dotfiles/devvm.nix at master · turbio/dotfiles · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
{
  microvm,
  mksystem,
  pkgs,
  lib,
  ...
}:
let
  vmexec =
    mksystem [
      microvm.nixosModules.microvm
      (
        { pkgs, ... }:
        {
          users.users.root.password = "";
          microvm = {
            volumes = [
              {
                mountPoint = "/var";
                image = "var.img";
                size = 256;
              }
            ];
            shares = [
              {
                # use proto = "virtiofs" for MicroVMs that are started by systemd
                proto = "9p";
                tag = "ro-store";
                # a host's /nix/store will be picked up so that no
                # squashfs/erofs will be built for it.
                source = "/nix/store";
                mountPoint = "/nix/.ro-store";
                readOnly = true;
              }

              {
                proto = "9p";
                tag = "ro-host-home";
                source = "/home";
                mountPoint = "/shares/host-home";
                readOnly = true;
              }

              {
                proto = "9p";
                tag = "rw-project-root";
                source = "./devvm-checkout";
                mountPoint = "/shares/project-root";
                readOnly = false;
              }
            ];

            writableStoreOverlay = "/nix/.rw-store";

            # "qemu" has 9p built-in!
            hypervisor = "qemu";
            socket = "control.socket";

            interfaces =
              lib.optional true # qemu or kvmtool
                {
                  type = "user";
                  id = "qemu";
                  mac = "02:00:00:01:01:01";
                };
          };

          fileSystems = {
            "/home" = {
              overlay = {
                upperdir = "/shares/.overlay-host-home/upper";
                workdir = "/shares/.overlay-host-home/work";
                lowerdir = [ "/shares/host-home" ];
              };
              fsType = "overlay";
            };
          };

          systemd.services.myCustomStartupScript = {
            wantedBy = [ "multi-user.target" ]; # Ensures it runs at boot
            path = [
              pkgs.coreutils
              pkgs.bash
            ];
            enable = true;
            serviceConfig = {
              Type = "oneshot";
              User = "root";
              Group = "root";
            };
            script = ''
              chown -R turbio:users /home
            '';
          };

          isDesktop = true;
          services.getty.autologinUser = "turbio";
          environment.systemPackages = with pkgs; [
            claude-code
          ];

          systemd.timers."webcam-log".enable = false;
        }
      )
    ] "vm"
    |> (s: s.config.microvm.declaredRunner);
in
pkgs.writeShellScriptBin "devvm-in-cwd" ''
  set -euo pipefail

  repo_root=$(git rev-parse --show-toplevel)
  mkdir -p "$repo_root/devvm-checkout"
  cd "$repo_root"
  exec ${lib.getExe vmexec}
''