Working (I think?) GUI on zbox

config/domains.nix

@@ -7,7 +7,7 @@
 
       local-users = [ "niten" "reaper" ];
       local-groups = [ "fudo" "selby" "admin" ];
-      admin-users = [ "niten" "reaper" ];
+      local-admins = [ "niten" "reaper" ];
       admin-email = "admin@fudo.org";
       gssapi-realm = "FUDO.ORG";
     };
@@ -17,7 +17,7 @@
 
       local-users = [ "niten" "reaper" "xiaoxuan" "ken" ];
       local-groups = [ "fudo" "selby" "admin" ];
-      admin-users = [ "niten" ];
+      local-admins = [ "niten" ];
       admin-email = "niten@fudo.org";
       gssapi-realm = "FUDO.ORG";
     };
@@ -48,7 +48,7 @@
 
       local-users = [ "niten" "viator" ];
       local-groups = [ "admin" ];
-      admin-users = [ "niten" ];
+      local-admins = [ "niten" ];
       admin-email = "viator@informis.land";
       gssapi-realm = "INFORMIS.LAND";
     };

config/hardware/zbox.nix

@@ -0,0 +1,70 @@
+{ config, lib, pkgs, ... }:
+
+{
+  imports =
+    [ <nixpkgs/nixos/modules/installer/scan/not-detected.nix>
+    ];
+
+  boot = {
+    loader = {
+      systemd-boot.enable = true;
+      efi.canTouchEfiVariables = true;
+    };
+    initrd = {
+      availableKernelModules = [ "xhci_pci" "ahci" "usbhid" "sd_mod" ];
+      kernelModules = [ ];
+    };
+    kernelModules = [ "kvm-intel" ];
+    extraModulePackages = [ ];
+  };
+
+  fileSystems."/" =
+    { device = "/dev/disk/by-label/zbox-root";
+      fsType = "btrfs";
+    };
+
+  fileSystems."/boot" =
+    { device = "/dev/disk/by-label/BOOT";
+      fsType = "vfat";
+    };
+
+  swapDevices =
+    [ { device = "/dev/disk/by-label/zbox-swap"; }
+    ];
+
+  hardware = {
+    bluetooth.enable = true;
+
+    cpu.intel.updateMicrocode = true;
+
+    opengl = {
+      driSupport = true;
+      driSupport32Bit = true;
+
+      # extraPackages32 = with pkgs.i686Linux; [ libva ];
+    };
+
+    pulseaudio.support32Bit = true;
+  };
+
+  networking = {
+    macvlans = {
+      intif0 = {
+        interface = "eno1";
+        mode = "bridge";
+      };
+    };
+
+    interfaces = {
+      intif0 = {
+        # output of: echo clunk-intif0|md5sum|sed 's/^\(..\)\(..\)\(..\)\(..\)\(..\).*$/02:\1:\2:\3:\4:\5/'
+        macAddress = "02:dd:80:52:83:9b";
+      };
+    };
+  };
+
+  services.xserver.videoDrivers = [ "nvidia" ];
+
+  nix.maxJobs = lib.mkDefault 8;
+  powerManagement.cpuFreqGovernor = lib.mkDefault "powersave";
+}

config/hosts.nix

@@ -149,6 +149,7 @@
       profile = "desktop";
     };
 
-    zbox = { description = "Niten's primary desktop."; };
+    zbox = { description = "Niten's primary desktop.";
+           enable-gui = true;};
   };
 }

config/hosts/zbox.nix

@@ -1,10 +1,17 @@
 { config, lib, pkgs, ... }:
 
 {
+  # TODO: remove?
+  nixpkgs.config.permittedInsecurePackages = [
+    "openssh-with-gssapi-8.4p1" # CVE-2021-28041
+  ];
+
   fudo.slynk.enable = true;
 
   networking = {
+    interfaces = {
       eno1.useDHCP = false;
       intif0 = { useDHCP = true; };
     };
+  };
 }

config/profiles/common-ui.nix

@@ -6,7 +6,7 @@ let
   enable-gui = config.fudo.hosts.${hostname}.enable-gui;
 
 in {
-  import = [ ./common.nix ];
+  imports = [ ./common.nix ];
 
   boot.plymouth.enable = false;
 
@@ -14,7 +14,8 @@ in {
 
   system.autoUpgrade.enable = true;
 
-  services.xserver = mkIf enable-gui {
+  services = {
+    xserver = mkIf enable-gui {
     enable = true;
 
     desktopManager.gnome3.enable = true;
@@ -23,13 +24,6 @@ in {
 
     windowManager.stumpwm.enable = true;
 
-    emacs = {
-      enable = true;
-      install = true;
-      package = pkgs.emacs;
-      defaultEditor = true;
-    };
-
     # windowManager.session = pkgs.lib.singleton {
     #   name = "stumpwm";
     #   start = ''
@@ -39,6 +33,14 @@ in {
     # };
     };
 
+    emacs = {
+      enable = true;
+      install = true;
+      package = pkgs.emacs;
+      defaultEditor = true;
+    };
+  };
+
   sound.enable = true;
   hardware.pulseaudio.enable = true;
 

config/sites.nix

@@ -10,32 +10,32 @@
       timezone = "America/Los_Angeles";
       gateway-host = "nostromo";
       # FIXME: good idea?
-      network-mounts = {
-        "/mnt/documents" = {
-          device = "whitedwarf:/volume1/Documents";
-          fsType = "nfs4";
-        };
-        "/mnt/downloads" = {
-          device = "whitedwarf:/volume1/Downloads";
-          fsType = "nfs4";
-        };
-        "/mnt/music" = {
-          device = "doraemon:/volume1/Music";
-          fsType = "nfs4";
-        };
-        "/mnt/video" = {
-          device = "doraemon:/volume1/Video";
-          fsType = "nfs4";
-        };
-        "/mnt/cargo_video" = {
-          device = "cargo:/volume1/video";
-          fsType = "nfs4";
-        };
-        "/mnt/photo" = {
-          device = "cargo:/volume1/pictures";
-          fsType = "nfs4";
-        };
-      };
+      # network-mounts = {
+      #   "/mnt/documents" = {
+      #     device = "whitedwarf:/volume1/Documents";
+      #     fsType = "nfs4";
+      #   };
+      #   "/mnt/downloads" = {
+      #     device = "whitedwarf:/volume1/Downloads";
+      #     fsType = "nfs4";
+      #   };
+      #   "/mnt/music" = {
+      #     device = "doraemon:/volume1/Music";
+      #     fsType = "nfs4";
+      #   };
+      #   "/mnt/video" = {
+      #     device = "doraemon:/volume1/Video";
+      #     fsType = "nfs4";
+      #   };
+      #   "/mnt/cargo_video" = {
+      #     device = "cargo:/volume1/video";
+      #     fsType = "nfs4";
+      #   };
+      #   "/mnt/photo" = {
+      #     device = "cargo:/volume1/pictures";
+      #     fsType = "nfs4";
+      #   };
+      # };
     };
 
     portage = {

config/sites/seattle.nix

@@ -1,5 +1,7 @@
 { config, lib, pkgs, ... }:
 
 {
-
+  environment.systemPackages = with pkgs; [
+    hll2380dw-cups
+  ];
 }