Universal Blue sysext with Nix packages
GitHub
Sorry for always talking about nix, but it really could be quite useful for this project. Like, I am working on an architecture for this project on my personal fork that uses the nix store for thes...
TThis thread was made for indexing this topic
Dgood idea
Tapparently bind-mounts are going to be the best way to handle this
Tjust like snaps work, lol
T
Tim on nixos so this works a bit differently but look at the loopback device right there lol
Tguys this WORKS
TLES GOOOOOOOOOOOOO
TIT ACTUALLY WORKS
T@bketelsen can you help me out with something?
Tliterally the only thing missing of this puzzle is just the systemd-sysext itself
Ti really dont know how to add the proper metadata to the system extension
Tcould you send me one of yours or something?
T
Tlike, the symlinks are working properly and everything!
Tits just the sysext now :(
Byou need this file inside your squashfs
BGitHub
EXPERIMENTAL: ublue systemd-sysext. Contribute to ublue-os/sysext development by creating an account on GitHub.
Band it needs to match the name of your squashfs
Bso mynixthing.raw should have /usr/lib/extension-release.d/mynixthing.sysext as the name
Toh.
Tso thats the issue...
Tits just the file name....
Till fix it
Tjesus christ it actually worked
T@bketelsen
T
Tit really did work!!!!!!!!!!!!!!!
T
T
TSo! The PR is almost done! Now layering stuff is as easy as running:
TIt just isnt usable yet because the built images arent compatible with systemd-sysext for some reason??? It just complains about it.
TYou can ignore the warning with the
--forcesystemd-sysext but stuff like ssh sessions and whatever else apparently just crap themselves out and dont work anymore???TI guess thats pretty much it!
TI really dont know how to fix that, tho, although I'm pretty sure there is something to do with file permissions on /usr/share
TMade a PR on GH with all the changes!
TGitHub
This PR implements #3!
Here is a graph explaining what this PR does:
Here is a graph explaining what this PR does:
Tcc: @bketelsen
T(theres also a graph on the PR view)
Bthat's insane! I'll play with it tomorrow!
Tplease use it on a VM for now tho!!!
Tit gonna break your current user session for now
Tim trying to troubleshoot the permission issues
Tyou can add any packages from nixpkgs on
config.jsonTill eventually add flake / flakehub support too
TWell! Not anymore!
Tyou can try it out on your own system now, hopefully
Tit shouldnt break anything
Tat the worst case you can just reboot
Tbut just make sure SELinux is permissive first (else it will actually break stuff on runtime)
