Compare commits

...

4 commits

42 changed files with 134 additions and 157 deletions

View file

@ -12,7 +12,7 @@
];
config = {
impermanence.enable = osConfig.host.impermanence.enable;
impermanence.enable = osConfig.storage.impermanence.enable;
# Home Manager needs a bit of information about you and the paths it should
# manage.

View file

@ -4,7 +4,7 @@
...
}: {
config = lib.mkIf (config.impermanence.enable) {
home.persistence."/persist/home/leyla" = {
home.persistence."/persist/home" = {
directories = [
"desktop"
"downloads"
@ -14,7 +14,6 @@
".bash_history" # keep shell history around
"${config.xdg.dataHome}/recently-used.xbel" # gnome recently viewed files
];
allowOther = true;
};
};
}

19
flake.lock generated
View file

@ -147,16 +147,25 @@
}
},
"impermanence": {
"inputs": {
"home-manager": [
"home-manager"
],
"nixpkgs": [
"nixpkgs"
]
},
"locked": {
"lastModified": 1737831083,
"narHash": "sha256-LJggUHbpyeDvNagTUrdhe/pRVp4pnS6wVKALS782gRI=",
"owner": "nix-community",
"lastModified": 1762761176,
"narHash": "sha256-i3gM8fUozQrgZIbwVNlTuhLqPSl56zxAYpsQpQ9Lhro=",
"owner": "jan-leila",
"repo": "impermanence",
"rev": "4b3e914cdf97a5b536a889e939fb2fd2b043a170",
"rev": "ffbe1ca47cf4b3008c3aa5c49cdae294d8c8058a",
"type": "github"
},
"original": {
"owner": "nix-community",
"owner": "jan-leila",
"ref": "home-manager-v2",
"repo": "impermanence",
"type": "github"
}

View file

@ -36,7 +36,9 @@
# delete your darlings
impermanence = {
url = "github:nix-community/impermanence";
url = "github:jan-leila/impermanence/home-manager-v2";
inputs.nixpkgs.follows = "nixpkgs";
inputs.home-manager.follows = "home-manager";
};
nix-darwin = {

View file

@ -18,17 +18,16 @@ in {
(lib.mkIf config.impermanence.enable {
assertions = [
{
assertion = osConfig.host.impermanence.enable;
assertion = osConfig.storage.impermanence.enable;
message = "impermanence can not be enabled for a user when it is not enabled for the system";
}
];
})
# If impermanence is not enabled for this user but system impermanence is enabled,
# persist the entire home directory as fallback
(lib.mkIf (osConfig.host.impermanence.enable && !cfg.enable && cfg.fallbackPersistence.enable) {
home.persistence."/persist/home/${config.home.username}" = {
(lib.mkIf (osConfig.storage.impermanence.enable && !cfg.enable && cfg.fallbackPersistence.enable) {
home.persistence."/persist/home" = {
directories = ["."];
allowOther = true;
};
})
];

View file

@ -96,7 +96,7 @@
}
)
(lib.mkIf config.impermanence.enable {
home.persistence."/persist${config.home.homeDirectory}" = {
home.persistence."/persist/home" = {
files = lib.lists.flatten (
builtins.map (hostKey: [".ssh/${hostKey.path}" ".ssh/${hostKey.path}.pub"]) config.programs.openssh.hostKeys
);

View file

@ -1,15 +1,13 @@
{
lib,
config,
osConfig,
...
}: {
config = lib.mkIf (config.programs.anki.enable && osConfig.host.impermanence.enable) {
home.persistence."/persist${config.home.homeDirectory}" = {
config = lib.mkIf (config.programs.anki.enable && config.impermanence.enable) {
home.persistence."/persist/home" = {
directories = [
"${config.xdg.dataHome}/Anki2/"
".local/share/Anki2"
];
allowOther = true;
};
};
}

View file

@ -16,11 +16,10 @@
}
(
lib.mkIf config.impermanence.enable {
home.persistence."/persist${config.home.homeDirectory}" = {
home.persistence."/persist/home" = {
directories = [
"${config.xdg.configHome}/Bitwarden"
];
allowOther = true;
};
}
)

View file

@ -16,11 +16,10 @@
}
(
lib.mkIf config.impermanence.enable {
home.persistence."/persist${config.home.homeDirectory}" = {
home.persistence."/persist/home" = {
directories = [
"${config.xdg.configHome}/bruno/"
];
allowOther = true;
};
}
)

View file

@ -16,11 +16,10 @@
}
(
lib.mkIf config.impermanence.enable {
home.persistence."/persist${config.home.homeDirectory}" = {
home.persistence."/persist/home" = {
directories = [
"${config.xdg.configHome}/calibre"
];
allowOther = true;
};
}
)

