(wip) Setup btrfs impermanence

This commit is contained in:
Madeleine Sydney
2024-12-28 20:29:43 -07:00
parent 6240431d36
commit 9a99a6dfb7
4 changed files with 140 additions and 50 deletions

View File

@@ -32,30 +32,29 @@ in {
default = [];
};
rollbackTo = mkOption {
type = types.str;
};
archiveTo = mkOption {
type = types.str;
default = "/persist/previous/home";
};
dataset = mkOption {
device = mkOption {
description = "Device to be wiped";
type = types.str;
};
archiveLimit = mkOption {
type = types.ints.positive;
description = "The number of previous roots to preserve.";
default = 3;
};
};
};
config = mkIf cfg.enable {
# Create a group called `cfg.persistGroupName`
users.groups.${cfg.persistGroupName} = {
name = cfg.persistGroupName;
};
systemd.tmpfiles.settings = {
"10-persist" = {
# Permit members of `cfg.persistGroupName` to read, write, and execute
# /persist.
"/persist" = {
z = {
group = cfg.persistGroupName;
@@ -65,68 +64,100 @@ in {
};
};
boot.initrd.systemd.initrdBin = with pkgs; [
zfs
];
# TODO: Move this somewhere else.
programs.fuse.userAllowOther = true;
# sudo mount -o ro -t virtiofs mount-dots /persist/dots
boot.initrd.systemd = {
# `pkgs.babashka` calls `pkgs.babashka-unwrapped`, and will explode if it
# cannot find it.
storePaths = [ pkgs.babashka-unwrapped ];
initrdBin = with pkgs; [
babashka
util-linux
];
};
boot.initrd.systemd.services.erase-darlings =
let service = {
description = "Rollback filesystem to a blank state on boot";
wantedBy = [
"initrd.target"
];
after = [
# "zfs-import.service"
"zfs-import-rpool.service"
];
before = [
"sysroot.mount"
];
path = [ pkgs.zfs ];
path = with pkgs; [ util-linux babashka ];
unitConfig.DefaultDependencies = "no";
serviceConfig = {
Type = "oneshot";
RemainAfterExit = true;
};
script = /* bash */ ''
zfs rollback -r rpool/local/root@blank \
&& echo ">> >> rollback complete << <<"
'';
script =
let bb-script = "/sysroot" + ./impermanence/erase-darlings.clj;
in ''${pkgs.babashka}/bin/bb "${bb-script}" -n "${toString cfg.archiveLimit}" --device "${cfg.device}"'';
};
in if config.boot.initrd.systemd.enable
then service
else throw "sydnix.impermanence currently requires config.boot.initrd.systemd.enable'!";
systemd.services =
let erase-home-darlings = {
description = "Rollback home to a blank state on boot";
wantedBy = [
"local-fs-pre.target"
"zfs-mount.service"
];
before = [
"local-fs.target"
"local-fs-pre.target"
"zfs-mount.service"
];
path = [ pkgs.zfs pkgs.babashka pkgs.util-linux ];
unitConfig.DefaultDependencies = "no";
serviceConfig = {
Type = "oneshot";
RemainAfterExit = true;
ExecStart =
let script = ./erase-home-darlings.clj;
in ''${pkgs.babashka}/bin/bb "${script}" -n "${toString cfg.archiveLimit}" --dataset "${cfg.dataset}" --rollback-to "${cfg.rollbackTo}"'';
};
stopIfChanged = false;
restartIfChanged = false;
};
in {
# inherit erase-home-darlings;
};
# TODO: Remove this.
# boot.initrd.systemd.services.erase-darlings-old =
# let service = {
# description = "Rollback filesystem to a blank state on boot";
# wantedBy = [
# "initrd.target"
# ];
# after = [
# # "zfs-import.service"
# "zfs-import-rpool.service"
# ];
# before = [
# "sysroot.mount"
# ];
# path = [ pkgs.zfs ];
# unitConfig.DefaultDependencies = "no";
# serviceConfig = {
# Type = "oneshot";
# RemainAfterExit = true;
# };
# script = /* bash */ ''
# zfs rollback -r rpool/local/root@blank \
# && echo ">> >> rollback complete << <<"
# '';
# };
# in if config.boot.initrd.systemd.enable
# then service
# else throw "sydnix.impermanence currently requires config.boot.initrd.systemd.enable'!";
# systemd.services =
# let erase-home-darlings = {
# description = "Rollback home to a blank state on boot";
# wantedBy = [
# "local-fs-pre.target"
# "zfs-mount.service"
# ];
# before = [
# "local-fs.target"
# "local-fs-pre.target"
# "zfs-mount.service"
# ];
# path = [ pkgs.zfs pkgs.babashka pkgs.util-linux ];
# unitConfig.DefaultDependencies = "no";
# serviceConfig = {
# Type = "oneshot";
# RemainAfterExit = true;
# ExecStart =
# let script = ./erase-home-darlings.clj;
# in ''${pkgs.babashka}/bin/bb "${script}" -n "${toString cfg.archiveLimit}" --dataset "${cfg.dataset}" --rollback-to "${cfg.rollbackTo}"'';
# };
# stopIfChanged = false;
# restartIfChanged = false;
# };
# in {
# # inherit erase-home-darlings;
# };
environment.persistence."/persist/root" = {
directories = cfg.directories;