{"_module.args": {"declarations": ["lib/modules.nix"], "description": "Additional arguments passed to each module in addition to ones\nlike `lib`, `config`,\nand `pkgs`, `modulesPath`.\n\nThis option is also available to all submodules. Submodules do not\ninherit args from their parent module, nor do they provide args to\ntheir parent module or sibling submodules. The sole exception to\nthis is the argument `name` which is provided by\nparent modules to a submodule and contains the attribute name\nthe submodule is bound to, or a unique generated name if it is\nnot bound to an attribute.\n\nSome arguments are already passed by default, of which the\nfollowing *cannot* be changed with this option:\n- {var}`lib`: The nixpkgs library.\n- {var}`config`: The results of all options after merging the values from all modules together.\n- {var}`options`: The options declared in all modules.\n- {var}`specialArgs`: The `specialArgs` argument passed to `evalModules`.\n- All attributes of {var}`specialArgs`\n\n Whereas option values can generally depend on other option values\n thanks to laziness, this does not apply to `imports`, which\n must be computed statically before anything else.\n\n For this reason, callers of the module system can provide `specialArgs`\n which are available during import resolution.\n\n For NixOS, `specialArgs` includes\n {var}`modulesPath`, which allows you to import\n extra modules from the nixpkgs package tree without having to\n somehow make the module aware of the location of the\n `nixpkgs` or NixOS directories.\n ```\n { modulesPath, ... }: {\n imports = [\n (modulesPath + \"/profiles/minimal.nix\")\n ];\n }\n ```\n\nFor NixOS, the default value for this option includes at least this argument:\n- {var}`pkgs`: The nixpkgs package set according to\n the {option}`nixpkgs.pkgs` option.\n", "loc": ["_module", "args"], "readOnly": false, "type": "lazy attribute set of raw value"}, "appstream.enable": {"declarations": ["nixos/modules/config/appstream.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Whether to install files to support the\n[AppStream metadata specification](https://www.freedesktop.org/software/appstream/docs/index.html).\n", "loc": ["appstream", "enable"], "readOnly": false, "type": "boolean"}, "boot.bcache.enable": {"declarations": ["nixos/modules/tasks/bcache.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Whether to enable bcache mount support.", "example": {"_type": "literalExpression", "text": "false"}, "loc": ["boot", "bcache", "enable"], "readOnly": false, "type": "boolean"}, "boot.bcachefs.package": {"declarations": ["nixos/modules/tasks/filesystems/bcachefs.nix"], "default": {"_type": "literalExpression", "text": "pkgs.bcachefs-tools"}, "description": "The bcachefs-tools package to use. This package should also provide a passthru 'kernelModule'\nattribute to build the out-of-tree kernel module.\n", "loc": ["boot", "bcachefs", "package"], "readOnly": false, "type": "package"}, "boot.binfmt.addEmulatedSystemsToNixSandbox": {"declarations": ["nixos/modules/system/boot/binfmt.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Whether to add the {option}`boot.binfmt.emulatedSystems` to {option}`nix.settings.extra-platforms`.\nDisable this to use remote builders for those platforms, while allowing testing binaries locally.\n", "example": {"_type": "literalExpression", "text": "false"}, "loc": ["boot", "binfmt", "addEmulatedSystemsToNixSandbox"], "readOnly": false, "type": "boolean"}, "boot.binfmt.emulatedSystems": {"declarations": ["nixos/modules/system/boot/binfmt.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "List of systems to emulate. Will also configure Nix to\nsupport your new systems.\nWarning: the builder can execute all emulated systems within the same build, which introduces impurities in the case of cross compilation.\n", "example": {"_type": "literalExpression", "text": "[\n \"wasm32-wasi\"\n \"x86_64-windows\"\n \"aarch64-linux\"\n]"}, "loc": ["boot", "binfmt", "emulatedSystems"], "readOnly": false, "type": "list of (one of \"aarch64-linux\", \"aarch64_be-linux\", \"alpha-linux\", \"armv6l-linux\", \"armv7l-linux\", \"i386-linux\", \"i486-linux\", \"i586-linux\", \"i686-linux\", \"i686-windows\", \"loongarch64-linux\", \"mips-linux\", \"mips64-linux\", \"mips64-linuxabin32\", \"mips64el-linux\", \"mips64el-linuxabin32\", \"mipsel-linux\", \"powerpc-linux\", \"powerpc64-linux\", \"powerpc64le-linux\", \"riscv32-linux\", \"riscv64-linux\", \"s390x-linux\", \"sparc-linux\", \"sparc64-linux\", \"wasm32-wasi\", \"wasm64-wasi\", \"x86_64-linux\", \"x86_64-windows\")"}, "boot.binfmt.preferStaticEmulators": {"declarations": ["nixos/modules/system/boot/binfmt.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to use static emulators when available.\n\nThis enables the kernel to preload the emulator binaries when\nthe binfmt registrations are added, obviating the need to make\nthe emulator binaries available inside chroots and chroot-like\nsandboxes.\n", "loc": ["boot", "binfmt", "preferStaticEmulators"], "readOnly": false, "type": "boolean"}, "boot.binfmt.registrations": {"declarations": ["nixos/modules/system/boot/binfmt.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Extra binary formats to register with the kernel.\nSee for more details.\n", "loc": ["boot", "binfmt", "registrations"], "readOnly": false, "type": "attribute set of (submodule)"}, "boot.binfmt.registrations..fixBinary": {"declarations": ["nixos/modules/system/boot/binfmt.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to open the interpreter file as soon as the\nregistration is loaded, rather than waiting for a\nrelevant file to be invoked.\n\nSee the description of the 'F' flag in the kernel docs\nfor more details.\n", "loc": ["boot", "binfmt", "registrations", "", "fixBinary"], "readOnly": false, "type": "boolean"}, "boot.binfmt.registrations..interpreter": {"declarations": ["nixos/modules/system/boot/binfmt.nix"], "description": "The interpreter to invoke to run the program.\n\nNote that the actual registration will point to\n/run/binfmt/${name}, so the kernel interpreter length\nlimit doesn't apply.\n", "loc": ["boot", "binfmt", "registrations", "", "interpreter"], "readOnly": false, "type": "absolute path"}, "boot.binfmt.registrations..magicOrExtension": {"declarations": ["nixos/modules/system/boot/binfmt.nix"], "description": "The magic number or extension to match on.", "loc": ["boot", "binfmt", "registrations", "", "magicOrExtension"], "readOnly": false, "type": "string"}, "boot.binfmt.registrations..mask": {"declarations": ["nixos/modules/system/boot/binfmt.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "A mask to be ANDed with the byte sequence of the file before matching", "loc": ["boot", "binfmt", "registrations", "", "mask"], "readOnly": false, "type": "null or string"}, "boot.binfmt.registrations..matchCredentials": {"declarations": ["nixos/modules/system/boot/binfmt.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to launch with the credentials and security\ntoken of the binary, not the interpreter (e.g. setuid\nbit).\n\nSee the description of the 'C' flag in the kernel docs\nfor more details.\n\nImplies/requires openBinary = true.\n", "loc": ["boot", "binfmt", "registrations", "", "matchCredentials"], "readOnly": false, "type": "boolean"}, "boot.binfmt.registrations..offset": {"declarations": ["nixos/modules/system/boot/binfmt.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "The byte offset of the magic number used for recognition.", "loc": ["boot", "binfmt", "registrations", "", "offset"], "readOnly": false, "type": "null or signed integer"}, "boot.binfmt.registrations..openBinary": {"declarations": ["nixos/modules/system/boot/binfmt.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to pass the binary to the interpreter as an open\nfile descriptor, instead of a path.\n", "loc": ["boot", "binfmt", "registrations", "", "openBinary"], "readOnly": false, "type": "boolean"}, "boot.binfmt.registrations..preserveArgvZero": {"declarations": ["nixos/modules/system/boot/binfmt.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to pass the original argv[0] to the interpreter.\n\nSee the description of the 'P' flag in the kernel docs\nfor more details;\n", "loc": ["boot", "binfmt", "registrations", "", "preserveArgvZero"], "readOnly": false, "type": "boolean"}, "boot.binfmt.registrations..recognitionType": {"declarations": ["nixos/modules/system/boot/binfmt.nix"], "default": {"_type": "literalExpression", "text": "\"magic\""}, "description": "Whether to recognize executables by magic number or extension.", "loc": ["boot", "binfmt", "registrations", "", "recognitionType"], "readOnly": false, "type": "one of \"magic\", \"extension\""}, "boot.binfmt.registrations..wrapInterpreterInShell": {"declarations": ["nixos/modules/system/boot/binfmt.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Whether to wrap the interpreter in a shell script.\n\nThis allows a shell command to be set as the interpreter.\n", "loc": ["boot", "binfmt", "registrations", "", "wrapInterpreterInShell"], "readOnly": false, "type": "boolean"}, "boot.blacklistedKernelModules": {"declarations": ["nixos/modules/system/boot/modprobe.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Set of names of kernel modules that should not be loaded\nautomatically by the hardware probing code. This can either be\na list of modules or an attrset. In an attrset, names that are\nset to `true` represent modules that will be blacklisted.\n", "example": {"_type": "literalExpression", "text": "[\n \"cirrusfb\"\n \"i2c_piix4\"\n]"}, "loc": ["boot", "blacklistedKernelModules"], "readOnly": false, "type": "(attribute set of boolean) or (list of string) convertible to it"}, "boot.bootspec.enableValidation": {"declarations": ["nixos/modules/system/activation/bootspec.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to enable the validation of bootspec documents for each build.\n This will introduce Go in the build-time closure as we are relying on [Cuelang](https://cuelang.org/) for schema validation.\n Enable this option if you want to ascertain that your documents are correct\n.", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "bootspec", "enableValidation"], "readOnly": false, "type": "boolean"}, "boot.bootspec.extensions": {"declarations": ["nixos/modules/system/activation/bootspec.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "User-defined data that extends the bootspec document.\n\nTo reduce incompatibility and prevent names from clashing\nbetween applications, it is **highly recommended** to use a\nunique namespace for your extensions.\n", "loc": ["boot", "bootspec", "extensions"], "readOnly": false, "type": "attribute set of anything"}, "boot.bootspec.package": {"declarations": ["nixos/modules/system/activation/bootspec.nix"], "default": {"_type": "literalExpression", "text": "pkgs.bootspec"}, "description": "The bootspec package to use.", "loc": ["boot", "bootspec", "package"], "readOnly": false, "type": "package"}, "boot.consoleLogLevel": {"declarations": ["nixos/modules/system/boot/kernel.nix"], "default": {"_type": "literalExpression", "text": "4"}, "description": "The kernel console `loglevel`. All Kernel Messages with a log level smaller\nthan this setting will be printed to the console.\n", "loc": ["boot", "consoleLogLevel"], "readOnly": false, "type": "signed integer"}, "boot.crashDump.enable": {"declarations": ["nixos/modules/misc/crashdump.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "If enabled, NixOS will set up a kernel that will\nboot on crash, and leave the user in systemd rescue\nto be able to save the crashed kernel dump at\n/proc/vmcore.\nIt also activates the NMI watchdog.\n", "loc": ["boot", "crashDump", "enable"], "readOnly": false, "type": "boolean"}, "boot.crashDump.kernelParams": {"declarations": ["nixos/modules/misc/crashdump.nix"], "default": {"_type": "literalExpression", "text": "[\n \"1\"\n \"boot.shell_on_fail\"\n]"}, "description": "Parameters that will be passed to the kernel kexec-ed on crash.\n", "loc": ["boot", "crashDump", "kernelParams"], "readOnly": false, "type": "list of string"}, "boot.crashDump.reservedMemory": {"declarations": ["nixos/modules/misc/crashdump.nix"], "default": {"_type": "literalExpression", "text": "\"128M\""}, "description": "The amount of memory reserved for the crashdump kernel.\nIf you choose a too high value, dmesg will mention\n\"crashkernel reservation failed\".\n", "loc": ["boot", "crashDump", "reservedMemory"], "readOnly": false, "type": "string"}, "boot.devShmSize": {"declarations": ["nixos/modules/tasks/filesystems.nix"], "default": {"_type": "literalExpression", "text": "\"50%\""}, "description": "Size limit for the /dev/shm tmpfs. Look at {manpage}`mount(8)`, tmpfs size option,\nfor the accepted syntax.\n", "example": {"_type": "literalExpression", "text": "\"256m\""}, "loc": ["boot", "devShmSize"], "readOnly": false, "type": "string"}, "boot.devSize": {"declarations": ["nixos/modules/tasks/filesystems.nix"], "default": {"_type": "literalExpression", "text": "\"5%\""}, "description": "Size limit for the /dev tmpfs. Look at {manpage}`mount(8)`, tmpfs size option,\nfor the accepted syntax.\n", "example": {"_type": "literalExpression", "text": "\"32m\""}, "loc": ["boot", "devSize"], "readOnly": false, "type": "string"}, "boot.extraModprobeConfig": {"declarations": ["nixos/modules/system/boot/modprobe.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "Any additional configuration to be appended to the generated\n{file}`modprobe.conf`. This is typically used to\nspecify module options. See\n{manpage}`modprobe.d(5)` for details.\n", "example": {"_type": "literalExpression", "text": "''\n options parport_pc io=0x378 irq=7 dma=1\n''"}, "loc": ["boot", "extraModprobeConfig"], "readOnly": false, "type": "strings concatenated with \"\\n\""}, "boot.extraModulePackages": {"declarations": ["nixos/modules/system/boot/kernel.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "A list of additional packages supplying kernel modules.", "example": {"_type": "literalExpression", "text": "[ config.boot.kernelPackages.nvidia_x11 ]"}, "loc": ["boot", "extraModulePackages"], "readOnly": false, "type": "list of package"}, "boot.extraSystemdUnitPaths": {"declarations": ["nixos/modules/system/boot/stage-2.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Additional paths that get appended to the SYSTEMD_UNIT_PATH environment variable\nthat can contain mutable unit files.\n", "loc": ["boot", "extraSystemdUnitPaths"], "readOnly": false, "type": "list of string"}, "boot.growPartition": {"declarations": ["nixos/modules/system/boot/grow-partition.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to enable growing the root partition on boot.", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "growPartition"], "readOnly": false, "type": "boolean"}, "boot.hardwareScan": {"declarations": ["nixos/modules/services/hardware/udev.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Whether to try to load kernel modules for all detected hardware.\nUsually this does a good job of providing you with the modules\nyou need, but sometimes it can crash the system or cause other\nnasty effects.