View file

@ -16,12 +16,11 @@
}
(
lib.mkIf config.impermanence.enable {
home.persistence."/persist${config.home.homeDirectory}" = {
home.persistence."/persist/home" = {
directories = [
"${config.xdg.dataHome}/DaVinciResolve"
"${config.xdg.configHome}/blackmagic"
];
allowOther = true;
};
}
)

View file

@ -16,11 +16,10 @@
}
(
lib.mkIf config.impermanence.enable {
home.persistence."/persist${config.home.homeDirectory}" = {
home.persistence."/persist/home" = {
directories = [
"${config.xdg.dataHome}/DBeaverData/"
];
allowOther = true;
};
}
)

View file

@ -16,11 +16,10 @@
}
(
lib.mkIf config.impermanence.enable {
home.persistence."/persist${config.home.homeDirectory}" = {
home.persistence."/persist/home" = {
directories = [
"${config.xdg.configHome}/discord/"
];
allowOther = true;
};
}
)

View file

@ -22,11 +22,10 @@
# Extension configuration
".mozilla/firefox/${profile}/extension-settings.json"
];
allowOther = true;
};
in {
config = lib.mkIf (config.programs.firefox.enable && config.impermanence.enable) {
home.persistence."/persist${config.home.homeDirectory}" = lib.mkMerge (
home.persistence."/persist/home" = lib.mkMerge (
(
lib.attrsets.mapAttrsToList
(profile: _: buildProfilePersistence profile)

View file

@ -16,11 +16,10 @@
}
(
lib.mkIf config.impermanence.enable {
home.persistence."/persist${config.home.homeDirectory}" = {
home.persistence."/persist/home" = {
directories = [
"${config.xdg.configHome}/FreeCAD"
];
allowOther = true;
};
}
)

View file

@ -16,11 +16,10 @@
}
(
lib.mkIf config.impermanence.enable {
home.persistence."/persist${config.home.homeDirectory}" = {
home.persistence."/persist/home" = {
directories = [
"${config.xdg.configHome}/GIMP"
];
allowOther = true;
};
}
)

View file

@ -16,7 +16,7 @@
}
(
lib.mkIf config.impermanence.enable {
home.persistence."/persist${config.home.homeDirectory}" = {
home.persistence."/persist/home" = {
directories = [
# configuration
"${config.xdg.configHome}/JetBrains/"

View file

@ -16,11 +16,10 @@
}
(
lib.mkIf config.impermanence.enable {
home.persistence."/persist${config.home.homeDirectory}" = {
home.persistence."/persist/home" = {
directories = [
"${config.xdg.configHome}/inkscape"
];
allowOther = true;
};
}
)

View file

@ -23,12 +23,11 @@ in {
}
(
lib.mkIf config.impermanence.enable {
home.persistence."/persist${config.home.homeDirectory}" = {
home.persistence."/persist/home" = {
directories = [
"${config.xdg.configHome}/kdenliverc"
"${config.xdg.dataHome}/kdenlive"
];
allowOther = true;
};
}
)

View file

@ -16,12 +16,11 @@
}
(
lib.mkIf config.impermanence.enable {
home.persistence."/persist${config.home.homeDirectory}" = {
home.persistence."/persist/home" = {
directories = [
"${config.xdg.configHome}/kritarc"
"${config.xdg.dataHome}/krita"
];
allowOther = true;
};
}
)

View file

@ -16,11 +16,10 @@
}
(
lib.mkIf config.impermanence.enable {
home.persistence."/persist${config.home.homeDirectory}" = {
home.persistence."/persist/home" = {
directories = [
"${config.xdg.configHome}/libreoffice"
];
allowOther = true;
};
}
)

View file

@ -30,7 +30,7 @@
}
(
lib.mkIf config.impermanence.enable {
home.persistence."/persist${config.home.homeDirectory}" = {
home.persistence."/persist/home" = {
directories = [
".MakeMKV"
];

View file

@ -17,12 +17,11 @@ in {
}
(
mkIf config.impermanence.enable {
home.persistence."/persist${config.home.homeDirectory}" = {
home.persistence."/persist/home" = {
directories = [
"${config.xdg.configHome}/mapillary-uploader"
"${config.xdg.dataHome}/mapillary-uploader"
];
allowOther = true;
};
}
)

View file

@ -6,11 +6,10 @@
config = lib.mkIf config.programs.obs-studio.enable (lib.mkMerge [
(
lib.mkIf config.impermanence.enable {
home.persistence."/persist${config.home.homeDirectory}" = {
home.persistence."/persist/home" = {
directories = [
"${config.xdg.configHome}/obs-studio"
];
allowOther = true;
};
}
)

