Anish Lakhwara
120 lines
3.0 KiB
Bash
Executable File
120 lines
3.0 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
# Install script for box NAS
|
|
# Run this from the NixOS installer after rsync'ing the helm repo
|
|
#
|
|
# Prerequisites:
|
|
# - Boot NixOS installer
|
|
# - Enable SSH: passwd && sudo systemctl start sshd
|
|
# - rsync helm repo: rsync -avz --exclude='.git' /path/to/helm nixos@<IP>:~/
|
|
#
|
|
# Usage:
|
|
# cd ~/helm
|
|
# ./install-box.sh
|
|
|
|
# Configuration
|
|
FLAKE="$HOME/helm#box"
|
|
NVME="/dev/disk/by-id/nvme-CT500P310SSD8_2544543B87C2"
|
|
|
|
# ZFS drives - update these if drives change
|
|
ZFS1="/dev/disk/by-id/ata-WDC_WD40EFPX-68C6CN0_WD-WX32D954A2J7"
|
|
ZFS2="/dev/disk/by-id/ata-WDC_WD40EFPX-68C6CN0_WD-WX32D95FVZVL"
|
|
ZFS3="/dev/disk/by-id/ata-WDC_WD40EFPX-68C6CN0_WD-WX42D95M807R"
|
|
|
|
echo "=== Box NAS Installation ==="
|
|
echo ""
|
|
echo "This will install NixOS with:"
|
|
echo " - NVMe boot drive: $NVME"
|
|
echo " - ZFS RAIDZ1 pool with 3x 4TB drives (~8TB usable)"
|
|
echo ""
|
|
|
|
# Verify drives exist
|
|
echo "Verifying drives..."
|
|
for disk in "$NVME" "$ZFS1" "$ZFS2" "$ZFS3"; do
|
|
if [[ ! -e "$disk" ]]; then
|
|
echo "ERROR: Disk not found: $disk"
|
|
echo "Available disks:"
|
|
ls -la /dev/disk/by-id/ | grep -E '(nvme|ata)' | grep -v part
|
|
exit 1
|
|
fi
|
|
done
|
|
echo "All drives found."
|
|
echo ""
|
|
|
|
# Generate ZFS keyfile
|
|
echo "Generating ZFS keyfile..."
|
|
dd if=/dev/urandom of=/tmp/tank.key bs=32 count=1 2>/dev/null
|
|
echo "ZFS keyfile created at /tmp/tank.key"
|
|
echo ""
|
|
|
|
# Get LUKS password
|
|
echo "Enter LUKS password for boot drive encryption:"
|
|
read -s LUKS_PASSWORD
|
|
echo ""
|
|
echo "Confirm LUKS password:"
|
|
read -s LUKS_PASSWORD_CONFIRM
|
|
echo ""
|
|
|
|
if [[ "$LUKS_PASSWORD" != "$LUKS_PASSWORD_CONFIRM" ]]; then
|
|
echo "ERROR: Passwords do not match"
|
|
exit 1
|
|
fi
|
|
|
|
echo -n "$LUKS_PASSWORD" > /tmp/luks-password
|
|
echo "LUKS password saved."
|
|
echo ""
|
|
|
|
# Confirm before proceeding
|
|
echo "WARNING: This will DESTROY all data on the following drives:"
|
|
echo " - $NVME"
|
|
echo " - $ZFS1"
|
|
echo " - $ZFS2"
|
|
echo " - $ZFS3"
|
|
echo ""
|
|
read -p "Type 'yes' to continue: " CONFIRM
|
|
if [[ "$CONFIRM" != "yes" ]]; then
|
|
echo "Aborted."
|
|
exit 1
|
|
fi
|
|
|
|
echo ""
|
|
echo "Running disko-install..."
|
|
sudo nix \
|
|
--extra-experimental-features nix-command \
|
|
--extra-experimental-features flakes \
|
|
run 'github:nix-community/disko/latest#disko-install' -- \
|
|
--flake "$FLAKE" \
|
|
--disk nvme "$NVME" \
|
|
--disk zfs1 "$ZFS1" \
|
|
--disk zfs2 "$ZFS2" \
|
|
--disk zfs3 "$ZFS3"
|
|
|
|
echo ""
|
|
echo "Copying ZFS keyfile to installed system..."
|
|
# disko-install mounts the root filesystem at /mnt
|
|
if [[ ! -d /mnt/etc ]]; then
|
|
echo "ERROR: /mnt/etc does not exist. Is the root filesystem mounted?"
|
|
exit 1
|
|
fi
|
|
sudo mkdir -p /mnt/etc/zfs
|
|
sudo cp /tmp/tank.key /mnt/etc/zfs/tank.key
|
|
sudo chmod 000 /mnt/etc/zfs/tank.key
|
|
|
|
echo "Updating ZFS keylocation to permanent path..."
|
|
# Update keylocation so ZFS looks for the key in the installed system
|
|
sudo zfs set keylocation=file:///etc/zfs/tank.key tank
|
|
|
|
echo ""
|
|
echo "Cleaning up..."
|
|
rm -f /tmp/luks-password /tmp/tank.key
|
|
|
|
echo ""
|
|
echo "=== Installation complete! ==="
|
|
echo ""
|
|
echo "Next steps:"
|
|
echo " 1. Reboot: sudo reboot"
|
|
echo " 2. Enter LUKS password at boot prompt"
|
|
echo " 3. SSH to box at 192.168.1.240"
|
|
echo ""
|