell If Needed
```sh
nix-shell -p nixFlakes git nix-shell -p nixFlakes git
```
# disk setup
```sh
cfdisk cfdisk
mkfs.ext3 boot
cryptsetup luksFormat /dev/vda2 cryptsetup luksFormat /dev/vda2
cryptsetup luksOpen /dev/vda2 enc-pv cryptsetup luksOpen /dev/vda2 enc-pv
pvcreate /dev/mapper/enc-pv pvcreate /dev/mapper/enc-pv
vgcreate vg /dev/mapper/enc-pv
lvcreate -L 4G -n swap vg lvcreate -L 4G -n swap vg
lvcreate -l '100%FREE' -n root vg lvcreate -l '100%FREE' -n root vg
mkswap -L swap /dev/vg/swap mkswap -L swap /dev/vg/swap
swapon /dev/vg/swap swapon /dev/vg/swap
mkfs.btrfs /dev/vg/root mkfs.btrfs /dev/vg/root
mount /dev/vg/root /mnt mount /dev/vg/root /mnt
cd /mnt mkfs.ext3 boot
btrfs subvolume create root
btrfs subvolume create home
cd
mount -o subvol=root /dev/vg/root /mnt
mkdir /mnt/home
mount -o subvol=home /dev/vg/root /mnt/home
mkdir /mnt/boot
mount /dev/vda1 /mnt/boot mount /dev/vda1 /mnt/boot
mkdir /mnt/secret ```
/tmp/tor.rc # Generate Secrets
```sh
mkdir /mnt/secret
```
In `/tmp/tor.rc`
``` ```
DataDirectory /tmp/my-dummy.tor/ DataDirectory /tmp/my-dummy.tor/
SOCKSPort 127.0.0.1:10050 IsolateDestAddr SOCKSPort 127.0.0.1:10050 IsolateDestAddr
@ -30,8 +37,19 @@ HiddenServiceDir /mnt/secret/onion
HiddenServicePort 1234 127.0.0.1:1234 HiddenServicePort 1234 127.0.0.1:1234
``` ```
```sh
nix-shell -p tor --run "tor -f /tmp/tor.rc" nix-shell -p tor --run "tor -f /tmp/tor.rc"
ssh-keygen -q -N "" -t rsa -b 4096 -f /mnt/secret/ssh_host_rsa_key ssh-keygen -q -N "" -t rsa -b 4096 -f /mnt/secret/ssh_host_rsa_key
ssh-keygen -q -N "" -t ed25519 -f /mnt/secret/ssh_host_ed25519_key ssh-keygen -q -N "" -t ed25519 -f /mnt/secret/ssh_host_ed25519_key
nixos-generate-config --root /mnt # copy hardware config ```
# Generate Hardware Config
nixos-generate-config --root /mnt
# Install
nixos-install --flake "git+https://git.neet.dev/zuckerberg/nix-config.git#MACHINE_NAME" nixos-install --flake "git+https://git.neet.dev/zuckerberg/nix-config.git#MACHINE_NAME"
# Post Install Tasks
- Add to DNS
- Add ssh host keys (unlock key + host key)
- Add to tailnet