Creating a NixOS live CD/zh - Revision history

Ardenet: Created page with "===SSH==="

2025-10-07T21:39:06Z

Created page with "===SSH==="

← Older revision		Revision as of 21:39, 7 October 2025
Line 116:		Line 116:
	===SSH===		===SSH===

	在您的 <tt>iso.nix</tt>中：		在您的 <tt>iso.nix</tt> 中：

	<syntaxhighlight lang="nix">		<syntaxhighlight lang="nix">
Line 153:		Line 153:
	</syntaxhighlight>		</syntaxhighlight>

	<~~div lang~~="~~en" dir="ltr" class="mw-content-ltr~~">		<span id="Building_faster"></span>
	=== ~~Building faster~~ ===		=== 更快速的构建 ===
	~~</div>~~

	<div lang="en" dir="ltr" class="mw-content-ltr">		<div lang="en" dir="ltr" class="mw-content-ltr">

Ardenet: Created page with "在您的 `iso.nix`中："

2025-10-07T20:41:43Z

Created page with "在您的 <tt>iso.nix</tt>中："

← Older revision		Revision as of 20:41, 7 October 2025
Line 1:		Line 1:
	<~~div lang~~="~~en" dir="ltr" class="mw-content-ltr~~">		<span id="Motivation"></span>
	== ~~Motivation~~ ==		== 起因 ==
	~~</div>~~

	<div lang="en" dir="ltr" class="mw-content-ltr">		<div lang="en" dir="ltr" class="mw-content-ltr">
Line 117:		Line 116:
	===SSH===		===SSH===

	~~<div lang="en" dir="ltr" class="mw-content-ltr">~~		在您的 <tt>iso.nix</tt>中：
	~~In your~~ <tt>iso.nix</tt>:
	~~</div>~~

	<syntaxhighlight lang="nix">		<syntaxhighlight lang="nix">

Ardenet: Created page with "== 构建 =="

2025-10-07T20:39:29Z

Created page with "== 构建 =="

← Older revision		Revision as of 20:39, 7 October 2025
Line 19:		Line 19:
	</div>		</div>

	<~~div lang~~="~~en" dir="ltr" class="mw-content-ltr~~">		<span id="Building"></span>
	== ~~Building~~ ==		== 构建 ==
	~~</div>~~

	<div lang="en" dir="ltr" class="mw-content-ltr">		<div lang="en" dir="ltr" class="mw-content-ltr">

Ardenet: Created page with "=== 测试镜像 ==="

2025-10-07T20:39:17Z

Created page with "=== 测试镜像 ==="

← Older revision		Revision as of 20:39, 7 October 2025
Line 92:		Line 92:
	</syntaxhighlight>		</syntaxhighlight>

	<~~div lang~~="~~en" dir="ltr" class="mw-content-ltr~~">		<span id="Testing_the_image"></span>
	=== ~~Testing the image~~ ===		=== 测试镜像 ===
	~~</div>~~

	<div lang="en" dir="ltr" class="mw-content-ltr">		<div lang="en" dir="ltr" class="mw-content-ltr">
Line 117:		Line 116:
	</syntaxhighlight>		</syntaxhighlight>

	~~<div lang="en" dir="ltr" class="mw-content-ltr">~~
	===SSH===		===SSH===
	~~</div>~~

	<div lang="en" dir="ltr" class="mw-content-ltr">		<div lang="en" dir="ltr" class="mw-content-ltr">

Ardenet: Created page with "=== 静态 IP 地址==="

2025-10-07T20:39:00Z

Created page with "=== 静态 IP 地址==="

← Older revision		Revision as of 20:39, 7 October 2025
Line 137:		Line 137:
	</syntaxhighlight>		</syntaxhighlight>

	<~~div lang~~="~~en" dir="ltr" class="mw-content-ltr~~">		<span id="Static_IP_Address"></span>
	===~~Static~~ IP ~~Address~~===		=== 静态 IP 地址===
	~~</div>~~

	<div lang="en" dir="ltr" class="mw-content-ltr">		<div lang="en" dir="ltr" class="mw-content-ltr">

Ardenet: Created page with "== 另见 =="

2025-10-07T20:38:27Z

Created page with "== 另见 =="

New page

<div lang="en" dir="ltr" class="mw-content-ltr">
== Motivation ==
</div>

<div lang="en" dir="ltr" class="mw-content-ltr">
Creating a modified NixOS LiveCD out of an existing working NixOS installation has a number of benefits:
</div>

<div lang="en" dir="ltr" class="mw-content-ltr">
* Ensures authenticity.
</div>

<div lang="en" dir="ltr" class="mw-content-ltr">
* No need for internet access.
</div>

<div lang="en" dir="ltr" class="mw-content-ltr">
* It is easy to add your own packages and configuration changes to the image.
</div>

<div lang="en" dir="ltr" class="mw-content-ltr">
== Building ==
</div>

<div lang="en" dir="ltr" class="mw-content-ltr">
Building minimal NixOS installation CD with the <code>nix-build</code> command by creating this <code>iso.nix</code>-file. In this example with [[Neovim]] preinstalled.
</div>

<syntaxhighlight lang="nix">
{ config, pkgs, ... }:
{
imports = [
<nixpkgs/nixos/modules/installer/cd-dvd/installation-cd-minimal.nix>

# Provide an initial copy of the NixOS channel so that the user
# doesn't need to run "nix-channel --update" first.
<nixpkgs/nixos/modules/installer/cd-dvd/channel.nix>
];
environment.systemPackages = [ pkgs.neovim ];
}
</syntaxhighlight>

