mirror of
https://github.com/ryan4yin/nix-config.git
synced 2026-11-13 12:13:36 +01:00
ryan4yin | 二花
51261645ca
Remove a dead .gitattributes rule, bump the mirror workflow's checkout, document the daemon test settings, drop unused JACK, and align the installer's disko version.
49 lines
1.8 KiB
Nix
49 lines
1.8 KiB
Nix
{ lib, ... }:
|
|
{
|
|
# auto upgrade nix to the unstable version
|
|
# https://github.com/NixOS/nixpkgs/blob/nixos-unstable/pkgs/tools/package-management/nix/default.nix#L284
|
|
# nix.package = pkgs.nixVersions.latest;
|
|
|
|
# https://lix.systems/add-to-config/
|
|
# nix.package = pkgs.lix;
|
|
|
|
# to install chrome, you need to enable unfree packages
|
|
nixpkgs.config.allowUnfree = lib.mkDefault true;
|
|
|
|
# do garbage collection weekly to keep disk usage low
|
|
nix.gc = {
|
|
automatic = lib.mkDefault true;
|
|
dates = lib.mkDefault "weekly";
|
|
options = lib.mkDefault "--delete-older-than 7d";
|
|
};
|
|
|
|
# Manual optimise storage: nix-store --optimise
|
|
# https://nixos.org/manual/nix/stable/command-ref/conf-file.html#conf-auto-optimise-store
|
|
nix.settings = {
|
|
auto-optimise-store = true;
|
|
|
|
# Required to run nixpkgs' systemd-nspawn based NixOS tests locally (used
|
|
# by the nixpkgs-review workflow). These are daemon-wide settings, so every
|
|
# local build pays the small uid/cgroup allocation overhead; drop them if
|
|
# you stop running those tests.
|
|
# Reference: https://github.com/NixOS/nixpkgs/pull/478109
|
|
auto-allocate-uids = true;
|
|
extra-system-features = [ "uid-range" ];
|
|
experimental-features = [
|
|
"auto-allocate-uids"
|
|
"cgroups"
|
|
];
|
|
# Use extra-sandbox-paths instead of sandbox-paths here. The plain
|
|
# sandbox-paths setting replaces Nix's compiled sandbox defaults, including
|
|
# the sandbox shell that provides /bin/sh for builders with legacy shebangs.
|
|
# extra-sandbox-paths keeps those defaults and only adds the paths we need.
|
|
# After deploying, verify the effective daemon config with:
|
|
# nix config show | grep sandbox-paths
|
|
extra-sandbox-paths = [
|
|
"/dev/net"
|
|
];
|
|
};
|
|
|
|
nix.channel.enable = false; # remove nix-channel related tools & configs, we use flakes instead.
|
|
}
|