Set up tschingel host #126

Closed

fabianhauser wants to merge 9 commits from tschingel-setup into main

pull from: tschingel-setup

merge into: fabianhauser:main

fabianhauser:main

fabianhauser:renovate/lock-file-maintenance

fabianhauser:update-stylix

Conversation 0 Commits 9 Files changed 16 +4638 -127

fabianhauser commented 2026-07-23 15:03:30 +00:00

Owner

Copy link

Sets up the new tschingel host (ThinkPad X1 Gen13) TPM-based measured boot

Sets up the new tschingel host (ThinkPad X1 Gen13) TPM-based measured boot

fabianhauser added 11 commits 2026-07-23 15:03:30 +00:00

Add tschingel draft df7a47001d

Add disko-zfs input and register tschingel host 3951a42a8f

Add opt-in lanzaboote measured-boot module 9bec9cf5bb

Set up tschingel native-ZFS encrypted disko with TPM unlock 482541cbe6

Enroll all LUKS devices and support pcrlock in dotfiles-enroll-tpm af7cce858f

Document measured-boot setup and migration fc180fa2ce

Add ThinkPad X1 Gen13 hardware module 7dd25f6785

Parameterize tschingel disko config and fix install bugs ... 6e702d0727

Partition regions were off by one (sgdisk end sectors are inclusive),
disko's own mount flow never mounted the keystore for zpool import -l,
the ZFS raw key was regenerated on every format re-run, and the
create-time mountpoint properties were undeclared in options, so
disko-zfs stripped them (unmounting /home) on every boot.

Fix initrd switch-root hang from keystore teardown ... cbd10a2062

RequiresMountsFor=/keystore chained up through sysroot.mount, so the
initrd-switch-root conflict with keystore.mount made systemd unmount
/sysroot and drop the switch-root job, hanging boot forever.

Add tschingel disko/ZFS slow-check VM test f965fe01d8

Document TPM reboot test design for a future session 538ef740df

fabianhauser force-pushed tschingel-setup from 538ef740df to c980bada00 2026-07-31 14:45:13 +00:00 Compare

fabianhauser force-pushed tschingel-setup from c980bada00 to 622ab23e45 2026-07-31 15:43:39 +00:00 Compare

fabianhauser added 1 commit 2026-07-31 18:52:08 +00:00

fixup! Update inputs 66b3e55636

fabianhauser changed title from Set up tschingel host with encrypted ZFS, measured boot and disko VM test to Set up tschingel host 2026-07-31 19:06:05 +00:00

fabianhauser added 1 commit 2026-07-31 19:38:30 +00:00

fixup! Prepare tschingel setup d3fa0f7573

fabianhauser added 4 commits 2026-07-31 21:02:37 +00:00

Configure attic substituter in nix.settings ... eed186d2d9

nixos-anywhere reads nix.settings.substituters from the target config and
writes it into the installer environment, so the flake-level nixConfig alone
is not enough for --build-on remote. cache.nixos.org is appended by nixpkgs
via mkAfter, so it must not be listed here.

Add nixos-anywhere and pwgen to devshell ca753d9c9d

Document nixos-anywhere deployment 021a062f0d

Fix stuff 719d7f121d

fabianhauser force-pushed tschingel-setup from 719d7f121d to 937e56c0af 2026-07-31 21:08:48 +00:00 Compare

fabianhauser force-pushed tschingel-setup from 937e56c0af to 8fe24a1ae9 2026-07-31 21:12:41 +00:00 Compare

fabianhauser added 1 commit 2026-08-01 16:36:28 +00:00

fixup! Fix stuff 8ccaf0e02d

fabianhauser closed this pull request 2026-08-02 10:30:42 +00:00

All checks were successful

Hide checks

CI / build (push) Successful in 29s

Details

Pull request closed

Please reopen this pull request to perform a merge.

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

fabianhauser/dotfiles!126

No description provided.