···

       
6
       
6
       
 
       


     

       
7
       
7
       
 
       
The enabled kernel modules include support for SATA and PATA, SCSI

     

       
8
       
8
       
 
       
(partially), USB, Firewire (untested), Virtio (QEMU, KVM, etc.), VMware, and

     

       
9
       
9
       
-
       
Hyper-V. Additionally, [`hardware.enableAllFirmware`](options.html#opt-hardware.enableAllFirmware) is

     

       
9
       
9
       
+
       
Hyper-V. Additionally, [](#opt-hardware.enableAllFirmware) is

     

       
10
       
10
       
 
       
enabled, and the firmware for the ZyDAS ZD1211 chipset is specifically

     

       
11
       
11
       
 
       
installed.

     

···

       
1
       
1
       
 
       
# Demo {#sec-profile-demo}

     

       
2
       
2
       
 
       


     

       
3
       
3
       
 
       
This profile just enables a `demo` user, with password `demo`, uid `1000`, `wheel` group and

     

       
4
       
4
       
-
       
[autologin in the SDDM display manager](options.html#opt-services.xserver.displayManager.autoLogin).

     

       
4
       
4
       
+
       
[autologin in the SDDM display manager](#opt-services.xserver.displayManager.autoLogin).

     

···

       
4
       
4
       
 
       
working system by importing the [Minimal](#sec-profile-minimal) and

     

       
5
       
5
       
 
       
[Clone Config](#sec-profile-clone-config) profiles, and

     

       
6
       
6
       
 
       
setting appropriate configuration options that are useful inside a container

     

       
7
       
7
       
-
       
context, like [`boot.isContainer`](options.html#opt-boot.isContainer).

     

       
7
       
7
       
+
       
context, like [](#opt-boot.isContainer).

     

···

       
3
       
3
       
 
       
Defines a NixOS configuration with the Plasma 5 desktop. It's used by the

     

       
4
       
4
       
 
       
graphical installation CD.

     

       
5
       
5
       
 
       


     

       
6
       
6
       
-
       
It sets [`services.xserver.enable`](options.html#opt-services.xserver.enable),

     

       
7
       
7
       
-
       
[`services.xserver.displayManager.sddm.enable`](options.html#opt-services.xserver.displayManager.sddm.enable),

     

       
8
       
8
       
-
       
[`services.xserver.desktopManager.plasma5.enable`](options.html#opt-services.xserver.desktopManager.plasma5.enable),

     

       
9
       
9
       
-
       
and [`services.xserver.libinput.enable`](options.html#opt-services.xserver.libinput.enable) to true. It also

     

       
6
       
6
       
+
       
It sets [](#opt-services.xserver.enable),

     

       
7
       
7
       
+
       
[](#opt-services.xserver.displayManager.sddm.enable),

     

       
8
       
8
       
+
       
[](#opt-services.xserver.desktopManager.plasma5.enable),

     

       
9
       
9
       
+
       
and [](#opt-services.xserver.libinput.enable) to true. It also

     

       
10
       
10
       
 
       
includes glxinfo and firefox in the system packages list.

     

···

       
8
       
8
       
 
       
`/proc` filesystems. It also disables the User Namespaces

     

       
9
       
9
       
 
       
feature of the kernel, which stops Nix from being able to build anything

     

       
10
       
10
       
 
       
(this particular setting can be overriden via

     

       
11
       
11
       
-
       
[`security.allowUserNamespaces`](options.html#opt-security.allowUserNamespaces)). See the

     

       
11
       
11
       
+
       
[](#opt-security.allowUserNamespaces)). See the

     

       
12
       
12
       
 
       
[profile source](https://github.com/nixos/nixpkgs/tree/master/nixos/modules/profiles/hardened.nix)

     

       
13
       
13
       
 
       
for further detail on which settings are altered.

     

       
14
       
14
       
 
       


     

···

       
2
       
2
       
 
       


     

       
3
       
3
       
 
       
Common configuration for headless machines (e.g., Amazon EC2 instances).

