Automatically build (netboot) images for NixOS [maintainer=@Mic92]
Find a file
2022-12-16 13:29:50 +01:00
.github drop building master again 2022-12-16 13:29:50 +01:00
nix/kexec-installer add static iproute binary 2022-12-01 15:43:39 +00:00
build-images.sh Fix duplicate assets related to kexec-bundle 2022-12-13 13:22:37 +01:00
flake.nix expose kexec installer as a nixosModule 2022-12-14 17:32:53 +01:00
LICENSE Initial commit 2021-06-10 05:52:46 +01:00
README.md kexec: update documentation 2022-11-27 20:11:19 +01:00

nixos-images

Automatically weekly updated images for NixOS. This project is intended to extend the images created by hydra.nixos.org. We are currently creating the images listed below:

Netboot images

You can boot the netboot image using this ipxe script. It consists of the kernel image and initrd.

Kexec tarballs

Kexec is a mechanism in Linux to load a new kernel from a running Linux to replace the current kernel. This is useful for booting the Nixos installer from existing Linux distributions, such as server provider that do not offer a NixOS option. After running kexec, the NixOS installer exists only in memory. At the time of writing, this requires at least 2.5GB of physical RAM (swap does not count) in the system. If not enough RAM is available, the initrd cannot be loaded. Because the NixOS runs only in RAM, users can reformat all the system's discs to prepare for a new NixOS installation.

Currently, there are two variants of kexec: nixos-kexec-installer and kexec bundle.

The nixos-kexec-installer tarball is the new preferred method.

It can be booted as follows by running these commands as root:

curl -L https://github.com/nix-community/nixos-images/releases/download/nixos-unstable/nixos-kexec-installer-x86_64-linux.tar.gz | tar -xzf- -C /root
/root/kexec/run

The kexec installer comes with the following features:

  • Re-uses ssh host keys from the sshd to not break .ssh/known_hosts
  • Authorized ssh keys are read from /root/.ssh/authorized_keys, /root/.ssh/authorized_keys2 and /etc/ssh/authorized_keys.d/root
  • Static ip addresses and routes are restored after reboot. Interface that had dynamic addresses before are configured with DHCP and to accept prefixes from ipv6 router advertisment.

The actual kexec happens with a slight delay (6s). This allows for easier integration into automated nixos installation scripts, since you can cleanly disconnect from the running machine before the kexec takes place. The tarball is also designed to be run from NixOS, which can be useful for new installations

We also have kexec-bundle, which is a self-extracting archive from nixos-generators. This version unpacks itself to / and possibly overlays the existing /nix/store with its own files.