You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
140 lines
2.4 KiB
Nix
140 lines
2.4 KiB
Nix
# applicable to all hosts running on bare hardware
|
|
|
|
{ config
|
|
, lib
|
|
, pkgs
|
|
, ...
|
|
}:
|
|
let
|
|
cfg = config.x-banananetwork.hwCommon;
|
|
cpu = config.hardware.cpu;
|
|
in
|
|
{
|
|
|
|
|
|
options = {
|
|
|
|
|
|
hardware.cpu = {
|
|
|
|
type = lib.mkOption {
|
|
description = ''
|
|
Configures the CPU type to expect this configuration to run on.
|
|
|
|
This setting is required when using generalizing options
|
|
like option{hardware.cpu.updateMicrocode}.
|
|
'';
|
|
type = with lib.types; nullOr (enum [
|
|
"amd"
|
|
"intel"
|
|
]);
|
|
# required
|
|
};
|
|
|
|
updateMicrocode = lib.mkEnableOption ''
|
|
microcode updates for CPU type selected in option{hardware.cpu.type}.
|
|
|
|
Because this module is not yet part of upstream,
|
|
it requires option{x-banananetwork.hwCommon.enable} to be enabled.
|
|
'';
|
|
|
|
};
|
|
|
|
|
|
x-banananetwork.hwCommon = {
|
|
|
|
enable = lib.mkEnableOption ''
|
|
settings common to all bare hardware-based hosts
|
|
'';
|
|
|
|
};
|
|
|
|
|
|
};
|
|
|
|
|
|
config = lib.mkIf cfg.enable {
|
|
|
|
|
|
boot = {
|
|
|
|
# TODO adapt better
|
|
loader = {
|
|
efi.canTouchEfiVariables = lib.mkDefault true;
|
|
systemd-boot = {
|
|
enable = true;
|
|
editor = lib.mkDefault true; # TODO lockdown (disable this OR enable TPM PCR checks)
|
|
memtest86.enable = lib.mkDefault true;
|
|
};
|
|
};
|
|
|
|
};
|
|
|
|
|
|
hardware = {
|
|
|
|
cpu = lib.mkMerge [
|
|
|
|
# TODO maybe upstream?
|
|
(
|
|
let
|
|
type = config.hardware.cpu.type;
|
|
opts = isType: {
|
|
updateMicrocode = lib.mkDefault (isType && config.hardware.cpu.updateMicrocode);
|
|
};
|
|
in
|
|
{
|
|
amd = opts (type == "amd");
|
|
intel = opts (type == "intel");
|
|
}
|
|
)
|
|
|
|
{
|
|
updateMicrocode = lib.mkDefault true;
|
|
}
|
|
|
|
];
|
|
|
|
enableRedistributableFirmware = lib.mkDefault true;
|
|
|
|
};
|
|
|
|
|
|
powerManagement = {
|
|
cpuFreqGovernor = "ondemand";
|
|
enable = true;
|
|
};
|
|
|
|
|
|
services = {
|
|
|
|
fwupd = {
|
|
enable = true;
|
|
};
|
|
|
|
smartd = {
|
|
enable = true;
|
|
};
|
|
|
|
tlp = {
|
|
# energy-saving daemon, similar to powertop --autotune, but adaptive to BAT / AC
|
|
enable = true;
|
|
};
|
|
|
|
};
|
|
|
|
|
|
x-banananetwork = {
|
|
|
|
allCommon.enable = true;
|
|
vmCommon.enable = false;
|
|
useable.enable = lib.mkDefault true; # add docs & tools for emergencies
|
|
|
|
};
|
|
|
|
|
|
};
|
|
|
|
|
|
}
|