···

       
473
       
 
       
    }

     

       
474
       
 
       


     

       
475
       
 
       
    # Don't emit tmpfs entry for /tmp, because it most likely comes from the

     

       
476
       
-
       
    # boot.tmpOnTmpfs option in configuration.nix (managed declaratively).

     

       
477
       
 
       
    next if ($mountPoint eq "/tmp" && $fsType eq "tmpfs");

     

       
478
       
 
       


     

       
479
       
 
       
    # Emit the filesystem.

     

···

       
473
       
 
       
    }

     

       
474
       
 
       


     

       
475
       
 
       
    # Don't emit tmpfs entry for /tmp, because it most likely comes from the

     

       
476
       
+
       
    # boot.tmp.useTmpfs option in configuration.nix (managed declaratively).

     

       
477
       
 
       
    next if ($mountPoint eq "/tmp" && $fsType eq "tmpfs");

     

       
478
       
 
       


     

       
479
       
 
       
    # Emit the filesystem.

     

···

       
3
       
 
       
with lib;

     

       
4
       
 
       


     

       
5
       
 
       
let

     

       
6
       
-
       
  cfg = config.boot;

     

       
7
       
 
       
in

     

       
8
       
 
       
{

     

       
9
       
-
       


     

       
10
       
-
       
  ###### interface

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
11
       
 
       


     

       
12
       
 
       
  options = {

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
13
       
 
       


     

       
14
       
-
       
    boot.cleanTmpDir = mkOption {

     

       
15
       
-
       
      type = types.bool;

     

       
16
       
-
       
      default = false;

     

       
17
       
-
       
      description = lib.mdDoc ''

     

       
18
       
-
       
        Whether to delete all files in {file}`/tmp` during boot.

     

       
19
       
-
       
      '';

     

       
20
       
-
       
    };

     

       
0
       
 
       

     

       
21
       
 
       


     

       
22
       
-
       
    boot.tmpOnTmpfs = mkOption {

     

       
23
       
-
       
      type = types.bool;

     

       
24
       
-
       
      default = false;

     

       
25
       
-
       
      description = lib.mdDoc ''

     

       
26
       
-
       
         Whether to mount a tmpfs on {file}`/tmp` during boot.

     

       
27
       
-
       
      '';

     

       
28
       
-
       
    };

     

       
29
       
 
       


     

       
30
       
-
       
    boot.tmpOnTmpfsSize = mkOption {

     

       
31
       
-
       
      type = types.oneOf [ types.str types.types.ints.positive ];

     

       
32
       
-
       
      default = "50%";

     

       
33
       
-
       
      description = lib.mdDoc ''

     

       
34
       
-
       
        Size of tmpfs in percentage.

     

       
35
       
-
       
        Percentage is defined by systemd.

     

       
36
       
-
       
      '';

     

       
37
       
 
       
    };

     

       
38
       
-
       


     

       
39
       
 
       
  };

     

       
40
       
 
       


     

       
41
       
-
       
  ###### implementation

     

       
42
       
-
       


     

       
43
       
 
       
  config = {

     

       
44
       
-
       


     

       
45
       
 
       
    # When changing remember to update /tmp mount in virtualisation/qemu-vm.nix

     

       
46
       
-
       
    systemd.mounts = mkIf cfg.tmpOnTmpfs [

     

       
47
       
 
       
      {

     

       
48
       
 
       
        what = "tmpfs";

     

       
49
       
 
       
        where = "/tmp";

     

       
50
       
 
       
        type = "tmpfs";

     

       
51
       
-
       
        mountConfig.Options = concatStringsSep "," [ "mode=1777"

     

       
52
       
-
       
                                                     "strictatime"

     

       
53
       
-
       
                                                     "rw"

     

       
54
       
-
       
                                                     "nosuid"

     

       
55
       
-
       
                                                     "nodev"

     

       
56
       
-
       
                                                     "size=${toString cfg.tmpOnTmpfsSize}" ];

     

       
0
       
 
       

     

       
0
       
 
       

     

       
57
       
 
       
      }

     

       
58
       
 
       
    ];

     

       
59
       
 
       


     

       
60
       
-
       
    systemd.tmpfiles.rules = optional config.boot.cleanTmpDir "D! /tmp 1777 root root";

     

       
61
       
-
       


     

       
62
       
 
       
  };

     

       
63
       
-
       


     

       
64
       
 
       
}

     

···

       
3
       
 
       
with lib;

     

       
4
       
 
       


     

       
5
       
 
       
let

     

       
6
       
+
       
  cfg = config.boot.tmp;

     

       
7
       
 
       
in

     

       
8
       
 
       
{

     

       
9
       
+
       
  imports = [

     

       
10
       
+
       
    (mkRenamedOptionModule [ "boot" "cleanTmpDir" ] [ "boot" "tmp" "cleanOnBoot" ])

     

       
11
       
+
       
    (mkRenamedOptionModule [ "boot" "tmpOnTmpfs" ] [ "boot" "tmp" "useTmpfs" ])

     

       
12
       
+
       
    (mkRenamedOptionModule [ "boot" "tmpOnTmpfsSize" ] [ "boot" "tmp" "tmpfsSize" ])

     

       
13
       
+
       
  ];

     

       
14
       
 
       


     

       
15
       
 
       
  options = {

     

       
16
       
+
       
    boot.tmp = {

     

       
17
       
+
       
      cleanOnBoot = mkOption {

     

       
18
       
+
       
        type = types.bool;

     

       
19
       
+
       
        default = false;

     

       
20
       
+
       
        description = lib.mdDoc ''

     

       
21
       
+
       
          Whether to delete all files in {file}`/tmp` during boot.

