things

etcnixos/common.nix

@@ -12,6 +12,7 @@
   imports = [
     ./declarative-nm.nix
     ./distrobox.nix
+    ./vm.nix
 
     inputs.nixos-hardware.nixosModules.common-pc-ssd
   ];
@@ -54,6 +55,11 @@
     initrd = {
       compressor = "zstd";
     };
+
+    kernelModules = [
+      "ip_tables"
+      "iptable_nat"
+    ];
   };
 
   environment.etc = {
@@ -203,6 +209,8 @@
     glib
     usbutils
     libmtp
+    man-pages
+    man-pages-posix
   ];
 
   # wayland with electron/chromium applications
@@ -221,4 +229,9 @@
   };
 
   system.stateVersion = "24.11";
+
+  documentation.enable = true;
+  documentation.man.enable = true;
+  documentation.dev.enable = true;
+
 }

etcnixos/distrobox.nix

@@ -4,5 +4,8 @@
     enable = true;
   };
 
-  environment.systemPackages = [ pkgs.distrobox ];
+  environment.systemPackages = [
+    pkgs.distrobox
+    pkgs.podman-compose
+  ];
 }

etcnixos/flake.lock

@@ -10,11 +10,11 @@
         "systems": "systems"
       },
       "locked": {
-        "lastModified": 1723293904,
-        "narHash": "sha256-b+uqzj+Wa6xgMS9aNbX4I+sXeb5biPDi39VgvSFqFvU=",
+        "lastModified": 1736955230,
+        "narHash": "sha256-uenf8fv2eG5bKM8C/UvFaiJMZ4IpUFaQxk9OH5t/1gA=",
         "owner": "ryantm",
         "repo": "agenix",
-        "rev": "f6291c5935fdc4e0bef208cfc0dcab7e3f7a1c41",
+        "rev": "e600439ec4c273cf11e06fe4d9d906fb98fa097c",
         "type": "github"
       },
       "original": {
@@ -152,11 +152,11 @@
         "rust-overlay": "rust-overlay"
       },
       "locked": {
-        "lastModified": 1734994463,
-        "narHash": "sha256-S9MgfQjNt4J3I7obdLOVY23h+Yl/hnyibwGfOl+1uOE=",
+        "lastModified": 1737639419,
+        "narHash": "sha256-AEEDktApTEZ5PZXNDkry2YV2k6t0dTgLPEmAZbnigXU=",
         "owner": "nix-community",
         "repo": "lanzaboote",
-        "rev": "93e6f0d77548be8757c11ebda5c4235ef4f3bc67",
+        "rev": "a65905a09e2c43ff63be8c0e86a93712361f871e",
         "type": "github"
       },
       "original": {
@@ -167,11 +167,11 @@
     },
     "nixos-hardware": {
       "locked": {
-        "lastModified": 1735388221,
-        "narHash": "sha256-e5IOgjQf0SZcFCEV/gMGrsI0gCJyqOKShBQU0iiM3Kg=",
+        "lastModified": 1737590910,
+        "narHash": "sha256-qM/y6Dtpu9Wmf5HqeZajQdn+cS0aljdYQQQnrvx+LJE=",
         "owner": "NixOS",
         "repo": "nixos-hardware",
-        "rev": "7c674c6734f61157e321db595dbfcd8523e04e19",
+        "rev": "9368027715d8dde4b84c79c374948b5306fdd2db",
         "type": "github"
       },
       "original": {
@@ -183,11 +183,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1735531152,
-        "narHash": "sha256-As8I+ebItDKtboWgDXYZSIjGlKeqiLBvjxsQHUmAf1Q=",
+        "lastModified": 1737569578,
+        "narHash": "sha256-6qY0pk2QmUtBT9Mywdvif0i/CLVgpCjMUn6g9vB+f3M=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "3ffbbdbac0566a0977da3d2657b89cbcfe9a173b",
+        "rev": "47addd76727f42d351590c905d9d1905ca895b82",
         "type": "github"
       },
       "original": {

etcnixos/system-mreow.nix

@@ -15,8 +15,6 @@
     inputs.lanzaboote.nixosModules.lanzaboote
   ];
 
-  time.timeZone = lib.mkForce "Europe/Stockholm";
-
   services.tlp = {
     enable = true;
     settings = {
@@ -118,5 +116,10 @@
   # https://github.com/NixOS/nixos-hardware/pull/1253
   # hardware.framework.laptop13.audioEnhancement = {
   #   enable = true;
-  # };
+  # };i
+
+  # disable framework kernel module
+  # https://github.com/NixOS/nixos-hardware/issues/1330
+
+  hardware.framework.enableKmod = false;
 }

etcnixos/vm.nix

@@ -0,0 +1,14 @@
+{ pkgs, username, ... }:
+{
+
+  programs.virt-manager.enable = true;
+
+  users.groups.libvirtd.members = [ username ];
+
+  virtualisation.libvirtd.enable = true;
+
+  virtualisation.spiceUSBRedirection.enable = true;
+
+  users.users."${username}".extraGroups = [ "libvirtd" ];
+
+}