     

       
4
       
4
       
 
       


     

       
5
       
5
       
-
       
Disables [sound](options.html#opt-sound.enable),

     

       
6
       
6
       
-
       
[vesa](options.html#opt-boot.vesa), serial consoles,

     

       
7
       
7
       
-
       
[emergency mode](options.html#opt-systemd.enableEmergencyMode),

     

       
8
       
8
       
-
       
[grub splash images](options.html#opt-boot.loader.grub.splashImage)

     

       
5
       
5
       
+
       
Disables [sound](#opt-sound.enable),

     

       
6
       
6
       
+
       
[vesa](#opt-boot.vesa), serial consoles,

     

       
7
       
7
       
+
       
[emergency mode](#opt-systemd.enableEmergencyMode),

     

       
8
       
8
       
+
       
[grub splash images](#opt-boot.loader.grub.splashImage)

     

       
9
       
9
       
 
       
and configures the kernel to reboot automatically on panic.

     

···

       
6
       
6
       
 
       
and a copy of the Nixpkgs channel, so `nixos-install`

     

       
7
       
7
       
 
       
works out of the box.

     

       
8
       
8
       
 
       


     

       
9
       
9
       
-
       
Documentation for [Nixpkgs](options.html#opt-documentation.enable)

     

       
10
       
10
       
-
       
and [NixOS](options.html#opt-documentation.nixos.enable) are

     

       
9
       
9
       
+
       
Documentation for [Nixpkgs](#opt-documentation.enable)

     

       
10
       
10
       
+
       
and [NixOS](#opt-documentation.nixos.enable) are

     

       
11
       
11
       
 
       
forcefully enabled (to override the

     

       
12
       
12
       
 
       
[Minimal profile](#sec-profile-minimal) preference); the

     

       
13
       
13
       
 
       
NixOS manual is shown automatically on TTY 8, udisks is disabled.

     

       
14
       
14
       
 
       
Autologin is enabled as `nixos` user, while passwordless

     

       
15
       
15
       
 
       
login as both `root` and `nixos` is possible.

     

       
16
       
16
       
 
       
Passwordless `sudo` is enabled too.

     

       
17
       
17
       
-
       
[wpa_supplicant](options.html#opt-networking.wireless.enable) is

     

       
17
       
17
       
+
       
[wpa_supplicant](#opt-networking.wireless.enable) is

     

       
18
       
18
       
 
       
enabled, but configured to not autostart.

     

       
19
       
19
       
 
       


     

       
20
       
20
       
 
       
It is explained how to login, start the ssh server, and if available,

     

···

       
2
       
2
       
 
       


     

       
3
       
3
       
 
       
This profile defines a small NixOS configuration. It does not contain any

     

       
4
       
4
       
 
       
graphical stuff. It's a very short file that enables

     

       
5
       
5
       
-
       
[noXlibs](options.html#opt-environment.noXlibs), sets

     

       
6
       
6
       
-
       
[`i18n.supportedLocales`](options.html#opt-i18n.supportedLocales) to

     

       
5
       
5
       
+
       
[noXlibs](#opt-environment.noXlibs), sets

     

       
6
       
6
       
+
       
[](#opt-i18n.supportedLocales) to

     

       
7
       
7
       
 
       
only support the user-selected locale,

     

       
8
       
8
       
-
       
[disables packages' documentation](options.html#opt-documentation.enable),

     

       
9
       
9
       
-
       
and [disables sound](options.html#opt-sound.enable).

     

       
8
       
8
       
+
       
[disables packages' documentation](#opt-documentation.enable),

     

       
9
       
9
       
+
       
and [disables sound](#opt-sound.enable).

     

···

       
9
       
9
       
 
       
    The enabled kernel modules include support for SATA and PATA, SCSI

     

       
10
       
10
       
 
       
    (partially), USB, Firewire (untested), Virtio (QEMU, KVM, etc.),

     

       
11
       
11
       
 
       
    VMware, and Hyper-V. Additionally,

     

       
12
       
12
       
-
       
    <link xlink:href="options.html#opt-hardware.enableAllFirmware"><literal>hardware.enableAllFirmware</literal></link>

     

       
13
       
13
       
-
       
    is enabled, and the firmware for the ZyDAS ZD1211 chipset is

     

       
14
       
14
       
-
       
    specifically installed.

     

       
12
       
12
       
+
       
    <xref linkend="opt-hardware.enableAllFirmware" /> is enabled, and

     

       
13
       
13
       
+
       
    the firmware for the ZyDAS ZD1211 chipset is specifically installed.

