mirror of
https://github.com/elitak/nixos-infect.git
synced 2024-12-22 16:18:29 +03:00
Add instructions on how to install NixOS on Media Temple
This commit is contained in:
Gasper Vozel
parent
36e19e3b30
commit
d5abe77e22
3 changed files with 250 additions and 0 deletions
168
MediaTemple/README.md
Normal file
168
MediaTemple/README.md
Normal file
|
|
@ -0,0 +1,168 @@
|
|||
# NixOS on Media Temple
|
||||
|
||||
On Media Temple we can install NixOS on Ubuntu servers by using a custom infect script.
|
||||
|
||||
## Add a new server
|
||||
|
||||
1. Click on `Add New Service` and select `Self Managed VPS`.
|
||||
1. Select appropriate server resources (e.g. 2 CPU, 4GB RAM and 100GB storage) and tick `No control panel`.
|
||||
1. After order has been processed you will need to finish the installation (selecting Ubuntu
|
||||
version, setting username and password)
|
||||
|
||||
## Infect Ubuntu 20.04
|
||||
|
||||
After executing the infect script (`bash infect.sh`) you will need to modify the
|
||||
`hardware-configuration.nix` file. The script will stop and you will need to do it
|
||||
manually. You will need to remove all `squashfs` and `vfat` (efi boot) entries.
|
||||
The automatically generated config will look something like this:
|
||||
|
||||
```
|
||||
# Do not modify this file! It was generated by ‘nixos-generate-config’
|
||||
# and may be overwritten by future invocations. Please make changes
|
||||
# to /etc/nixos/configuration.nix instead.
|
||||
{ config, lib, pkgs, modulesPath, ... }:
|
||||
|
||||
{
|
||||
imports =
|
||||
[ (modulesPath + "/profiles/qemu-guest.nix")
|
||||
];
|
||||
|
||||
boot.initrd.availableKernelModules = [ "ata_piix" "virtio_pci" "virtio_scsi" ];
|
||||
boot.initrd.kernelModules = [ ];
|
||||
boot.kernelModules = [ ];
|
||||
boot.extraModulePackages = [ ];
|
||||
|
||||
fileSystems."/" =
|
||||
{ device = "/dev/disk/by-uuid/e46da1b8-55a0-4df9-842e-8d80c3a22ffc";
|
||||
fsType = "ext4";
|
||||
};
|
||||
|
||||
fileSystems."/snap/snapd/12883" =
|
||||
{ device = "/var/lib/snapd/snaps/snapd_12883.snap";
|
||||
fsType = "squashfs";
|
||||
options = [ "loop" ];
|
||||
};
|
||||
|
||||
fileSystems."/snap/core20/1081" =
|
||||
{ device = "/var/lib/snapd/snaps/core20_1081.snap";
|
||||
fsType = "squashfs";
|
||||
options = [ "loop" ];
|
||||
};
|
||||
|
||||
fileSystems."/boot/efi" =
|
||||
{ device = "/dev/disk/by-uuid/7341-10DC";
|
||||
fsType = "vfat";
|
||||
};
|
||||
|
||||
fileSystems."/snap/lxd/21545" =
|
||||
{ device = "/var/lib/snapd/snaps/lxd_21545.snap";
|
||||
fsType = "squashfs";
|
||||
options = [ "loop" ];
|
||||
};
|
||||
|
||||
fileSystems."/snap/snapd/14549" =
|
||||
{ device = "/var/lib/snapd/snaps/snapd_14549.snap";
|
||||
fsType = "squashfs";
|
||||
options = [ "loop" ];
|
||||
};
|
||||
|
||||
fileSystems."/snap/core20/1270" =
|
||||
{ device = "/var/lib/snapd/snaps/core20_1270.snap";
|
||||
fsType = "squashfs";
|
||||
options = [ "loop" ];
|
||||
};
|
||||
|
||||
fileSystems."/snap/lxd/21835" =
|
||||
{ device = "/var/lib/snapd/snaps/lxd_21835.snap";
|
||||
fsType = "squashfs";
|
||||
options = [ "loop" ];
|
||||
};
|
||||
|
||||
swapDevices = [ ];
|
||||
|
||||
}
|
||||
```
|
||||
It's also recommended to name `fileSystem."/"` device to `/dev/sda3` in case the server
|
||||
gets relocated (disk UUID will change) and add `nvme` to `boot.initrd.kernelModules`.