\n", "loc": ["boot", "hardwareScan"], "readOnly": false, "type": "boolean"}, "boot.initrd.allowMissingModules": {"declarations": ["nixos/modules/system/boot/kernel.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether the initrd can be built even though modules listed in\n{option}`boot.initrd.kernelModules` or\n{option}`boot.initrd.availableKernelModules` are missing from\nthe kernel. This is useful when combining configurations that\ninclude a lot of modules, such as\n{option}`hardware.enableAllHardware`, with kernels that don't\nprovide as many modules as typical NixOS kernels.\n\nNote that enabling this is discouraged. Instead, try disabling\nindividual modules by setting e.g.\n`boot.initrd.availableKernelModules.foo = lib.mkForce false;`\n", "loc": ["boot", "initrd", "allowMissingModules"], "readOnly": false, "type": "boolean"}, "boot.initrd.availableKernelModules": {"declarations": ["nixos/modules/system/boot/kernel.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "The set of kernel modules in the initial ramdisk used during the\nboot process. This set must include all modules necessary for\nmounting the root device. That is, it should include modules\nfor the physical device (e.g., SCSI drivers) and for the file\nsystem (e.g., ext3). The set specified here is automatically\nclosed under the module dependency relation, i.e., all\ndependencies of the modules list here are included\nautomatically. The modules listed here are available in the\ninitrd, but are only loaded on demand (e.g., the ext3 module is\nloaded automatically when an ext3 filesystem is mounted, and\nmodules for PCI devices are loaded when they match the PCI ID\nof a device in your system). To force a module to be loaded,\ninclude it in {option}`boot.initrd.kernelModules`.\n\nThis can either be a list of modules, or an attrset. In an\nattrset, names that are set to `true` represent modules that will\nbe included. Note that setting these names to `false` does not\nprevent the module from being loaded. For that, use\n{option}`boot.blacklistedKernelModules`.\n\n", "example": {"_type": "literalExpression", "text": "[\n \"sata_nv\"\n \"ext3\"\n]"}, "loc": ["boot", "initrd", "availableKernelModules"], "readOnly": false, "type": "(attribute set of boolean) or (list of string) convertible to it"}, "boot.initrd.checkJournalingFS": {"declarations": ["nixos/modules/system/boot/stage-1.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Whether to run {command}`fsck` on journaling filesystems such as ext3.\n", "loc": ["boot", "initrd", "checkJournalingFS"], "readOnly": false, "type": "boolean"}, "boot.initrd.clevis.devices": {"declarations": ["nixos/modules/system/boot/clevis.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Encrypted devices that need to be unlocked at boot using Clevis", "loc": ["boot", "initrd", "clevis", "devices"], "readOnly": false, "type": "attribute set of (submodule)"}, "boot.initrd.clevis.devices..secretFile": {"declarations": ["nixos/modules/system/boot/clevis.nix"], "description": "Clevis JWE file used to decrypt the device at boot, in concert with the chosen pin (one of TPM2, Tang server, or SSS).", "loc": ["boot", "initrd", "clevis", "devices", "", "secretFile"], "readOnly": false, "type": "absolute path"}, "boot.initrd.clevis.enable": {"declarations": ["nixos/modules/system/boot/clevis.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to enable Clevis in initrd.", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "initrd", "clevis", "enable"], "readOnly": false, "type": "boolean"}, "boot.initrd.clevis.package": {"declarations": ["nixos/modules/system/boot/clevis.nix"], "default": {"_type": "literalExpression", "text": "pkgs.clevis"}, "description": "The clevis package to use.", "loc": ["boot", "initrd", "clevis", "package"], "readOnly": false, "type": "package"}, "boot.initrd.clevis.useTang": {"declarations": ["nixos/modules/system/boot/clevis.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether the Clevis JWE file used to decrypt the devices uses a Tang server as a pin.", "loc": ["boot", "initrd", "clevis", "useTang"], "readOnly": false, "type": "boolean"}, "boot.initrd.compressor": {"declarations": ["nixos/modules/system/boot/stage-1.nix"], "default": {"_type": "literalMD", "text": "`zstd` if the kernel supports it (5.9+), `gzip` if not"}, "description": "The compressor to use on the initrd image. May be any of:\n\n- The name of one of the predefined compressors, see {file}`pkgs/build-support/kernel/initrd-compressor-meta.nix` for the definitions.\n- A function which, given the nixpkgs package set, returns the path to a compressor tool, e.g. `pkgs: \"${pkgs.pigz}/bin/pigz\"`\n- (not recommended, because it does not work when cross-compiling) the full path to a compressor tool, e.g. `\"${pkgs.pigz}/bin/pigz\"`\n\nThe given program should read data from stdin and write it to stdout compressed.\n", "example": {"_type": "literalExpression", "text": "\"xz\""}, "loc": ["boot", "initrd", "compressor"], "readOnly": false, "type": "string or function that evaluates to a(n) string"}, "boot.initrd.compressorArgs": {"declarations": ["nixos/modules/system/boot/stage-1.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Arguments to pass to the compressor for the initrd image, or null to use the compressor's defaults.", "loc": ["boot", "initrd", "compressorArgs"], "readOnly": false, "type": "null or (list of string)"}, "boot.initrd.enable": {"declarations": ["nixos/modules/system/boot/stage-1.nix"], "default": {"_type": "literalExpression", "text": "!config.boot.isContainer"}, "description": "Whether to enable the NixOS initial RAM disk (initrd). This may be\nneeded to perform some initialisation tasks (like mounting\nnetwork/encrypted file systems) before continuing the boot process.\n", "loc": ["boot", "initrd", "enable"], "readOnly": false, "type": "boolean"}, "boot.initrd.extraFiles": {"declarations": ["nixos/modules/system/boot/stage-1.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Extra files to link and copy in to the initrd.\n", "loc": ["boot", "initrd", "extraFiles"], "readOnly": false, "type": "attribute set of (submodule)"}, "boot.initrd.extraFiles..source": {"declarations": ["nixos/modules/system/boot/stage-1.nix"], "description": "The object to make available inside the initrd.", "loc": ["boot", "initrd", "extraFiles", "", "source"], "readOnly": false, "type": "package"}, "boot.initrd.extraFirmwarePaths": {"declarations": ["nixos/modules/system/boot/stage-1.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Other firmware files (relative to `\"${config.hardware.firmware}/lib/firmware\"`) to include in the final initrd we are building.\n", "loc": ["boot", "initrd", "extraFirmwarePaths"], "readOnly": false, "type": "list of string"}, "boot.initrd.includeDefaultModules": {"declarations": ["nixos/modules/system/boot/kernel.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "This option, if set, adds a collection of default kernel modules\nto {option}`boot.initrd.availableKernelModules` and\n{option}`boot.initrd.kernelModules`.\n", "loc": ["boot", "initrd", "includeDefaultModules"], "readOnly": false, "type": "boolean"}, "boot.initrd.kernelModules": {"declarations": ["nixos/modules/system/boot/kernel.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Set of modules that are always loaded by the initrd.\n\nThis can either be a list of modules, or an attrset. In an\nattrset, names that are set to `true` represent modules that will\nbe included. Note that setting these names to `false` does not\nprevent the module from being loaded. For that, use\n{option}`boot.blacklistedKernelModules`.\n\n", "loc": ["boot", "initrd", "kernelModules"], "readOnly": false, "type": "(attribute set of boolean) or (list of string) convertible to it"}, "boot.initrd.luks.cryptoModules": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "[\n \"aes\"\n \"aes_generic\"\n \"blowfish\"\n \"twofish\"\n \"serpent\"\n \"cbc\"\n \"xts\"\n \"lrw\"\n \"sha1\"\n \"sha256\"\n \"sha512\"\n \"af_alg\"\n \"algif_skcipher\"\n \"cryptd\"\n \"input_leds\"\n]"}, "description": "A list of cryptographic kernel modules needed to decrypt the root device(s).\nThe default includes all common modules.\n", "loc": ["boot", "initrd", "luks", "cryptoModules"], "readOnly": false, "type": "list of string"}, "boot.initrd.luks.devices": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "The encrypted disk that should be opened before the root\nfilesystem is mounted. Both LVM-over-LUKS and LUKS-over-LVM\nsetups are supported. The unencrypted devices can be accessed as\n{file}`/dev/mapper/\u00abname\u00bb`.\n", "example": {"_type": "literalExpression", "text": "{\n luksroot = {\n device = \"/dev/disk/by-uuid/430e9eff-d852-4f68-aa3b-2fa3599ebe08\";\n };\n}"}, "loc": ["boot", "initrd", "luks", "devices"], "readOnly": false, "type": "attribute set of (submodule)"}, "boot.initrd.luks.devices..allowDiscards": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to allow TRIM requests to the underlying device. This option\nhas security implications; please read the LUKS documentation before\nactivating it.\nThis option is incompatible with authenticated encryption (dm-crypt\nstacked over dm-integrity).\n", "loc": ["boot", "initrd", "luks", "devices", "", "allowDiscards"], "readOnly": false, "type": "boolean"}, "boot.initrd.luks.devices..bypassWorkqueues": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to bypass dm-crypt's internal read and write workqueues.\nEnabling this should improve performance on SSDs; see\n[here](https://wiki.archlinux.org/index.php/Dm-crypt/Specialties#Disable_workqueue_for_increased_solid_state_drive_(SSD)_performance)\nfor more information. Needs Linux 5.9 or later.\n", "loc": ["boot", "initrd", "luks", "devices", "", "bypassWorkqueues"], "readOnly": false, "type": "boolean"}, "boot.initrd.luks.devices..device": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "description": "Path of the underlying encrypted block device.", "example": {"_type": "literalExpression", "text": "\"/dev/disk/by-uuid/430e9eff-d852-4f68-aa3b-2fa3599ebe08\""}, "loc": ["boot", "initrd", "luks", "devices", "", "device"], "readOnly": false, "type": "string"}, "boot.initrd.luks.devices..fallbackToPassword": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to fallback to interactive passphrase prompt if the keyfile\ncannot be found. This will prevent unattended boot should the keyfile\ngo missing.\n", "loc": ["boot", "initrd", "luks", "devices", "", "fallbackToPassword"], "readOnly": false, "type": "boolean"}, "boot.initrd.luks.devices..fido2.credential": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "The FIDO2 credential ID.", "example": {"_type": "literalExpression", "text": "\"f1d00200d8dc783f7fb1e10ace8da27f8312d72692abfca2f7e4960a73f48e82e1f7571f6ebfcee9fb434f9886ccc8fcc52a6614d8d2\""}, "loc": ["boot", "initrd", "luks", "devices", "", "fido2", "credential"], "readOnly": false, "type": "null or string"}, "boot.initrd.luks.devices..fido2.credentials": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "List of FIDO2 credential IDs.\n\nUse this if you have multiple FIDO2 keys you want to use for the same luks device.\n", "example": {"_type": "literalExpression", "text": "[\n \"f1d00200d8dc783f7fb1e10ace8da27f8312d72692abfca2f7e4960a73f48e82e1f7571f6ebfcee9fb434f9886ccc8fcc52a6614d8d2\"\n]"}, "loc": ["boot", "initrd", "luks", "devices", "", "fido2", "credentials"], "readOnly": false, "type": "list of string"}, "boot.initrd.luks.devices..fido2.gracePeriod": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "10"}, "description": "Time in seconds to wait for the FIDO2 key.", "loc": ["boot", "initrd", "luks", "devices", "", "fido2", "gracePeriod"], "readOnly": false, "type": "signed integer"}, "boot.initrd.luks.devices..fido2.passwordLess": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Defines whatever to use an empty string as a default salt.\n\nEnable only when your device is PIN protected, such as [Trezor](https://trezor.io/).\n", "loc": ["boot", "initrd", "luks", "devices", "", "fido2", "passwordLess"], "readOnly": false, "type": "boolean"}, "boot.initrd.luks.devices..gpgCard": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "The option to use this LUKS device with a GPG encrypted luks password by the GPG Smartcard.\nIf null (the default), GPG-Smartcard will be disabled for this device.\n", "loc": ["boot", "initrd", "luks", "devices", "", "gpgCard"], "readOnly": false, "type": "null or (submodule)"}, "boot.initrd.luks.devices..gpgCard.encryptedPass": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "description": "Path to the GPG encrypted passphrase.", "loc": ["boot", "initrd", "luks", "devices", "", "gpgCard", "encryptedPass"], "readOnly": false, "type": "absolute path"}, "boot.initrd.luks.devices..gpgCard.gracePeriod": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "10"}, "description": "Time in seconds to wait for the GPG Smartcard.", "loc": ["boot", "initrd", "luks", "devices", "", "gpgCard", "gracePeriod"], "readOnly": false, "type": "signed integer"}, "boot.initrd.luks.devices..gpgCard.publicKey": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "description": "Path to the Public Key.", "loc": ["boot", "initrd", "luks", "devices", "", "gpgCard", "publicKey"], "readOnly": false, "type": "absolute path"}, "boot.initrd.luks.devices..header": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "The name of the file or block device that\nshould be used as header for the encrypted device.\n", "example": {"_type": "literalExpression", "text": "\"/root/header.img\""}, "loc": ["boot", "initrd", "luks", "devices", "", "header"], "readOnly": false, "type": "null or string"}, "boot.initrd.luks.devices..keyFile": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "The name of the file (can be a raw device or a partition) that\nshould be used as the decryption key for the encrypted device. If\nnot specified, you will be prompted for a passphrase instead.\n", "example": {"_type": "literalExpression", "text": "\"/dev/sdb1\""}, "loc": ["boot", "initrd", "luks", "devices", "", "keyFile"], "readOnly": false, "type": "null or string"}, "boot.initrd.luks.devices..keyFileOffset": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "The offset of the key file. Use this in combination with\n`keyFileSize` to use part of a file as key file\n(often the case if a raw device or partition is used as a key file).\nIf not specified, the key begins at the first byte of\n`keyFile`.\n", "example": {"_type": "literalExpression", "text": "4096"}, "loc": ["boot", "initrd", "luks", "devices", "", "keyFileOffset"], "readOnly": false, "type": "null or signed integer"}, "boot.initrd.luks.devices..keyFileSize": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "The size of the key file. Use this if only the beginning of the\nkey file should be used as a key (often the case if a raw device\nor partition is used as key file). If not specified, the whole\n`keyFile` will be used decryption, instead of just\nthe first `keyFileSize` bytes.\n", "example": {"_type": "literalExpression", "text": "4096"}, "loc": ["boot", "initrd", "luks", "devices", "", "keyFileSize"], "readOnly": false, "type": "null or signed integer"}, "boot.initrd.luks.devices..keyFileTimeout": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "The amount of time in seconds for a keyFile to appear before\ntiming out and trying passwords.