[byjpr]

Closes #23

Changes

• New flake input nixos-images, with both of its nixpkgs inputs following ours. Only its NixOS modules (kexec-installer, noninteractive) are used.
• packages.x86_64-linux.kexec-installer builds nixos-kexec-installer-noninteractive-x86_64-linux.tar.gz from our pinned nixpkgs, so the installer is covered by flake.lock like the server itself.
• just install builds it and passes it to nixos-anywhere with --kexec <local file>. nixos-anywhere then uploads it, instead of having the server download the latest nixos-images release from GitHub.
• Fallback: where no x86_64-linux builder is available (e.g. macOS without a Linux builder), it falls back to nixos-anywhere's default download with a warning.

Testing

• I built the package locally from the pinned nixpkgs. It took 16 minutes on 4 cores the first time and is cached after that. The result is a 479 MB tarball containing kexec/run, kexec/bzImage, kexec/initrd, kexec/kexec and kexec/ip, with the file name install.sh expects.
• I confirmed in nixos-anywhere's source that --kexec accepts a local file and uploads it (localUploadCommand).
• All 5 provider example systems build. nixfmt, shellcheck and tofu validate pass.
• Not booted on a real server. The image is built by the same nixos-images module as the official releases, just with our nixpkgs.

Note

The first just install on a machine now builds the image, which takes about 15 minutes unless it's already in the Nix store.

🤖 Generated with Claude Code

https://claude.ai/code/session_01G22o7QQ17GRtkCqpJNFr9B

---

Generated by Claude Code