diff options
Diffstat (limited to '')
| -rw-r--r-- | README.md | 98 | ||||
| -rw-r--r-- | README.org | 65 |
2 files changed, 98 insertions, 65 deletions
diff --git a/README.md b/README.md new file mode 100644 index 00000000..8e0def9b --- /dev/null +++ b/README.md @@ -0,0 +1,98 @@ +# dotfiles - EuAndreh\'s personal repository + +## Instructions - setting up a new NixOS installation + +### 1. Prepare the USB stick + +Get the link for the [NixOS ISO +image](https://nixos.org/nixos/download.html) (prefer the KDE image for +easy network connection) and burn it to the USB stick (check the device +with `lsblk`): + +``` {.shell} +NIXOS_URL='https://releases.nixos.org/nixos...linux.iso' +wget https://euandre.org/dotfiles/nixos/burn.sh +chmod +x burn.sh +./burn.sh "${NIXOS_URL}" /dev/sdb +``` + +### 2. Performing a fresh install + +Put the USB stick in the new laptop and boot from it. + +First we need to get the internet connection working. Check that the +wireless interface name is actually `wlp2s0` or something else (use +`ip a` of `ifconfig` for that), and use `wpa_supplicant` to perform the +connection: + +``` {.shell} +wpa_supplicant -B -i wlp2s0 -c <(wpa_passphrase SSID PASSPHRASE) +``` + +Now we need to also double check the driver name with `lsblk`. We\'ll +assume it\'s `/dev/sda`. + +After that all we need is to download the installation script and run it +with the correct arguments: + +``` {.shell} +curl https://euandre.org/dotfiles/nixos/install.sh > install.sh +chmod +x install.sh +LAPTOP_NAME='velhinho-nixos' +sudo ./install.sh "${LAPTOP_NAME}" /dev/sda +``` + +### 3. Bootstraping the new installation\'s configuration and data + +After booting up from the freshly installed NixOS, login into the +**GNOME+Xorg** option on the top right corner. Connect again to the +internet using the network applet and launch a terminal window. + +Now we\'ll need the GPG keys to decrypt the Git Annex repo, decrypt the +SSH keys and bootstrap from there. + +Get the `keys.gpg` file with both private and public keys (see +[exporting GPG keys](#exporting-gpg-key-pairs) below on how to do that) +from the external disk and run the setup script: + +``` {.shell} +curl https://euandre.org/dotfiles/nixos/setup.sh | bash -s ~/path/to/keys.gpg +``` + +Now just follow the instructions of the script. + +That\'s all! + +## Resources + +### Exporting GPG key pairs + +Export the GPG data using `export-keys.sh` and put it in a disk drive to +do an offline transfer: + +``` {.shell} +export-keys.sh +mv EuAndreh.tar.gpg ~/UTCLOUD/ +``` + +### Paperkey + +Paperkey generate using: + +``` {.shell} +cat <<EOF +# Paper key +gpg --export-secret-keys EuAndreh | paperkey > paperkey-content.txt + +# QR codes of paper key +gpg --export-secret-keys EuAndreh | paperkey | qrencode -o out.png -S -v 16 +montage *.png -tile 1x2 -geometry +0+0 concatenate-out.png +rm out* +EOF +``` + +To recover a paperkey: + +``` {.shell} +paperkey --pubring <(wget -O- https://euandre.org/public-key.txt | gpg --dearmor) --secrets paperkey-content.txt | gpg --batch --import +``` diff --git a/README.org b/README.org deleted file mode 100644 index d1caadae..00000000 --- a/README.org +++ /dev/null @@ -1,65 +0,0 @@ -* dotfiles - EuAndreh's personal repository -** Instructions - setting up a new NixOS installation -*** 1. Prepare the USB stick -Get the link for the [[https://nixos.org/nixos/download.html][NixOS ISO image]] (prefer the KDE image for easy network connection) and burn it to the USB stick (check the device with =lsblk=): -#+BEGIN_SRC shell -NIXOS_URL='https://releases.nixos.org/nixos...linux.iso' -wget https://euandre.org/dotfiles/nixos/burn.sh -chmod +x burn.sh -./burn.sh "${NIXOS_URL}" /dev/sdb -#+END_SRC -*** 2. Performing a fresh install -Put the USB stick in the new laptop and boot from it. - -First we need to get the internet connection working. Check that the wireless interface name is actually =wlp2s0= or something else (use =ip a= of =ifconfig= for that), and use =wpa_supplicant= to perform the connection: -#+BEGIN_SRC shell -wpa_supplicant -B -i wlp2s0 -c <(wpa_passphrase SSID PASSPHRASE) -#+END_SRC -Now we need to also double check the driver name with =lsblk=. We'll assume it's =/dev/sda=. - -After that all we need is to download the installation script and run it with the correct arguments: -#+BEGIN_SRC shell -curl https://euandre.org/dotfiles/nixos/install.sh > install.sh -chmod +x install.sh -LAPTOP_NAME='velhinho-nixos' -sudo ./install.sh "${LAPTOP_NAME}" /dev/sda -#+END_SRC -*** 3. Bootstraping the new installation's configuration and data -After booting up from the freshly installed NixOS, login into the *GNOME+Xorg* option on the top right corner. Connect again to the internet using the network applet and launch a terminal window. - -Now we'll need the GPG keys to decrypt the Git Annex repo, decrypt the SSH keys and bootstrap from there. - -Get the =keys.gpg= file with both private and public keys (see [[#exporting-gpg-key-pairs][exporting GPG keys]] below on how to do that) from the external disk and run the setup script: -#+BEGIN_SRC shell -curl https://euandre.org/dotfiles/nixos/setup.sh | bash -s ~/path/to/keys.gpg -#+END_SRC -Now just follow the instructions of the script. - -That's all! -** Resources -*** Exporting GPG key pairs -:PROPERTIES: -:CUSTOM_ID: exporting-gpg-key-pairs -:END: -Export the GPG data using =export-keys.sh= and put it in a disk drive to do an offline transfer: -#+BEGIN_SRC shell -export-keys.sh -mv EuAndreh.tar.gpg ~/UTCLOUD/ -#+END_SRC -*** Paperkey -Paperkey generate using: -#+BEGIN_SRC shell -cat <<EOF -# Paper key -gpg --export-secret-keys EuAndreh | paperkey > paperkey-content.txt - -# QR codes of paper key -gpg --export-secret-keys EuAndreh | paperkey | qrencode -o out.png -S -v 16 -montage *.png -tile 1x2 -geometry +0+0 concatenate-out.png -rm out* -EOF -#+END_SRC -To recover a paperkey: -#+BEGIN_SRC shell -paperkey --pubring <(wget -O- https://euandre.org/public-key.txt | gpg --dearmor) --secrets paperkey-content.txt | gpg --batch --import -#+END_SRC |