116 lines
3.8 KiB
Nix
116 lines
3.8 KiB
Nix
{ config, lib, pkgs, ... }:
|
|
{
|
|
virtualisation.oci-containers.containers.fedora-dracut = {
|
|
pull = "newer";
|
|
autoStart = false;
|
|
entrypoint = "bash";
|
|
image = "docker.io/fedora:latest";
|
|
cmd = [ "/data/workdir/entry.sh" ];
|
|
volumes = [
|
|
"/srv/nfs/arch/lower:/data/arch:ro"
|
|
"/var/lib/podman-dracut:/data/workdir"
|
|
"/srv/nfs/fedora/lower:/data/fedora:ro"
|
|
];
|
|
};
|
|
services = {
|
|
nfs.server = {
|
|
enable = true;
|
|
exports = let
|
|
clients."10.2.0.0/16" = [ "mp" "rw" "no_root_squash" ];
|
|
in {
|
|
"/srv/nfs/arch/root" = clients;
|
|
"/srv/nfs/fedora/root" = clients;
|
|
};
|
|
};
|
|
dnsmasq = {
|
|
enable = true;
|
|
settings = {
|
|
enable-ra = true;
|
|
no-resolv = true;
|
|
cache-size = 4096;
|
|
bogus-priv = true;
|
|
enable-tftp = true;
|
|
interface = "enp1s0";
|
|
domain-needed = true;
|
|
tftp-root = "/srv/tftp";
|
|
dhcp-boot = "grubx64.efi";
|
|
server = [ "1.1.1.2" "2606:4700:4700::1112"
|
|
"1.0.0.2" "2606:4700:4700::1002" ];
|
|
dhcp-range = [ "10.2.0.2,10.2.255.254,12h"
|
|
"fc02::2,fc02::ffff:ffff:ffff:ffff,12h" ];
|
|
};
|
|
};
|
|
};
|
|
systemd = {
|
|
tmpfiles.rules = [ "d /var/lib/podman-dracut 0755 root root -" ];
|
|
services.pxeboot = {
|
|
serviceConfig.Type = "oneshot";
|
|
#wantedBy = [ "multi-user.target" ];
|
|
path = with pkgs; [ xz e2fsprogs grub2_efi util-linux ];
|
|
script = let
|
|
resolv = pkgs.writeText "resolv.conf" ''
|
|
nameserver fc02::1
|
|
nameserver 10.2.0.1
|
|
options edns0 trust-ad
|
|
'';
|
|
entryScript = pkgs.writeText "entry.sh" ''
|
|
set -e
|
|
dnf install -y dracut-network nfs-utils
|
|
cd /data/workdir
|
|
for target in $(cd ..; ls | grep -v workdir); do
|
|
modsDir=../$target/usr/lib/modules/*
|
|
mkdir $target
|
|
cp $modsDir/vmlinuz $target
|
|
dracut -Nm "network-manager nfs" --zstd -k $modsDir \
|
|
--kver $(basename $modsDir) $target/initramfs
|
|
done
|
|
'';
|
|
grubCfg = pkgs.writeText "grub.cfg" ''
|
|
set timeout=5
|
|
#set path=(http,$net_default_server)/local/boot/pxe
|
|
set nfs="rw ip=dhcp root=nfs4:$net_default_server:/srv/nfs"
|
|
function load {
|
|
linux $path/$1/vmlinuz $nfs/$1/root $2
|
|
initrd $path/$1/initramfs
|
|
}
|
|
menuentry Arch {
|
|
load arch
|
|
}
|
|
menuentry Fedora {
|
|
load fedora selinux=0
|
|
}
|
|
'';
|
|
in ''
|
|
for distro in arch:arch/x86_64/airootfs.sfs fedora:LiveOS/squashfs.img; do
|
|
rootfs=''${distro##*:}
|
|
distro=''${distro%:*}
|
|
cd /srv/nfs/$distro
|
|
mkdir -p loop work lower upper #root -> move to tmpfiles
|
|
mountpoint -q loop || mount $distro.iso loop
|
|
mountpoint -q lower || mount loop/$rootfs lower
|
|
mountpoint -q root || mount -t overlay overlay -o workdir=work,nfs_export=on,lowerdir=lower,upperdir=upper root
|
|
if [ ! -e upper/etc/resolv.conf ]; then
|
|
cd root/etc
|
|
rm -f resolv.conf
|
|
cp ${resolv} resolv.conf
|
|
chattr +i resolv.conf
|
|
fi
|
|
done
|
|
cd /srv
|
|
#either check of tftp dir, or file in tftp, if it forced to exists through tmpfiles
|
|
if [ ! -e grubx64.efi ]; then
|
|
grub-mkstandalone -O x86_64-efi --compress=xz -o grubx64.efi #--modules=efinet /boot/grub/grub.cfg=${grubCfg}
|
|
fi
|
|
if [ ! -e pxe ]; then
|
|
mkdir pxe
|
|
cp ${entryScript} /var/lib/podman-dracut/entry.sh
|
|
systemctl --wait start podman-fedora-dracut.service
|
|
mv /var/lib/podman-dracut/*/ pxe
|
|
chmod -R 640 pxe
|
|
chgrp -R php pxe
|
|
chmod ug+x $(find pxe -type d)
|
|
fi
|
|
'';
|
|
};
|
|
};
|
|
}
|