kyle/imladris
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

dixie: label /srv/cold as ds2-cold, use sfdisk for wipe

Browse Source
This commit is contained in:
kyle
2026-09-24 23:20:01 -07:00
parent fddaffc825
commit 0c37b07099
1 changed files with 9 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
hw/dixie/analysis.nix
+9 -7
View File
@@ -14,12 +14,11 @@
# NOT declarative — it runs once as an imperative step during deploy (see below). # NOT declarative — it runs once as an imperative step during deploy (see below).
# #
# HDD wipe (authorized for sda = WDC WD6003FZBX-00K5WB0, serial V7G47PKH only): # HDD wipe (authorized for sda = WDC WD6003FZBX-00K5WB0, serial V7G47PKH only):
# doas smartctl -i -d sat /dev/sda # confirm model+serial first # wipefs -a /dev/sda2 /dev/sda1 /dev/sda # partitions first, then the disk
# doas wipefs -a /dev/sda # drop BitLocker sig + GPT # printf 'label: gpt\n,,L\n' | sfdisk /dev/sda # GPT + one Linux span
# doas sgdisk --zap-all /dev/sda # remove any leftover partition table # udevadm settle
# doas sgdisk -n 0:0:+0 -t 0:8300 -c 0:dropsonde-cold /dev/sda # mkfs.xfs -L ds2-cold /dev/sda1
# doas mkfs.xfs -L dropsonde-cold /dev/sda1 # One GPT partition, XFS, label ds2-cold. sdb (stick) and nvme0n1 (root) untouched.
# One GPT partition, XFS, label dropsonde-cold. sdb (stick) and nvme0n1 (root) untouched.
# #
# Password: generated on dixie as root, never committed: # Password: generated on dixie as root, never committed:
# umask 077; openssl rand -base64 32 > /root/dropsonde-pg # umask 077; openssl rand -base64 32 > /root/dropsonde-pg
@@ -50,8 +49,11 @@ in
# --- /srv/cold (5.5 TB HDD, by label) ------------------------------------- # --- /srv/cold (5.5 TB HDD, by label) -------------------------------------
# The wipe+format of sda happens once during deploy; this entry just mounts # The wipe+format of sda happens once during deploy; this entry just mounts
# by label with nofail so a missing disk never blocks boot. # by label with nofail so a missing disk never blocks boot.
# Label is ds2-cold (8 chars; XFS caps labels at 12). Not "dropsonde-cold":
# hyperborea's NVMe is already labelled "dropsonde", and duplicate labels
# across hosts is a footgun.
fileSystems."/srv/cold" = { fileSystems."/srv/cold" = {
device = "/dev/disk/by-label/dropsonde-cold"; device = "/dev/disk/by-label/ds2-cold";
fsType = "xfs"; fsType = "xfs";
options = [ "noatime" "nofail" "x-systemd.device-timeout=30s" ]; options = [ "noatime" "nofail" "x-systemd.device-timeout=30s" ];
}; };