\n", "example": {"_type": "literalExpression", "text": "5"}, "loc": ["boot", "initrd", "luks", "devices", "", "keyFileTimeout"], "readOnly": false, "type": "null or signed integer"}, "boot.initrd.luks.devices..postOpenCommands": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "Commands that should be run right after we have mounted our LUKS device.\n", "example": {"_type": "literalExpression", "text": "''\n umount /tmp/persistent\n''"}, "loc": ["boot", "initrd", "luks", "devices", "", "postOpenCommands"], "readOnly": false, "type": "strings concatenated with \"\\n\""}, "boot.initrd.luks.devices..preLVM": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Whether the luksOpen will be attempted before LVM scan or after it.", "loc": ["boot", "initrd", "luks", "devices", "", "preLVM"], "readOnly": false, "type": "boolean"}, "boot.initrd.luks.devices..preOpenCommands": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "Commands that should be run right before we try to mount our LUKS device.\nThis can be useful, if the keys needed to open the drive is on another partition.\n", "example": {"_type": "literalExpression", "text": "''\n mkdir -p /tmp/persistent\n mount -t zfs rpool/safe/persistent /tmp/persistent\n''"}, "loc": ["boot", "initrd", "luks", "devices", "", "preOpenCommands"], "readOnly": false, "type": "strings concatenated with \"\\n\""}, "boot.initrd.luks.devices..tryEmptyPassphrase": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "If keyFile fails then try an empty passphrase first before\nprompting for password.\n", "loc": ["boot", "initrd", "luks", "devices", "", "tryEmptyPassphrase"], "readOnly": false, "type": "boolean"}, "boot.initrd.luks.devices..yubikey": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "The options to use for this LUKS device in YubiKey-PBA.\nIf null (the default), YubiKey-PBA will be disabled for this device.\n", "loc": ["boot", "initrd", "luks", "devices", "", "yubikey"], "readOnly": false, "type": "null or (submodule)"}, "boot.initrd.luks.devices..yubikey.gracePeriod": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "10"}, "description": "Time in seconds to wait for the YubiKey.", "loc": ["boot", "initrd", "luks", "devices", "", "yubikey", "gracePeriod"], "readOnly": false, "type": "signed integer"}, "boot.initrd.luks.devices..yubikey.iterationStep": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "0"}, "description": "How much the iteration count for PBKDF2 is increased at each successful authentication.", "loc": ["boot", "initrd", "luks", "devices", "", "yubikey", "iterationStep"], "readOnly": false, "type": "signed integer"}, "boot.initrd.luks.devices..yubikey.keyLength": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "64"}, "description": "Length of the LUKS slot key derived with PBKDF2 in byte.", "loc": ["boot", "initrd", "luks", "devices", "", "yubikey", "keyLength"], "readOnly": false, "type": "signed integer"}, "boot.initrd.luks.devices..yubikey.saltLength": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "16"}, "description": "Length of the new salt in byte (64 is the effective maximum).", "loc": ["boot", "initrd", "luks", "devices", "", "yubikey", "saltLength"], "readOnly": false, "type": "signed integer"}, "boot.initrd.luks.devices..yubikey.slot": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "2"}, "description": "Which slot on the YubiKey to challenge.", "loc": ["boot", "initrd", "luks", "devices", "", "yubikey", "slot"], "readOnly": false, "type": "signed integer"}, "boot.initrd.luks.devices..yubikey.storage.device": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "\"/dev/sda1\""}, "description": "An unencrypted device that will temporarily be mounted in stage-1.\nMust contain the current salt to create the challenge for this LUKS device.\n", "loc": ["boot", "initrd", "luks", "devices", "", "yubikey", "storage", "device"], "readOnly": false, "type": "absolute path"}, "boot.initrd.luks.devices..yubikey.storage.fsType": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "\"vfat\""}, "description": "The filesystem of the unencrypted device.", "loc": ["boot", "initrd", "luks", "devices", "", "yubikey", "storage", "fsType"], "readOnly": false, "type": "string"}, "boot.initrd.luks.devices..yubikey.storage.path": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "\"/crypt-storage/default\""}, "description": "Absolute path of the salt on the unencrypted device with\nthat device's root directory as \"/\".\n", "loc": ["boot", "initrd", "luks", "devices", "", "yubikey", "storage", "path"], "readOnly": false, "type": "string"}, "boot.initrd.luks.devices..yubikey.twoFactor": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Whether to use a passphrase and a YubiKey (true), or only a YubiKey (false).", "loc": ["boot", "initrd", "luks", "devices", "", "yubikey", "twoFactor"], "readOnly": false, "type": "boolean"}, "boot.initrd.luks.fido2Support": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Enables support for authenticating with FIDO2 devices.\n", "loc": ["boot", "initrd", "luks", "fido2Support"], "readOnly": false, "type": "boolean"}, "boot.initrd.luks.gpgSupport": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Enables support for authenticating with a GPG encrypted password.\n", "loc": ["boot", "initrd", "luks", "gpgSupport"], "readOnly": false, "type": "boolean"}, "boot.initrd.luks.mitigateDMAAttacks": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Unless enabled, encryption keys can be easily recovered by an attacker with physical\naccess to any machine with PCMCIA, ExpressCard, ThunderBolt or FireWire port.\nMore information is available at .\n\nThis option blacklists FireWire drivers, but doesn't remove them. You can manually\nload the drivers if you need to use a FireWire device, but don't forget to unload them!\n", "loc": ["boot", "initrd", "luks", "mitigateDMAAttacks"], "readOnly": false, "type": "boolean"}, "boot.initrd.luks.reusePassphrases": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "When opening a new LUKS device try reusing last successful\npassphrase.\n\nUseful for mounting a number of devices that use the same\npassphrase without retyping it several times.\n\nSuch setup can be useful if you use {command}`cryptsetup luksSuspend`.\nDifferent LUKS devices will still have\ndifferent master keys even when using the same passphrase.\n", "loc": ["boot", "initrd", "luks", "reusePassphrases"], "readOnly": false, "type": "boolean"}, "boot.initrd.luks.yubikeySupport": {"declarations": ["nixos/modules/system/boot/luksroot.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Enables support for authenticating with a YubiKey on LUKS devices.\nSee the NixOS wiki for information on how to properly setup a LUKS device\nand a YubiKey to work with this feature.\n", "loc": ["boot", "initrd", "luks", "yubikeySupport"], "readOnly": false, "type": "boolean"}, "boot.initrd.network.enable": {"declarations": ["nixos/modules/system/boot/initrd-network.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Add network connectivity support to initrd. The network may be\nconfigured using the `ip` kernel parameter,\nas described in [the kernel documentation](https://www.kernel.org/doc/Documentation/filesystems/nfs/nfsroot.txt).\nOtherwise, if\n{option}`networking.useDHCP` is enabled, an IP address\nis acquired using DHCP.\n\nYou should add the module(s) required for your network card to\nboot.initrd.availableKernelModules.\n`lspci -v | grep -iA8 'network\\|ethernet'`\nwill tell you which.\n", "loc": ["boot", "initrd", "network", "enable"], "readOnly": false, "type": "boolean"}, "boot.initrd.network.flushBeforeStage2": {"declarations": ["nixos/modules/system/boot/initrd-network.nix"], "default": {"_type": "literalExpression", "text": "\"!config.boot.initrd.systemd.enable\""}, "description": "Whether to clear the configuration of the interfaces that were set up in\nthe initrd right before stage 2 takes over. Stage 2 will do the regular network\nconfiguration based on the NixOS networking options.\n\nThe default is false when systemd is enabled in initrd,\nbecause the systemd-networkd documentation suggests it.\n", "loc": ["boot", "initrd", "network", "flushBeforeStage2"], "readOnly": false, "type": "boolean"}, "boot.initrd.network.ifstate.allowIfstateToDrasticlyIncreaseInitrdSize": {"declarations": ["nixos/modules/services/networking/ifstate.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "IfState in initrd drastically increases the size of initrd, your boot partition may be too small and/or you may have significantly fewer generations. By setting this option, you acknowledge this fact and keep it in mind when reporting issues.", "loc": ["boot", "initrd", "network", "ifstate", "allowIfstateToDrasticlyIncreaseInitrdSize"], "readOnly": false, "type": "boolean"}, "boot.initrd.network.ifstate.cleanupSettings": {"declarations": ["nixos/modules/services/networking/ifstate.nix"], "default": {"_type": "literalExpression", "text": "{\n interfaces = { };\n}"}, "description": "Content of IfState's initrd cleanup configuration file. See for details. This configuration gets applied before systemd switches to stage two. The goal is to deconfigurate the whole network in order to prevent access to services, before the firewall is configured. The stage two IfState configuration will start after the firewall is configured.", "loc": ["boot", "initrd", "network", "ifstate", "cleanupSettings"], "readOnly": false, "type": "YAML 1.1 value"}, "boot.initrd.network.ifstate.enable": {"declarations": ["nixos/modules/services/networking/ifstate.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to enable initrd networking using IfState.", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "initrd", "network", "ifstate", "enable"], "readOnly": false, "type": "boolean"}, "boot.initrd.network.ifstate.package": {"declarations": ["nixos/modules/services/networking/ifstate.nix"], "default": {"_type": "literalExpression", "text": "pkgs.ifstate.override { withConfigValidation = false; }"}, "description": "The initrd IfState package to use.", "loc": ["boot", "initrd", "network", "ifstate", "package"], "readOnly": false, "type": "package"}, "boot.initrd.network.ifstate.settings": {"declarations": ["nixos/modules/services/networking/ifstate.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Content of IfState's initrd configuration file. See for details.", "loc": ["boot", "initrd", "network", "ifstate", "settings"], "readOnly": false, "type": "YAML 1.1 value"}, "boot.initrd.network.openvpn.configuration": {"declarations": ["nixos/modules/system/boot/initrd-openvpn.nix"], "description": "The configuration file for OpenVPN.\n\n::: {.warning}\nUnless your bootloader supports initrd secrets, this configuration\nis stored insecurely in the global Nix store.\n:::\n", "example": {"_type": "literalExpression", "text": "./configuration.ovpn"}, "loc": ["boot", "initrd", "network", "openvpn", "configuration"], "readOnly": false, "type": "absolute path"}, "boot.initrd.network.openvpn.enable": {"declarations": ["nixos/modules/system/boot/initrd-openvpn.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Starts an OpenVPN client during initrd boot. It can be used to e.g.\nremotely accessing the SSH service controlled by\n{option}`boot.initrd.network.ssh` or other network services\nincluded. Service is killed when stage-1 boot is finished.\n", "loc": ["boot", "initrd", "network", "openvpn", "enable"], "readOnly": false, "type": "boolean"}, "boot.initrd.network.postCommands": {"declarations": ["nixos/modules/system/boot/initrd-network.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "Shell commands to be executed after stage 1 of the\nboot has initialised the network.\n", "loc": ["boot", "initrd", "network", "postCommands"], "readOnly": false, "type": "strings concatenated with \"\\n\""}, "boot.initrd.network.ssh.authorizedKeyFiles": {"declarations": ["nixos/modules/system/boot/initrd-ssh.nix"], "default": {"_type": "literalExpression", "text": "config.users.users.root.openssh.authorizedKeys.keyFiles"}, "description": "Authorized keys taken from files for the root user on initrd.\nYou can combine the `authorizedKeyFiles` and `authorizedKeys` options.\n", "loc": ["boot", "initrd", "network", "ssh", "authorizedKeyFiles"], "readOnly": false, "type": "list of absolute path"}, "boot.initrd.network.ssh.authorizedKeys": {"declarations": ["nixos/modules/system/boot/initrd-ssh.nix"], "default": {"_type": "literalExpression", "text": "config.users.users.root.openssh.authorizedKeys.keys"}, "description": "Authorized keys for the root user on initrd.\nYou can combine the `authorizedKeys` and `authorizedKeyFiles` options.\n", "example": {"_type": "literalExpression", "text": "[\n \"ssh-rsa AAAAB3NzaC1yc2etc/etc/etcjwrsh8e596z6J0l7 example@host\"\n \"ssh-ed25519 AAAAC3NzaCetcetera/etceteraJZMfk3QPfQ foo@bar\"\n]"}, "loc": ["boot", "initrd", "network", "ssh", "authorizedKeys"], "readOnly": false, "type": "list of string"}, "boot.initrd.network.ssh.enable": {"declarations": ["nixos/modules/system/boot/initrd-ssh.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Start SSH service during initrd boot. It can be used to debug failing\nboot on a remote server, enter pasphrase for an encrypted partition etc.\nService is killed when stage-1 boot is finished.\n\nThe sshd configuration is largely inherited from\n{option}`services.openssh`.\n", "loc": ["boot", "initrd", "network", "ssh", "enable"], "readOnly": false, "type": "boolean"}, "boot.initrd.network.ssh.extraConfig": {"declarations": ["nixos/modules/system/boot/initrd-ssh.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "Verbatim contents of {file}`sshd_config`.", "loc": ["boot", "initrd", "network", "ssh", "extraConfig"], "readOnly": false, "type": "strings concatenated with \"\\n\""}, "boot.initrd.network.ssh.hostKeys": {"declarations": ["nixos/modules/system/boot/initrd-ssh.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Specify SSH host keys to import into the initrd.\n\nTo generate keys, use\n{manpage}`ssh-keygen(1)`\nas root:\n\n```\nssh-keygen -t rsa -N \"\" -f /etc/secrets/initrd/ssh_host_rsa_key\nssh-keygen -t ed25519 -N \"\" -f /etc/secrets/initrd/ssh_host_ed25519_key\n```\n\n::: {.warning}\nUnless your bootloader supports initrd secrets, these keys\nare stored insecurely in the global Nix store. Do NOT use\nyour regular SSH host private keys for this purpose or\nyou'll expose them to regular users!\n\nAdditionally, even if your initrd supports secrets, if\nyou're using initrd SSH to unlock an encrypted disk then\nusing your regular host keys exposes the private keys on\nyour unencrypted boot partition.\n:::\n", "example": {"_type": "literalExpression", "text": "[\n \"/etc/secrets/initrd/ssh_host_rsa_key\"\n \"/etc/secrets/initrd/ssh_host_ed25519_key\"\n]"}, "loc": ["boot", "initrd", "network", "ssh", "hostKeys"], "readOnly": false, "type": "list of (string or absolute path)"}, "boot.initrd.network.ssh.ignoreEmptyHostKeys": {"declarations": ["nixos/modules/system/boot/initrd-ssh.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Allow leaving {option}`config.boot.initrd.network.ssh.hostKeys` empty,\nto deploy ssh host keys out of band.