10 files changed, 168 insertions, 42 deletions

diff --git a/_sources/generated.json b/_sources/generated.json
index d86f7005..b3604420 100644
--- a/_sources/generated.json
+++ b/_sources/generated.json
@@ -261,6 +261,36 @@
         },
         "version": "1f8c31457459ffc28cd1c3f3c2235a53efad7148"
     },
+    "netbootxyz-efi": {
+        "cargoLocks": null,
+        "date": null,
+        "extract": null,
+        "name": "netbootxyz-efi",
+        "passthru": null,
+        "pinned": false,
+        "src": {
+            "name": null,
+            "sha256": "sha256-D0UnGL0H+zua5fJAoBbfEyU4ZdjQXf6LeQ+475oVKow=",
+            "type": "url",
+            "url": "https://github.com/netbootxyz/netboot.xyz/releases/download/2.0.86/netboot.xyz.efi"
+        },
+        "version": "2.0.86"
+    },
+    "netbootxyz-lkrn": {
+        "cargoLocks": null,
+        "date": null,
+        "extract": null,
+        "name": "netbootxyz-lkrn",
+        "passthru": null,
+        "pinned": false,
+        "src": {
+            "name": null,
+            "sha256": "sha256-zUuvv/MCXhgqBCa4dl4+bWtS+Z1PCDRUX0pGLonaWpY=",
+            "type": "url",
+            "url": "https://github.com/netbootxyz/netboot.xyz/releases/download/2.0.86/netboot.xyz.lkrn"
+        },
+        "version": "2.0.86"
+    },
     "postfix-mta-sts-resolver": {
         "cargoLocks": null,
         "date": null,
diff --git a/_sources/generated.nix b/_sources/generated.nix
index a7ebef8a..c3b65800 100644
--- a/_sources/generated.nix
+++ b/_sources/generated.nix
@@ -162,6 +162,22 @@
     };
     date = "2020-02-10";
   };
+  netbootxyz-efi = {
+    pname = "netbootxyz-efi";
+    version = "2.0.86";
+    src = fetchurl {
+      url = "https://github.com/netbootxyz/netboot.xyz/releases/download/2.0.86/netboot.xyz.efi";
+      sha256 = "sha256-D0UnGL0H+zua5fJAoBbfEyU4ZdjQXf6LeQ+475oVKow=";
+    };
+  };
+  netbootxyz-lkrn = {
+    pname = "netbootxyz-lkrn";
+    version = "2.0.86";
+    src = fetchurl {
+      url = "https://github.com/netbootxyz/netboot.xyz/releases/download/2.0.86/netboot.xyz.lkrn";
+      sha256 = "sha256-zUuvv/MCXhgqBCa4dl4+bWtS+Z1PCDRUX0pGLonaWpY=";
+    };
+  };
   postfix-mta-sts-resolver = {
     pname = "postfix-mta-sts-resolver";
     version = "1.5.0";
diff --git a/hosts/vidhar/default.nix b/hosts/vidhar/default.nix
index 1af9c5e0..90ab40dd 100644
--- a/hosts/vidhar/default.nix
+++ b/hosts/vidhar/default.nix
@@ -387,7 +387,7 @@ with lib;
       algorithm = "zstd";
     };
 
-    environment.systemPackages = with pkgs; [iotop vmtouch inetutils];
+    environment.systemPackages = with pkgs; [iotop vmtouch];
 
     systemd.sysusers.enable = false;
     system.stateVersion = "21.05";
diff --git a/hosts/vidhar/network/default.nix b/hosts/vidhar/network/default.nix
index 0643f0bb..92d755f3 100644
--- a/hosts/vidhar/network/default.nix
+++ b/hosts/vidhar/network/default.nix
@@ -103,7 +103,14 @@ with lib;
           /srv/nfs/nix-store 10.141.0.0/24(ro,async,root_squash) 2a03:4000:52:ada:1::/80(ro,async,root_squash)
         '';
       };
-      settings.nfsd.vers3 = false;
+      settings.nfsd = {
+        rdma = true;
+        vers3 = false;
+        vers4 = true;
+        "vers4.0" = false;
+        "vers4.1" = false;
+        "vers4.2" = true;
+      };
     };
 
     fileSystems = {
diff --git a/hosts/vidhar/network/dhcp/default.nix b/hosts/vidhar/network/dhcp/default.nix
index 4151111d..098d3061 100644
--- a/hosts/vidhar/network/dhcp/default.nix
+++ b/hosts/vidhar/network/dhcp/default.nix
@@ -1,9 +1,32 @@
-{ flake, config, pkgs, lib, ... }:
+{ flake, config, pkgs, lib, sources, ... }:
 
