code organization

mods/pxeboot.nix

@@ -0,0 +1,116 @@
+{ config, lib, pkgs, ... }:
+{
+  virtualisation.oci-containers.containers.fedora-dracut = {
+    pull = "newer";
+    autoStart = false;
+    entrypoint = "bash";
+    image = "docker.io/fedora:latest";
+    cmd = [ "/data/workdir/entry.sh" ];
+    volumes = [
+      "/srv/nfs/arch/lower:/data/arch:ro"
+      "/var/lib/podman-dracut:/data/workdir"
+      "/srv/nfs/fedora/lower:/data/fedora:ro"
+    ];
+  };
+  services = {
+    nfs.server = {
+      enable = true;
+      exports = let
+        clients."10.2.0.0/16" = [ "mp" "rw" "no_root_squash" ];
+      in {
+        "/srv/nfs/arch/root" = clients;
+        "/srv/nfs/fedora/root" = clients;
+      };
+    };
+    dnsmasq = {
+      enable = true;
+      settings = {
+        enable-ra = true;
+        no-resolv = true;
+        cache-size = 4096;
+        bogus-priv = true;
+        enable-tftp = true;
+        interface = "enp1s0";
+        domain-needed = true;
+        tftp-root = "/srv/tftp";
+        dhcp-boot = "grubx64.efi";
+        server = [ "1.1.1.2" "2606:4700:4700::1112"
+        "1.0.0.2" "2606:4700:4700::1002" ];
+        dhcp-range = [ "10.2.0.2,10.2.255.254,12h"
+        "fc02::2,fc02::ffff:ffff:ffff:ffff,12h" ];
+      };
+    };
+  };
+  systemd = {
+    tmpfiles.rules = [ "d /var/lib/podman-dracut 0755 root root -" ];
+    services.pxeboot = {
+      serviceConfig.Type = "oneshot";
+      #wantedBy = [ "multi-user.target" ];
+      path = with pkgs; [ xz e2fsprogs grub2_efi util-linux ];
+      script = let
+        resolv = pkgs.writeText "resolv.conf" ''
+          nameserver fc02::1
+          nameserver 10.2.0.1
+          options edns0 trust-ad
+        '';
+        entryScript = pkgs.writeText "entry.sh" ''
+          set -e
+          dnf install -y dracut-network nfs-utils
+          cd /data/workdir
+          for target in $(cd ..; ls | grep -v workdir); do
+            modsDir=../$target/usr/lib/modules/*
+            mkdir $target
+            cp $modsDir/vmlinuz $target
+            dracut -Nm "network-manager nfs" --zstd -k $modsDir \
+              --kver $(basename $modsDir) $target/initramfs
+          done
+        '';
+        grubCfg = pkgs.writeText "grub.cfg" ''
+          set timeout=5
+          #set path=(http,$net_default_server)/local/boot/pxe
+          set nfs="rw ip=dhcp root=nfs4:$net_default_server:/srv/nfs"
+          function load {
+            linux $path/$1/vmlinuz $nfs/$1/root $2
+            initrd $path/$1/initramfs
+          }
+          menuentry Arch {
+            load arch
+          }
+          menuentry Fedora {
+            load fedora selinux=0
+          }
+        '';
+      in ''
+        for distro in arch:arch/x86_64/airootfs.sfs fedora:LiveOS/squashfs.img; do
+          rootfs=''${distro##*:}
+          distro=''${distro%:*}
+          cd /srv/nfs/$distro
+          mkdir -p loop work lower upper #root -> move to tmpfiles
+          mountpoint -q loop || mount $distro.iso loop
+          mountpoint -q lower || mount loop/$rootfs lower
+          mountpoint -q root || mount -t overlay overlay -o workdir=work,nfs_export=on,lowerdir=lower,upperdir=upper root
+          if [ ! -e upper/etc/resolv.conf ]; then
+            cd root/etc
+            rm -f resolv.conf
+            cp ${resolv} resolv.conf
+            chattr +i resolv.conf
+          fi
+        done
+        cd /srv
+        #either check of tftp dir, or file in tftp, if it forced to exists through tmpfiles
+        if [ ! -e grubx64.efi ]; then
+          grub-mkstandalone -O x86_64-efi --compress=xz -o grubx64.efi #--modules=efinet /boot/grub/grub.cfg=${grubCfg}
+        fi
+        if [ ! -e pxe ]; then
+          mkdir pxe
+          cp ${entryScript} /var/lib/podman-dracut/entry.sh
+          systemctl --wait start podman-fedora-dracut.service
+          mv /var/lib/podman-dracut/*/ pxe
+          chmod -R 640 pxe
+          chgrp -R php pxe
+          chmod ug+x $(find pxe -type d)
+        fi
+      '';
+    };
+  };
+}