\n", "loc": ["boot", "initrd", "network", "ssh", "ignoreEmptyHostKeys"], "readOnly": false, "type": "boolean"}, "boot.initrd.network.ssh.port": {"declarations": ["nixos/modules/system/boot/initrd-ssh.nix"], "default": {"_type": "literalExpression", "text": "22"}, "description": "Port on which SSH initrd service should listen.\n", "loc": ["boot", "initrd", "network", "ssh", "port"], "readOnly": false, "type": "16 bit unsigned integer; between 0 and 65535 (both inclusive)"}, "boot.initrd.network.ssh.shell": {"declarations": ["nixos/modules/system/boot/initrd-ssh.nix"], "default": {"_type": "literalExpression", "text": "\"\\\"/bin/ash\\\"\""}, "description": "Login shell of the remote user. Can be used to limit actions user can do.\n", "loc": ["boot", "initrd", "network", "ssh", "shell"], "readOnly": false, "type": "null or string"}, "boot.initrd.network.udhcpc.enable": {"declarations": ["nixos/modules/system/boot/initrd-network.nix"], "default": {"_type": "literalExpression", "text": "config.networking.useDHCP"}, "description": "Enables the udhcpc service during stage 1 of the boot process. This\ndefaults to {option}`networking.useDHCP`. Therefore, this useful if\nuseDHCP is off but the initramfs should do dhcp.\n", "loc": ["boot", "initrd", "network", "udhcpc", "enable"], "readOnly": false, "type": "boolean"}, "boot.initrd.network.udhcpc.extraArgs": {"declarations": ["nixos/modules/system/boot/initrd-network.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Additional command-line arguments passed verbatim to\nudhcpc if {option}`boot.initrd.network.enable` and\n{option}`boot.initrd.network.udhcpc.enable` are enabled.\n", "loc": ["boot", "initrd", "network", "udhcpc", "extraArgs"], "readOnly": false, "type": "list of string"}, "boot.initrd.nix-store-veritysetup.enable": {"declarations": ["nixos/modules/system/boot/nix-store-veritysetup.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to enable nix-store-veritysetup.", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "initrd", "nix-store-veritysetup", "enable"], "readOnly": false, "type": "boolean"}, "boot.initrd.postDeviceCommands": {"declarations": ["nixos/modules/system/boot/stage-1.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "Shell commands to be executed immediately after stage 1 of the\nboot has loaded kernel modules and created device nodes in\n{file}`/dev`.\n", "loc": ["boot", "initrd", "postDeviceCommands"], "readOnly": false, "type": "strings concatenated with \"\\n\""}, "boot.initrd.postMountCommands": {"declarations": ["nixos/modules/system/boot/stage-1.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "Shell commands to be executed immediately after the stage 1\nfilesystems have been mounted.\n", "loc": ["boot", "initrd", "postMountCommands"], "readOnly": false, "type": "strings concatenated with \"\\n\""}, "boot.initrd.postResumeCommands": {"declarations": ["nixos/modules/system/boot/stage-1.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "Shell commands to be executed immediately after attempting to resume.\n", "loc": ["boot", "initrd", "postResumeCommands"], "readOnly": false, "type": "strings concatenated with \"\\n\""}, "boot.initrd.preDeviceCommands": {"declarations": ["nixos/modules/system/boot/stage-1.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "Shell commands to be executed before udev is started to create\ndevice nodes.\n", "loc": ["boot", "initrd", "preDeviceCommands"], "readOnly": false, "type": "strings concatenated with \"\\n\""}, "boot.initrd.preFailCommands": {"declarations": ["nixos/modules/system/boot/stage-1.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "Shell commands to be executed before the failure prompt is shown.\n", "loc": ["boot", "initrd", "preFailCommands"], "readOnly": false, "type": "strings concatenated with \"\\n\""}, "boot.initrd.preLVMCommands": {"declarations": ["nixos/modules/system/boot/stage-1.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "Shell commands to be executed immediately before LVM discovery.\n", "loc": ["boot", "initrd", "preLVMCommands"], "readOnly": false, "type": "strings concatenated with \"\\n\""}, "boot.initrd.prepend": {"declarations": ["nixos/modules/system/boot/stage-1.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Other initrd files to prepend to the final initrd we are building.\n", "loc": ["boot", "initrd", "prepend"], "readOnly": false, "type": "list of string"}, "boot.initrd.secrets": {"declarations": ["nixos/modules/system/boot/stage-1.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Secrets to append to the initrd. The attribute name is the\npath the secret should have inside the initrd, the value\nis the path it should be copied from (or null for the same\npath inside and out).\n\nNote that `nixos-rebuild switch` will generate the initrd\nalso for past generations, so if secrets are moved or deleted\nyou will also have to garbage collect the generations that\nuse those secrets.\n", "example": {"_type": "literalExpression", "text": "{ \"/etc/dropbear/dropbear_rsa_host_key\" =\n ./secret-dropbear-key;\n}\n"}, "loc": ["boot", "initrd", "secrets"], "readOnly": false, "type": "attribute set of (null or absolute path)"}, "boot.initrd.services.bcache.enable": {"declarations": ["nixos/modules/tasks/bcache.nix"], "default": {"_type": "literalExpression", "text": "config.boot.initrd.systemd.enable && config.boot.bcache.enable"}, "description": "*This will only be used when systemd is used in stage 1.*\n\nWhether to enable bcache support in the initrd.\n", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "initrd", "services", "bcache", "enable"], "readOnly": false, "type": "boolean"}, "boot.initrd.services.lvm.enable": {"declarations": ["nixos/modules/tasks/lvm.nix"], "default": {"_type": "literalExpression", "text": "config.boot.initrd.systemd.enable && config.services.lvm.enable"}, "description": "*This will only be used when systemd is used in stage 1.*\n\nWhether to enable booting from LVM2 in the initrd.\n", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "initrd", "services", "lvm", "enable"], "readOnly": false, "type": "boolean"}, "boot.initrd.services.resolved.enable": {"declarations": ["nixos/modules/system/boot/resolved.nix"], "default": {"_type": "literalExpression", "text": "\"config.boot.initrd.systemd.network.enable\""}, "description": "Whether to enable resolved for stage 1 networking.\nUses the toplevel 'services.resolved' options for 'resolved.conf'\n", "loc": ["boot", "initrd", "services", "resolved", "enable"], "readOnly": false, "type": "unspecified value"}, "boot.initrd.services.udev.binPackages": {"declarations": ["nixos/modules/services/hardware/udev.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "*This will only be used when systemd is used in stage 1.*\n\nPackages to search for binaries that are referenced by the udev rules in stage 1.\nThis list always contains /bin of the initrd.\n", "loc": ["boot", "initrd", "services", "udev", "binPackages"], "readOnly": false, "type": "list of absolute path"}, "boot.initrd.services.udev.packages": {"declarations": ["nixos/modules/services/hardware/udev.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "*This will only be used when systemd is used in stage 1.*\n\nList of packages containing {command}`udev` rules that will be copied to stage 1.\nAll files found in\n{file}`\u00abpkg\u00bb/etc/udev/rules.d` and\n{file}`\u00abpkg\u00bb/lib/udev/rules.d`\nwill be included.\n", "loc": ["boot", "initrd", "services", "udev", "packages"], "readOnly": false, "type": "list of absolute path"}, "boot.initrd.services.udev.rules": {"declarations": ["nixos/modules/services/hardware/udev.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "{command}`udev` rules to include in the initrd\n*only*. They'll be written into file\n{file}`99-local.rules`. Thus they are read and applied\nafter the essential initrd rules.\n", "example": {"_type": "literalExpression", "text": "''\n SUBSYSTEM==\"net\", ACTION==\"add\", DRIVERS==\"?*\", ATTR{address}==\"00:1D:60:B9:6D:4F\", KERNEL==\"eth*\", NAME=\"my_fast_network_card\"\n''"}, "loc": ["boot", "initrd", "services", "udev", "rules"], "readOnly": false, "type": "strings concatenated with \"\\n\""}, "boot.initrd.stage1Greeting": {"declarations": ["nixos/modules/system/boot/stage-1.nix"], "default": {"_type": "literalExpression", "text": "\"<<< ${config.system.nixos.distroName} Stage 1 >>>\""}, "description": "The greeting message displayed during NixOS stage 1 boot.\n", "loc": ["boot", "initrd", "stage1Greeting"], "readOnly": false, "type": "string"}, "boot.initrd.supportedFilesystems": {"declarations": ["nixos/modules/system/boot/stage-1.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Names of supported filesystem types, or an attribute set of file system types\nand their state. The set form may be used together with `lib.mkForce` to\nexplicitly disable support for specific filesystems, e.g. to disable ZFS\nwith an unsupported kernel.\n", "example": {"_type": "literalExpression", "text": "{\n btrfs = true;\n zfs = lib.mkForce false;\n}\n"}, "loc": ["boot", "initrd", "supportedFilesystems"], "readOnly": false, "type": "(attribute set of boolean) or (list of string) convertible to it"}, "boot.initrd.systemd.additionalUpstreamUnits": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Additional units shipped with systemd that shall be enabled.\n", "example": {"_type": "literalExpression", "text": "[\n \"debug-shell.service\"\n \"systemd-quotacheck.service\"\n]"}, "loc": ["boot", "initrd", "systemd", "additionalUpstreamUnits"], "readOnly": false, "type": "list of string"}, "boot.initrd.systemd.automounts": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Definition of systemd automount units.\nThis is a list instead of an attrSet, because systemd mandates the names to be derived from\nthe 'where' attribute.\n", "loc": ["boot", "initrd", "systemd", "automounts"], "readOnly": false, "type": "list of (submodule)"}, "boot.initrd.systemd.contents": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Set of files that have to be linked into the initrd", "example": {"_type": "literalExpression", "text": "{\n \"/etc/machine-id\".source = /etc/machine-id;\n}\n"}, "loc": ["boot", "initrd", "systemd", "contents"], "readOnly": false, "type": "attribute set of (submodule)"}, "boot.initrd.systemd.contents..dlopen.features": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Features to enable via dlopen ELF notes. These will be in\naddition to anything included via 'usePriority',\nregardless of their priority.\n", "loc": ["boot", "initrd", "systemd", "contents", "", "dlopen", "features"], "readOnly": false, "type": "list of (optionally newline-terminated) single-line string"}, "boot.initrd.systemd.contents..dlopen.usePriority": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "default": {"_type": "literalExpression", "text": "\"recommended\""}, "description": "Priority of dlopen ELF notes to include. \"required\" is\nminimal, \"recommended\" includes \"required\", and\n\"suggested\" includes \"recommended\".\n\nSee: \n", "loc": ["boot", "initrd", "systemd", "contents", "", "dlopen", "usePriority"], "readOnly": false, "type": "one of \"required\", \"recommended\", \"suggested\""}, "boot.initrd.systemd.contents..enable": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Whether to enable copying of this file and symlinking it.", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "initrd", "systemd", "contents", "", "enable"], "readOnly": false, "type": "boolean"}, "boot.initrd.systemd.contents..source": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "description": "Path of the source file.", "loc": ["boot", "initrd", "systemd", "contents", "", "source"], "readOnly": false, "type": "absolute path"}, "boot.initrd.systemd.contents..target": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Path of the symlink.\n", "loc": ["boot", "initrd", "systemd", "contents", "", "target"], "readOnly": false, "type": "null or absolute path"}, "boot.initrd.systemd.contents..text": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Text of the file.", "loc": ["boot", "initrd", "systemd", "contents", "", "text"], "readOnly": false, "type": "null or strings concatenated with \"\\n\""}, "boot.initrd.systemd.dbus.enable": {"declarations": ["nixos/modules/services/system/dbus.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to enable dbus in stage 1.", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "initrd", "systemd", "dbus", "enable"], "readOnly": false, "type": "boolean"}, "boot.initrd.systemd.dmVerity.enable": {"declarations": ["nixos/modules/system/boot/systemd/dm-verity.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Mount verity-protected block devices in the initrd.\n\nEnabling this option allows to use `systemd-veritysetup` and\n`systemd-veritysetup-generator` in the initrd.\n", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "initrd", "systemd", "dmVerity", "enable"], "readOnly": false, "type": "boolean"}, "boot.initrd.systemd.emergencyAccess": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Set to true for unauthenticated emergency access, and false or\nnull for no emergency access.\n\nCan also be set to a hashed super user password to allow\nauthenticated access to the emergency mode.\n\nFor emergency access after initrd, use `systemd.enableEmergencyMode` instead.\n", "loc": ["boot", "initrd", "systemd", "emergencyAccess"], "readOnly": false, "type": "boolean or null or (string, not containing newlines or colons)"}, "boot.initrd.systemd.enable": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to enable systemd in initrd. The unit options such as\n{option}`boot.initrd.systemd.services` are the same as their\nstage 2 counterparts such as {option}`systemd.services`,\nexcept that `restartTriggers` and `reloadTriggers` are not\nsupported.\n", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "initrd", "systemd", "enable"], "readOnly": false, "type": "boolean"}, "boot.initrd.systemd.extraBin": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Tools to add to /bin\n", "example": {"_type": "literalExpression", "text": "{\n umount = ${pkgs.util-linux}/bin/umount;\n}\n"}, "loc": ["boot", "initrd", "systemd", "extraBin"], "readOnly": false, "type": "attribute set of absolute path"}, "boot.initrd.systemd.fido2.enable": {"declarations": ["nixos/modules/system/boot/systemd/fido2.nix"], "default": {"_type": "literalExpression", "text": "config.boot.initrd.systemd.package.withFido2"}, "description": "Whether to enable systemd FIDO2 support.", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "initrd", "systemd", "fido2", "enable"], "readOnly": false, "type": "boolean"}, "boot.initrd.systemd.groups": {"declarations": ["nixos/modules/config/users-groups.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Groups to include in initrd.\n", "loc": ["boot", "initrd", "systemd", "groups"], "readOnly": false, "type": "attribute set of (submodule)"}, "boot.initrd.systemd.groups..gid": {"declarations": ["nixos/modules/config/users-groups.nix"], "default": {"_type": "literalExpression", "text": "config.users.groups.${name}.gid"}, "description": "ID of the group in initrd.