 with lib;
 
 let
   nfsrootBaseUrl = "http://nfsroot.vidhar.yggdrasil";
+  tftpIp = "10.141.0.1";
+  nfsIp = tftpIp;
+  ipxe = pkgs.ipxe.override {
+    additionalTargets = {
+      "bin-i386-efi/ipxe.efi" = "i386-ipxe.efi";
+    };
+    additionalOptions = [
+      "NSLOOKUP_CMD"
+      "PING_CMD"
+      "CONSOLE_CMD"
+    ];
+    embedScript = pkgs.writeText "yggdrasil.ipxe" ''
+      #!ipxe
+
+      cpair --background 9 1
+      cpair --background 9 3
+      cpair --background 9 6
+
+      set user-class iPXE-yggdrasil
+
+      autoboot
+    '';
+  };
 in {
   config = {
     services.kea = {
@@ -25,41 +48,67 @@ in {
           };
 
           client-classes = [
-            { name = "eostre-ipxe";
-              test = "hexstring(pkt4.mac, ':') == '00:d8:61:79:c5:40' and option[77].hex == 'iPXE'";
-              next-server = "10.141.0.1";
+            { name = "ipxe-eostre";
+              test = "hexstring(pkt4.mac, ':') == '00:d8:61:79:c5:40' and option[77].hex == 'iPXE-yggdrasil'";
+              next-server = tftpIp;
               boot-file-name = "${nfsrootBaseUrl}/eostre.menu.ipxe";
               only-if-required = true;
             }
-            { name = "ipxe";
-              test = "option[77].hex == 'iPXE'";
-              next-server = "10.141.0.1";
+            { name = "ipxe-yggdrasil";
+              test = "option[77].hex == 'iPXE-yggdrasil'";
+              next-server = tftpIp;
               boot-file-name = "${nfsrootBaseUrl}/installer-x86_64-linux.menu.ipxe";
               only-if-required = true;
             }
+
+            { name = "uefi-http";
+              test = "option[client-system].hex == 0x0010";
+              option-data = [
+                { name = "vendor-class-identifier"; data = "HTTPClient"; }
+              ];
+              boot-file-name = "${nfsrootBaseUrl}/ipxe.efi";
+              only-if-required = true;
+            }
+
+            { name = "ipxe-uefi-64";
+              test = "option[77].hex == 'iPXE' and (substring(option[60].hex,0,20) == 'PXEClient:Arch:00007' or substring(option[60].hex,0,20) == 'PXEClient:Arch:00008' or substring(option[60].hex,0,20) == 'PXEClient:Arch:00009')";
+              boot-file-name = "${nfsrootBaseUrl}/ipxe.efi";
+              only-if-required = true;
+            }
+            { name = "ipxe-uefi-32";
+              test = "option[77].hex == 'iPXE' and (substring(option[60].hex,0,20) == 'PXEClient:Arch:00002' or substring(option[60].hex,0,20) == 'PXEClient:Arch:00006')";
+              boot-file-name = "${nfsrootBaseUrl}/i386-ipxe.efi";
+              only-if-required = true;
+            }
+            { name = "ipxe-legacy";
+              test = "option[77].hex == 'iPXE' and substring(option[60].hex,0,20) == 'PXEClient:Arch:00000'";
+              boot-file-name = "${nfsrootBaseUrl}/ipxe.lkrn";
+              only-if-required = true;
+            }
+
             { name = "uefi-64";
               test = "substring(option[60].hex,0,20) == 'PXEClient:Arch:00007' or substring(option[60].hex,0,20) == 'PXEClient:Arch:00008' or substring(option[60].hex,0,20) == 'PXEClient:Arch:00009'";
-              only-if-required = true;
               option-data = [
-                { name = "tftp-server-name"; data = "10.141.0.1"; }
+                { name = "tftp-server-name"; data = tftpIp; }
               ];
               boot-file-name = "ipxe.efi";
+              only-if-required = true;
             }
             { name = "uefi-32";
               test = "substring(option[60].hex,0,20) == 'PXEClient:Arch:00002' or substring(option[60].hex,0,20) == 'PXEClient:Arch:00006'";
-              only-if-required = true;
               option-data = [
-                { name = "tftp-server-name"; data = "10.141.0.1"; }
+                { name = "tftp-server-name"; data = tftpIp; }
               ];
               boot-file-name = "i386-ipxe.efi";
+              only-if-required = true;
             }
             { name = "legacy";
               test = "substring(option[60].hex,0,20) == 'PXEClient:Arch:00000'";
-              only-if-required = true;
               option-data = [
-                { name = "tftp-server-name"; data = "10.141.0.1"; }
+                { name = "tftp-server-name"; data = tftpIp; }
               ];
-              boot-file-name = "undionly.kpxe";
+              boot-file-name = "ipxe.lkrn";
+              only-if-required = true;
             }
           ];
 