|
||||
|
||||
How do I know it's `/dev/sda3` and not e.g. sda1 or sda2? Run `lsblk` and you will see
|
||||
the correct pact. In our case:
|
||||
|
||||
```
|
||||
root@ip:~# lsblk
|
||||
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
|
||||
loop0 7:0 0 32.3M 1 loop /snap/snapd/12883
|
||||
loop1 7:1 0 61.8M 1 loop /snap/core20/1081
|
||||
loop2 7:2 0 67.3M 1 loop /snap/lxd/21545
|
||||
loop3 7:3 0 43.4M 1 loop /snap/snapd/14549
|
||||
loop4 7:4 0 61.9M 1 loop /snap/core20/1270
|
||||
loop5 7:5 0 67.2M 1 loop /snap/lxd/21835
|
||||
sda 8:0 0 100G 0 disk
|
||||
├─sda1 8:1 0 4M 0 part
|
||||
├─sda2 8:2 0 106M 0 part /boot/efi
|
||||
└─sda3 8:3 0 99.9G 0 part /
|
||||
```
|
||||
|
||||
Optional:
|
||||
- Add a bit of swap.
|
||||
- Mount `/dev/sda2` partition on `/boot`
|
||||
|
||||
After you remove all the `squashfs` and the efi boot entries you will be left with:
|
||||
|
||||
```
|
||||
# Do not modify this file! It was generated by ‘nixos-generate-config’
|
||||
# and may be overwritten by future invocations. Please make changes
|
||||
# to /etc/nixos/configuration.nix instead.
|
||||
{ config, lib, pkgs, modulesPath, ... }:
|
||||
|
||||
{
|
||||
imports = [ ];
|
||||
|
||||
boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "xen_blkfront" ];
|
||||
boot.initrd.kernelModules = [ "nvme" ];
|
||||
boot.kernelModules = [ ];
|
||||
boot.extraModulePackages = [ ];
|
||||
|
||||
fileSystems."/" =
|
||||
{ device = "/dev/sda3";
|
||||
fsType = "ext4";
|
||||
};
|
||||
|
||||
fileSystems."/boot" =
|
||||
{ device = "/dev/sda2";
|
||||
fsType = "vfat";
|
||||
};
|
||||
|
||||
swapDevices = [
|
||||
{
|
||||
device = "/swapfile";
|
||||
size = 1024;
|
||||
priority = 0;
|
||||
}
|
||||
];
|
||||
|
||||
}
|
||||
```
|
||||
|
||||
The last few lines of infect output will look something like this:
|
||||
|
||||
```
|
||||
perl: warning: Setting locale failed.
|
||||
perl: warning: Please check that your locale settings:
|
||||
LANGUAGE = (unset),
|
||||
LC_ALL = "en_US.UTF-8",
|
||||
LC_CTYPE = "UTF-8",
|
||||
LANG = "C.UTF-8"
|
||||
are supported and installed on your system.
|
||||
perl: warning: Falling back to a fallback locale ("C.UTF-8").
|
||||
updating GRUB 2 menu...
|
||||
installing the GRUB 2 boot loader on /dev/sda...
|
||||
Installing for i386-pc platform.
|
||||
/nix/store/jx1qj6fh98fnifslhllpcaqaia2nhxz5-grub-2.06/sbin/grub-install: warning: cannot open directory `/nix/store/jx1qj6fh98fnifslhllpcaqaia2nhxz5-grub-2.06/share/locale': No such file or directory.
|
||||
Installation finished. No error reported.
|
||||
```
|
||||
|
||||
Verify `/etc/nixos/*.nix` config files and make sure they are correct (especially IPs in
|
||||
`configuration.nix`).
|
||||
|
||||
After reboot, you should be able to SSH to the server.
