NixOS - Revision history

136.159.160.123 at 17:40, 18 September 2023

2023-09-18T17:40:53Z

← Older revision		Revision as of 17:40, 18 September 2023
Line 349:		Line 349:
	mRM3zakYwCptfKWYbiaDnPqv9Vt5WnDA7xIK1rlownU=		mRM3zakYwCptfKWYbiaDnPqv9Vt5WnDA7xIK1rlownU=
	\| lang = terminal		\| lang = terminal
			}}

			=== Enable IP forwarding ===
			Add the following config:
			{{Highlight
			\| code = boot.kernel.sysctl."net.ipv4.ip_forward" = 1;
			\| lang = text
	}}		}}

2023-08-18T08:22:12Z

Enable SSH root authentication

← Older revision		Revision as of 08:22, 18 August 2023
Line 239:		Line 239:
	}}		}}

	==== Enable SSH root authentication ====		=== Enable SSH root authentication ===
	{{Highlight		{{Highlight
	\| code = services.openssh = {		\| code = services.openssh = {

2023-08-17T22:11:51Z

nixos-rebuild: line 13: exec: man: not found

← Older revision		Revision as of 22:11, 17 August 2023
Line 353:		Line 353:
	== Troubleshooting ==		== Troubleshooting ==

	== nixos-rebuild: line 13: exec: man: not found ==		=== nixos-rebuild: line 13: exec: man: not found ===
	You are using nixos-rebuild incorrectly and it's trying to show you the man page for it. But you don't have <code>man</code> installed, so instead you're getting this error.		You are using nixos-rebuild incorrectly and it's trying to show you the man page for it. But you don't have <code>man</code> installed, so instead you're getting this error.

2023-08-02T21:18:25Z

@@ Line 315: / Line 315: @@
 }}
 If you do need to use kerberos authentication, you will have to add the NFS service to the host in the FreeIPA interface (Identity -> Services -> Add) and then add the service principal to the kerberos keytab file with something like: <code>ipa-getkeytab -s ipa.home.steamr.com -p nfs/nx.home.steamr.com -k /etc/krb5.keytab</code>
 == Troubleshooting ==

2023-07-22T03:29:28Z

@@ Line 237: / Line 237: @@
 networking.defaultGateway = "192.168.1.1";
 networking.nameservers = [ "8.8.8.8" ];
 }}

2023-07-16T07:28:20Z

Join FreeIPA domain

← Older revision		Revision as of 07:28, 16 July 2023
Line 297:		Line 297:
	# You _should_ now be joined to the domain and there should be a keytab file for the machine. Verify with <code>klist -kte /etc/krb5.conf</code>		# You _should_ now be joined to the domain and there should be a keytab file for the machine. Verify with <code>klist -kte /etc/krb5.conf</code>
	# Restart sssd: <code>systemctl restart sssd</code>		# Restart sssd: <code>systemctl restart sssd</code>

			==== NFS mounts ====
			If you intend to use NFS after enabling FreeIPA (or if you have a krb5.keytab file), NixOS will try to enable the rpcgss module. If you're using NixOS in LXC, the module load will always fail since the rpcgss kernel module isn't where it thinks it is. If you don't use kerberos for mounting NFS, you can just disable the service by adding:
			{{Highlight
			\| code = systemd.services.auth-rpcgss-module.enable = false;
			\| lang = text
			}}
			If you do need to use kerberos authentication, you will have to add the NFS service to the host in the FreeIPA interface (Identity -> Services -> Add) and then add the service principal to the kerberos keytab file with something like: <code>ipa-getkeytab -s ipa.home.steamr.com -p nfs/nx.home.steamr.com -k /etc/krb5.keytab</code>

	== Troubleshooting ==		== Troubleshooting ==

2023-07-16T06:44:42Z

Join FreeIPA domain

← Older revision		Revision as of 06:44, 16 July 2023
Line 253:		Line 253:
	basedn = "dc=home,dc=steamr,dc=com";		basedn = "dc=home,dc=steamr,dc=com";
	certificate = pkgs.fetchurl {		certificate = pkgs.fetchurl {
	\| url = "http://ipa.home.steamr.com/ipa/config/ca.crt";		url = "http://ipa.home.steamr.com/ipa/config/ca.crt";
	\| sha256 = "1svxgn6mq8v1w8jqpn2jx99jwm1zfcpkzslra4mhb365f0fniw6s";		sha256 = "1svxgn6mq8v1w8jqpn2jx99jwm1zfcpkzslra4mhb365f0fniw6s";
	};		};
	};		};
Line 261:		Line 261:
	system.activationScripts.binbash = lib.stringAfter [ "stdio" ]		system.activationScripts.binbash = lib.stringAfter [ "stdio" ]
	''		''
	\| # Create the required /bin/bash symlink; User profiles use /bin/bash as their shell		# Create the required /bin/bash symlink; User profiles use /bin/bash as their shell
	\| mkdir -m 0755 -p /bin		mkdir -m 0755 -p /bin
	\| ln -sfn "${config.system.build.binsh}/bin/bash" /bin/.bash.tmp		ln -sfn "${config.system.build.binsh}/bin/bash" /bin/.bash.tmp
	\| mv /bin/.bash.tmp /bin/bash # atomically replace /bin/bash		mv /bin/.bash.tmp /bin/bash # atomically replace /bin/bash
	'';		'';
	\| lang = text		\| lang = text

2023-07-16T06:43:47Z

@@ Line 239: / Line 239: @@
 }}
 {{Navbox Linux}}[[Category:Linux]]
 [[Category:Operating_Systems]]

2023-07-14T03:39:07Z

← Older revision		Revision as of 03:39, 14 July 2023
Line 70:		Line 70:
	\| {{code\|nix-env -e '*'}}		\| {{code\|nix-env -e '*'}}
	\| Uninstalls everything from the current environment. You can recover this by running nix-env from the nix store and reinstalling the nix-env derivative or roll back the environment generation.		\| Uninstalls everything from the current environment. You can recover this by running nix-env from the nix store and reinstalling the nix-env derivative or roll back the environment generation.
			\|-
			\|<code>nix-store -q --tree /run/current-system</code>
			\|List all package dependencies
			\|-
			\|<code>nix-store --gc --print-roots</code>
			\|See what is using a dependency
	\|}		\|}

2023-07-13T21:06:34Z

@@ Line 88: / Line 88: @@
 To upgrade the system, you can add a new channel and then run {{code|nixos-rebuild switch --upgrade}}. This is equivalent to {{code|nix-channel --update nixos ; nixos-rebuild switch}}.
-Remember, users can have their own channels. Only root can update channels that will affect the entire system (and /etc/nixos/configuration.nix).
+Remember, users can have their own channels. Only root can update channels that will affect the entire system (and <code>/etc/nixos/configuration.nix</code>).
 == Installing NixOS ==
@@ Line 175: / Line 175: @@
 }}
 === User Management ===