Dave Gallant davegallant

I hereby claim:

To claim this, I am signing this object:

Installation of NixOS with encrypted root

These are my notes on instaling NixOS 16.03 on a Lenovo ThinkPad X1 Carbon (4th generation) with an encrypted root file system using UEFI.

Most of this is scrambled from the following pages:

cat /proc/sys/net/bridge/bridge-nf-call-iptables

sysctl vm.swappiness=0
swapoff -a

Download NixOS minimal iso and copy to USB stick. For example on Mac OSX

$ diskutil list
$ diskutil unmountDisk /dev/disk1 # Make sure you got right device

	// The tampermonkey script is now located in https://github.com/davegallant/rfd-redirect-stripper/blob/main/script.js

	// Chrome extension:
	// https://chromewebstore.google.com/detail/rfd-redirect-stripper/npnhoaofocjfjcjlglaihlhkbgaokmpa?authuser=0&hl=en

	// Firefox Add-on:
	// https://addons.mozilla.org/en-US/firefox/addon/rfd-redirect-stripper/

	#!/usr/bin/env bash

	# This script clones all repos in a GitHub org
	# It requires the GH CLI: https://cli.github.com
	# It can be re-run to collect new repos and pull the latest changes

	set -euo pipefail

	USAGE="Usage: gh-clone-org <user\|org>"

	#!/usr/bin/env python3

	#
	# This script will collect all existing access keys of the current caller identity,
	# create a new access key, update your credentials file, and then delete all previously existing access keys.
	#
	# This only works if the caller identity is an IAM User because if you're using AWS SSO or temporary session credentials,
	# you probably don't need this.
	#

	#!/usr/bin/env bash

	# pct-enter [container-name]
	# If container-name is not provided, a fzf prompt will be displayed.

	containers=$(pct list \| tail -n +2 \| awk '{print $3" - "$1}')

	if [ $# -eq 0 ]; then
	selected_container=$(echo "$containers" \| fzf)
	else