akaihola/nixos-x1.rst

## nixos-x1.rst

      
    Raw
  

              nixos-x1.rst
            
          
    Installing NixOS on a Lenovo ThinkPad Carbon X1 Gen 9

Installation media


Downloaded nixos-21.11/latest-nixos-gnome-x86_64-linux.iso from channels.nixos.org.
NixOS manual instructs to create the USB stick using dd (see Booting from a USB Drive)
I created it using Fedora Media Writer instead

Boot from installation media


Restarted the laptop from Windows 10
Hit F1 at the Lenovo boot logo to enter the BIOS setup utility
Clicked on Startup, then → Boot
Dragged the USB HDD: item from the Excluded from Boot Priority Order list on the right to the bottom of the Boot Priority Order list on the left
Clicked on Security, then → Secure Boot
Clicked on the slider to toggle Secure Boot from On to Off
Hit F10 to save and exit
Hit F12 at the Lenovo boot logo to choose a temporary startup device
Clicked on the USB HDD: item

Boot into the NixOS live environment


Hit Enter to choose NixOS 21.11.333823.96b4157790f Installer
Click on No Thanks to skip the GNOME 41 tour
Hit the Windows key and typed keyb Enter to open the keyboard settings
Click on the + sign and selected my keyboard layout and options
Switch to the keyboard layout by clicking on en at the top panel and selecting your preferred layout
Click on Mouse & Touchpad and Tap to Click
Click on Wi-Fi, select by WiFi network from Visible Networks and type the WiFi password

Prepare the internal hard disk


Hit the Windows key and typed term Enter to open a terminal
Find the internal hard disk device name (in my case /dev/nvme0n1):
ls /dev/disk/by-id/
Partition the disk (this destroys Windows!):
sudo -i
parted /dev/nvme0n1 -- mklabel gpt                           # and answer "Yes"
parted /dev/nvme0n1 -- mkpart primary 512MiB 100%
parted /dev/nvme0n1 -- mkpart ESP fat32 1MiB 512MiB
parted /dev/nvme0n1 -- set 2 esp on
Encrypt the primary disk:
sudo cryptsetup luksFormat /dev/nvme0n1p1  # answer YES and enter passphrase
sudo cryptsetup luksOpen /dev/nvme0n1p1 crypted
sudo pvcreate /dev/mapper/crypted
sudo vgcreate vg /dev/mapper/crypted
sudo lvcreate -L 8G -n swap vg
sudo lvcreate -l '100%FREE' -n nixos vg
Create and mount filesystems:
mkfs.ext4 -L nixos /dev/vg/nixos
mkswap -L swap /dev/vg/swap
swapon /dev/vg/swap
mkfs.fat -F 32 -n boot /dev/nvme0n1p2
mount /dev/disk/by-label/nixos /mnt
mkdir -p /mnt/boot
mount /dev/nvme0n1p2 /mnt/boot
Create a configuration for NixOS:
nixos-generate-config --root /mnt
nano /mnt/etc/nixos/configuration.nix
Add or uncomment and modify the following lines, save with Ctrl-X Y Enter:
boot.loader.efi.efiSysMountPoint = "/boot/efi";

boot.loader.grub = {
  enable = true;
  version = 2;
  efiSupport = true;
  enableCryptodisk = true;
  device = "nodev";
};

boot.initrd.luks.devices = {
  crypted = {
    device = "/dev/disk/by-uuid/6d2a134f-b4cb-4b9c-b002-f3e88d2b8ca6";
    preLVM = true;
  };
};

networking.hostName = "mylaptop"; # Define your hostname.

time.timeZone = "Europe/Helsinki";

i18n.defaultLocale = "fi_FI.UTF-8";

console = {
  font = "Lat2-Terminus16";
  keyMap = "fi";
}

services.xserver.layout = "fi";

services.printing.enable = true;

sound.enable = true;
hardware.pulseaudio.enable = true;

services.xserver.libinput.enable = true;

users.users.myname = {
  isNormalUser = true;
  extraGroups = [ "wheel" ]; # Enable 'sudo' for the user.
};

nixpkgs.config.allowUnfree = true;

environment.systemPackages = with pkgs; [
  vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default.
  wget
  emacs
  firefox
  git
  telnet
  terminator
];

programs.gnupg.agent = {
  enable = true;
  enableSSHSupport = true;
};

services.openssh.enable = true;

networking.firefwall.enable = false;
Run the installer and reboot:
nixos-install
# enter the new root password when requested
reboot

Boot into NixOS

The laptop first boots into BIOS setup. Just save and exit (F10), remove the USB drive, and let the laptop boot into NixOS.

Hit the Windows key and type wifi Enter
Click on the gear icon next to your WiFi hotspot
Click on the Security tab
Add your password and click on Apply
Click on Mouse & Touchpad and Tap to Click
Hit the Windows key and type user Enter
Click on Password, select Set the password now, type the new password for the user twice, and click on Change.
Click on the top right status bar and select Shut down / Log out and Log out, and confirm Log out
Click on the username and enter the new password to log in
Click on No Thanks to skip the GNOME 41 tour
Click on Mouse & Touchpad and Tap to Click

Put NixOS configuration in Git


Open a terminal by hitting the Windows key and typing term Enter
Set the Git username and e-mail:
sudo -i
git config --global user.name "Your name"
git config --global user.email "12345+yourname@users.noreply.github.com"
Create an SSH key:
ssh-keygen -t ed25519 -C root@mylaptop
# accept the file path
# type a passphrase twice
Initialize and push the Git repository:
cd /etc/nixos
git init
git add .
git commit -m "Initial commit"
git push -u origin master