generation 570 25.11.20250714.62e0f05

extras/k3s-node.nix

@@ -31,10 +31,6 @@
 
   boot.kernelModules = ["rbd" "nbd" "ceph"];
 
-  # Make Ceph user-space tools available on the system
-  environment.systemPackages = with pkgs; [
-  ];
-
   networking.firewall.enable = false;
   # networking.firewall.allowedTCPPorts = [
   # 6443 # k3s: required so that pods can reach the API server (running on port 6443 by default)

extras/k3s.nix

@@ -29,6 +29,8 @@
     };
   };
 
+  boot.kernelModules = ["rbd" "nbd"];
+
   environment.systemPackages = with pkgs; [
     kubernetes-helm
   ];

flake.lock

@@ -157,17 +157,17 @@
     },
     "nixpkgs-signal": {
       "locked": {
-        "lastModified": 1760284886,
-        "narHash": "sha256-TK9Kr0BYBQ/1P5kAsnNQhmWWKgmZXwUQr4ZMjCzWf2c=",
+        "lastModified": 1767640445,
+        "narHash": "sha256-UWYqmD7JFBEDBHWYcqE6s6c77pWdcU/i+bwD6XxMb8A=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "cf3f5c4def3c7b5f1fc012b3d839575dbe552d43",
+        "rev": "9f0c42f8bc7151b8e7e5840fb3bd454ad850d8c5",
         "type": "github"
       },
       "original": {
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "cf3f5c4def3c7b5f1fc012b3d839575dbe552d43",
+        "rev": "9f0c42f8bc7151b8e7e5840fb3bd454ad850d8c5",
         "type": "github"
       }
     },

flake.nix

@@ -18,8 +18,8 @@
     nixpkgs-clisp.url = "github:NixOS/nixpkgs/da320e5472f021b96a883f71fc525ca0e4815273";
 
     # pin only signal versions jake likes. recall, you must back up .config/Signal when changing this
-    # this ver includes triple ratchet
-    nixpkgs-signal.url = "github:NixOS/nixpkgs/cf3f5c4def3c7b5f1fc012b3d839575dbe552d43";
+    # this version includes: triple ratchet iirc
+    nixpkgs-signal.url = "github:NixOS/nixpkgs/9f0c42f8bc7151b8e7e5840fb3bd454ad850d8c5";
 
     verus-flake.url = "github:JakeGinesin/verus-flake";
   };

home/home.nix

@@ -149,6 +149,8 @@ in {
       nuclei
       subfinder
       hcxtools
+      binwalk
+      lz4
     ]
     ++ (
       with lib; let

home/programs/firefox/startpage/index.html

@@ -21,7 +21,7 @@
           <div id="date"></div>
           
           <div class="search">
-            <form action="https://tanomu.momiko.moe" method="get" autocomplete="off">
+            <form action="https://duckduckgo.com" method="get" autocomplete="off">
               <label for="q">></label>
               <input autofocus id="q" name="q" placeholder="search.." type="search">
             </form>

home/programs/zsh/zshrc

@@ -222,6 +222,7 @@ alias verus-dir="cd /home/synchronous/code/verus"
 alias cure="cd /home/synchronous/code/cure53"
 alias scripts="cd /home/synchronous/nix-cfg/home/scripts"
 alias bookmarks="vim -c '80' /home/synchronous/nix-cfg/home/programs/firefox/default.nix"
+alias startpage="vim /home/synchronous/nix-cfg/home/programs/firefox/startpage/index.html"
 
 stack() {
   find . -type f -exec echo -e "\n--- {} ---\n" \; -exec cat {} \;

system/services/remote-builds.nix

@@ -0,0 +1,24 @@
+{
+  config,
+  pkgs,
+  ...
+}: {
+  nix.distributedBuilds = true;
+  # nix.extraOptions = ''
+  # builders-use-substitutes = true
+  # '';
+
+  nix.buildMachines = [
+    {
+      hostName = "server3-gpu"; # Must be resolvable or an IP
+      system = "x86_64-linux"; # The architecture of the builder
+      protocol = "ssh-ng"; # Optimized protocol
+      maxJobs = 4;
+      speedFactor = 2;
+      supportedFeatures = ["nixos-test" "benchmark" "big-parallel" "kvm"];
+      mandatoryFeatures = [];
+      sshUser = "synchronous";
+      sshKey = "/home/synchronous/.ssh/id_ed25519"; # Path to private key on client
+    }
+  ];
+}

system/services/services.nix

@@ -10,5 +10,6 @@
     # ./resolved/default.nix (not enabled, in favor of dnsmasq)
     ./dnsmasq/default.nix
     ./printing.nix
+    ./remote-builds.nix
   ];
 }

system/system-server.nix

@@ -59,6 +59,8 @@
     plugins."io.containerd.grpc.v1.cri".registry.configs."100.125.181.75:5000".tls.insecure_skip_verify = true;
   };
 
+  nix.settings.trusted-users = ["synchronous" "root"];
+
   programs.nix-ld.enable = true;
 
   virtualisation.libvirtd.enable = true;

system/system.nix

@@ -80,6 +80,8 @@
     #media-session.enable = true;
   };
 
+  nix.settings.trusted-users = ["synchronous" "root"];
+
   security.sudo = {
     # me ne frego. i dare you to privilege escalate me
     enable = true;