| { localSystem ? builtins.currentSystem | |
| , crossSystem ? { config = "x86_64-unknown-linux-musl"; isStatic = true; useLLVM = true; } | |
| }: | |
| let | |
| # Fetch the nixpkgs-cross-overlay sources. | |
| src = builtins.fetchTarball "https://github.com/alekseysidorov/nixpkgs-cross-overlay/tarball/main"; | |
| # Use the nixpkgs revision provided by the overlay. | |
| # This is the best way, as they are the most proven and compatible. | |
| nixpkgs = "${src}/utils/nixpkgs.nix"; | |
| # Make cross system packages. |
See the updated guide for installing OpenWrt 24.10 on Incus 6.x, and Debian 12
In case you missed it, Canonical relicensed LXD under AGPLv3 in December 2023 with a mandatory CLA. The LXD project was hard forked as Incus and licensed under an Apache 2.0 License.
Incus is maintained by the same team of developers that first created LXD and is recommended for new users going forward.
Go to OpenWRT release page, select the latest release stable release, then targets -> x86 -> 64. Right-click generic-ext4-combined.img.gz (not the "efi"!) and copy the link.
On the Proxmox host, download the archive and unpack it:
wget *paste link here*
gunzip openwrt-*.img.gz
| # To set this up, first get tailscale working in an isolated linux shell: | |
| # 1. sudo systemctl stop tailscaled.service | |
| # 2. tailscaled -port 9993 -state tailscale-luks-setup.state -tun userspace-networking -socket ./tailscaled.sock | |
| # 3. tailscale -socket ./tailscaled.sock up -hostname HOSTNAME-luks | |
| # 4. tailscale -socket ./tailscaled.sock down | |
| # 5. ctrl-c out of tailscaled | |
| # 6 sudo systemctl start tailscaled.service | |
| # | |
| # Then add the .state file to your machine secrets and pass its path as tailscaleStatePath. |
| # Do not read configuration files. When given in the global configuration file /etc/youtube-dl.conf: | |
| # Do not read the user configuration in ~/.config/youtube-dl/config (%APPDATA%/youtube-dl/config.txt on Windows) | |
| # --ignore-config | |
| #=========================================General Options============================================== | |
| # Continue on download errors, for example to skip unavailable videos in a playlist | |
| --ignore-errors |
In the following gist I'm going to guide you through the process of installing and booting an entire linux distribution with full desktop environment just like you would have with a classical VM, but with much better performance and much worse isolation :)
The reason why I did this was mainly because it's cool, but also to test new distros with decent graphics performance without actually booting them on my PC.
If you "try this at home" just keep in mind a container is not as secure as a VM, and some of the option we're going to explore will weaken container isolation from "a bit risky" to "totally unsafe" depending on what you choose.
Also, we're going to use systemd-nspawn for containers as it's probably the best fit for our use case and can also boot any linux partition without needing to prepare an apposite container image.
Less go!
| --- | |
| - name: INSTALL DEVUAN | |
| hosts: all | |
| # become: yes | |
| tasks: | |
| - name: Install Devuan keyring | |
| shell: >- | |
| curl https://pkgmaster.devuan.org/devuan/pool/main/d/devuan-keyring/devuan-keyring_2017.10.03_all.deb -o devuankeys.deb && dpkg -i devuankeys.deb | |
| - name: Install sysvinit |
| # Adapted from https://github.com/bennofs/nix-index/blob/master/command-not-found.sh | |
| command_not_found_handle () { | |
| if [ -n "${MC_SID-}" ] || ! [ -t 1 ]; then | |
| >&2 echo "$1: command not found" | |
| return 127 | |
| fi | |
| echo -n "searching nix-index..." | |
| ATTRS=$(@nix-locate@ --minimal --no-group --type x --type s --top-level --whole-name --at-root "/bin/$1") |