View file

@ -6,7 +6,7 @@
config = lib.mkIf config.programs.obsidian.enable (lib.mkMerge [
(
lib.mkIf config.impermanence.enable {
home.persistence."/persist${config.home.homeDirectory}" = {
home.persistence."/persist/home" = {
directories = [
"${config.xdg.configHome}/obsidian"
];

View file

@ -23,12 +23,11 @@ in {
}
(
lib.mkIf config.impermanence.enable {
home.persistence."/persist${config.home.homeDirectory}" = {
home.persistence."/persist/home" = {
directories = [
"${config.xdg.configHome}/olympus"
"${config.xdg.dataHome}/olympus"
];
allowOther = true;
};
}
)

View file

@ -16,11 +16,10 @@
}
(
lib.mkIf config.impermanence.enable {
home.persistence."/persist${config.home.homeDirectory}" = {
home.persistence."/persist/home" = {
directories = [
"${config.xdg.configHome}/OpenRGB"
];
allowOther = true;
};
}
)

View file

@ -16,11 +16,10 @@
}
(
lib.mkIf config.impermanence.enable {
home.persistence."/persist${config.home.homeDirectory}" = {
home.persistence."/persist/home" = {
directories = [
"${config.xdg.configHome}/MusicBrainz"
];
allowOther = true;
};
}
)

View file

@ -16,7 +16,7 @@
}
(
lib.mkIf config.impermanence.enable {
home.persistence."/persist${config.home.homeDirectory}" = {
home.persistence."/persist/home" = {
directories = [
"${config.xdg.configHome}/ProStudioMasters"
];

View file

@ -16,7 +16,7 @@
}
(
lib.mkIf config.impermanence.enable {
home.persistence."/persist${config.home.homeDirectory}" = {
home.persistence."/persist/home" = {
directories = [
"${config.xdg.configHome}/protonvpn"
"${config.xdg.configHome}/Proton"

View file

@ -16,7 +16,7 @@
}
(
lib.mkIf config.impermanence.enable {
home.persistence."/persist${config.home.homeDirectory}" = {
home.persistence."/persist/home" = {
directories = [
"${config.xdg.configHome}/qBittorrent"
];

View file

@ -16,11 +16,10 @@
}
(
lib.mkIf config.impermanence.enable {
home.persistence."/persist${config.home.homeDirectory}" = {
home.persistence."/persist/home" = {
directories = [
"${config.xdg.configHome}/qFlipper"
];
allowOther = true;
};
}
)

View file

@ -16,7 +16,7 @@
}
(
lib.mkIf config.impermanence.enable {
home.persistence."/persist${config.home.homeDirectory}" = {
home.persistence."/persist/home" = {
directories = [
"${config.xdg.configHome}/Signal"
];

View file

@ -18,14 +18,13 @@
}
(
lib.mkIf config.impermanence.enable {
home.persistence."/persist${config.home.homeDirectory}" = {
home.persistence."/persist/home" = {
directories = [
{
directory = "${config.xdg.dataHome}/Steam";
method = "symlink";
}
];
allowOther = true;
};
}
)

View file

@ -16,11 +16,10 @@
}
(
lib.mkIf config.impermanence.enable {
home.persistence."/persist${config.home.homeDirectory}" = {
home.persistence."/persist/home" = {
directories = [
"${config.xdg.dataHome}/torbrowser"
];
allowOther = true;
};
}
)

View file

@ -16,11 +16,10 @@
}
(
lib.mkIf config.impermanence.enable {
home.persistence."/persist${config.home.homeDirectory}" = {
home.persistence."/persist/home" = {
directories = [
"${config.xdg.configHome}/chromium"
];
allowOther = true;
};
}
)

View file

@ -16,12 +16,11 @@
}
(
lib.mkIf config.impermanence.enable {
home.persistence."/persist${config.home.homeDirectory}" = {
home.persistence."/persist/home" = {
directories = [
"${config.xdg.configHome}/via"
"${config.xdg.dataHome}/via"
];
allowOther = true;
};
}
)

View file

@ -17,7 +17,7 @@
}
(
lib.mkIf config.impermanence.enable {
home.persistence."/persist${config.home.homeDirectory}" = {
home.persistence."/persist/home" = {
directories = [
{
directory = ".vmware";
@ -28,7 +28,6 @@
method = "symlink";
}
];
allowOther = true;
};
}
)

View file

@ -80,6 +80,15 @@ in {
programs.fuse.userAllowOther = true;
fileSystems =
lib.mapAttrs' (
datasetName: dataset:
lib.nameValuePair "/${datasetName}" {
neededForBoot = true;
}
)
config.storage.impermanence.datasets;
environment.persistence =
lib.mapAttrs (datasetName: dataset: {
enable = true;
@ -101,7 +110,6 @@ in {
}) (lib.filterAttrs (_: fileConfig: fileConfig.enable) dataset.files);
})
config.storage.impermanence.datasets;
# TODO: need for boot on filesystems
}
(lib.mkIf config.storage.zfs.enable {
storage.zfs.datasets =

