- Encrypt everthing including /boot and /root
- Enter password once
- Support UEFI
Download NixOS minimal iso and copy to USB stick. For example on Mac OSX
$ diskutil list
$ diskutil unmountDisk /dev/disk1 # Make sure you got right device| #!/usr/bin/env bash | |
| input=$(cat) | |
| cwd=$(echo "$input" | jq -r '.workspace.current_dir // .cwd // ""') | |
| model=$(echo "$input" | jq -r '.model.display_name // ""') | |
| window_size=$(echo "$input" | jq -r '.context_window.context_window_size // empty') | |
| # Sum all current_usage token fields for precise count | |
| input_tokens=$(echo "$input" | jq -r ' | |
| [.context_window.current_usage.input_tokens, | |
| .context_window.current_usage.output_tokens, |
| # ----------------------------------------------------------------------------- | |
| # K9s Ghostty StyleDark Skin | |
| # Based on Ghostty's built-in default (StyleDark) color palette | |
| # ----------------------------------------------------------------------------- | |
| foreground: &foreground "#ffffff" | |
| background: &background "#292c33" | |
| current_line: ¤t_line "#3a3d45" | |
| selection: &selection "#666666" | |
| comment: &comment "#666666" | |
| cyan: &cyan "#95bdb7" |
| { | |
| "annotations": { | |
| "list": [ | |
| { | |
| "builtIn": 0, | |
| "datasource": { | |
| "type": "grafana", | |
| "uid": "-- Grafana --" | |
| }, | |
| "enable": false, |
| #!/usr/bin/env bash | |
| # pct-enter [container-name] | |
| # If container-name is not provided, a fzf prompt will be displayed. | |
| containers=$(pct list | tail -n +2 | awk '{print $3" - "$1}') | |
| if [ $# -eq 0 ]; then | |
| selected_container=$(echo "$containers" | fzf) | |
| else |
| #!/usr/bin/env python3 | |
| # | |
| # This script will collect all existing access keys of the current caller identity, | |
| # create a new access key, update your credentials file, and then delete all previously existing access keys. | |
| # | |
| # This only works if the caller identity is an IAM User because if you're using AWS SSO or temporary session credentials, | |
| # you probably don't need this. | |
| # |
| #!/usr/bin/env bash | |
| # This script clones all repos in a GitHub org | |
| # It requires the GH CLI: https://cli.github.com | |
| # It can be re-run to collect new repos and pull the latest changes | |
| set -euo pipefail | |
| USAGE="Usage: gh-clone-org <user|org>" |
These are my notes on instaling NixOS 16.03 on a Lenovo ThinkPad X1 Carbon (4th generation) with an encrypted root file system using UEFI.
Most of this is scrambled from the following pages:
I hereby claim:
To claim this, I am signing this object: