- Encrypt everthing including /boot and /root
- Enter password once
Download unstable NixOS graphical live iso (cause vim
on graphical live iso and easier to read this guide in browser) and write to USB stick.
lsblk
umount /dev/sdX1
dd if=path/to/nixos-graphical-unstable-x86_64-linux.iso of=/dev/sdX bs=10M oflag=direct status=progress