@@ -261,7 +310,7 @@ in {
                     installerBuild = (flake.nixosConfigurations.${"installer-${system}-nfsroot"}.extendModules {
                       modules = [
                         ({ ... }: {
-                          config.nfsroot.storeDevice = "10.141.0.1:nix-store";
+                          config.nfsroot.storeDevice = "${nfsIp}:nix-store";
                           config.nfsroot.registrationUrl = "${nfsrootBaseUrl}/installer-${system}/registration";
                         })
                       ];
@@ -278,9 +327,12 @@ in {
                     name = "installer-${system}.menu.ipxe";
                     destination = "/installer-${system}.menu.ipxe";
                     text = ''
+                      #!ipxe
+
                       :start
                       menu iPXE boot menu for installer-${system}
-                      item installer Boot installer-${system}
+                      item installer installer-${system}
+                      item memtest memtest86plus
                       item netboot netboot.xyz
                       item shell iPXE shell
                       choose --timeout 0 --default installer selected || goto shell
@@ -291,25 +343,34 @@ in {
                       goto start
 
                       :installer
-                      chain ${nfsrootBaseUrl}/installer-${system}/netboot.ipxe
+                      chain installer-${system}/netboot.ipxe
                       goto start
 
                       :netboot
-                      chain --autofree ${nfsrootBaseUrl}/netboot.xyz.efi
+                      iseq ''${platform} efi && chain --autofree netboot.xyz.efi || chain --autofree netboot.xyz.lkrn
+                      goto start
+
+                      :memtest
+                      iseq ''${platform} efi && chain --autofree memtest.efi || chain --autofree memtest.bin
                       goto start
                     '';
                   })
                 ];
               }) ["x86_64-linux"]
             ) ++ [
-              (pkgs.linkFarm "netbootxyz-efi" [
-                { name = "netboot.xyz.efi"; path = pkgs.netbootxyz-efi; }
-              ])
+              (pkgs.runCommandLocal "utils" {} ''
+                mkdir $out
+                install -m 0444 -t $out \
+                  ${ipxe}/{ipxe.efi,i386-ipxe.efi,ipxe.lkrn} \
+                  ${pkgs.memtest86plus}/{memtest.efi,memtest.bin}
+                install -m 0444 ${sources.netbootxyz-efi.src} $out/netboot.xyz.efi
+                install -m 0444 ${sources.netbootxyz-lkrn.src} $out/netboot.xyz.lkrn
+              '')
               (let
                  eostreBuild = (flake.nixosConfigurations.eostre.extendModules {
                    modules = [
                      ({ ... }: {
-                       config.nfsroot.storeDevice = "10.141.0.1:nix-store";
+                       config.nfsroot.storeDevice = "${nfsIp}:nix-store";
                        config.nfsroot.registrationUrl = "${nfsrootBaseUrl}/eostre/registration";
                      })
                    ];
@@ -326,27 +387,35 @@ in {
                 name = "eostre.menu.ipxe";
                 destination = "/eostre.menu.ipxe";
                 text = ''
+                  #!ipxe
+
                   set menu-timeout 5000
 
                   :start
                   menu iPXE boot menu for eostre
-                  item eostre Boot eostre
+                  item eostre eostre
+                  item memtest memtest86plus
                   item netboot netboot.xyz
                   item shell iPXE shell
                   choose --timeout ''${menu-timeout} --default eostre selected || goto shell
+                  set menu-timeout 0
                   goto ''${selected}
 
                   :shell
-                  shell
                   set menu-timeout 0
+                  shell
                   goto start
 
                   :eostre
-                  chain ${nfsrootBaseUrl}/eostre/netboot.ipxe
+                  chain eostre/netboot.ipxe
                   goto start
 
