Zhaofeng Li
b9b454820a
systemd/initrd: Add TPM modules into initrd
...
This improves the out-of-box experience of TPM2 unlocking at a
small (50K) overhead.
2022-10-05 08:22:53 -06:00
Zhaofeng Li
19c34ac44b
systemd/initrd: Add files required by TPM2 and FIDO2 support to the initramfs
2022-10-05 08:22:14 -06:00
Zhaofeng Li
570824e102
systemd: Wrap in LUKS2 tokens
...
Update pkgs/os-specific/linux/systemd/default.nix
Co-authored-by: Janne Heß <janne@hess.ooo>
Co-authored-by: Ilan Joselevich <personal@ilanjoselevich.com>
Co-authored-by: Jörg Thalheim <Mic92@users.noreply.github.com>
2022-10-05 08:22:14 -06:00
oxalica
c5c42d4fbe
nixos/systemd-stage-1: include modprobe confg in initrd
2022-09-16 20:54:04 +08:00
pennae
1d41cff3dc
nixos/*: convert straggler options to MD
2022-08-31 17:27:38 +02:00
pennae
5841c386a0
nixos/*: remove indentation from long enable options
...
the way these are written they introduce lots of whitespace in each
line, which will cause those lines to render as code when converted to
markdown. override the whole description instead.
2022-08-31 16:21:14 +02:00
Lily Foster
69d7943101
nixos/systemd-stage-1: unify initrd fstab generation logic with system fstab
2022-08-18 13:33:43 -04:00
Robert Hensing
661c29c806
Merge pull request #181222 from hercules-ci/module-specialArgs
...
`_module.specialArgs` + unit test for nixos/documentation module
2022-08-08 11:53:10 +02:00
Bernardo Meurer
5b3a9a815d
Merge pull request #185089 from NickCao/bind
...
nixos/stage-1-systemd: fix initrd-fstab generation for bind mounts
2022-08-05 14:25:11 -07:00
Nick Cao
ce39bee9dd
nixos/stage-1-systemd: fix initrd-fstab generation for bind mounts
2022-08-04 10:26:37 +08:00
K900
eabbad8af1
Merge pull request #185036 from K900/goblinization
...
make-initrd-ng: parse ELFs ourselves instead of shelling out to patchelf and friends
2022-08-03 19:57:55 +03:00
Linus Heckemann
6fc909a1cc
makeInitrdNG: make stripping fully optional
...
Now the tool will only strip binaries if a strip executable is passed
via the STRIP environment variable. This is exposed via the strip
option for makeInitrdNG and the NixOS option boot.initrd.systemd.strip.
2022-08-02 10:19:48 +03:00
github-actions[bot]
c5298a170d
Merge staging-next into staging
2022-07-27 18:02:13 +00:00
pennae
a16b25432e
Merge pull request #182685 from pennae/invariant-option-conversions
...
treewide: invariant option conversions to MD
2022-07-27 15:39:47 +02:00
pennae
860a0449ce
nixos/system: invariant option docs MD conversions
2022-07-24 13:01:47 +02:00
github-actions[bot]
dec2508b80
Merge staging-next into staging
2022-07-22 12:02:21 +00:00
K900
c9183d3738
nixos/systemd: make sure all the device nodes are created in stage1
...
The ConditionFileNotEmpty override patch wasn't correct for stage1, which
does have the modules in /lib. So, remove the patch and set
the right path with overrides in the final system.
Also, make sure systemd-tmpfiles-setup-dev is pulled in to create
all the necessary symlinks.
2022-07-22 10:01:21 +03:00
Robert Hensing
ec3e1c6a3a
nixos/documentation: Remove systemd/initrd dependency
...
Working towards a unit-testable documentation module.
2022-07-21 15:32:10 +02:00
Klemens Nanni
30c36b4706
nixos/systemd-stage-1: use types.passwdEntry in emergencyAccess
...
`boot.initrd.systemd.emergencyAccess` expects passwd(5) formatted
strings, hence `singleLineStr` is too broad.
Use the same type as `users.users.*.hashedPassword` to ensure
consistency across all options where password hashes are used.
From `modules/config/users-groups.nix`:
```
hashedPassword = mkOption {
type = with types; nullOr (passwdEntry str);
...
};
```
2022-06-25 16:34:49 +04:00
K900
5d02b86888
systemd-in-stage1: include firmware in initrd
...
duh.
2022-05-02 15:41:14 +03:00
Bernardo Meurer
78f6f77962
Merge pull request #169113 from ElvishJerricco/systemd-stage-1-installer-tests
...
nixos: Installer tests for systemd stage 1
2022-04-30 13:18:57 -07:00
Janne Heß
0411b51a00
nixos/systemd-stage-1: Remove unnecessary binaries
...
We can make the growfs and makefs binaries conditional because we know
if we'll need them. Also move the cryptsetup generator to the luksroot
so it's not included when not needed.
We drop some generators altogether: systemd-getty-generator because we
don't have getty anyway in stage 1, systemd-system-update-generator
because we don't use that logic in NixOS and
systemd-veritysetup-generator because stage 1 has no veritysetup support
(yet) and if it had, we still wouldn't want to include the generator
unconditionally.
