docs: fix stale claims and AI-flavored prose (#397)

nixos-installer/README.md

@@ -1,7 +1,7 @@
 # Nix Environment Setup for Host: Idols - Ai
 
 > :red_circle: **IMPORTANT**: **Do not deploy this flake directly on your machine.** Write your own
-> configuration from scratch and use this only as reference.\*\*
+> configuration from scratch and use this only as reference.
 
 This flake prepares a Nix environment for setting up the desktop host
 [hosts/idols-ai](../hosts/idols-ai/) (from the main flake) on a new machine.
@@ -52,6 +52,7 @@ nix run github:nix-community/disko -- --mode destroy,format,mount ../hosts/idols
 nix run github:nix-community/disko -- --mode destroy,format,mount ../hosts/idols-ai/disko-fs-data.nix
 
 # setup the automatic unlock via the tpm2 chip
+# find the LUKS partition with: lsblk -f
 systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=0+7 /dev/<encrypted-disk-part-path>
 ```
 
@@ -60,8 +61,8 @@ systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=0+7 /dev/<encrypted-disk-part
 ```bash
 sudo su
 
-# add ssh key to ssh-agent, it's required to pull my asahi=firmware
-$(ssh-agent)
+# add ssh key to ssh-agent, required to pull the my-asahi-firmware input
+eval "$(ssh-agent)"
 ssh-add /path/to/ssh-key
 
 # From nix-config/nixos-installer
@@ -109,7 +110,7 @@ After the first boot:
    ```
 
 2. Rekey secrets for the new host: follow [../secrets/README.md](../secrets/README.md) so agenix can
-   decrypt using this host’s SSH key.
+   decrypt using this host's SSH key.
 
 3. Deploy the main config:
 

nixos-installer/README.shoukei.md

@@ -217,7 +217,7 @@ Filename                                Type            Size            Used
 /mnt/swap/swapfile                      file            16777200        0               -2
 ```
 
-### 3. Generating the NixOS Configuration and Installing NixOS
+### 4. Generating the NixOS Configuration and Installing NixOS
 
 Clone this repository:
 
@@ -249,7 +249,8 @@ cd ~/nix-config/nixos-installer/
 rm -rf /mnt/etc
 
 # install nixos
-# NOTE: the root password you set here will be discarded when reboot
+# NOTE: --no-root-password leaves root locked; log in as ryan with the password from
+# vars/default.nix
 nixos-install --root /mnt --flake .#shoukei --no-root-password --show-trace --verbose # install-1
 
 # if you want to use a cache mirror, run this command instead
@@ -258,7 +259,7 @@ nixos-install --root /mnt --flake .#shoukei --no-root-password --show-trace --ve
 
 # enter into the installed system, check password & users
 # `su ryan` => `sudo -i` => enter ryan's password => successfully login
-# if login failed, check the password you set in install-1, and try again
+# if login failed, check ryan's initial password in vars/default.nix, and try again
 nixos-enter
 
 
@@ -268,6 +269,7 @@ nixos-enter
 # otherwise the / will be cleared and data will lost
 ## NOTE: preservation just create links from / to /persistent
 ##       We need to copy files into /persistent manually!!!
+mkdir -p /persistent/etc
 mv /etc/machine-id /persistent/etc/
 mv /etc/ssh /persistent/etc/
 
@@ -328,4 +330,4 @@ just niri
 Finally, to enable secure boot, follow the instructions in
 [lanzaboote - Quick Start](https://github.com/nix-community/lanzaboote/blob/master/docs/QUICK_START.md)
 and
-[nix-config/ai/secure-boot.nix](https://github.com/ryan4yin/nix-config/blob/main/hosts/idols-ai/secureboot.nix)
+[hosts/idols-ai/secureboot.nix](https://github.com/ryan4yin/nix-config/blob/main/hosts/idols-ai/secureboot.nix)

nixos-installer/flake.nix

@@ -74,6 +74,7 @@
             ../modules/nixos/base/ssh.nix
 
             ../hosts/12kingdoms-shoukei/hardware-configuration.nix
+            # shoukei reuses ai's preservation layout; no host-specific overrides yet
             ../hosts/idols-ai/preservation.nix
           ];
         };