                   :netboot
-                  chain --autofree ${nfsrootBaseUrl}/netboot.xyz.efi
+                  iseq ''${platform} efi && chain --autofree netboot.xyz.efi || chain --autofree netboot.xyz.lkrn
+                  goto start
+
+                  :memtest
+                  iseq ''${platform} efi && chain --autofree memtest.efi || chain --autofree memtest.bin
                   goto start
                 '';
               })
@@ -360,20 +429,12 @@ in {
       after = [ "network.target" ];
       wantedBy = [ "multi-user.target" ];
       serviceConfig.ExecStart = let
-        ipxe = pkgs.ipxe.override {
-          additionalTargets = {
-            "bin-i386-efi/ipxe.efi" = "i386-ipxe.efi";
-          };
-          additionalOptions = [
-            "NSLOOKUP_CMD"
-          ];
-        };
         tftpRoot = pkgs.runCommandLocal "netboot" {} ''
           mkdir -p $out
           install -m 0444 -t $out \
-            ${ipxe}/ipxe.efi ${ipxe}/i386-ipxe.efi ${ipxe}/undionly.kpxe
+            ${ipxe}/{ipxe.efi,i386-ipxe.efi,ipxe.lkrn}
         '';
-      in "${pkgs.atftp}/sbin/atftpd --daemon --no-fork --bind-address=10.141.0.1 ${tftpRoot}";
+      in "${pkgs.atftp}/sbin/atftpd --daemon --no-fork --bind-address=${tftpIp} ${tftpRoot}";
     };
   };
 }
diff --git a/hosts/vidhar/paperless/default.nix b/hosts/vidhar/paperless/default.nix
index 34cd18c4..dd02da38 100644
--- a/hosts/vidhar/paperless/default.nix
+++ b/hosts/vidhar/paperless/default.nix
@@ -4,7 +4,7 @@
   config = {
     services.paperless = {
       enable = true;
-      address = "[2a03:4000:52:ada:4:1::]";
+      address = "2a03:4000:52:ada:4:1::";
       passwordFile = config.sops.secrets."paperless-rootpw".path;
       settings = {
         PAPERLESS_OCR_LANGUAGE = "deu+eng";
diff --git a/installer/default.nix b/installer/default.nix
index ec47832a..7c6a4f40 100644
--- a/installer/default.nix
+++ b/installer/default.nix
@@ -8,7 +8,7 @@ with lib;
   ];
 
   config = {
-    boot.initrd.availableKernelModules = [ "e1000e" ];
+    boot.initrd.kernelModules = [ "e1000e" "virtio_net" ];
 
     hardware.cpu.amd.updateMicrocode = config.hardware.enableRedistributableFirmware;
 
diff --git a/nvfetcher.toml b/nvfetcher.toml
index ecaebba0..72c0d99d 100644
--- a/nvfetcher.toml
+++ b/nvfetcher.toml
@@ -115,3 +115,11 @@ fetch.git = "https://github.com/emersion/mako"
 [swayosd]
 src.git = "https://github.com/ErikReider/SwayOSD"
 fetch.git = "https://github.com/ErikReider/SwayOSD"
+
+[netbootxyz-efi]
+src.github = "netbootxyz/netboot.xyz"
+fetch.url = "https://github.com/netbootxyz/netboot.xyz/releases/download/$ver/netboot.xyz.efi"
+
+[netbootxyz-lkrn]
+src.github = "netbootxyz/netboot.xyz"
+fetch.url = "https://github.com/netbootxyz/netboot.xyz/releases/download/$ver/netboot.xyz.lkrn"
diff --git a/system-profiles/nfsroot.nix b/system-profiles/nfsroot.nix
index 1cd930d9..b0116d61 100644
--- a/system-profiles/nfsroot.nix
+++ b/system-profiles/nfsroot.nix
@@ -48,7 +48,7 @@ in {
       fileSystems."/nix/.ro-store" = mkImageMediaOverride
         { fsType = "nfs4";
           device = cfg.storeDevice;
-          options = [ "ro" ];
+          options = [ "ro" "nfsvers=4.2" ];
           neededForBoot = true;
         };
 
diff --git a/user-profiles/core.nix b/user-profiles/core.nix
index a8af48b3..57fb7628 100644
--- a/user-profiles/core.nix
+++ b/user-profiles/core.nix
@@ -5,7 +5,11 @@ with lib;
 {
   config = {
     users.users.${userName} = {}; # Just make sure the user is created
-    home-manager.users.${userName} = {};
+    home-manager.users.${userName} = let sysConfig = config; in { config, ... }: {
+      config.nix.settings = {
+        inherit (sysConfig.nix.settings) use-xdg-base-directories;
+      };
+    };
 
     systemd.services."home-manager-${utils.escapeSystemdPath userName}" = lib.mkIf (!config.home-manager.enableSystemd) {
       restartIfChanged = false; # only run once on startup, deploy to running system with deploy-rs