Zuckerberg
cf71b74d6f
- Add incus.nix module for fully declarative Incus/LXC containers - Build NixOS LXC images using nixpkgs.lib.nixosSystem - Ephemeral containers: recreated on each start, cleaned up on stop - Use flock to serialize concurrent container operations - Deterministic MAC addresses via lib.mkMac to prevent ARP cache issues - Add veth* to NetworkManager unmanaged interfaces - Update CLAUDE.md with coding conventions and shared lib docs
My NixOS configurations
Source Layout
/common- common configuration imported into all/machines/boot- config related to bootloaders, cpu microcode, and unlocking LUKS root disks over tor/network- config for tailscale, and NixOS container with automatic vpn tunneling via PIA/pc- config that a graphical PC should have. Have thepersonalrole set in the machine'sproperties.nixto enable everthing./server- config that creates new nixos services or extends existing ones to meet my needs
/machines- all my NixOS machines along with their machine unique configuration for hardware and services/kexec- a special machine for generating minimal kexec images. Does not import/common
/secrets- encrypted shared secrets unlocked through/machinesssh host keys