2022-04-30 14:50:02 +02:00
Will Fancher
2e96b64e02
Merge pull request #170123 from ElvishJerricco/systemd-shutdown-ramfs-fixup
...
Systemd shutdown ramfs fixup
2022-04-28 20:17:23 -04:00
Will Fancher
69d8047516
nixos: Fix up systemd shutdown ramfs
2022-04-28 14:12:14 -04:00
Bernardo Meurer
59aa6e4988
Merge pull request #170099 from helsinki-systems/feat/systemd-stage-1-no-random-seed
...
nixos/systemd-stage-1: Get rid of random-seed
2022-04-25 14:56:45 -07:00
Janne Heß
45494fab68
nixos/systemd-stage-1: Get rid of random-seed
...
This is not used at all since the unit has
ConditionPathExists=!/etc/initrd-release
2022-04-24 21:59:59 +01:00
Janne Heß
dc4b2812e4
nixos/stage-1-systemd: Also accept packages as store paths
2022-04-24 21:47:34 +01:00
Will Fancher
9e8b463cce
nixos: Handle panic_on_fail in systemd stage 1
2022-04-17 18:31:35 -04:00
Janne Heß
b9bf28fd70
nixos/stage-1-init: Pass all parameters to the builder
...
This is for compatiblity with the old builder to get compat with uboot
support and to prepend microcode updates to the initrd
2022-04-16 20:36:18 +01:00
Janne Heß
6d6c1c341c
nixos/stage-1-systemd: Add keymap support
...
Makes my life a lot easier with my non-american keyboard layout
2022-04-14 10:25:04 +01:00
Janne Heß
aeb75b3b69
nixos/stage-1-systemd: Implement hibernation + test
2022-04-13 23:02:13 +01:00
Lassulus
65cc198539
Merge pull request #167349 from helsinki-systems/feat/udev-systemd-stage-1
...
nixos/udev: Add systemd stage 1 support
2022-04-12 21:02:52 +01:00
Janne Heß
3df2691e6b
nixos/stage-1-systemd: Handover between the systemds directly
2022-04-11 20:04:33 +01:00
Janne Heß
fb44ecd129
nixos/udev: Add systemd stage 1 support
2022-04-11 19:43:26 +01:00
Janne Heß
adab6ce552
nixos/systemd-stage-1: Minor fixups
...
- Fix the name of the env
- Add the correct kmod to the initrd
- Add `less` to make journalctl usable
- Fix SYSTEMD_SULOGIN_FORCe for rescue.target
- Add some missing binaries
2022-04-11 11:13:01 +01:00
Lassulus
b69bd66518
Merge pull request #167242 from helsinki-systems/feat/systemd-stage-1-variable-bin
...
nixos/systemd-stage-1: Softcode bin tools...
2022-04-05 09:39:19 +01:00
Janne Heß
acf089edef
nixos/systemd-stage-1: Softcode bin tools...
...
...and other cleanups and fixes
2022-04-04 22:56:31 +01:00
Lassulus
5083d22ec5
Merge pull request #167167 from helsinki-systems/feat/systemd-stage-1-less-systemd-files
...
nixos/stage-1-systemd: Limit files to the bare necessities
2022-04-04 18:25:55 +01:00
Janne Heß
41d3ca0677
nixos/systemd-stage-1: Use an own systemd package
...
We need more features than systemdMinimal but less than systemd so we
need some own packages :/
2022-04-04 18:12:45 +01:00
Janne Heß
75ece4eb82
nixos/stage-1-systemd: Limit files to the bare necessities
2022-04-04 12:54:18 +01:00
Janne Heß
4b9efea255
nixos/stage-1-systemd: Implement job scripts
2022-04-04 11:44:31 +01:00
Janne Heß
7ebb4ebe40
nixos/systemd-stage-1: Append (Initrd) to /etc/initrd-release
...
This is more in line with what dracut does (it appends "Initramfs") and
makes it clear where the boot is currently at when it hangs.
2022-04-01 13:54:09 +02:00
Janne Heß
5653209ed9
nixos/systemd-initrd: Redo object specifications
...
As requested by @roberth, we now have an option similar to
environment.etc. There's also extra store paths to copy and a way to
suppress store paths to make customizations possible.
We also link mount and umount to /bin to make recovery easier when
something fails
2022-04-01 13:26:06 +02:00
Janne Heß
c465c8d719
nixos/systemd-initrd: Make emergency access more flexible
2022-04-01 11:58:31 +02:00
Janne Heß
b7c62b8238
nixos/systemd-initrd: Remove unit options that don't work
2022-04-01 11:58:30 +02:00
Florian Klink
e3083decc4
systemd-initrd, systemd-lib: drop initrdServiceToUnit
...
We can just use serviceToUnit here.
2022-03-24 18:57:16 +01:00
Florian Klink
74bae06748
systemd-initrd: use pkgs.fakeNss, document why we need libnss_files.so
2022-03-24 18:51:32 +01:00
Will Fancher
5bfe213315
Clarify suppressed units description
2022-03-22 21:28:51 -04:00
Will Fancher
213de9b108
systemd-initrd: autoFormat and autoResize in initrd
2022-03-22 21:28:51 -04:00
Will Fancher
1abf154179
systemd-initrd: Add PATH to everything
2022-03-22 21:28:50 -04:00