add an installer for not522

config/default.nix

@@ -2,6 +2,7 @@
   imports = [
     "${nixos-config}/modules"
     "${nixos-config}/services/tailscale.nix"
+    "${nixos-config}/services/openssh.nix"
     "${nixos-config}/users"
     ./systemd-boot.nix
   ];

flake.nix

@@ -75,6 +75,7 @@
         nixos-config = self;
         inherit inputs;
         inTester = false;
+        pureInputs = inputs';
       };
     pkgsFor = system: let
       inputs' =
@@ -143,6 +144,10 @@
           config = ./machine/not522;
           system = "riscv64-linux";
         };
+        not522-installer = {
+          config = ./machine/not522/installer;
+          system = "riscv64-linux";
+        };
       };
       containers = mapAttrs (_: container:
         mkSystem {

machine/not522/default.nix

@@ -11,4 +11,5 @@
     ./cross-packages.nix
   ];
   system.stateVersion = "24.11";
+  nixpkgs.config.allowUnsupportedSystem = true;
 }

machine/not522/disko.nix

@@ -21,7 +21,7 @@
               };
             };
             root = {
-              size = "-8G";
+              end = "-8G";
               content = {
                 type = "btrfs";
                 extraArgs = ["-f"]; # Override existing partition

machine/not522/installer/default.nix

@@ -0,0 +1,40 @@
+{
+  nixos-config,
+  nixos-hardware,
+  config,
+  pureInputs,
+  pkgs,
+  lib,
+  ...
+}: let
+  dependencies =
+    [
+      nixos-config.nixosConfigurations.not522.config.system.build.toplevel
+      nixos-config.nixosConfigurations.not522.config.system.build.diskoScript
+      nixos-config.nixosConfigurations.not522.config.system.build.diskoScript.drvPath
+      nixos-config.nixosConfigurations.not522.pkgs.stdenv.drvPath
+      (nixos-config.nixosConfigurations.not522.pkgs.closureInfo {rootPaths = [];}).drvPath
+    ]
+    ++ map (i: i.outPath) (builtins.filter builtins.isAttrs (builtins.attrValues pureInputs));
+
+  closureInfo = pkgs.closureInfo {rootPaths = dependencies;};
+in {
+  networking.hostName = "not522-installer";
+  imports = [
+    "${nixos-config}/config"
+    "${nixos-config}/machine/not522/hardware.nix"
+    "${nixos-config}/machine/not522/cross-packages.nix"
+    ./disko.nix
+  ];
+
+  system.stateVersion = config.system.nixos.version;
+
+  environment.etc."install-closure".source = "${closureInfo}/store-paths";
+
+  environment.systemPackages = [
+    (pkgs.writeShellScriptBin "install-nixos-unattended" ''
+      set -eux
+      exec ${pkgs.disko}/bin/disko-install --flake "${nixos-config}#not522" --disk main "${nixos-config.nixosConfigurations.not522.config.disko.devices.disk.main.device}"
+    '')
+  ];
+}

machine/not522/installer/disko.nix

@@ -0,0 +1,55 @@
+{
+  disko.devices = {
+    disk = {
+      main = {
+        type = "disk";
+        device = "/dev/mmcblk1";
+        content = {
+          type = "gpt";
+          partitions = {
+            ESP = {
+              priority = 1;
+              name = "ESP";
+              start = "1M";
+              end = "1024M";
+              type = "EF00";
+              content = {
+                type = "filesystem";
+                format = "vfat";
+                mountpoint = "/boot";
+                mountOptions = ["umask=0077"];
+              };
+            };
+            root = {
+              size = "100%";
+              content = {
+                type = "btrfs";
+                extraArgs = ["-f"]; # Override existing partition
+                # Subvolumes must set a mountpoint in order to be mounted,
+                # unless their parent is mounted
+                subvolumes = {
+                  # Subvolume name is different from mountpoint
+                  "/root" = {
+                    mountOptions = ["compress=zstd"];
+                    mountpoint = "/";
+                  };
+                  # Subvolume name is the same as the mountpoint
+                  "/persistent" = {
+                    mountOptions = ["compress=zstd"];
+                    mountpoint = "/persistent";
+                  };
+                  # Parent is not mounted so the mountpoint must be set
+                  "/nix" = {
+                    mountOptions = ["compress=zstd" "noatime"];
+                    mountpoint = "/nix";
+                  };
+                };
+                mountpoint = "/partition-root";
+              };
+            };
+          };
+        };
+      };
+    };
+  };
+}

modules/default.nix

@@ -3,6 +3,7 @@
     ./riscv.nix
     ./containers/autoconfig.nix
     ./nix/lix.nix
+    ./nix/link-inputs.nix
     ./environment/impermanence.nix
     ./secrets/sops.nix
     disko.nixosModules.default

modules/nix/link-inputs.nix

@@ -0,0 +1,23 @@
+{
+  lib,
+  inputs,
+  ...
+}: let
+  # Taken from https://github.com/gytis-ivaskevicius/flake-utils-plus/blob/master/lib/options.nix
+  inherit (lib) filterAttrs mapAttrs';
+  flakes = filterAttrs (name: value: (name != "self") && (value ? outputs)) inputs;
+  nixRegistry =
+    builtins.mapAttrs
+    (name: v: {flake = v;})
+    flakes;
+in {
+  nix.registry = nixRegistry;
+  environment.etc =
+    mapAttrs'
+    (name: value: {
+      name = "nix/inputs/${name}";
+      value = {source = value.outPath;};
+    })
+    flakes;
+  nix.nixPath = ["/etc/nix/inputs"];
+}

services/openssh.nix

@@ -0,0 +1,7 @@
+{...}: {
+  services.openssh.settings = {
+    PermitRootLogin = true;
+    PasswordAuthentication = false;
+  };
+  networking.firewall.allowedTCPPorts = [22];
+}