Reorganize

.actrc

@@ -0,0 +1 @@
+--artifact-server-path ./.act-artifacts

.github/workflows/build-installer.yml

@@ -0,0 +1,70 @@
+name: Build installer ISO
+
+on:
+  push:
+    branches: [main]
+    tags: ["v*"]
+  pull_request:
+  workflow_dispatch:
+
+jobs:
+  build:
+    name: Build astra-installer.iso
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Free disk space
+        run: |
+          sudo rm -rf /usr/share/dotnet /usr/local/lib/android /opt/ghc \
+            /opt/hostedtoolcache/CodeQL /usr/local/share/boost
+          sudo docker image prune --all --force || true
+          df -h
+
+      - name: Install Nix
+        uses: DeterminateSystems/nix-installer-action@main
+        with:
+          extra-conf: |
+            accept-flake-config = true
+            extra-substituters = https://ros.cachix.org https://attic.iid.ciirc.cvut.cz/ros
+            extra-trusted-public-keys = ros.cachix.org-1:dSyZxI8geDCJrwgvCOHDoAfOm5sV1wCPjBkKL+38Rvo= ros:JR95vUYsShSqfA1VTYoFt1Nz6uXasm5QrcOsGry9f6Q=
+
+      - uses: nix-community/cache-nix-action@v7
+        with:
+          primary-key: nix-${{ runner.os }}-${{ hashFiles('**/flake.lock') }}
+          restore-prefixes-first-match: nix-${{ runner.os }}-
+          gc-max-store-size-linux: 2G
+          purge: true
+          purge-prefixes: nix-${{ runner.os }}-
+          purge-created: 0
+          purge-last-accessed: 86400
+          purge-primary-key: never
+
+      - name: Check flake
+        run: nix flake check --print-build-logs
+
+      - name: Build installer
+        run: nix build .#installer --print-build-logs
+
+      - name: Resolve ISO path
+        id: iso
+        run: |
+          iso=$(readlink -f result/iso/*.iso)
+          echo "path=$iso" >> "$GITHUB_OUTPUT"
+          echo "name=$(basename "$iso")" >> "$GITHUB_OUTPUT"
+          ls -lh "$iso"
+
+      - name: Upload ISO artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: ${{ steps.iso.outputs.name }}
+          path: ${{ steps.iso.outputs.path }}
+          if-no-files-found: error
+          retention-days: 30
+
+      - name: Attach ISO to release
+        if: ${{ !env.ACT && startsWith(github.ref, 'refs/tags/v') }}
+        uses: softprops/action-gh-release@v2
+        with:
+          files: ${{ steps.iso.outputs.path }}
+          fail_on_unmatched_files: true

.gitignore

@@ -1,6 +1,9 @@
 # output from building
 result
 
-# output of nixos-generate-config
-/hardware-configuration.nix
-/configuration.nix
+# act local artifact store
+.act-artifacts/
+
+# direnv
+.direnv/
+.envrc

README.md

@@ -15,10 +15,6 @@
   - [Graphical system config `./system/graphical/`](./graphical/graphical/)
   - [Encrypted secrets `./system/secrets/`](./system/secrets/)
 
-## Software Prerequisites
-
-You must have [NixOS](https://nixos.org) installed to use this repository.
-
 ## Usage
 
 > [!IMPORTANT]
@@ -52,54 +48,35 @@ sudo nixos-rebuild boot
 ### Apply Flake on New Installation
 
 > [!CAUTION]
-> These instructions will overwrite your current system configuration with
-> the ASTRA one. Only use on a system where you're sure this is okay!
+> The installer erases the selected disk. Only run it on a system where this
+> is okay.
 
-First, connect to wifi and prepare the system for setup.
+First, either download the latest ISO from the [actions page](https://github.com/SHC-ASTRA/nixos-flake/actions?query=workflow%3A%22Build+installer+ISO%22+is%3Asuccess+branch%3Amain)
+or build it with the following command:
 
 ```bash
-# take ownership of the installation path
-sudo chown -R $USER /etc/nixos
-
-# remove existing system config
-rm -rf /etc/nixos/*
-
-# clone flake to correct path
-# we need to use nix-shell here because new systems do not have git installed.
-nix-shell -p git --run 'git clone https://github.com/SHC-ASTRA/flake.git /etc/nixos'
+nix build .#installer
 ```
 
-Second, modify the flake to match your installation. Depending on which system
-you're installing on, you'll need to select the correct hostname. Replace
-`${hostname}` with the one you select. Here's the list:
+The image will end up at `./result/iso/astra-installer-*.iso` after you build it.
 
-- Tracking Antenna: `antenna`
-- Clucky: `clucky`
-- Steam Deck: `deck`
-- Base Station Panda: `panda`
-- Testbed: `testbed`
+Write the image to a USB flash drive that is >=2GB using your favorite flashing
+software. I recommend [balenaEtcher](https://etcher.balena.io/) or the `dd` command.
 
-```bash
-# generate the hardware configuration and copy it to the right host
-nixos-generate-config
-mv /etc/nixos/hardware-configuration.nix /etc/nixos/hosts/${hostname}/hardware.nix
-```
-
-Third, actually install the flake.
+Once booted, run the installer and follow the prompts:
 
 ```bash
-# rebuild the system, selecting the new hostname
-sudo nixos-rebuild switch --flake /etc/nixos/#${hostname}
+astra-install
 ```
 
-Fourth, reboot and if all went well you should have the system configuration!
+You will be asked to:
 
-> [!NOTE]
-> The `astra` user will be created if it doesn't already exist, and the
-> hostname will be updated to the one you specified.
+1. Pick a host (`antenna`, `clucky`, `deck`, `panda`, `testbed`).
+2. Pick the target disk.
+3. Confirm.
 
-You'll also need to rekey the agenix secrets. Instructions for doing so can be
-found in [`system/secrets/README.md`](./system/secrets/README.md).
+The installer partitions the disk with the ASTRA layout, mounts it, and runs
+`nixos-install` for the chosen host. After it finishes, reboot when prompted.
 
 ### Testing the Flake
 
@@ -110,6 +87,9 @@ can do the following:
 # navigate to wherever you cloned the repo
 cd path/to/flake/
 
+# check if the flake is valid
+nix flake check
+
 # attempt to build the flake
 nixos-rebuild build --flake .#${hostname}
 ```
@@ -130,9 +110,12 @@ The configured channels can be seen in [`flake.nix`](./flake.nix).
 - `nix-ros-overlay`: ROS2
 - `nixpkgs`: Main set of packages.
 - `hardware`: Hardware-specific configuration, especially for NVIDIA drivers.
+- `disko`: Declarative drive partitioning.
 - `home-manager`: Manage user-level configurations.
 - `basestation-cameras`: Gstreamer cameras app.
 - `agenix`: Encrypted secrets management.
+- `vscode-server`: Patches VSCode Server to work on NixOS.
+- `treefmt-nix`: Formats the project.
 
 ## Rationale