     

       
15
       
14
       
 
       
  </para>

     

       
16
       
15
       
 
       
</section>

     

···

       
4
       
4
       
 
       
    This profile just enables a <literal>demo</literal> user, with

     

       
5
       
5
       
 
       
    password <literal>demo</literal>, uid <literal>1000</literal>,

     

       
6
       
6
       
 
       
    <literal>wheel</literal> group and

     

       
7
       
7
       
-
       
    <link xlink:href="options.html#opt-services.xserver.displayManager.autoLogin">autologin

     

       
7
       
7
       
+
       
    <link linkend="opt-services.xserver.displayManager.autoLogin">autologin

     

       
8
       
8
       
 
       
    in the SDDM display manager</link>.

     

       
9
       
9
       
 
       
  </para>

     

       
10
       
10
       
 
       
</section>

     

···

       
7
       
7
       
 
       
    <link linkend="sec-profile-clone-config">Clone Config</link>

     

       
8
       
8
       
 
       
    profiles, and setting appropriate configuration options that are

     

       
9
       
9
       
 
       
    useful inside a container context, like

     

       
10
       
10
       
-
       
    <link xlink:href="options.html#opt-boot.isContainer"><literal>boot.isContainer</literal></link>.

     

       
10
       
10
       
+
       
    <xref linkend="opt-boot.isContainer" />.

     

       
11
       
11
       
 
       
  </para>

     

       
12
       
12
       
 
       
</section>

     

···

       
5
       
5
       
 
       
    by the graphical installation CD.

     

       
6
       
6
       
 
       
  </para>

     

       
7
       
7
       
 
       
  <para>

     

       
8
       
8
       
-
       
    It sets

     

       
9
       
9
       
-
       
    <link xlink:href="options.html#opt-services.xserver.enable"><literal>services.xserver.enable</literal></link>,

     

       
10
       
10
       
-
       
    <link xlink:href="options.html#opt-services.xserver.displayManager.sddm.enable"><literal>services.xserver.displayManager.sddm.enable</literal></link>,

     

       
11
       
11
       
-
       
    <link xlink:href="options.html#opt-services.xserver.desktopManager.plasma5.enable"><literal>services.xserver.desktopManager.plasma5.enable</literal></link>,

     

       
12
       
12
       
-
       
    and

     

       
13
       
13
       
-
       
    <link xlink:href="options.html#opt-services.xserver.libinput.enable"><literal>services.xserver.libinput.enable</literal></link>

     

       
14
       
14
       
-
       
    to true. It also includes glxinfo and firefox in the system packages

     

       
15
       
15
       
-
       
    list.

     

       
8
       
8
       
+
       
    It sets <xref linkend="opt-services.xserver.enable" />,

     

       
9
       
9
       
+
       
    <xref linkend="opt-services.xserver.displayManager.sddm.enable" />,

     

       
10
       
10
       
+
       
    <xref linkend="opt-services.xserver.desktopManager.plasma5.enable" />,

     

       
11
       
11
       
+
       
    and <xref linkend="opt-services.xserver.libinput.enable" /> to true.

     

       
12
       
12
       
+
       
    It also includes glxinfo and firefox in the system packages list.

     

       
16
       
13
       
 
       
  </para>

     

       
17
       
14
       
 
       
</section>

     

···

       
10
       
10
       
 
       
    <literal>/proc</literal> filesystems. It also disables the User

     

       
11
       
11
       
 
       
    Namespaces feature of the kernel, which stops Nix from being able to

     

       
12
       
12
       
 
       
    build anything (this particular setting can be overriden via

     

       
13
       
13
       
-
       
    <link xlink:href="options.html#opt-security.allowUserNamespaces"><literal>security.allowUserNamespaces</literal></link>).

     

       
14
       
14
       
-
       
    See the

     

       
13
       
13
       
+
       
    <xref linkend="opt-security.allowUserNamespaces" />). See the

     

       
15
       
14
       
 
       
    <link xlink:href="https://github.com/nixos/nixpkgs/tree/master/nixos/modules/profiles/hardened.nix">profile

     

       
16
       
15
       
 
       
    source</link> for further detail on which settings are altered.

     

       
17
       
16
       
 
       
  </para>

     

···

       
5
       
5
       
 
       
    instances).