<div lang="en" dir="ltr" class="mw-content-ltr">
Build the image via:
</div>

<syntaxhighlight lang="bash">
nix-build '<nixpkgs/nixos>' -A config.system.build.isoImage -I nixos-config=iso.nix
</syntaxhighlight>

<div lang="en" dir="ltr" class="mw-content-ltr">
Alternatively, use Nix [[Flakes]] to generate a ISO installation image, using the <code>nixos-24.05</code> branch as nixpkgs source:
</div>

{{file|flake.nix|nix|<nowiki>
{
description = "Minimal NixOS installation media";
inputs.nixpkgs.url = "github:NixOS/nixpkgs/nixos-24.05";
outputs = { self, nixpkgs }: {
packages.x86_64-linux.default = self.nixosConfigurations.exampleIso.config.system.build.isoImage;
nixosConfigurations = {
exampleIso = nixpkgs.lib.nixosSystem {
system = "x86_64-linux";
modules = [
({ pkgs, modulesPath, ... }: {
imports = [ (modulesPath + "/installer/cd-dvd/installation-cd-minimal.nix") ];
environment.systemPackages = [ pkgs.neovim ];
})
];
};
};
};
}
</nowiki>}}

<div lang="en" dir="ltr" class="mw-content-ltr">
The following commands will generate the iso-image:
</div>

<syntaxhighlight lang="console">

# nix build path:$PWD
</syntaxhighlight>

<div lang="en" dir="ltr" class="mw-content-ltr">
The resulting image can be found in <code>result</code>:
</div>

<syntaxhighlight lang="console">
$ ls result/iso/
nixos-24.05.20240721.63d37cc-x86_64-linux.iso
</syntaxhighlight>

<div lang="en" dir="ltr" class="mw-content-ltr">
=== Testing the image ===
</div>

<div lang="en" dir="ltr" class="mw-content-ltr">
To inspect the contents of the ISO image:
</div>

<syntaxhighlight lang="console">
$ mkdir mnt
$ sudo mount -o loop result/iso/nixos-*.iso mnt
$ ls mnt
boot EFI isolinux nix-store.squashfs version.txt
$ umount mnt
</syntaxhighlight>

<div lang="en" dir="ltr" class="mw-content-ltr">
To boot the ISO image in an emulator:
</div>

<syntaxhighlight lang="console">
$ nix-shell -p qemu
$ qemu-system-x86_64 -enable-kvm -m 256 -cdrom result/iso/nixos-*.iso
</syntaxhighlight>

<div lang="en" dir="ltr" class="mw-content-ltr">
===SSH===
</div>

<div lang="en" dir="ltr" class="mw-content-ltr">
In your <tt>iso.nix</tt>:
</div>

<syntaxhighlight lang="nix">
{
...
# Enable SSH in the boot process.
systemd.services.sshd.wantedBy = pkgs.lib.mkForce [ "multi-user.target" ];
users.users.root.openssh.authorizedKeys.keys = [
"ssh-ed25519 AaAeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee username@host"
];
...
}
</syntaxhighlight>

<div lang="en" dir="ltr" class="mw-content-ltr">
===Static IP Address===
</div>

<div lang="en" dir="ltr" class="mw-content-ltr">
Static IP addresses can be set in the image itself. This can be useful for VPS installation.
</div>

<syntaxhighlight lang="nix" line="1">
{
...
networking = {
usePredictableInterfaceNames = false;
interfaces.eth0.ipv4.addresses = [{
address = "64.137.201.46";
prefixLength = 24;
}];
defaultGateway = "64.137.201.1";
nameservers = [ "8.8.8.8" ];
};
...
}
</syntaxhighlight>

<div lang="en" dir="ltr" class="mw-content-ltr">
=== Building faster ===
</div>

<div lang="en" dir="ltr" class="mw-content-ltr">
The build process is slow because of compression.
</div>

<div lang="en" dir="ltr" class="mw-content-ltr">
Here are some timings for <code>nix-build</code>:
</div>

<div lang="en" dir="ltr" class="mw-content-ltr">
{| class="wikitable" style="margin:auto"
|+ Compression results
|-
! squashfsCompression !! Time !! Size
|-
| <code>lz4</code> || 100s || 59%
|-
| <code>gzip -Xcompression-level 1</code> || 105s || 52%
|-
| <code>gzip</code> || 210s || 49%
|-
| <code>xz -Xdict-size 100%</code> (default) || 450s || 43%
|}
</div>

<div lang="en" dir="ltr" class="mw-content-ltr">
See also: [https://gist.github.com/baryluk/70a99b5f26df4671378dd05afef97fce mksquashfs benchmarks]
</div>

<div lang="en" dir="ltr" class="mw-content-ltr">
If you don't care about file size, you can use a faster compression
by adding this to your <code>iso.nix</code>:
</div>

<syntaxhighlight lang="nix">
{
isoImage.squashfsCompression = "gzip -Xcompression-level 1";
}
</syntaxhighlight>

<span id="See_also"></span>
== 另见 ==

<div lang="en" dir="ltr" class="mw-content-ltr">
* [https://nixos.org/manual/nixos/stable/index.html#sec-building-image NixOS Manual: Building a NixOS (Live) ISO].
</div>

[[Category:NixOS]]
[[Category:Deployment]]
[[Category:Cookbook]]