\n", "loc": ["boot", "initrd", "systemd", "groups", "", "gid"], "readOnly": false, "type": "signed integer"}, "boot.initrd.systemd.initrdBin": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Packages to include in /bin for the stage 1 emergency shell.\n", "loc": ["boot", "initrd", "systemd", "initrdBin"], "readOnly": false, "type": "list of package"}, "boot.initrd.systemd.managerEnvironment": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "default": {"_type": "literalExpression", "text": "''\n {\n PATH = \"/bin:/sbin\";\n }\n''"}, "description": "Environment variables of PID 1. These variables are\n*not* passed to started units.\n", "example": {"_type": "literalExpression", "text": "{\n SYSTEMD_LOG_LEVEL = \"debug\";\n}"}, "loc": ["boot", "initrd", "systemd", "managerEnvironment"], "readOnly": false, "type": "attribute set of (null or string or absolute path or package)"}, "boot.initrd.systemd.mounts": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Definition of systemd mount units.\nThis is a list instead of an attrSet, because systemd mandates the names to be derived from\nthe 'where' attribute.\n", "loc": ["boot", "initrd", "systemd", "mounts"], "readOnly": false, "type": "list of (submodule)"}, "boot.initrd.systemd.network.config": {"declarations": ["nixos/modules/system/boot/networkd.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Definition of global systemd network config.", "loc": ["boot", "initrd", "systemd", "network", "config"], "readOnly": false, "type": "submodule"}, "boot.initrd.systemd.network.enable": {"declarations": ["nixos/modules/system/boot/networkd.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to enable networkd or not.\n", "loc": ["boot", "initrd", "systemd", "network", "enable"], "readOnly": false, "type": "boolean"}, "boot.initrd.systemd.network.links": {"declarations": ["nixos/modules/system/boot/networkd.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Definition of systemd network links.", "loc": ["boot", "initrd", "systemd", "network", "links"], "readOnly": false, "type": "attribute set of (submodule)"}, "boot.initrd.systemd.network.netdevs": {"declarations": ["nixos/modules/system/boot/networkd.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Definition of systemd network devices.", "loc": ["boot", "initrd", "systemd", "network", "netdevs"], "readOnly": false, "type": "attribute set of (submodule)"}, "boot.initrd.systemd.network.networks": {"declarations": ["nixos/modules/system/boot/networkd.nix", "nixos/modules/system/boot/networkd.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Definition of systemd networks.", "loc": ["boot", "initrd", "systemd", "network", "networks"], "readOnly": false, "type": "attribute set of (submodule)"}, "boot.initrd.systemd.network.wait-online.anyInterface": {"declarations": ["nixos/modules/system/boot/networkd.nix"], "default": {"_type": "literalExpression", "text": "\"config.networking.useDHCP\""}, "description": "Whether to consider the network online when any interface is online, as opposed to all of them.\nThis is useful on portable machines with a wired and a wireless interface, for example.\n\nThis is on by default if {option}`networking.useDHCP` is enabled.\n", "loc": ["boot", "initrd", "systemd", "network", "wait-online", "anyInterface"], "readOnly": false, "type": "boolean"}, "boot.initrd.systemd.network.wait-online.enable": {"declarations": ["nixos/modules/system/boot/networkd.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Whether to enable the systemd-networkd-wait-online service.\n\nsystemd-networkd-wait-online can timeout and fail if there are no network interfaces\navailable for it to manage. When systemd-networkd is enabled but a different service is\nresponsible for managing the system's internet connection (for example, NetworkManager or\nconnman are used to manage WiFi connections), this service is unnecessary and can be\ndisabled.\n", "example": {"_type": "literalExpression", "text": "false"}, "loc": ["boot", "initrd", "systemd", "network", "wait-online", "enable"], "readOnly": false, "type": "boolean"}, "boot.initrd.systemd.network.wait-online.extraArgs": {"declarations": ["nixos/modules/system/boot/networkd.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Extra command-line arguments to pass to systemd-networkd-wait-online.\nThese also affect per-interface `systemd-network-wait-online@` services.\n\nSee {manpage}`systemd-networkd-wait-online.service(8)` for all available options.\n", "loc": ["boot", "initrd", "systemd", "network", "wait-online", "extraArgs"], "readOnly": false, "type": "list of string"}, "boot.initrd.systemd.network.wait-online.ignoredInterfaces": {"declarations": ["nixos/modules/system/boot/networkd.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Network interfaces to be ignored when deciding if the system is online.\n", "example": {"_type": "literalExpression", "text": "[\n \"wg0\"\n]"}, "loc": ["boot", "initrd", "systemd", "network", "wait-online", "ignoredInterfaces"], "readOnly": false, "type": "list of string"}, "boot.initrd.systemd.network.wait-online.timeout": {"declarations": ["nixos/modules/system/boot/networkd.nix"], "default": {"_type": "literalExpression", "text": "120"}, "description": "Time to wait for the network to come online, in seconds. Set to 0 to disable.\n", "example": {"_type": "literalExpression", "text": "0"}, "loc": ["boot", "initrd", "systemd", "network", "wait-online", "timeout"], "readOnly": false, "type": "unsigned integer, meaning >=0"}, "boot.initrd.systemd.package": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "default": {"_type": "literalExpression", "text": "config.systemd.package"}, "description": "The systemd package to use.\n", "loc": ["boot", "initrd", "systemd", "package"], "readOnly": false, "type": "package"}, "boot.initrd.systemd.packages": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Packages providing systemd units and hooks.", "example": {"_type": "literalExpression", "text": "[ pkgs.systemd-cryptsetup-generator ]"}, "loc": ["boot", "initrd", "systemd", "packages"], "readOnly": false, "type": "list of package"}, "boot.initrd.systemd.paths": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Definition of systemd path units.", "loc": ["boot", "initrd", "systemd", "paths"], "readOnly": false, "type": "attribute set of (submodule)"}, "boot.initrd.systemd.repart.device": {"declarations": ["nixos/modules/system/boot/systemd/repart.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "The device to operate on.\n\nIf `device == null`, systemd-repart will operate on the device\nbacking the root partition. So in order to dynamically *create* the\nroot partition in the initrd you need to set a device.\n", "example": {"_type": "literalExpression", "text": "\"/dev/vda\""}, "loc": ["boot", "initrd", "systemd", "repart", "device"], "readOnly": false, "type": "null or string"}, "boot.initrd.systemd.repart.discard": {"declarations": ["nixos/modules/system/boot/systemd/repart.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Controls whether to issue the BLKDISCARD I/O control command on the\nspace taken up by any added partitions or on the space in between them.\nUsually, it's a good idea to issue this request since it tells the underlying\nhardware that the covered blocks shall be considered empty, improving performance.\n\nSee {manpage}`systemd-repart(8)` for details.\n", "loc": ["boot", "initrd", "systemd", "repart", "discard"], "readOnly": false, "type": "boolean"}, "boot.initrd.systemd.repart.empty": {"declarations": ["nixos/modules/system/boot/systemd/repart.nix"], "default": {"_type": "literalExpression", "text": "\"refuse\""}, "description": "Controls how to operate on empty devices that contain no partition table yet.\nSee {manpage}`systemd-repart(8)` for details.\n", "example": {"_type": "literalExpression", "text": "\"require\""}, "loc": ["boot", "initrd", "systemd", "repart", "empty"], "readOnly": false, "type": "one of \"refuse\", \"allow\", \"require\", \"force\", \"create\""}, "boot.initrd.systemd.repart.enable": {"declarations": ["nixos/modules/system/boot/systemd/repart.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Grow and add partitions to a partition table at boot time in the initrd.\nsystemd-repart only works with GPT partition tables.\n\nTo run systemd-repart after the initrd, see\n`options.systemd.repart.enable`.\n", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "initrd", "systemd", "repart", "enable"], "readOnly": false, "type": "boolean"}, "boot.initrd.systemd.repart.extraArgs": {"declarations": ["nixos/modules/system/boot/systemd/repart.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Extra command-line arguments to pass to systemd-repart.\n\nSee {manpage}`systemd-repart(8)` for all available options.\n", "loc": ["boot", "initrd", "systemd", "repart", "extraArgs"], "readOnly": false, "type": "list of string"}, "boot.initrd.systemd.root": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "default": {"_type": "literalExpression", "text": "\"fstab\""}, "description": "Controls how systemd will interpret the root FS in initrd. See\n{manpage}`kernel-command-line(7)`. NixOS currently does not\nallow specifying the root file system itself this\nway. Instead, the `fstab` value is used in order to interpret\nthe root file system specified with the `fileSystems` option.\n", "example": {"_type": "literalExpression", "text": "\"gpt-auto\""}, "loc": ["boot", "initrd", "systemd", "root"], "readOnly": false, "type": "one of \"fstab\", \"gpt-auto\""}, "boot.initrd.systemd.services": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Definition of systemd service units.", "loc": ["boot", "initrd", "systemd", "services"], "readOnly": false, "type": "attribute set of (submodule)"}, "boot.initrd.systemd.settings.Manager": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "default": {"_type": "literalExpression", "text": "{\n DefaultEnvironment = \"PATH=/bin:/sbin\";\n}\n"}, "description": "Options for the global systemd service manager used in initrd. See {manpage}`systemd-system.conf(5)` man page\nfor available options.\n", "example": {"_type": "literalExpression", "text": "{\n KExecWatchdogSec = \"5min\";\n RebootWatchdogSec = \"10min\";\n RuntimeWatchdogSec = \"30s\";\n WatchdogDevice = \"/dev/watchdog\";\n}"}, "loc": ["boot", "initrd", "systemd", "settings", "Manager"], "readOnly": false, "type": "open submodule of attribute set of (systemd option)"}, "boot.initrd.systemd.slices": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Definition of slice configurations.", "loc": ["boot", "initrd", "systemd", "slices"], "readOnly": false, "type": "attribute set of (submodule)"}, "boot.initrd.systemd.sockets": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Definition of systemd socket units.", "loc": ["boot", "initrd", "systemd", "sockets"], "readOnly": false, "type": "attribute set of (submodule)"}, "boot.initrd.systemd.storePaths": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Store paths to copy into the initrd as well.\n", "loc": ["boot", "initrd", "systemd", "storePaths"], "readOnly": false, "type": "list of ((submodule) or ((optionally newline-terminated) single-line string or package) convertible to it)"}, "boot.initrd.systemd.storePaths.*.dlopen.features": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Features to enable via dlopen ELF notes. These will be in\naddition to anything included via 'usePriority',\nregardless of their priority.\n", "loc": ["boot", "initrd", "systemd", "storePaths", "*", "dlopen", "features"], "readOnly": false, "type": "list of (optionally newline-terminated) single-line string"}, "boot.initrd.systemd.storePaths.*.dlopen.usePriority": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "default": {"_type": "literalExpression", "text": "\"recommended\""}, "description": "Priority of dlopen ELF notes to include. \"required\" is\nminimal, \"recommended\" includes \"required\", and\n\"suggested\" includes \"recommended\".\n\nSee: \n", "loc": ["boot", "initrd", "systemd", "storePaths", "*", "dlopen", "usePriority"], "readOnly": false, "type": "one of \"required\", \"recommended\", \"suggested\""}, "boot.initrd.systemd.storePaths.*.enable": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Whether to enable copying of this file and symlinking it.", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "initrd", "systemd", "storePaths", "*", "enable"], "readOnly": false, "type": "boolean"}, "boot.initrd.systemd.storePaths.*.source": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "description": "Path of the source file.", "loc": ["boot", "initrd", "systemd", "storePaths", "*", "source"], "readOnly": false, "type": "absolute path"}, "boot.initrd.systemd.storePaths.*.target": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Path of the symlink.\n", "loc": ["boot", "initrd", "systemd", "storePaths", "*", "target"], "readOnly": false, "type": "null or absolute path"}, "boot.initrd.systemd.suppressedStorePaths": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Store paths specified in the storePaths option that\nshould not be copied.\n", "loc": ["boot", "initrd", "systemd", "suppressedStorePaths"], "readOnly": false, "type": "list of (optionally newline-terminated) single-line string"}, "boot.initrd.systemd.suppressedUnits": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "A list of units to skip when generating system systemd configuration directory. This has\npriority over upstream units, {option}`boot.initrd.systemd.units`, and\n{option}`boot.initrd.systemd.additionalUpstreamUnits`. The main purpose of this is to\nprevent a upstream systemd unit from being added to the initrd with any modifications made to it\nby other NixOS modules.\n", "example": {"_type": "literalExpression", "text": "[\n \"systemd-backlight@.service\"\n]"}, "loc": ["boot", "initrd", "systemd", "suppressedUnits"], "readOnly": false, "type": "list of string"}, "boot.initrd.systemd.targets": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Definition of systemd target units.", "loc": ["boot", "initrd", "systemd", "targets"], "readOnly": false, "type": "attribute set of (submodule)"}, "boot.initrd.systemd.timers": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Definition of systemd timer units.", "loc": ["boot", "initrd", "systemd", "timers"], "readOnly": false, "type": "attribute set of (submodule)"}, "boot.initrd.systemd.tmpfiles.settings": {"declarations": ["nixos/modules/system/boot/systemd/tmpfiles.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Similar to {option}`systemd.tmpfiles.settings` but the rules are\nonly applied by systemd-tmpfiles before `initrd-switch-root.target`.\n\nSee {manpage}`bootup(7)`.\n", "example": {"_type": "literalExpression", "text": "{\n \"10-mypackage\" = {\n \"/var/lib/my-service/statefolder\" = {\n d = {\n group = \"root\";\n mode = \"0755\";\n user = \"root\";\n };\n };\n };\n}"}, "loc": ["boot", "initrd", "systemd", "tmpfiles", "settings"], "readOnly": false, "type": "attribute set of attribute set of attribute set of (submodule)"}, "boot.initrd.systemd.tmpfiles.settings....age": {"declarations": ["nixos/modules/system/boot/systemd/tmpfiles.nix"], "default": {"_type": "literalExpression", "text": "\"-\""}, "description": "Delete a file when it reaches a certain age.