     

       
22
       
+
       
        '';

     

       
23
       
+
       
      };

     

       
24
       
 
       


     

       
25
       
+
       
      tmpfsSize = mkOption {

     

       
26
       
+
       
        type = types.oneOf [ types.str types.types.ints.positive ];

     

       
27
       
+
       
        default = "50%";

     

       
28
       
+
       
        description = lib.mdDoc ''

     

       
29
       
+
       
          Size of tmpfs in percentage.

     

       
30
       
+
       
          Percentage is defined by systemd.

     

       
31
       
+
       
        '';

     

       
32
       
+
       
      };

     

       
33
       
 
       


     

       
34
       
+
       
      useTmpfs = mkOption {

     

       
35
       
+
       
        type = types.bool;

     

       
36
       
+
       
        default = false;

     

       
37
       
+
       
        description = lib.mdDoc ''

     

       
38
       
+
       
           Whether to mount a tmpfs on {file}`/tmp` during boot.

     

       
0
       
 
       

     

       
0
       
 
       

     

       
39
       
 
       


     

       
40
       
+
       
           ::: {.note}

     

       
41
       
+
       
           Large Nix builds can fail if the mounted tmpfs is not large enough.

     

       
42
       
+
       
           In such a case either increase the tmpfsSize or disable this option.

     

       
43
       
+
       
           :::

     

       
44
       
+
       
        '';

     

       
45
       
+
       
      };

     

       
0
       
 
       

     

       
46
       
 
       
    };

     

       
0
       
 
       

     

       
47
       
 
       
  };

     

       
48
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
49
       
 
       
  config = {

     

       
0
       
 
       

     

       
50
       
 
       
    # When changing remember to update /tmp mount in virtualisation/qemu-vm.nix

     

       
51
       
+
       
    systemd.mounts = mkIf cfg.useTmpfs [

     

       
52
       
 
       
      {

     

       
53
       
 
       
        what = "tmpfs";

     

       
54
       
 
       
        where = "/tmp";

     

       
55
       
 
       
        type = "tmpfs";

     

       
56
       
+
       
        mountConfig.Options = concatStringsSep "," [

     

       
57
       
+
       
          "mode=1777"

     

       
58
       
+
       
          "strictatime"

     

       
59
       
+
       
          "rw"

     

       
60
       
+
       
          "nosuid"

     

       
61
       
+
       
          "nodev"

     

       
62
       
+
       
          "size=${toString cfg.tmpfsSize}"

     

       
63
       
+
       
        ];

     

       
64
       
 
       
      }

     

       
65
       
 
       
    ];

     

       
66
       
 
       


     

       
67
       
+
       
    systemd.tmpfiles.rules = optional cfg.cleanOnBoot "D! /tmp 1777 root root";

     

       
0
       
 
       

     

       
68
       
 
       
  };

     

       
0
       
 
       

     

       
69
       
 
       
}

     

···

       
1069
       
 
       
          fsType = "ext4";

     

       
1070
       
 
       
          autoFormat = true;

     

       
1071
       
 
       
        });

     

       
1072
       
-
       
        "/tmp" = lib.mkIf config.boot.tmpOnTmpfs {

     

       
1073
       
 
       
          device = "tmpfs";

     

       
1074
       
 
       
          fsType = "tmpfs";

     

       
1075
       
 
       
          neededForBoot = true;

     

       
1076
       
 
       
          # Sync with systemd's tmp.mount;

     

       
1077
       
-
       
          options = [ "mode=1777" "strictatime" "nosuid" "nodev" "size=${toString config.boot.tmpOnTmpfsSize}" ];

     

       
1078
       
 
       
        };

     

       
1079
       
 
       
        "/nix/${if cfg.writableStore then ".ro-store" else "store"}" = lib.mkIf cfg.useNixStoreImage {

     

       
1080
       
 
       
          device = "${lookupDriveDeviceName "nix-store" cfg.qemu.drives}";

     

···

       
1069
       
 
       
          fsType = "ext4";

     

       
1070
       
 
       
          autoFormat = true;

     

       
1071
       
 
       
        });

     

       
1072
       
+
       
        "/tmp" = lib.mkIf config.boot.tmp.useTmpfs {

     

       
1073
       
 
       
          device = "tmpfs";

     

       
1074
       
 
       
          fsType = "tmpfs";

     

       
1075
       
 
       
          neededForBoot = true;

     

       
1076
       
 
       
          # Sync with systemd's tmp.mount;

     

       
1077
       
+
       
          options = [ "mode=1777" "strictatime" "nosuid" "nodev" "size=${toString config.boot.tmp.tmpfsSize}" ];

     

       
1078
       
 
       
        };

     

       
1079
       
 
       
        "/nix/${if cfg.writableStore then ".ro-store" else "store"}" = lib.mkIf cfg.useNixStoreImage {

     

       
1080
       
 
       
          device = "${lookupDriveDeviceName "nix-store" cfg.qemu.drives}";

     

···

       
17
       
 
       
          http = ":8000";

     

       
18
       
 
       
        };

     

       
19
       
 
       
      };

     

       
20
       
-
       
      boot.cleanTmpDir = true;

     

       
21
       
 
       
      # for exchange rates

     

       
22
       
 
       
      security.pki.certificateFiles = [ ./server.crt ];

     

       
23
       
 
       
      networking.extraHosts = "127.0.0.1 api.exchangerate.host";

     

···

       
17
       
 
       
          http = ":8000";

     

       
18
       
 
       
        };

     

       
19
       
 
       
      };

     

       
20
       
+
       
      boot.tmp.cleanOnBoot = true;

     

       
21
       
 
       
      # for exchange rates

     

       
22
       
 
       
      security.pki.certificateFiles = [ ./server.crt ];

     

       
23
       
 
       
      networking.extraHosts = "127.0.0.1 api.exchangerate.host";