Tweaks for Khanda (go back to Surface kernel, use remote builds)

README.md

@@ -37,6 +37,17 @@ sudo nixos-rebuild switch --flake .
 
 `switch` replaces the running system immediately, or you can use `boot` to only apply the switch during the next reboot.
 
+#### Remote builds
+
+You can build any Nix or NixOS expression on a remote system before copying it over, as long as you have SSH access to the build target.
+
+> [!NOTE]
+> Run this command without sudo, otherwise SSHing into `haven` won't work.
+
+```sh
+nixos-rebuild boot --flake . --build-host haven
+```
+
 ### Upgrading
 
 This config installs a [Nix wrapper called nh](https://github.com/viperML/nh). To use it, run:

hosts/Khanda/default.nix

@@ -1,4 +1,4 @@
-{ pkgs, ... }:
+{ pkgs, lib, ... }:
 
 # Settings specific to Dimaga
 
@@ -9,6 +9,7 @@
 	];
 
 	system.stateVersion = "24.05";
+	system.autoUpgrade.enable = lib.mkForce false;
 
 	host = {
 		role = "workstation";

hosts/Khanda/hardware-configuration.nix

@@ -54,5 +54,5 @@
 	};
 
 	# FIXME: Use default kernel to avoid full kernel rebuilds
-	boot.kernelPackages = lib.mkForce pkgs.linuxPackages_latest;
+	# boot.kernelPackages = lib.mkForce pkgs.linuxPackages_latest;
 }

modules/base/system.nix

@@ -74,8 +74,13 @@ with lib;
 			# Use the latest and greatest Nix
 			package = pkgs.nixVersions.unstable;
 
-			# Enables Flakes
-			settings.experimental-features = [ "nix-command" "flakes" ];
+			settings = {
+				# Enables Flakes
+				experimental-features = [ "nix-command" "flakes" ];
+
+				# Avoid signature verification messages when doing remote builds
+				trusted-users = [ "${config.users.users.aires.name}" ];
+			};
 
 			# Enable periodic nix store optimization
 			optimise.automatic = true;