\n\nIf a file or directory is older than the current time minus the age\nfield, it is deleted.\n\nIf set to `\"-\"` no automatic clean-up is done.\n", "example": {"_type": "literalExpression", "text": "\"10d\""}, "loc": ["boot", "initrd", "systemd", "tmpfiles", "settings", "", "", "", "age"], "readOnly": false, "type": "string"}, "boot.initrd.systemd.tmpfiles.settings....argument": {"declarations": ["nixos/modules/system/boot/systemd/tmpfiles.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "An argument whose meaning depends on the type of operation.\n\nPlease see the upstream documentation for the meaning of this\nparameter in different situations:\n{manpage}`tmpfiles.d(5)`\n", "example": {"_type": "literalExpression", "text": "\"\""}, "loc": ["boot", "initrd", "systemd", "tmpfiles", "settings", "", "", "", "argument"], "readOnly": false, "type": "string"}, "boot.initrd.systemd.tmpfiles.settings....group": {"declarations": ["nixos/modules/system/boot/systemd/tmpfiles.nix"], "default": {"_type": "literalExpression", "text": "\"-\""}, "description": "The group of the file.\n\nThis may either be a numeric ID or a user/group name.\n\nIf omitted or when set to `\"-\"`, the user and group of the user who\ninvokes systemd-tmpfiles is used.\n", "example": {"_type": "literalExpression", "text": "\"root\""}, "loc": ["boot", "initrd", "systemd", "tmpfiles", "settings", "", "", "", "group"], "readOnly": false, "type": "string"}, "boot.initrd.systemd.tmpfiles.settings....mode": {"declarations": ["nixos/modules/system/boot/systemd/tmpfiles.nix"], "default": {"_type": "literalExpression", "text": "\"-\""}, "description": "The file access mode to use when creating this file or directory.\n", "example": {"_type": "literalExpression", "text": "\"0755\""}, "loc": ["boot", "initrd", "systemd", "tmpfiles", "settings", "", "", "", "mode"], "readOnly": false, "type": "string"}, "boot.initrd.systemd.tmpfiles.settings....type": {"declarations": ["nixos/modules/system/boot/systemd/tmpfiles.nix"], "default": {"_type": "literalExpression", "text": "\"\u2039tmpfiles-type\u203a\""}, "description": "The type of operation to perform on the file.\n\nThe type consists of a single letter and optionally one or more\nmodifier characters.\n\nPlease see the upstream documentation for the available types and\nmore details:\n{manpage}`tmpfiles.d(5)`\n", "example": {"_type": "literalExpression", "text": "\"d\""}, "loc": ["boot", "initrd", "systemd", "tmpfiles", "settings", "", "", "", "type"], "readOnly": false, "type": "string"}, "boot.initrd.systemd.tmpfiles.settings....user": {"declarations": ["nixos/modules/system/boot/systemd/tmpfiles.nix"], "default": {"_type": "literalExpression", "text": "\"-\""}, "description": "The user of the file.\n\nThis may either be a numeric ID or a user/group name.\n\nIf omitted or when set to `\"-\"`, the user and group of the user who\ninvokes systemd-tmpfiles is used.\n", "example": {"_type": "literalExpression", "text": "\"root\""}, "loc": ["boot", "initrd", "systemd", "tmpfiles", "settings", "", "", "", "user"], "readOnly": false, "type": "string"}, "boot.initrd.systemd.tpm2.enable": {"declarations": ["nixos/modules/system/boot/systemd/tpm2.nix"], "default": {"_type": "literalExpression", "text": "\"boot.initrd.systemd.package.withTpm2Units\""}, "description": "Whether to enable systemd initrd TPM2 support.", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "initrd", "systemd", "tpm2", "enable"], "readOnly": false, "type": "boolean"}, "boot.initrd.systemd.units": {"declarations": ["nixos/modules/system/boot/systemd/initrd.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Definition of systemd units.", "loc": ["boot", "initrd", "systemd", "units"], "readOnly": false, "type": "attribute set of (submodule)"}, "boot.initrd.systemd.users": {"declarations": ["nixos/modules/config/users-groups.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Users to include in initrd.\n", "loc": ["boot", "initrd", "systemd", "users"], "readOnly": false, "type": "attribute set of (submodule)"}, "boot.initrd.systemd.users..group": {"declarations": ["nixos/modules/config/users-groups.nix"], "default": {"_type": "literalExpression", "text": "config.users.users.${name}.group"}, "description": "Group the user belongs to in initrd.\n", "loc": ["boot", "initrd", "systemd", "users", "", "group"], "readOnly": false, "type": "(optionally newline-terminated) single-line string"}, "boot.initrd.systemd.users..shell": {"declarations": ["nixos/modules/config/users-groups.nix"], "default": {"_type": "literalExpression", "text": "${pkgs.shadow}/bin/nologin"}, "description": "The path to the user's shell in initrd.\n", "loc": ["boot", "initrd", "systemd", "users", "", "shell"], "readOnly": false, "type": "absolute path, not containing newlines or colons"}, "boot.initrd.systemd.users..uid": {"declarations": ["nixos/modules/config/users-groups.nix"], "default": {"_type": "literalExpression", "text": "config.users.users.${name}.uid"}, "description": "ID of the user in initrd.\n", "loc": ["boot", "initrd", "systemd", "users", "", "uid"], "readOnly": false, "type": "signed integer"}, "boot.initrd.unl0kr.allowVendorDrivers": {"declarations": ["nixos/modules/system/boot/unl0kr.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to load additional drivers for certain vendors (I.E: Wacom, Intel, etc.)", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "initrd", "unl0kr", "allowVendorDrivers"], "readOnly": false, "type": "boolean"}, "boot.initrd.unl0kr.enable": {"declarations": ["nixos/modules/system/boot/unl0kr.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to enable the unl0kr on-screen keyboard in initrd to unlock LUKS.", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "initrd", "unl0kr", "enable"], "readOnly": false, "type": "boolean"}, "boot.initrd.unl0kr.package": {"declarations": ["nixos/modules/system/boot/unl0kr.nix"], "default": {"_type": "literalExpression", "text": "pkgs.buffybox"}, "description": "The buffybox package to use.", "loc": ["boot", "initrd", "unl0kr", "package"], "readOnly": false, "type": "package"}, "boot.initrd.unl0kr.settings": {"declarations": ["nixos/modules/system/boot/unl0kr.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Configuration for `unl0kr`.\n\nSee `unl0kr.conf(5)` for supported values.\n\nAlternatively, visit `https://gitlab.postmarketos.org/postmarketOS/buffybox/-/blob/3.2.0/unl0kr/unl0kr.conf`\n", "example": {"_type": "literalExpression", "text": "{\n general.animations = true;\n general.backend = \"drm\";\n theme = {\n default = \"pmos-dark\";\n alternate = \"pmos-light\";\n };\n}\n"}, "loc": ["boot", "initrd", "unl0kr", "settings"], "readOnly": false, "type": "open submodule of attribute set of section of an INI file (attrs of INI atom (null, bool, int, float or string))"}, "boot.initrd.verbose": {"declarations": ["nixos/modules/system/boot/stage-1.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Verbosity of the initrd. Please note that disabling verbosity removes\nonly the mandatory messages generated by the NixOS scripts. For a\ncompletely silent boot, you might also want to set the two following\nconfiguration options:\n\n- `boot.consoleLogLevel = 0;`\n- `boot.kernelParams = [ \"quiet\" \"udev.log_level=3\" ];`\n", "loc": ["boot", "initrd", "verbose"], "readOnly": false, "type": "boolean"}, "boot.iscsi-initiator.discoverPortal": {"declarations": ["nixos/modules/services/networking/iscsi/root-initiator.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "iSCSI portal to boot from.\n", "example": {"_type": "literalExpression", "text": "\"192.168.1.1:3260\""}, "loc": ["boot", "iscsi-initiator", "discoverPortal"], "readOnly": false, "type": "null or string"}, "boot.iscsi-initiator.extraConfig": {"declarations": ["nixos/modules/services/networking/iscsi/root-initiator.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Extra lines to append to /etc/iscsid.conf", "loc": ["boot", "iscsi-initiator", "extraConfig"], "readOnly": false, "type": "null or strings concatenated with \"\\n\""}, "boot.iscsi-initiator.extraConfigFile": {"declarations": ["nixos/modules/services/networking/iscsi/root-initiator.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Append an additional file's contents to `/etc/iscsid.conf`. Use a non-store path\nand store passwords in this file. Note: the file specified here must be available\nin the initrd, see: `boot.initrd.secrets`.\n", "loc": ["boot", "iscsi-initiator", "extraConfigFile"], "readOnly": false, "type": "null or string"}, "boot.iscsi-initiator.extraIscsiCommands": {"declarations": ["nixos/modules/services/networking/iscsi/root-initiator.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "Extra iscsi commands to run in the initrd.", "loc": ["boot", "iscsi-initiator", "extraIscsiCommands"], "readOnly": false, "type": "strings concatenated with \"\\n\""}, "boot.iscsi-initiator.logLevel": {"declarations": ["nixos/modules/services/networking/iscsi/root-initiator.nix"], "default": {"_type": "literalExpression", "text": "1"}, "description": "Higher numbers elicits more logs.\n", "example": {"_type": "literalExpression", "text": "8"}, "loc": ["boot", "iscsi-initiator", "logLevel"], "readOnly": false, "type": "signed integer"}, "boot.iscsi-initiator.loginAll": {"declarations": ["nixos/modules/services/networking/iscsi/root-initiator.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Do not log into a specific target on the portal, but to all that we discover.\nThis overrides setting target.\n", "loc": ["boot", "iscsi-initiator", "loginAll"], "readOnly": false, "type": "boolean"}, "boot.iscsi-initiator.name": {"declarations": ["nixos/modules/services/networking/iscsi/root-initiator.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Name of the iSCSI initiator to boot from. Note, booting from iscsi\nrequires networkd based networking.\n", "example": {"_type": "literalExpression", "text": "\"iqn.2020-08.org.linux-iscsi.initiatorhost:example\""}, "loc": ["boot", "iscsi-initiator", "name"], "readOnly": false, "type": "null or string"}, "boot.iscsi-initiator.target": {"declarations": ["nixos/modules/services/networking/iscsi/root-initiator.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Name of the iSCSI target to boot from.\n", "example": {"_type": "literalExpression", "text": "\"iqn.2020-08.org.linux-iscsi.targethost:example\""}, "loc": ["boot", "iscsi-initiator", "target"], "readOnly": false, "type": "null or string"}, "boot.kernel.enable": {"declarations": ["nixos/modules/system/boot/kernel.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Whether to enable the Linux kernel. This is useful for systemd-like containers which do not require a kernel.", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "kernel", "enable"], "readOnly": false, "type": "boolean"}, "boot.kernel.randstructSeed": {"declarations": ["nixos/modules/system/boot/kernel.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "Provides a custom seed for the {var}`RANDSTRUCT` security\noption of the Linux kernel. Note that {var}`RANDSTRUCT` is\nonly enabled in NixOS hardened kernels. Using a custom seed requires\nbuilding the kernel and dependent packages locally, since this\ncustomization happens at build time.\n", "example": {"_type": "literalExpression", "text": "\"my secret seed\""}, "loc": ["boot", "kernel", "randstructSeed"], "readOnly": false, "type": "string"}, "boot.kernel.sysctl": {"declarations": ["nixos/modules/config/sysctl.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Runtime parameters of the Linux kernel, as set by\n{manpage}`sysctl(8)`. Note that sysctl\nparameters names must be enclosed in quotes\n(e.g. `\"vm.swappiness\"` instead of\n`vm.swappiness`). The value of each\nparameter may be a string, integer, boolean, or null\n(signifying the option will not appear at all).\n", "example": {"_type": "literalExpression", "text": "{ \"net.ipv4.tcp_syncookies\" = false; \"vm.swappiness\" = 60; }\n"}, "loc": ["boot", "kernel", "sysctl"], "readOnly": false, "type": "open submodule of attribute set of (sysctl option value)"}, "boot.kernel.sysctl.\"net.core.rmem_max\"": {"declarations": ["nixos/modules/config/sysctl.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "The maximum receive socket buffer size in bytes. In case of conflicting values, the highest will be used.", "loc": ["boot", "kernel", "sysctl", "net.core.rmem_max"], "readOnly": false, "type": "null or (unsigned integer, meaning >=0)"}, "boot.kernel.sysctl.\"net.core.wmem_max\"": {"declarations": ["nixos/modules/config/sysctl.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "The maximum send socket buffer size in bytes. In case of conflicting values, the highest will be used.", "loc": ["boot", "kernel", "sysctl", "net.core.wmem_max"], "readOnly": false, "type": "null or (unsigned integer, meaning >=0)"}, "boot.kernel.sysfs": {"declarations": ["nixos/modules/config/sysfs.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "sysfs attributes to be set as soon as they become available.\n\nAttribute names represent path components in the sysfs filesystem and\ncannot be `.` or `..` nor contain any slash character (`/`).\n\nNames may contain shell\u2010style glob patterns (`*`, `?` and `[\u2026]`)\nmatching a single path component, these should however be used with\ncaution, as they may produce unexpected results if attribute paths\noverlap.\n\nValues will be converted to strings, with list elements concatenated\nwith commata and booleans converted to numeric values (`0` or `1`).\n\n`null` values are ignored, allowing removal of values defined in other\nmodules, as are empty attribute sets.\n\nList values defined in different modules will _not_ be concatenated.\n\nThis option may only be used for attributes which can be set\nidempotently, as the configured values might be written more than once.\n", "example": {"_type": "literalExpression", "text": "{\n # enable transparent hugepages with deferred defragmentaion\n kernel.mm.transparent_hugepage = {\n enabled = \"always\";\n defrag = \"defer\";\n shmem_enabled = \"within_size\";\n };\n\n devices.system.cpu = {\n # configure powesave frequency governor for all CPUs\n # the [0-9]* glob pattern ensures that other paths\n # like cpufreq or cpuidle are not matched\n \"cpu[0-9]*\" = {\n scaling_governor = \"powersave\";\n energy_performance_preference = 8;\n };\n\n # disable frequency boost\n intel_pstate.no_turbo = true;\n };\n}\n"}, "loc": ["boot", "kernel", "sysfs"], "readOnly": false, "type": "open submodule of nested attribute set of null or sysfs attribute values"}, "boot.kernelModules": {"declarations": ["nixos/modules/system/boot/kernel.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "The set of kernel modules to be loaded in the second stage of\nthe boot process. Note that modules that are needed to\nmount the root file system should be added to\n{option}`boot.initrd.availableKernelModules` or\n{option}`boot.initrd.kernelModules`.\n\nThis can either be a list of modules, or an attrset. In an\nattrset, names that are set to `true` represent modules that will\nbe included. Note that setting these names to `false` does not\nprevent the module from being loaded. For that, use\n{option}`boot.blacklistedKernelModules`.