142 lines
3.2 KiB
Nix
142 lines
3.2 KiB
Nix
{
|
|
disko.devices = {
|
|
disk = {
|
|
ssd = {
|
|
type = "disk";
|
|
device = "/dev/sda";
|
|
content = {
|
|
type = "gpt";
|
|
partitions = {
|
|
ESP = {
|
|
size = "1024M";
|
|
type = "EF00";
|
|
content = {
|
|
type = "filesystem";
|
|
format = "vfat";
|
|
mountpoint = "/boot";
|
|
mountOptions = [ "umask=0077" ];
|
|
};
|
|
};
|
|
zfs = {
|
|
size = "100%";
|
|
content = {
|
|
type = "zfs";
|
|
pool = "zroot";
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
hdd0 = {
|
|
type = "disk";
|
|
device = "/dev/sdb";
|
|
content = {
|
|
type = "gpt";
|
|
partitions = {
|
|
zfs = {
|
|
size = "100%";
|
|
content = {
|
|
type = "zfs";
|
|
pool = "storage";
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
hdd1 = {
|
|
type = "disk";
|
|
device = "/dev/sdc";
|
|
content = {
|
|
type = "gpt";
|
|
partitions = {
|
|
zfs = {
|
|
size = "100%";
|
|
content = {
|
|
type = "zfs";
|
|
pool = "storage";
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
zpool = {
|
|
zroot = {
|
|
type = "zpool";
|
|
mode = "";
|
|
# Workaround: cannot import 'zroot': I/O error in disko tests
|
|
options.cachefile = "none";
|
|
rootFsOptions = {
|
|
compression = "zstd";
|
|
"com.sun:auto-snapshot" = "false";
|
|
};
|
|
|
|
datasets = {
|
|
encrypted = {
|
|
type = "zfs_fs";
|
|
options = {
|
|
mountpoint = "none";
|
|
encryption = "aes-256-gcm";
|
|
keyformat = "passphrase";
|
|
keylocation = "file:///tmp/root.key";
|
|
};
|
|
# use this to read the key during boot
|
|
postCreateHook = ''
|
|
zfs set keylocation="prompt" "zroot/$name";
|
|
'';
|
|
};
|
|
"encrypted/root" = {
|
|
type = "zfs_fs";
|
|
mountpoint = "/";
|
|
};
|
|
"encrypted/var" = {
|
|
type = "zfs_fs";
|
|
mountpoint = "/var";
|
|
};
|
|
"encrypted/etc" = {
|
|
type = "zfs_fs";
|
|
mountpoint = "/etc";
|
|
};
|
|
"encrypted/home" = {
|
|
type = "zfs_fs";
|
|
mountpoint = "/home";
|
|
};
|
|
"encrypted/nix" = {
|
|
type = "zfs_fs";
|
|
mountpoint = "/nix";
|
|
};
|
|
};
|
|
};
|
|
|
|
storage = {
|
|
type = "zpool";
|
|
mode = "mirror";
|
|
|
|
datasets = {
|
|
encrypted = {
|
|
type = "zfs_fs";
|
|
options = {
|
|
mountpoint = "none";
|
|
encryption = "aes-256-gcm";
|
|
keyformat = "passphrase";
|
|
keylocation = "file:///tmp/storage.key";
|
|
};
|
|
|
|
# use this to read the key during boot
|
|
postCreateHook = ''
|
|
zfs set keylocation="prompt" "zroot/$name";
|
|
'';
|
|
};
|
|
"encrypted/data" = {
|
|
type = "zfs_fs";
|
|
mountpoint = "/data";
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|
|
}
|