···

       
67
       
 
       
      mkdir /mnt

     

       
68
       
 
       
      mount $rootDisk /mnt

     

       
69
       
 
       


     

       
70
       
-
       
      # The initrd expects these directories to exist.

     

       
71
       
-
       
      mkdir /mnt/dev /mnt/proc /mnt/sys

     

       
72
       
-
       


     

       
73
       
-
       
      mount -o bind /proc /mnt/proc

     

       
74
       
-
       
      mount -o bind /dev /mnt/dev

     

       
75
       
-
       
      mount -o bind /sys /mnt/sys

     

       
76
       
-
       


     

       
77
       
-
       
      # Copy all paths in the closure to the filesystem.

     

       
78
       
-
       
      storePaths=$(perl ${pkgs.pathsFromGraph} /tmp/xchg/closure)

     

       
79
       
-
       


     

       
80
       
-
       
      mkdir -p /mnt/nix/store

     

       
81
       
-
       
      echo "copying everything (will take a while)..."

     

       
82
       
-
       
      set -f

     

       
83
       
-
       
      cp -prd $storePaths /mnt/nix/store/

     

       
84
       
-
       


     

       
85
       
 
       
      # Register the paths in the Nix database.

     

       
86
       
 
       
      printRegistration=1 perl ${pkgs.pathsFromGraph} /tmp/xchg/closure | \

     

       
87
       
-
       
          chroot /mnt ${config.nix.package.out}/bin/nix-store --load-db --option build-users-group ""

     

       
88
       
 
       


     

       
89
       
 
       
      # Add missing size/hash fields to the database. FIXME:

     

       
90
       
 
       
      # exportReferencesGraph should provide these directly.

     

       
91
       
-
       
      chroot /mnt ${config.nix.package.out}/bin/nix-store --verify --check-contents

     

       
92
       
 
       


     

       
93
       
-
       
      # Create the system profile to allow nixos-rebuild to work.

     

       
94
       
-
       
      chroot /mnt ${config.nix.package.out}/bin/nix-env --option build-users-group "" \

     

       
95
       
-
       
          -p /nix/var/nix/profiles/system --set ${config.system.build.toplevel}

     

       
96
       
 
       


     

       
97
       
-
       
      # `nixos-rebuild' requires an /etc/NIXOS.

     

       
98
       
-
       
      mkdir -p /mnt/etc

     

       
99
       
-
       
      touch /mnt/etc/NIXOS

     

       
100
       
-
       


     

       
101
       
-
       
      # `switch-to-configuration' requires a /bin/sh

     

       
102
       
-
       
      mkdir -p /mnt/bin

     

       
103
       
-
       
      ln -s ${config.system.build.binsh}/bin/sh /mnt/bin/sh

     

       
104
       
 
       


     

       
105
       
 
       
      # Install a configuration.nix.

     

       
106
       
 
       
      mkdir -p /mnt/etc/nixos

     
···

       
108
       
 
       
        cp ${configFile} /mnt/etc/nixos/configuration.nix

     

       
109
       
 
       
      ''}

     

       
110
       
 
       


     

       
111
       
-
       
      # Generate the GRUB menu.

     

       
112
       
-
       
      ln -s vda /dev/xvda

     

       
113
       
-
       
      ln -s vda /dev/sda

     

       
114
       
-
       
      ${optionalString installBootLoader "chroot /mnt ${config.system.build.toplevel}/bin/switch-to-configuration boot"}

     

       
115
       
 
       


     

       
116
       
-
       
      umount /mnt/proc /mnt/dev /mnt/sys

     

       
117
       
 
       
      umount /mnt

     

       
118
       
 
       


     

       
119
       
 
       
      # Do a fsck to make sure resize2fs works.

     

···

       
67
       
 
       
      mkdir /mnt

     

       
68
       
 
       
      mount $rootDisk /mnt

     

       
69
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
70
       
 
       
      # Register the paths in the Nix database.

     

       
71
       
 
       
      printRegistration=1 perl ${pkgs.pathsFromGraph} /tmp/xchg/closure | \

     

       
72
       
+
       
          ${config.nix.package.out}/bin/nix-store --load-db --option build-users-group ""

     

       
73
       
 
       


     

       
74
       
 
       
      # Add missing size/hash fields to the database. FIXME:

     

       
75
       
 
       
      # exportReferencesGraph should provide these directly.

     

       
76
       
+
       
      ${config.nix.package.out}/bin/nix-store --verify --check-contents --option build-users-group ""

     

       
77
       
 
       


     

       
78
       
+
       
      # In case the bootloader tries to write to /dev/sda…

     

       
79
       
+
       
      ln -s vda /dev/xvda

     

