How to Setup a New PC With Lanzaboote, TPM Decryption, sops-nix, Impermanence and nixos-anywhere

Background Be Careful Make sure if you follow this guide you could lose your data. Make sure to back up whatever important data you have. Or do what I did and test this on a new device where it doesn’t matter if something goes wrong. But don’t try to do this on a machine that has important data, or you need to use day to day. Though I was able to set up a new laptop in about 20 mins once I got everything working. It can be fiddly. ...

TIL: How to Use Sops Nix With Colmena

TIL: How to Use Sops Nix With Colmena If we are using colmena, how can we set it up when we deploy a secret, for example when deploying k3s the token? i.e. services.k3s.tokenFile = "/my.token";. So to do this first, I will assume you already have a colmena config and sops-nix setup in your config. First, let’s set up our hosts, in this case RPIs which already come /etc/ssh/ssh_host_ed25519_key ssh key we can turn to an age key, i.e. in our .sops.yaml. ...