This commit is contained in:
parent
6437a636b5
commit
ef7981a517
1 changed files with 50 additions and 0 deletions
50
README.md
Normal file
50
README.md
Normal file
|
|
@ -0,0 +1,50 @@
|
||||||
|
# University PC NixOS config
|
||||||
|
|
||||||
|
The repo here is located **originally** on my personal [Greg's
|
||||||
|
Forgejo](https://forgejo.gregorbednov.ru/gregorbednov/configuration.nix).
|
||||||
|
|
||||||
|
It was used as a ready-to-go declarative installation of all required software
|
||||||
|
in Industrial Informatics Department in MIREA. So feel free to fork it and
|
||||||
|
modify it.
|
||||||
|
|
||||||
|
## Architecture
|
||||||
|
|
||||||
|
### Context and requirements
|
||||||
|
|
||||||
|
I worked on the config in university department with its own student PC machines
|
||||||
|
fleet, about from 50 to 70 machines.
|
||||||
|
|
||||||
|
- from 50 to 70 machines needed to install Linux for student work and a bunch of
|
||||||
|
cross-platform apps (by the way most of PCs were on Ubuntu 20.04 and Ubuntu
|
||||||
|
22.04, each with unique history and packages set. And I installed NixOS on
|
||||||
|
each).
|
||||||
|
|
||||||
|
- non-NixOS (Debian) Server - able to host files, unable to switch fully on
|
||||||
|
NixOS using [nixos-infect](https://github.com/elitak/nixos-infect) or
|
||||||
|
something. It listens on `10.0.174.12` in my personal case;
|
||||||
|
|
||||||
|
- me and my collegues couldn't operate on network routers and DNS servers,
|
||||||
|
because it's not our competence (only central networking and security
|
||||||
|
operating team could set up our routers and domain resolving, and would leave
|
||||||
|
no exceptions without special cases in prior to security)
|
||||||
|
|
||||||
|
- and on the other hand, students were already allowed to unplug Ethernet cables
|
||||||
|
from PC and to plug it into their own laptops; as my collegues said, that's
|
||||||
|
why none of them don't want to support (pseudo)static IPv4. and also, students
|
||||||
|
in tech when something doesn't work properly *for them*, are trying to hack it
|
||||||
|
--- so, may be we would get fake static IPs issues.
|
||||||
|
|
||||||
|
- students vandals some settings sometimes, however it would be nice if they had
|
||||||
|
customization options
|
||||||
|
|
||||||
|
### Description and solutions
|
||||||
|
|
||||||
|
- Debian server `10.0.174.12` --- Yggdrasil Peer and Fileserver
|
||||||
|
- NixOS builds `nixos.builds.node` virtual machine on it --- doesn't have
|
||||||
|
static IP but has well-known static Yggdrasil IPv6
|
||||||
|
- 50-70x NixOSxWindows dual-boot PCs with
|
||||||
|
- dynamic IPv4
|
||||||
|
- static Yggdrasil-overlayed IPv6
|
||||||
|
- configuration.nix and flake.nix in /etc/nixos,
|
||||||
|
- all of hardware specifics is left in hardware-configuration.nix
|
||||||
|
- any time student user can be reset completely with `resethome` command
|
||||||
Loading…
Reference in a new issue