\n\n", "loc": ["boot", "kernelModules"], "readOnly": false, "type": "(attribute set of boolean) or (list of string) convertible to it"}, "boot.kernelPackages": {"declarations": ["nixos/modules/system/boot/kernel.nix"], "default": {"_type": "literalExpression", "text": "pkgs.linuxPackages"}, "description": "This option allows you to override the Linux kernel used by\nNixOS. Since things like external kernel module packages are\ntied to the kernel you're using, it also overrides those.\nThis option is a function that takes Nixpkgs as an argument\n(as a convenience), and returns an attribute set containing at\nthe very least an attribute {var}`kernel`.\nAdditional attributes may be needed depending on your\nconfiguration. For instance, if you use the NVIDIA X driver,\nthen it also needs to contain an attribute\n{var}`nvidia_x11`.\n\nPlease note that we strictly support kernel versions that are\nmaintained by the Linux developers only. More information on the\navailability of kernel versions is documented\n[in the Linux section of the manual](https://nixos.org/manual/nixos/unstable/index.html#sec-kernel-config).\n", "example": {"_type": "literalExpression", "text": "pkgs.linuxKernel.packages.linux_5_10"}, "loc": ["boot", "kernelPackages"], "readOnly": false, "type": "raw value"}, "boot.kernelParams": {"declarations": ["nixos/modules/system/boot/kernel.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Parameters added to the kernel command line.", "loc": ["boot", "kernelParams"], "readOnly": false, "type": "list of string, with spaces inside double quotes"}, "boot.kernelPatches": {"declarations": ["nixos/modules/system/boot/kernel.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "A list of additional patches to apply to the kernel.\n\nEvery item should be an attribute set with the following attributes:\n\n```nix\n{\n name = \"foo\"; # descriptive name, required\n\n patch = ./foo.patch; # path or derivation that contains the patch source\n # (required, but can be null if only config changes\n # are needed)\n\n structuredExtraConfig = { # attrset of extra configuration parameters without the CONFIG_ prefix\n FOO = lib.kernel.yes; # (optional)\n }; # values should generally be lib.kernel.yes,\n # lib.kernel.no or lib.kernel.module\n\n features = { # attrset of extra \"features\" the kernel is considered to have\n foo = true; # (may be checked by other NixOS modules, optional)\n };\n\n extraConfig = \"FOO y\"; # extra configuration options in string form without the CONFIG_ prefix\n # (optional, multiple lines allowed to specify multiple options)\n # (deprecated, use structuredExtraConfig instead)\n}\n```\n\nThere's a small set of existing kernel patches in Nixpkgs, available as `pkgs.kernelPatches`,\nthat follow this format and can be used directly.\n", "example": {"_type": "literalExpression", "text": "[\n {\n name = \"foo\";\n patch = ./foo.patch;\n structuredExtraConfig.FOO = lib.kernel.yes;\n features.foo = true;\n }\n {\n name = \"foo-ml-mbox\";\n patch = (fetchurl {\n url = \"https://lore.kernel.org/lkml/19700205182810.58382-1-email@domain/t.mbox.gz\";\n hash = \"sha256-...\";\n });\n }\n]\n"}, "loc": ["boot", "kernelPatches"], "readOnly": false, "type": "list of (attribute set)"}, "boot.kexec.enable": {"declarations": ["nixos/modules/system/boot/kexec.nix"], "default": {"_type": "literalExpression", "text": "lib.meta.availableOn pkgs.stdenv.hostPlatform pkgs.kexec-tools"}, "description": "Whether to enable kexec.", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "kexec", "enable"], "readOnly": false, "type": "boolean"}, "boot.loader.efi.canTouchEfiVariables": {"declarations": ["nixos/modules/system/boot/loader/efi.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether the installation process is allowed to modify EFI boot variables.", "loc": ["boot", "loader", "efi", "canTouchEfiVariables"], "readOnly": false, "type": "boolean"}, "boot.loader.efi.efiSysMountPoint": {"declarations": ["nixos/modules/system/boot/loader/efi.nix"], "default": {"_type": "literalExpression", "text": "\"/boot\""}, "description": "Where the EFI System Partition is mounted.", "loc": ["boot", "loader", "efi", "efiSysMountPoint"], "readOnly": false, "type": "string"}, "boot.loader.external.enable": {"declarations": ["nixos/modules/system/boot/loader/external/external.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to enable using an external tool to install your bootloader.", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "loader", "external", "enable"], "readOnly": false, "type": "boolean"}, "boot.loader.external.installHook": {"declarations": ["nixos/modules/system/boot/loader/external/external.nix"], "description": "The full path to a program of your choosing which performs the bootloader installation process.\n\nThe program will be called with an argument pointing to the output of the system's toplevel.\n", "loc": ["boot", "loader", "external", "installHook"], "readOnly": false, "type": "absolute path"}, "boot.loader.generationsDir.copyKernels": {"declarations": ["nixos/modules/system/boot/loader/generations-dir/generations-dir.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to copy the necessary boot files into /boot, so\n/nix/store is not needed by the boot loader.\n", "loc": ["boot", "loader", "generationsDir", "copyKernels"], "readOnly": false, "type": "boolean"}, "boot.loader.generationsDir.enable": {"declarations": ["nixos/modules/system/boot/loader/generations-dir/generations-dir.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to create symlinks to the system generations under\n`/boot`. When enabled,\n`/boot/default/kernel`,\n`/boot/default/initrd`, etc., are updated to\npoint to the current generation's kernel image, initial RAM\ndisk, and other bootstrap files.\n\nThis optional is not necessary with boot loaders such as GNU GRUB\nfor which the menu is updated to point to the latest bootstrap\nfiles. However, it is needed for U-Boot on platforms where the\nboot command line is stored in flash memory rather than in a\nmenu file.\n", "loc": ["boot", "loader", "generationsDir", "enable"], "readOnly": false, "type": "boolean"}, "boot.loader.generic-extlinux-compatible.configurationLimit": {"declarations": ["nixos/modules/system/boot/loader/generic-extlinux-compatible"], "default": {"_type": "literalExpression", "text": "20"}, "description": "Maximum number of configurations in the boot menu.\n", "example": {"_type": "literalExpression", "text": "10"}, "loc": ["boot", "loader", "generic-extlinux-compatible", "configurationLimit"], "readOnly": false, "type": "signed integer"}, "boot.loader.generic-extlinux-compatible.enable": {"declarations": ["nixos/modules/system/boot/loader/generic-extlinux-compatible"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to generate an extlinux-compatible configuration file\nunder `/boot/extlinux.conf`. For instance,\nU-Boot's generic distro boot support uses this file format.\n\nSee [U-boot's documentation](https://u-boot.readthedocs.io/en/latest/develop/distro.html)\nfor more information.\n", "loc": ["boot", "loader", "generic-extlinux-compatible", "enable"], "readOnly": false, "type": "boolean"}, "boot.loader.generic-extlinux-compatible.mirroredBoots": {"declarations": ["nixos/modules/system/boot/loader/generic-extlinux-compatible"], "default": {"_type": "literalExpression", "text": "[\n {\n path = \"/boot\";\n }\n]"}, "description": "Mirror the boot configuration to multiple paths.\n", "example": {"_type": "literalExpression", "text": "[\n {\n path = \"/boot1\";\n }\n {\n path = \"/boot2\";\n }\n]"}, "loc": ["boot", "loader", "generic-extlinux-compatible", "mirroredBoots"], "readOnly": false, "type": "list of (submodule)"}, "boot.loader.generic-extlinux-compatible.mirroredBoots.*.path": {"declarations": ["nixos/modules/system/boot/loader/generic-extlinux-compatible"], "description": "The path to the boot directory where the extlinux-compatible\nconfiguration files will be written.\n", "example": {"_type": "literalExpression", "text": "\"/boot1\""}, "loc": ["boot", "loader", "generic-extlinux-compatible", "mirroredBoots", "*", "path"], "readOnly": false, "type": "string"}, "boot.loader.generic-extlinux-compatible.populateCmd": {"declarations": ["nixos/modules/system/boot/loader/generic-extlinux-compatible"], "description": "Contains the builder command used to populate an image,\nhonoring all options except the `-c `\nargument.\nUseful to have for sdImage.populateRootCommands\n", "loc": ["boot", "loader", "generic-extlinux-compatible", "populateCmd"], "readOnly": true, "type": "string"}, "boot.loader.generic-extlinux-compatible.useGenerationDeviceTree": {"declarations": ["nixos/modules/system/boot/loader/generic-extlinux-compatible"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Whether to generate Device Tree-related directives in the\nextlinux configuration.\n\nWhen enabled, the bootloader will attempt to load the device\ntree binaries from the generation's kernel.\n\nNote that this affects all generations, regardless of the\nsetting value used in their configurations.\n", "loc": ["boot", "loader", "generic-extlinux-compatible", "useGenerationDeviceTree"], "readOnly": false, "type": "boolean"}, "boot.loader.grub.backgroundColor": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Background color to be used for GRUB to fill the areas the image isn't filling.\n", "example": {"_type": "literalExpression", "text": "\"#7EBAE4\""}, "loc": ["boot", "loader", "grub", "backgroundColor"], "readOnly": false, "type": "null or string"}, "boot.loader.grub.configurationLimit": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "100"}, "description": "Maximum of configurations in boot menu. GRUB has problems when\nthere are too many entries.\n", "example": {"_type": "literalExpression", "text": "120"}, "loc": ["boot", "loader", "grub", "configurationLimit"], "readOnly": false, "type": "signed integer"}, "boot.loader.grub.configurationName": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "GRUB entry name instead of default.\n", "example": {"_type": "literalExpression", "text": "\"Stable 2.6.21\""}, "loc": ["boot", "loader", "grub", "configurationName"], "readOnly": false, "type": "string"}, "boot.loader.grub.copyKernels": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether the GRUB menu builder should copy kernels and initial\nramdisks to /boot. This is done automatically if /boot is\non a different partition than /.\n", "loc": ["boot", "loader", "grub", "copyKernels"], "readOnly": false, "type": "boolean"}, "boot.loader.grub.default": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "\"0\""}, "description": "Index of the default menu item to be booted.\nCan also be set to \"saved\", which will make GRUB select\nthe menu item that was used at the last boot.\n", "loc": ["boot", "loader", "grub", "default"], "readOnly": false, "type": "signed integer or string"}, "boot.loader.grub.device": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "The device on which the GRUB boot loader will be installed.\nThe special value `nodev` means that a GRUB\nboot menu will be generated, but GRUB itself will not\nactually be installed. To install GRUB on multiple devices,\nuse `boot.loader.grub.devices`.\n", "example": {"_type": "literalExpression", "text": "\"/dev/disk/by-id/wwn-0x500001234567890a\""}, "loc": ["boot", "loader", "grub", "device"], "readOnly": false, "type": "string"}, "boot.loader.grub.devices": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "The devices on which the boot loader, GRUB, will be\ninstalled. Can be used instead of `device` to\ninstall GRUB onto multiple devices.\n", "example": {"_type": "literalExpression", "text": "[\n \"/dev/disk/by-id/wwn-0x500001234567890a\"\n]"}, "loc": ["boot", "loader", "grub", "devices"], "readOnly": false, "type": "list of string"}, "boot.loader.grub.efiInstallAsRemovable": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to invoke `grub-install` with\n`--removable`.\n\nUnless you turn this on, GRUB will install itself somewhere in\n`boot.loader.efi.efiSysMountPoint` (exactly where\ndepends on other config variables). If you've set\n`boot.loader.efi.canTouchEfiVariables` *AND* you\nare currently booted in UEFI mode, then GRUB will use\n`efibootmgr` to modify the boot order in the\nEFI variables of your firmware to include this location. If you are\n*not* booted in UEFI mode at the time GRUB is being installed, the\nNVRAM will not be modified, and your system will not find GRUB at\nboot time. However, GRUB will still return success so you may miss\nthe warning that gets printed (\"`efibootmgr: EFI variables\nare not supported on this system.`\").\n\nIf you turn this feature on, GRUB will install itself in a\nspecial location within `efiSysMountPoint` (namely\n`EFI/boot/boot$arch.efi`) which the firmwares\nare hardcoded to try first, regardless of NVRAM EFI variables.\n\nTo summarize, turn this on if:\n- You are installing NixOS and want it to boot in UEFI mode,\n but you are currently booted in legacy mode\n- You want to make a drive that will boot regardless of\n the NVRAM state of the computer (like a USB \"removable\" drive)\n- You simply dislike the idea of depending on NVRAM\n state to make your drive bootable\n", "loc": ["boot", "loader", "grub", "efiInstallAsRemovable"], "readOnly": false, "type": "boolean"}, "boot.loader.grub.efiSupport": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether GRUB should be built with EFI support.\n", "loc": ["boot", "loader", "grub", "efiSupport"], "readOnly": false, "type": "boolean"}, "boot.loader.grub.enable": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "!config.boot.isContainer"}, "description": "Whether to enable the GNU GRUB boot loader.\n", "loc": ["boot", "loader", "grub", "enable"], "readOnly": false, "type": "boolean"}, "boot.loader.grub.enableCryptodisk": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Enable support for encrypted partitions. GRUB should automatically\nunlock the correct encrypted partition and look for filesystems.\n", "loc": ["boot", "loader", "grub", "enableCryptodisk"], "readOnly": false, "type": "boolean"}, "boot.loader.grub.entryOptions": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "\"--class nixos --unrestricted\""}, "description": "Options applied to the primary NixOS menu entry.\n", "loc": ["boot", "loader", "grub", "entryOptions"], "readOnly": false, "type": "null or string"}, "boot.loader.grub.extraConfig": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "Additional GRUB commands inserted in the configuration file\njust before the menu entries.\n", "example": {"_type": "literalExpression", "text": "''\n serial --unit=0 --speed=115200 --word=8 --parity=no --stop=1\n terminal_input --append serial\n terminal_output --append serial\n''"}, "loc": ["boot", "loader", "grub", "extraConfig"], "readOnly": false, "type": "strings concatenated with \"\\n\""}, "boot.loader.grub.extraEntries": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "Any additional entries you want added to the GRUB boot menu.\n", "example": {"_type": "literalExpression", "text": "''\n # GRUB 2 example\n menuentry \"Windows 7\" {\n chainloader (hd0,4)+1\n }\n \n # GRUB 2 with UEFI example, chainloading another distro\n menuentry \"Fedora\" {\n set root=(hd1,1)\n chainloader /efi/fedora/grubx64.efi\n }\n''"}, "loc": ["boot", "loader", "grub", "extraEntries"], "readOnly": false, "type": "strings concatenated with \"\\n\""}, "boot.loader.grub.extraEntriesBeforeNixOS": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether extraEntries are included before the default option.