|
||||
40
MediaTemple/configuration.nix
Normal file
40
MediaTemple/configuration.nix
Normal file
|
|
@ -0,0 +1,40 @@
|
|||
{ pkgs, ... }: {
|
||||
imports = [
|
||||
./hardware-configuration.nix
|
||||
# Including this by default now to avoid potential problems with missing kernel modules
|
||||
<nixpkgs/nixos/modules/profiles/all-hardware.nix>
|
||||
];
|
||||
boot.loader.grub.device = "/dev/sda";
|
||||
networking.useDHCP = false;
|
||||
networking.enableIPv6 = false;
|
||||
networking.interfaces.ens3.useDHCP = false;
|
||||
networking.defaultGateway = "169.254.0.1";
|
||||
networking.nameservers = [ "1.1.1.1" "1.0.0.1" ];
|
||||
networking.interfaces.ens3 = {
|
||||
ipv4.addresses = [
|
||||
{ address = "1.2.3.4"; prefixLength = 32; } # Primary IP
|
||||
{ address = "1.2.3.5"; prefixLength = 32; } # Secondary IP
|
||||
];
|
||||
ipv4.routes = [{
|
||||
address = "169.254.0.1"; # IP of the gateway
|
||||
prefixLength = 32;
|
||||
}];
|
||||
};
|
||||
|
||||
services.openssh = {
|
||||
enable = true;
|
||||
permitRootLogin = "prohibit-password";
|
||||
passwordAuthentication = false;
|
||||
};
|
||||
|
||||
# Set initial root password in case we need to use the rescue console.
|
||||
# IMPORTANT: change the password!
|
||||
users.users.root.initialPassword = "secret";
|
||||
|
||||
# IMPORTANT: replace with your own key(s)!
|
||||
users.users.root.openssh.authorizedKeys.keys = [
|
||||
"ssh-rsa AAAAB3NzaC1yc2EAAAAD..."
|
||||
];
|
||||
|
||||
system.stateVersion = "21.05";
|
||||
}
|
||||
42
MediaTemple/infect.sh
Normal file
42
MediaTemple/infect.sh
Normal file
|
|
@ -0,0 +1,42 @@
|
|||
#!/usr/bin/env bash
|
||||
set -e -o pipefail
|
||||
|
||||
# Add build group and user
|
||||
groupadd nixbld -g 30000 || true
|
||||
for i in {1..10}; do
|
||||
useradd -c "Nix build user $i" -d /var/empty -g nixbld -G nixbld -M -N -r -s "$(which nologin)" "nixbld$i" || true
|
||||
done
|
||||
|
||||
# Install NixOS
|
||||
curl -L https://nixos.org/nix/install | sh
|
||||
. /root/.nix-profile/etc/profile.d/nix.sh
|
||||
nix-channel --add https://nixos.org/channels/nixos-21.05 nixpkgs
|
||||
nix-channel --update
|
||||
|
||||
# Install NixOS installation tools, TODO: Make nicer
|
||||
nix-env -iE "_: with import <nixpkgs/nixos> { configuration = {}; }; with config.system.build; [ nixos-generate-config ]"
|
||||
|
||||
# Set up configurations and install it in a profile
|
||||
nixos-generate-config
|
||||
echo "---"
|
||||
echo "Remove the lxcfs (on Ubuntu 16.04) or squashfs (on Ubuntu 20.04 and 21.04) entry with nano"
|
||||
sleep 5
|
||||
nano /etc/nixos/hardware-configuration.nix
|
||||
cp configuration.nix /etc/nixos
|
||||
nix-env -p /nix/var/nix/profiles/system -f '<nixpkgs/nixos>' -I nixos-config=/etc/nixos/configuration.nix -iA system
|
||||
|
||||
# Set NixOS to boot and replace the original distro
|
||||
touch /etc/NIXOS
|
||||
cat > /etc/NIXOS_LUSTRATE <<EOF
|
||||
etc/nixos
|
||||
root/.nix-defexpr/channels
|
||||
EOF
|
||||
|
||||
# Switch to NixOS OS
|
||||
/nix/var/nix/profiles/system/bin/switch-to-configuration boot
|
||||
|
||||
echo "---"
|
||||
echo "Verify all the settings and check if there were any problematic errors."
|
||||
echo "If everything is OK, reboot"
|
||||
echo ""
|
||||
echo "Keep in mind that you have to deal with /old-root after reboot"
|
||||
Loading…
Reference in a new issue