View file

@ -35,17 +35,19 @@
};
}
(lib.mkIf (!config.storage.impermanence.enable) {
# TODO: create datasets for systemd.services.<name>.storage.impermanence.datasets
storage.zfs.datasets = {
"persist/system/root" = {
type = "zfs_fs";
mount = {
enable = false;
mountPoint = "/";
};
snapshot = {
autoSnapshot = true;
};
storage.zfs.rootDataset = {
type = "zfs_fs";
mount = {
enable = true;
mountPoint = "/";
};
compression = "lz4";
acltype = "posixacl";
relatime = "on";
xattr = "sa";
snapshot = {
autoSnapshot = true;
blankSnapshot = true;
};
};
})
@ -70,8 +72,8 @@
storage.impermanence.datasets = {
"persist/system/root" = {
mount = {
enable = false;
mountPoint = "/";
enable = true;
mountPoint = "/persist/system/root";
};
directories = {
"/var/lib/nixos".enable = true;
@ -81,6 +83,12 @@
"/etc/machine-id".enable = true;
};
};
"persist/home" = {
mount = {
enable = true;
mountPoint = "/persist/home";
};
};
};
# TODO: home-manager.users.<user>.storage.impermanence.enable

View file

@ -14,14 +14,14 @@ args @ {lib, ...}: {name, ...}: let
owner = {
name = lib.mkOption {
type = lib.types.str;
default = "nouser";
default = "root";
};
permissions = pathPermissions;
};
group = {
name = lib.mkOption {
type = lib.types.str;
default = "nogroup";
default = "root";
};
permissions = pathPermissions;
};

View file

@ -400,74 +400,52 @@ in {
};
}
(lib.mkIf config.storage.impermanence.enable (lib.mkMerge [
(lib.mkIf config.storage.zfs.enable {
storage.zfs.datasets."persist/system/sops" = {
type = "zfs_fs";
mount = {
enable = true;
mountPoint = SOPS_AGE_KEY_DIRECTORY;
(lib.mkIf config.storage.zfs.enable (lib.mkMerge [
{
# sops age key needs to be available to pre persist for user generation
storage.zfs.datasets = lib.mkMerge [
{
"local/system/sops" = {
type = "zfs_fs";
mount = {
enable = true;
mountPoint = SOPS_AGE_KEY_DIRECTORY;
};
atime = "off";
relatime = "off";
};
}
(lib.mkMerge (
builtins.map (user: {
"local/home/${user.name}" = {
type = "zfs_fs";
mount = {
enable = true;
mountPoint = "/home/${user.name}";
};
snapshot.blankSnapshot = true;
};
})
normalUsers
))
];
# Post resume commands to rollback user home datasets to blank snapshots
boot.initrd.postResumeCommands = lib.mkAfter (
lib.strings.concatLines (builtins.map (user: "zfs rollback -r rpool/local/home/${user.name}@blank")
normalUsers)
);
# Create persist home directories with proper permissions
systemd = {
tmpfiles.rules =
builtins.map (
user: "d /persist/home/${user.name} 700 ${user.name} ${user.name} -"
)
normalUsers;
};
atime = "off";
relatime = "off";
};
})
}
]))
]))
# (lib.mkIf config.host.impermanence.enable {
# boot.initrd.postResumeCommands = lib.mkAfter (
# lib.strings.concatLines (builtins.map (user: "zfs rollback -r rpool/local/home/${user.name}@blank")
# normalUsers)
# );
# systemd = {
# tmpfiles.rules =
# builtins.map (
# user: "d /persist/home/${user.name} 700 ${user.name} ${user.name} -"
# )
# normalUsers;
# };
# fileSystems = lib.mkMerge [
# (
# builtins.listToAttrs (
# builtins.map (user:
# lib.attrsets.nameValuePair "/persist/home/${user.name}" {
# neededForBoot = true;
# })
# normalUsers
# )
# )
# (
# builtins.listToAttrs (
# builtins.map (user:
# lib.attrsets.nameValuePair "/home/${user.name}" {
# neededForBoot = true;
# })
# normalUsers
# )
# )
# ];
# host.storage.pool.extraDatasets = lib.mkMerge (
# (
# builtins.map (user: {
# "local/home/${user.name}" = {
# type = "zfs_fs";
# mountpoint = "/home/${user.name}";
# options = {
# canmount = "on";
# };
# postCreateHook = ''
# zfs snapshot rpool/local/home/${user.name}@blank
# '';
# };
# "persist/home/${user.name}" = {
# type = "zfs_fs";
# mountpoint = "/persist/home/${user.name}";
# };
# })
# normalUsers
# )
# );
# })
];
}