mirror of
https://github.com/ryan4yin/nix-config.git
synced 2026-11-13 12:13:36 +01:00
Ryan Yin
52573278bd
Hosts without Home Manager (aquamarine, the VM hosts, k3s guests) had no interpreter. The system profile is separate from the per-user one, so desktops keep their Home Manager copy in PATH. Assisted-by: DeepSeek Harness 0.2.1-rc.2 (deepseek-flash)
102 lines
4.7 KiB
Nix
102 lines
4.7 KiB
Nix
{
|
|
myvars,
|
|
outputs,
|
|
lib,
|
|
...
|
|
}:
|
|
let
|
|
eval = outputs.nixosConfigurations.aquamarine;
|
|
cfg = eval.config;
|
|
inherit (myvars.networking.hostsAddr.aquamarine) ipv4;
|
|
in
|
|
{
|
|
# A server configuration is named after the bare hostname (no `-niri`).
|
|
hostNameIsBare = cfg.networking.hostName == "aquamarine";
|
|
|
|
# The two Radeon AI PRO R9700 cards: driver and the IOMMU mode ROCm needs for multi-GPU.
|
|
amdgpuDriverLoaded = builtins.elem "amdgpu" cfg.boot.kernelModules;
|
|
iommuPassthrough = builtins.elem "iommu=pt" cfg.boot.kernelParams;
|
|
# This board's ACPI firmware cannot power the dGPU back on, and amdgpu throws
|
|
# the error away, so the card dies on its first idle resume (./ROCM.md, WA-032).
|
|
runtimePmDisabled = builtins.elem "amdgpu.runpm=0" cfg.boot.kernelParams;
|
|
|
|
# An unattended host recovers a hung card itself instead of waiting for a reboot.
|
|
gpuRecoveryEnabled = builtins.elem "amdgpu.gpu_recovery=1" cfg.boot.kernelParams;
|
|
aspmDisabled = builtins.elem "pcie_aspm=off" cfg.boot.kernelParams;
|
|
cStatesCapped = builtins.elem "processor.max_cstate=2" cfg.boot.kernelParams;
|
|
|
|
# Aqua uses native IPv6; the gateway returns real AAAA records instead of
|
|
# requiring a host-local IPv4 precedence workaround.
|
|
nativeIpv6Preference =
|
|
!(cfg.environment.etc ? "gai.conf")
|
|
|| !lib.hasInfix "precedence ::ffff:0:0/96 100" cfg.environment.etc."gai.conf".text;
|
|
|
|
# The Strata checkout lives under ~/src, which has to survive the tmpfs root
|
|
# like ~/codes does.
|
|
sourceCheckoutsPersistent = builtins.any (
|
|
d: d.directory == "/home/${myvars.username}/src"
|
|
) cfg.preservation.preserveAt."/persistent".users.${myvars.username}.directories;
|
|
|
|
# A cold flake cache re-downloads the input of a `nix run <flake-ref>` at boot.
|
|
cachePersistent = builtins.any (
|
|
d: d.directory == "/home/${myvars.username}/.cache"
|
|
) cfg.preservation.preserveAt."/persistent".users.${myvars.username}.directories;
|
|
|
|
# Directories the tmpfs root would otherwise drop.
|
|
userUnitDirsPersistent =
|
|
let
|
|
dirs = cfg.preservation.preserveAt."/persistent".users.${myvars.username}.directories;
|
|
in
|
|
builtins.all (path: builtins.any (d: d.directory == "/home/${myvars.username}/${path}") dirs) [
|
|
".config/systemd/user"
|
|
".config/containers/systemd"
|
|
];
|
|
rootlessPodmanEnabled = cfg.virtualisation.podman.enable;
|
|
|
|
# A server tracks the nixpkgs default (stable/LTS) kernel, not `-latest`.
|
|
stableKernel = cfg.boot.kernelPackages.kernel.version == eval.pkgs.linuxPackages.kernel.version;
|
|
btopShowsRadeon = cfg.modules.btop.package == eval.pkgs.btop-rocm;
|
|
# CAP_PERFMON inside the wrapper is what the i915 iGPU needs.
|
|
btopReadsIgpu = cfg.modules.btop.perfmon;
|
|
# The iGPU takes video work off the R9700s: VA-API, oneVPL and OpenCL/Level-Zero.
|
|
igpuMediaStackInstalled =
|
|
let
|
|
packageNames = map (package: package.pname or "") (cfg.hardware.graphics.extraPackages or [ ]);
|
|
in
|
|
builtins.all (name: builtins.elem name packageNames) [
|
|
"intel-media-driver"
|
|
"vpl-gpu-rt"
|
|
"intel-compute-runtime"
|
|
];
|
|
# OpenVINO's GPU plugin needs ocl-icd ahead of ROCm's clr loader (WA-038).
|
|
openvinoGpuWrapperInstalled = builtins.any (
|
|
package: (package.name or "") == "openvino-gpu"
|
|
) cfg.environment.systemPackages;
|
|
gpuMetricsExported = builtins.elem "drm" cfg.services.prometheus.exporters.node.enabledCollectors;
|
|
# node_exporter rejects a repeated flag, and this list merges with the base
|
|
# module's entries, so a duplicate restart-loops the unit.
|
|
collectorFlagsUnique =
|
|
builtins.length (cfg.services.prometheus.exporters.node.enabledCollectors)
|
|
== builtins.length (lib.unique cfg.services.prometheus.exporters.node.enabledCollectors);
|
|
inferenceUserCanRender = builtins.elem "render" cfg.users.users.${myvars.username}.extraGroups;
|
|
|
|
# Headless: no desktop session, no Home Manager.
|
|
noHomeManager = !cfg ? home-manager.users;
|
|
pythonInstalled = builtins.any (
|
|
package: lib.hasPrefix "python3-" (package.name or "")
|
|
) cfg.environment.systemPackages;
|
|
|
|
# The board renames the wired NIC with the PCIe topology, so networkd matches the
|
|
# `en*` prefix; a name-based match leaves the host without an address.
|
|
staticAddressMatchesWiredInterface =
|
|
builtins.elem "${ipv4}/24" cfg.systemd.network.networks."10-lan".networkConfig.Address
|
|
&& cfg.systemd.network.networks."10-lan".matchConfig.Name == [ "en*" ];
|
|
|
|
# Ephemeral root with the persistent volume required at boot, as on `ai`.
|
|
rootIsTmpfs = cfg.fileSystems."/".fsType or null == "tmpfs";
|
|
stateIsPersistent = cfg.fileSystems."/persistent".neededForBoot or false;
|
|
|
|
# Install step 4 of ./README.md depends on this mapper name staying put.
|
|
luksMapperNamed = builtins.attrNames cfg.boot.initrd.luks.devices == [ "aqua-luks" ];
|
|
}
|