91191a2947
revert version
2025-03-20 14:01:50 +01:00
4166b4c1fb
feat: kernel modules as system extensions
2025-03-20 14:00:55 +01:00
91a5646555
fix: include uuid in sysupdate images
2025-03-19 14:03:50 +01:00
a7b86fd03e
feat: add sysupdate definitions
2025-03-19 11:32:17 +01:00
a3e2a970f8
chore: clean up
2025-03-17 16:53:45 +01:00
2c2d212e25
fix: our own derivation for the kernel in order to be able to sign modules
2025-03-13 17:27:36 +01:00
1fcccfcd7c
chore(debug-tools): add strace and binutils
2025-03-12 15:39:01 +01:00
723c7efa32
chore(debug-tools): more tools for the people 🚀
2025-03-12 14:38:28 +01:00
865d73abab
chore(debug-tools): add a couple of useful tools
2025-03-12 14:13:11 +01:00
5ecfd546f6
fix: we have to build our own openssl to use standard paths
2025-03-12 12:52:15 +01:00
4ecf8ead2a
chore: add lib for making systemd sysexts
2025-03-12 10:41:09 +01:00
12bacf271d
feat: generate passwd/group with systemd-sysusers
2025-03-04 23:51:08 +01:00
adb2e90c13
fix(image): image need to include devicemapper setup tools and udev rules
2025-03-03 16:13:30 +01:00
aa4f69d891
fix: we need to roll our own versions of tpm2-tools and tpm2-tss
2025-02-27 16:35:50 +01:00
7365ef8918
feat(image): install upstream kexec which now have support for UKIs
2025-02-26 14:40:06 +01:00
a3aab1ea5c
chore: flake nix cleanup
2025-02-25 23:09:11 +01:00
af78f1c930
feat(systemd-repart): build image
2025-02-24 16:29:53 +01:00
e7470498e5
fix: create derivation for initrd creation
2025-02-24 15:12:43 +01:00
9ff916d0a3
chore: xz compressed initrd and remove systemd patch
2025-02-24 09:27:17 +01:00
a689fa9925
chore: rootfs pkg
2025-02-21 18:44:46 +01:00
0dfda7560f
chore: add dbus-broker
2025-02-21 10:40:09 +01:00
dbd4e729de
silly uki image with the systemd-ukify tooling
2025-02-19 15:20:28 +01:00
b784c94d42
WIP: Build image from scratch / without NixOS.
...
An experiment to see if we can minimize the PatOS project even further,
and not have to adapt NixOS packages and config for our needs.
2025-02-14 13:07:01 +01:00
e34f1459c1
chore: update flake (systemd 257)
2025-01-22 11:44:42 +01:00
fa55edf0de
chore: remove openssh for now
2024-11-19 12:11:21 +01:00
902c3eddf3
Remove /home and unused top-level dirs. Make /var encrypted with tpm2.
2024-11-19 12:11:21 +01:00
9b6a5d9199
feat: add devel image
2024-11-18 23:40:49 +01:00
5ecbea5105
chore: flatten module structure
2024-11-16 16:02:27 +01:00
e585707491
chore: cleanup config and bring settings over from earlier
2024-11-16 01:02:25 +01:00
c59ea29957
Image building take 2
...
We want verity protected partitions as well as encrypted state/data along with verified boot.
This PR integrates Peter Marshall's awesome little Nixlet project as a starting point, especially the nice testing scaffolding will be super helpful! ✨
https://github.com/petm5/nixlet/
2024-11-14 19:52:34 +01:00
86cc203737
feat(systemd): add and enable systext + confext units
2024-11-11 20:38:22 +01:00
c8af180ee7
chore(nix): add squashfs tools to devshell
2024-11-10 21:38:07 +01:00
1a035e8c7c
chore(nix): fix use of deprecated devShell
2024-11-10 20:46:11 +01:00
38fdbbb048
Tweak qemu parameters
2024-11-10 14:21:21 +01:00
3f347427ed
Add experimental installer script
2024-10-23 22:06:39 +02:00
9470683ac7
More minimization work
2024-10-17 21:24:47 +02:00
d65e479bef
Add custom kernel config to shrink the image size
2024-10-13 22:51:23 +02:00
5413d6ab6b
use erofs w/zstd compression. clean up a bit.
2024-10-11 15:02:23 +02:00
6bfea7a54f
Merge branch 'main' into feat-mkupdate
2024-09-18 00:00:34 +02:00
16427e5fe3
merge from main
2024-09-17 23:23:01 +02:00
1e9c413afd
feat: initial update images
2024-09-13 09:25:45 +02:00
1013fb31ed
Add justfile
2024-09-12 22:37:31 +02:00
44d8f9c90d
PatOS is born!
2024-09-12 21:57:01 +02:00