       
80
       
+
       
      ln -s vda /dev/sda

     

       
81
       
 
       


     

       
82
       
+
       
      # Install the closure onto the image

     

       
83
       
+
       
      USER=root ${config.system.build.nixos-install}/bin/nixos-install \

     

       
84
       
+
       
        --closure ${config.system.build.toplevel} \

     

       
85
       
+
       
        --no-channel-copy \

     

       
86
       
+
       
        --no-root-passwd \

     

       
87
       
+
       
        ${optionalString (!installBootLoader) "--no-bootloader"}

     

       
0
       
 
       

     

       
88
       
 
       


     

       
89
       
 
       
      # Install a configuration.nix.

     

       
90
       
 
       
      mkdir -p /mnt/etc/nixos

     
···

       
92
       
 
       
        cp ${configFile} /mnt/etc/nixos/configuration.nix

     

       
93
       
 
       
      ''}

     

       
94
       
 
       


     

       
95
       
+
       
      # Remove /etc/machine-id so that each machine cloning this image will get its own id

     

       
96
       
+
       
      rm -f /mnt/etc/machine-id

     

       
0
       
 
       

     

       
0
       
 
       

     

       
97
       
 
       


     

       
0
       
 
       

     

       
98
       
 
       
      umount /mnt

     

       
99
       
 
       


     

       
100
       
 
       
      # Do a fsck to make sure resize2fs works.

     

···

       
24
       
 
       
# Parse the command line for the -I flag

     

       
25
       
 
       
extraBuildFlags=()

     

       
26
       
 
       
chrootCommand=(/run/current-system/sw/bin/bash)

     

       
0
       
 
       

     

       
27
       
 
       


     

       
28
       
 
       
while [ "$#" -gt 0 ]; do

     

       
29
       
 
       
    i="$1"; shift 1

     
···

       
42
       
 
       
            ;;

     

       
43
       
 
       
        --closure)

     

       
44
       
 
       
            closure="$1"; shift 1

     

       
0
       
 
       

     

       
45
       
 
       
            ;;

     

       
46
       
 
       
        --no-channel-copy)

     

       
47
       
 
       
            noChannelCopy=1

     
···

       
100
       
 
       
mount -t tmpfs -o "mode=0755" none $mountPoint/var/setuid-wrappers

     

       
101
       
 
       
rm -rf $mountPoint/var/run

     

       
102
       
 
       
ln -s /run $mountPoint/var/run

     

       
103
       
-
       
rm -f $mountPoint/etc/{resolv.conf,hosts}

     

       
104
       
-
       
cp -Lf /etc/resolv.conf /etc/hosts $mountPoint/etc/

     

       
105
       
 
       


     

       
106
       
 
       
cp -Lf "@cacert@" "$mountPoint/tmp/ca-cert.crt"

     

       
107
       
 
       
export SSL_CERT_FILE=/tmp/ca-cert.crt

     
···

       
141
       
 
       
    $mountPoint/nix/var/log/nix/drvs

     

       
142
       
 
       


     

       
143
       
 
       
mkdir -m 1775 -p $mountPoint/nix/store

     

       
144
       
-
       
chown root:@nixbld_gid@ $mountPoint/nix/store

     

       
145
       
 
       


     

       
146
       
 
       


     

       
147
       
 
       
# There is no daemon in the chroot.

     
···

       
155
       
 
       


     

       
156
       
 
       


     

       
157
       
 
       
# Builds will use users that are members of this group

     

       
158
       
-
       
extraBuildFlags+=(--option "build-users-group" "nixbld")

     

       
159
       
 
       


     

       
160
       
 
       


     

       
161
       
 
       
# Inherit binary caches from the host

     

       
162
       
 
       
binary_caches="$(@perl@/bin/perl -I @nix@/lib/perl5/site_perl/*/* -e 'use Nix::Config; Nix::Config::readConfig; print $Nix::Config::config{"binary-caches"};')"

     

       
163
       
 
       
extraBuildFlags+=(--option "binary-caches" "$binary_caches")

     

       
164
       
-
       


     

       
165
       
-
       


     

       
166
       
-
       
touch $mountPoint/etc/passwd $mountPoint/etc/group

     

       
167
       
-
       
mount --bind -o ro /etc/passwd $mountPoint/etc/passwd

     

       
168
       
-
       
mount --bind -o ro /etc/group $mountPoint/etc/group

     

       
169
       
 
       


     

       
170
       
 
       


     

       
171
       
 
       
# Copy Nix to the Nix store on the target device, unless it's already there.

     
···

       
246
       
 
       


     

       
247
       
 
       


     

       
248
       
 
       
