nixos-configuration/README.md

NixOS Configuration

Initial Framework 16 Setup

1. Create LUKS key files for all Yubikeys by following the first 3 steps of this guide

• Attention: only run step 1) ykpersonalize -2 -ochal-resp -ochal-hmac if it's a new Yubikey or if you are sure that slot 2 is not used! You may loose access to existing devices otherwise
• use the same salt for all keys
• store a file with the content of the LUKS_KEYS variable

2. Configure the disko.nix file to match your system.
3. Run the NixOS installer, copy the files to /tmp

   cp -r yk /tmp/yk # contains the keys
   cp disko.nix /tmp/disko.nix
   

4. Run disko

   nix --experimental-features "nix-command flakes" run github:nix-community/disko -- --mode disko /tmp/disko.nix
   

5. Copy the salt's to the unencrypted partition

   mkdir /mnt/boot/crypt-storage
   mkdir /mnt/backup-esp/crypt-storage
   cp yk/yk_salt /mnt/boot/crypt-storage/default
   cp yk/yk_salt /mnt/backup-esp/crypt-storage/default
   

6. Copy the configuration files

   cp configuration.nix /mnt/etc/nixos/configuration.nix
   cp disko.nix /mnt/etc/nixos/disko.nix
   cp hardware-configuration.nix /mnt/etc/nixos/hardware-configuration.nix
   

7. Run nixos-install