     

       
6
       
6
       
 
       
  </para>

     

       
7
       
7
       
 
       
  <para>

     

       
8
       
8
       
-
       
    Disables

     

       
9
       
9
       
-
       
    <link xlink:href="options.html#opt-sound.enable">sound</link>,

     

       
10
       
10
       
-
       
    <link xlink:href="options.html#opt-boot.vesa">vesa</link>, serial

     

       
11
       
11
       
-
       
    consoles,

     

       
12
       
12
       
-
       
    <link xlink:href="options.html#opt-systemd.enableEmergencyMode">emergency

     

       
13
       
13
       
-
       
    mode</link>,

     

       
14
       
14
       
-
       
    <link xlink:href="options.html#opt-boot.loader.grub.splashImage">grub

     

       
8
       
8
       
+
       
    Disables <link linkend="opt-sound.enable">sound</link>,

     

       
9
       
9
       
+
       
    <link linkend="opt-boot.vesa">vesa</link>, serial consoles,

     

       
10
       
10
       
+
       
    <link linkend="opt-systemd.enableEmergencyMode">emergency

     

       
11
       
11
       
+
       
    mode</link>, <link linkend="opt-boot.loader.grub.splashImage">grub

     

       
15
       
12
       
 
       
    splash images</link> and configures the kernel to reboot

     

       
16
       
13
       
 
       
    automatically on panic.

     

       
17
       
14
       
 
       
  </para>

     

···

       
9
       
9
       
 
       
  </para>

     

       
10
       
10
       
 
       
  <para>

     

       
11
       
11
       
 
       
    Documentation for

     

       
12
       
12
       
-
       
    <link xlink:href="options.html#opt-documentation.enable">Nixpkgs</link>

     

       
13
       
13
       
-
       
    and

     

       
14
       
14
       
-
       
    <link xlink:href="options.html#opt-documentation.nixos.enable">NixOS</link>

     

       
15
       
15
       
-
       
    are forcefully enabled (to override the

     

       
12
       
12
       
+
       
    <link linkend="opt-documentation.enable">Nixpkgs</link> and

     

       
13
       
13
       
+
       
    <link linkend="opt-documentation.nixos.enable">NixOS</link> are

     

       
14
       
14
       
+
       
    forcefully enabled (to override the

     

       
16
       
15
       
 
       
    <link linkend="sec-profile-minimal">Minimal profile</link>

     

       
17
       
16
       
 
       
    preference); the NixOS manual is shown automatically on TTY 8,

     

       
18
       
17
       
 
       
    udisks is disabled. Autologin is enabled as <literal>nixos</literal>

     

       
19
       
18
       
 
       
    user, while passwordless login as both <literal>root</literal> and

     

       
20
       
19
       
 
       
    <literal>nixos</literal> is possible. Passwordless

     

       
21
       
20
       
 
       
    <literal>sudo</literal> is enabled too.

     

       
22
       
22
       
-
       
    <link xlink:href="options.html#opt-networking.wireless.enable">wpa_supplicant</link>

     

       
21
       
21
       
+
       
    <link linkend="opt-networking.wireless.enable">wpa_supplicant</link>

     

       
23
       
22
       
 
       
    is enabled, but configured to not autostart.

     

       
24
       
23
       
 
       
  </para>

     

       
25
       
24
       
 
       
  <para>

     

···

       
3
       
3
       
 
       
  <para>

     

       
4
       
4
       
 
       
    This profile defines a small NixOS configuration. It does not

     

       
5
       
5
       
 
       
    contain any graphical stuff. It’s a very short file that enables

     

       
6
       
6
       
-
       
    <link xlink:href="options.html#opt-environment.noXlibs">noXlibs</link>,

     

       
7
       
7
       
-
       
    sets

     

       
8
       
8
       
-
       
    <link xlink:href="options.html#opt-i18n.supportedLocales"><literal>i18n.supportedLocales</literal></link>

     

       
9
       
9
       
-
       
    to only support the user-selected locale,

     

       
10
       
10
       
-
       
    <link xlink:href="options.html#opt-documentation.enable">disables

     

       
11
       
11
       
-
       
    packages’ documentation</link>, and

     

       
12
       
12
       
-
       
    <link xlink:href="options.html#opt-sound.enable">disables

     

       
6
       
6
       
+
       
    <link linkend="opt-environment.noXlibs">noXlibs</link>, sets

     

       
7
       
7
       
+
       
    <xref linkend="opt-i18n.supportedLocales" /> to only support the

     

       
8
       
8
       
+
       
    user-selected locale,

     

       
9
       
9
       
+
       
    <link linkend="opt-documentation.enable">disables packages’

     

       
10
       
10
       
+
       
    documentation</link>, and <link linkend="opt-sound.enable">disables

     

       
13
       
11
       
 
       
    sound</link>.

     

       
14
       
12
       
 
       
  </para>

     

       
15
       
13
       
 
       
</section>