646b892680
Some checks failed
Periodic Merges (6h) / master → staging-nixos (push) Failing after 12m50s
Periodic Merges (6h) / master → staging-next (push) Failing after 12m54s
Periodic Merges (24h) / merge-base(master,staging) → haskell-updates (push) Failing after 11m54s
Periodic Merges (6h) / staging-next → staging (push) Failing after 12m13s
Periodic Merges (24h) / staging-next-25.05 → staging-25.05 (push) Failing after 13m24s
Periodic Merges (24h) / release-25.05 → staging-next-25.05 (push) Failing after 14m28s
27 lines
777 B
Nix
27 lines
777 B
Nix
# This profile sets up a system for image based appliance usage. An appliance is
|
|
# installed as an image, cannot be re-built, has no Nix available, and is
|
|
# generally not meant for interactive use. Updates to such an appliance are
|
|
# handled by updating whole partition images via a tool like systemd-sysupdate.
|
|
|
|
{ lib, modulesPath, ... }:
|
|
|
|
{
|
|
|
|
# Appliances are always "minimal".
|
|
imports = [
|
|
"${modulesPath}/profiles/minimal.nix"
|
|
];
|
|
|
|
# The system cannot be rebuilt.
|
|
nix.enable = false;
|
|
system.switch.enable = false;
|
|
|
|
# The system is static.
|
|
users.mutableUsers = false;
|
|
|
|
# The system avoids interpreters as much as possible to reduce its attack
|
|
# surface.
|
|
boot.initrd.systemd.enable = lib.mkDefault true;
|
|
networking.useNetworkd = lib.mkDefault true;
|
|
}
|