feat(sysupdate): Download from dl.patagia.dev. Add gpg authentication.

base.nix

@@ -1,4 +1,5 @@
-{ ... }: {
+{ ... }:
+{
   imports = [
     ./modules/system_overrides.nix
     ./modules/minimize.nix
@@ -7,5 +8,6 @@
     ./modules/partitions.nix
     ./modules/network.nix
     ./modules/sysupdate.nix
+    ./modules/utils.nix
   ];
 }

justfile

@@ -14,3 +14,7 @@ build: build-image
 # Build PatOS image
 build-image:
   nix build .#patos_image
+
+run: build-image
+  qemu-efi -hda ./result/disk.qcow2
+  

modules/generic.nix

@@ -1,13 +1,24 @@
-{ pkgs, config, ... }: {
+{
+  pkgs,
+  config,
+  lib,
+  ...
+}:
+{
 
-  boot.uki.name = "patos";
-  boot.kernelParams = [ "console=ttyS0" ];
+  boot = {
+    uki.name = "patos";
+    kernelParams = [ "console=ttyS0" ];
+    initrd.systemd.enable = true;
+  };
 
-  system.nixos.release = "2024-09";
-  system.nixos.codeName = "Finn";
+  system.nixos = {
+    codeName = "Finn";
+    distroId = "patos";
+    distroName = "PatOS";
+    release = "2024-09";
+  };
 
-  system.nixos.distroId = "patos";
-  system.nixos.distroName = "PatOS";
   system.image.version = "0.0.1"; # FIXME: Use epoch version.
 
   # Make the current system version visible in the prompt.
@@ -20,8 +31,6 @@
 
   services.getty.autologinUser = "root";
 
-  boot.initrd.systemd.enable = true;
-
   # Don't accumulate crap.
   boot.tmp.cleanOnBoot = true;
   services.journald.extraConfig = ''

modules/minimize.nix

@@ -1,8 +1,10 @@
-{ modulesPath, ... }: {
+{ modulesPath, ... }:
+{
   imports = [
     "${modulesPath}/profiles/minimal.nix"
   ];
 
+  boot.enableContainers = false;
   boot.loader.grub.enable = false;
 
   system.switch.enable = false;
@@ -14,6 +16,5 @@
   system.disableInstallerTools = true;
   programs.less.lessopen = null;
   programs.command-not-found.enable = false;
-  boot.enableContainers = false;
   environment.defaultPackages = [ ];
 }

modules/partitions.nix

@@ -1,4 +1,11 @@
-{ config, pkgs, lib, modulesPath, ... }: {
+{
+  config,
+  pkgs,
+  lib,
+  modulesPath,
+  ...
+}:
+{
 
   imports = [
     "${modulesPath}/image/repart.nix"
@@ -15,16 +22,16 @@
       partitions = {
         "esp" = {
           contents = {
-            "/EFI/BOOT/BOOT${lib.toUpper efiArch}.EFI".source =
-              "${pkgs.systemd}/lib/systemd/boot/efi/systemd-boot${efiArch}.efi";
+            "/EFI/BOOT/BOOT${lib.toUpper efiArch}.EFI".source = "${pkgs.systemd}/lib/systemd/boot/efi/systemd-boot${efiArch}.efi";
 
-            "/EFI/Linux/${config.system.boot.loader.ukiFile}".source =
-              "${config.system.build.uki}/${config.system.boot.loader.ukiFile}";
+            "/EFI/Linux/${config.system.boot.loader.ukiFile}".source = "${config.system.build.uki}/${config.system.boot.loader.ukiFile}";
 
             # systemd-boot configuration
-            "/loader/loader.conf".source = (pkgs.writeText "$out" ''
-              timeout 3
-            '');
+            "/loader/loader.conf".source = (
+              pkgs.writeText "$out" ''
+                timeout 3
+              ''
+            );
           };
           repartConfig = {
             Type = "esp";
@@ -39,7 +46,7 @@
           stripNixStorePrefix = true;
           repartConfig = {
             Type = "linux-generic";
-            Label = "store_${config.system.image.version}";
+            Label = "${config.boot.uki.name}_${config.system.image.version}";
             Format = "squashfs";
             Minimize = "off";
             ReadOnly = "yes";

modules/sysupdate.nix

@@ -37,9 +37,7 @@ in
             "${config.boot.uki.name}_@v.efi.xz"
           ];
 
-          # We could fetch updates from the network as well:
-          #
-          Path = "https://images.dl.patagia.dev/";
+          Path = "https://images.dl.patagia.dev/patos/";
           Type = "url-file";
         };
         Target = {
@@ -64,7 +62,7 @@ in
           MatchPattern = [
             "${config.boot.uki.name}_@v.img.xz"
           ];
-          Path = "https://images.dl.patagia.dev/";
+          Path = "https://images.dl.patagia.dev/patos/";
           Type = "url-file";
         };
 

modules/utils.nix

@@ -0,0 +1,15 @@
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
+let
+  script = pkgs.writeShellScriptBin "patos-upgrade.sh" ''
+    systemd-sysupdate --verify=no
+    systemd-sysupdate --verify=no update --reboot
+  '';
+in
+{
+  environment.systemPackages = [ script ];
+}