# Get rid of the /etc bind mounts.

     

       
249
       
-
       
umount $mountPoint/etc/passwd $mountPoint/etc/group

     

       
250
       
 
       


     

       
251
       
 
       


     

       
252
       
 
       
# Grub needs an mtab.

     

···

       
24
       
 
       
# Parse the command line for the -I flag

     

       
25
       
 
       
extraBuildFlags=()

     

       
26
       
 
       
chrootCommand=(/run/current-system/sw/bin/bash)

     

       
27
       
+
       
buildUsersGroup="nixbld"

     

       
28
       
 
       


     

       
29
       
 
       
while [ "$#" -gt 0 ]; do

     

       
30
       
 
       
    i="$1"; shift 1

     
···

       
43
       
 
       
            ;;

     

       
44
       
 
       
        --closure)

     

       
45
       
 
       
            closure="$1"; shift 1

     

       
46
       
+
       
            buildUsersGroup=""

     

       
47
       
 
       
            ;;

     

       
48
       
 
       
        --no-channel-copy)

     

       
49
       
 
       
            noChannelCopy=1

     
···

       
102
       
 
       
mount -t tmpfs -o "mode=0755" none $mountPoint/var/setuid-wrappers

     

       
103
       
 
       
rm -rf $mountPoint/var/run

     

       
104
       
 
       
ln -s /run $mountPoint/var/run

     

       
105
       
+
       
for f in /etc/resolv.conf /etc/hosts; do rm -f $mountPoint/$f; [ -f "$f" ] && cp -Lf $f $mountPoint/etc/; done

     

       
106
       
+
       
for f in /etc/passwd /etc/group;      do touch $mountPoint/$f; [ -f "$f" ] && mount --rbind -o ro $f $mountPoint/$f; done

     

       
107
       
 
       


     

       
108
       
 
       
cp -Lf "@cacert@" "$mountPoint/tmp/ca-cert.crt"

     

       
109
       
 
       
export SSL_CERT_FILE=/tmp/ca-cert.crt

     
···

       
143
       
 
       
    $mountPoint/nix/var/log/nix/drvs

     

       
144
       
 
       


     

       
145
       
 
       
mkdir -m 1775 -p $mountPoint/nix/store

     

       
146
       
+
       
chown @root_uid@:@nixbld_gid@ $mountPoint/nix/store

     

       
147
       
 
       


     

       
148
       
 
       


     

       
149
       
 
       
# There is no daemon in the chroot.

     
···

       
157
       
 
       


     

       
158
       
 
       


     

       
159
       
 
       
# Builds will use users that are members of this group

     

       
160
       
+
       
extraBuildFlags+=(--option "build-users-group" "$buildUsersGroup")

     

       
161
       
 
       


     

       
162
       
 
       


     

       
163
       
 
       
# Inherit binary caches from the host

     

       
164
       
 
       
binary_caches="$(@perl@/bin/perl -I @nix@/lib/perl5/site_perl/*/* -e 'use Nix::Config; Nix::Config::readConfig; print $Nix::Config::config{"binary-caches"};')"

     

       
165
       
 
       
extraBuildFlags+=(--option "binary-caches" "$binary_caches")

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
166
       
 
       


     

       
167
       
 
       


     

       
168
       
 
       
# Copy Nix to the Nix store on the target device, unless it's already there.

     
···

       
243
       
 
       


     

       
244
       
 
       


     

       
245
       
 
       
# Get rid of the /etc bind mounts.

     

       
246
       
+
       
for f in /etc/passwd /etc/group; do [ -f "$f" ] && umount $mountPoint/$f; done

     

       
247
       
 
       


     

       
248
       
 
       


     

       
249
       
 
       
# Grub needs an mtab.

     

···

       
24
       
 
       
    inherit (pkgs) perl pathsFromGraph rsync;

     

       
25
       
 
       
    nix = config.nix.package.out;

     

       
26
       
 
       
    cacert = "${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt";

     

       
0
       
 
       

     

       
27
       
 
       
    nixbld_gid = config.ids.gids.nixbld;

     

       
28
       
 
       


     

       
29
       
 
       
    nixClosure = pkgs.runCommand "closure"

     

···

       
24
       
 
       
    inherit (pkgs) perl pathsFromGraph rsync;

     

       
25
       
 
       
    nix = config.nix.package.out;

     

       
26
       
 
       
    cacert = "${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt";

     

       
27
       
+
       
    root_uid = config.ids.uids.root;

     

       
28
       
 
       
    nixbld_gid = config.ids.gids.nixbld;

     

       
29
       
 
       


     

       
30
       
 
       
    nixClosure = pkgs.runCommand "closure"