\n", "loc": ["boot", "loader", "grub", "extraEntriesBeforeNixOS"], "readOnly": false, "type": "boolean"}, "boot.loader.grub.extraFiles": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "A set of files to be copied to {file}`/boot`.\nEach attribute name denotes the destination file name in\n{file}`/boot`, while the corresponding\nattribute value specifies the source file.\n", "example": {"_type": "literalExpression", "text": "{ \"memtest.bin\" = pkgs.memtest86plus.efi; }\n"}, "loc": ["boot", "loader", "grub", "extraFiles"], "readOnly": false, "type": "attribute set of absolute path"}, "boot.loader.grub.extraGrubInstallArgs": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Additional arguments passed to `grub-install`.\n\nA use case for this is to build specific GRUB2 modules\ndirectly into the GRUB2 kernel image, so that they are available\nand activated even in the `grub rescue` shell.\n\nThey are also necessary when the BIOS/UEFI is bugged and cannot\ncorrectly read large disks (e.g. above 2 TB), so GRUB2's own\n`nativedisk` and related modules can be used\nto use its own disk drivers. The example shows one such case.\nThis is also useful for booting from USB.\nSee the\n[\nGRUB source code\n](https://git.savannah.gnu.org/cgit/grub.git/tree/grub-core/commands/nativedisk.c?h=grub-2.04#n326)\nfor which disk modules are available.\n\nThe list elements are passed directly as `argv`\narguments to the `grub-install` program, in order.\n", "example": {"_type": "literalExpression", "text": "[\n \"--modules=nativedisk ahci pata part_gpt part_msdos diskfilter mdraid1x lvm ext2\"\n]"}, "loc": ["boot", "loader", "grub", "extraGrubInstallArgs"], "readOnly": false, "type": "list of string"}, "boot.loader.grub.extraInstallCommands": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "Additional shell commands inserted in the bootloader installer\nscript after generating menu entries.\n", "example": {"_type": "literalExpression", "text": "''\n # the example below generates detached signatures that GRUB can verify\n # https://www.gnu.org/software/grub/manual/grub/grub.html#Using-digital-signatures\n ''${pkgs.findutils}/bin/find /boot -not -path \"/boot/efi/*\" -type f -name '*.sig' -delete\n old_gpg_home=$GNUPGHOME\n export GNUPGHOME=\"$(mktemp -d)\"\n ''${pkgs.gnupg}/bin/gpg --import ''${priv_key} > /dev/null 2>&1\n ''${pkgs.findutils}/bin/find /boot -not -path \"/boot/efi/*\" -type f -exec ''${pkgs.gnupg}/bin/gpg --detach-sign \"{}\" \\; > /dev/null 2>&1\n rm -rf $GNUPGHOME\n export GNUPGHOME=$old_gpg_home\n''"}, "loc": ["boot", "loader", "grub", "extraInstallCommands"], "readOnly": false, "type": "strings concatenated with \"\\n\""}, "boot.loader.grub.extraPerEntryConfig": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "Additional GRUB commands inserted in the configuration file\nat the start of each NixOS menu entry.\n", "example": {"_type": "literalExpression", "text": "\"root (hd0)\""}, "loc": ["boot", "loader", "grub", "extraPerEntryConfig"], "readOnly": false, "type": "strings concatenated with \"\\n\""}, "boot.loader.grub.extraPrepareConfig": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "Additional bash commands to be run at the script that\nprepares the GRUB menu entries.\n", "loc": ["boot", "loader", "grub", "extraPrepareConfig"], "readOnly": false, "type": "strings concatenated with \"\\n\""}, "boot.loader.grub.font": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "\"${pkgs.grub2}/share/grub/unicode.pf2\""}, "description": "Path to a TrueType, OpenType, or pf2 font to be used by Grub.\n", "loc": ["boot", "loader", "grub", "font"], "readOnly": false, "type": "null or absolute path"}, "boot.loader.grub.fontSize": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Font size for the grub menu. Ignored unless `font`\nis set to a ttf or otf font.\n", "example": {"_type": "literalExpression", "text": "16"}, "loc": ["boot", "loader", "grub", "fontSize"], "readOnly": false, "type": "null or signed integer"}, "boot.loader.grub.forceInstall": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to try and forcibly install GRUB even if problems are\ndetected. It is not recommended to enable this unless you know what\nyou are doing.\n", "loc": ["boot", "loader", "grub", "forceInstall"], "readOnly": false, "type": "boolean"}, "boot.loader.grub.forcei686": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to force the use of a ia32 boot loader on x64 systems. Required\nto install and run NixOS on 64bit x86 systems with 32bit (U)EFI.\n", "loc": ["boot", "loader", "grub", "forcei686"], "readOnly": false, "type": "boolean"}, "boot.loader.grub.fsIdentifier": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "\"uuid\""}, "description": "Determines how GRUB will identify devices when generating the\nconfiguration file. A value of uuid / label signifies that grub\nwill always resolve the uuid or label of the device before using\nit in the configuration. A value of provided means that GRUB will\nuse the device name as show in {command}`df` or\n{command}`mount`. Note, zfs zpools / datasets are ignored\nand will always be mounted using their labels.\n", "loc": ["boot", "loader", "grub", "fsIdentifier"], "readOnly": false, "type": "one of \"uuid\", \"label\", \"provided\""}, "boot.loader.grub.gfxmodeBios": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "\"1024x768\""}, "description": "The gfxmode to pass to GRUB when loading a graphical boot interface under BIOS.\n", "example": {"_type": "literalExpression", "text": "\"auto\""}, "loc": ["boot", "loader", "grub", "gfxmodeBios"], "readOnly": false, "type": "string"}, "boot.loader.grub.gfxmodeEfi": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "\"auto\""}, "description": "The gfxmode to pass to GRUB when loading a graphical boot interface under EFI.\n", "example": {"_type": "literalExpression", "text": "\"1024x768\""}, "loc": ["boot", "loader", "grub", "gfxmodeEfi"], "readOnly": false, "type": "string"}, "boot.loader.grub.gfxpayloadBios": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "\"text\""}, "description": "The gfxpayload to pass to GRUB when loading a graphical boot interface under BIOS.\n", "example": {"_type": "literalExpression", "text": "\"keep\""}, "loc": ["boot", "loader", "grub", "gfxpayloadBios"], "readOnly": false, "type": "string"}, "boot.loader.grub.gfxpayloadEfi": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "\"keep\""}, "description": "The gfxpayload to pass to GRUB when loading a graphical boot interface under EFI.\n", "example": {"_type": "literalExpression", "text": "\"text\""}, "loc": ["boot", "loader", "grub", "gfxpayloadEfi"], "readOnly": false, "type": "string"}, "boot.loader.grub.ipxe": {"declarations": ["nixos/modules/system/boot/loader/grub/ipxe.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Set of iPXE scripts available for\nbooting from the GRUB boot menu.\n", "example": {"_type": "literalExpression", "text": "{ demo = ''\n #!ipxe\n dhcp\n chain http://boot.ipxe.org/demo/boot.php\n '';\n}\n"}, "loc": ["boot", "loader", "grub", "ipxe"], "readOnly": false, "type": "attribute set of (absolute path or string)"}, "boot.loader.grub.memtest86.enable": {"declarations": ["nixos/modules/system/boot/loader/grub/memtest.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Make Memtest86+, a memory testing program, available from the GRUB\nboot menu.\n", "loc": ["boot", "loader", "grub", "memtest86", "enable"], "readOnly": false, "type": "boolean"}, "boot.loader.grub.memtest86.params": {"declarations": ["nixos/modules/system/boot/loader/grub/memtest.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Parameters added to the Memtest86+ command line. As of memtest86+ 5.01\nthe following list of (apparently undocumented) parameters are\naccepted:\n\n- `console=...`, set up a serial console.\n Examples:\n `console=ttyS0`,\n `console=ttyS0,9600` or\n `console=ttyS0,115200n8`.\n\n- `btrace`, enable boot trace.\n\n- `maxcpus=N`, limit number of CPUs.\n\n- `onepass`, run one pass and exit if there\n are no errors.\n\n- `tstlist=...`, list of tests to run.\n Example: `0,1,2`.\n\n- `cpumask=...`, set a CPU mask, to select CPUs\n to use for testing.\n\nThis list of command line options was obtained by reading the\nMemtest86+ source code.\n", "example": {"_type": "literalExpression", "text": "[\n \"console=ttyS0,115200\"\n]"}, "loc": ["boot", "loader", "grub", "memtest86", "params"], "readOnly": false, "type": "list of string"}, "boot.loader.grub.mirroredBoots": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Mirror the boot configuration to multiple partitions and install grub\nto the respective devices corresponding to those partitions.\n", "example": {"_type": "literalExpression", "text": "[\n {\n devices = [\n \"/dev/disk/by-id/wwn-0x500001234567890a\"\n ];\n path = \"/boot1\";\n }\n {\n devices = [\n \"/dev/disk/by-id/wwn-0x500009876543210a\"\n ];\n path = \"/boot2\";\n }\n]"}, "loc": ["boot", "loader", "grub", "mirroredBoots"], "readOnly": false, "type": "list of (submodule)"}, "boot.loader.grub.mirroredBoots.*.devices": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "The path to the devices which will have the GRUB MBR written.\nNote these are typically device paths and not paths to partitions.\n", "example": {"_type": "literalExpression", "text": "[\n \"/dev/disk/by-id/wwn-0x500001234567890a\"\n \"/dev/disk/by-id/wwn-0x500009876543210a\"\n]"}, "loc": ["boot", "loader", "grub", "mirroredBoots", "*", "devices"], "readOnly": false, "type": "list of string"}, "boot.loader.grub.mirroredBoots.*.efiBootloaderId": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "The id of the bootloader to store in efi nvram.\nThe default is to name it NixOS and append the path or efiSysMountPoint.\nThis is only used if `boot.loader.efi.canTouchEfiVariables` is true.\n", "example": {"_type": "literalExpression", "text": "\"NixOS-fsid\""}, "loc": ["boot", "loader", "grub", "mirroredBoots", "*", "efiBootloaderId"], "readOnly": false, "type": "null or string"}, "boot.loader.grub.mirroredBoots.*.efiSysMountPoint": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "The path to the efi system mount point. Usually this is the same\npartition as the above path and can be left as null.\n", "example": {"_type": "literalExpression", "text": "\"/boot1/efi\""}, "loc": ["boot", "loader", "grub", "mirroredBoots", "*", "efiSysMountPoint"], "readOnly": false, "type": "null or string"}, "boot.loader.grub.mirroredBoots.*.path": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "description": "The path to the boot directory where GRUB will be written. Generally\nthis boot path should double as an EFI path.\n", "example": {"_type": "literalExpression", "text": "\"/boot1\""}, "loc": ["boot", "loader", "grub", "mirroredBoots", "*", "path"], "readOnly": false, "type": "string"}, "boot.loader.grub.splashImage": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "description": "Background image used for GRUB.\nSet to `null` to run GRUB in text mode.\n\n::: {.note}\nFile must be one of .png, .tga, .jpg, or .jpeg. JPEG images must\nnot be progressive.\nThe image will be scaled if necessary to fit the screen.\n:::\n", "example": {"_type": "literalExpression", "text": "./my-background.png"}, "loc": ["boot", "loader", "grub", "splashImage"], "readOnly": false, "type": "null or absolute path"}, "boot.loader.grub.splashMode": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "\"stretch\""}, "description": "Whether to stretch the image or show the image in the top-left corner unstretched.\n", "loc": ["boot", "loader", "grub", "splashMode"], "readOnly": false, "type": "one of \"normal\", \"stretch\""}, "boot.loader.grub.storePath": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "\"/nix/store\""}, "description": "Path to the Nix store when looking for kernels at boot.\nOnly makes sense when copyKernels is false.\n", "loc": ["boot", "loader", "grub", "storePath"], "readOnly": false, "type": "string"}, "boot.loader.grub.subEntryOptions": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "\"--class nixos\""}, "description": "Options applied to the secondary NixOS submenu entry.\n", "loc": ["boot", "loader", "grub", "subEntryOptions"], "readOnly": false, "type": "null or string"}, "boot.loader.grub.theme": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Path to the grub theme to be used.\n", "example": {"_type": "literalExpression", "text": "\"${pkgs.kdePackages.breeze-grub}/grub/themes/breeze\""}, "loc": ["boot", "loader", "grub", "theme"], "readOnly": false, "type": "null or absolute path"}, "boot.loader.grub.timeoutStyle": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "\"menu\""}, "description": " - `menu` shows the menu.\n - `countdown` uses a text-mode countdown.\n - `hidden` hides GRUB entirely.\n\nWhen using a theme, the default value (`menu`) is appropriate for the graphical countdown.\n\nWhen attempting to do flicker-free boot, `hidden` should be used.\n\nSee the [GRUB documentation section about `timeout_style`](https://www.gnu.org/software/grub/manual/grub/html_node/timeout.html).\n\n::: {.note}\nIf this option is set to \u2018countdown\u2019 or \u2018hidden\u2019 [...] and ESC or F4 are pressed, or SHIFT is held down during that time, it will display the menu and wait for input.\n:::\n\nFrom: [Simple configuration handling page, under GRUB_TIMEOUT_STYLE](https://www.gnu.org/software/grub/manual/grub/html_node/Simple-configuration.html).\n", "loc": ["boot", "loader", "grub", "timeoutStyle"], "readOnly": false, "type": "one of \"menu\", \"countdown\", \"hidden\""}, "boot.loader.grub.useOSProber": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "If set to true, append entries for other OSs detected by os-prober.\n", "loc": ["boot", "loader", "grub", "useOSProber"], "readOnly": false, "type": "boolean"}, "boot.loader.grub.users": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "User accounts for GRUB. When specified, the GRUB command line and\nall boot options except the default are password-protected.\nAll passwords and hashes provided will be stored in /boot/grub/grub.cfg,\nand will be visible to any local user who can read this file. Additionally,\nany passwords and hashes provided directly in a Nix configuration\n(as opposed to external files) will be copied into the Nix store, and\nwill be visible to all local users.\n", "example": {"_type": "literalExpression", "text": "{\n root = {\n hashedPasswordFile = \"/path/to/file\";\n };\n}"}, "loc": ["boot", "loader", "grub", "users"], "readOnly": false, "type": "attribute set of (submodule)"}, "boot.loader.grub.users..hashedPassword": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Specifies the password hash for the account,\ngenerated with grub-mkpasswd-pbkdf2.\nThis hash will be copied to the Nix store, and will be visible to all local users.\n", "example": {"_type": "literalExpression", "text": "\"grub.pbkdf2.sha512.10000.674DFFDEF76E13EA...2CC972B102CF4355\""}, "loc": ["boot", "loader", "grub", "users", "", "hashedPassword"], "readOnly": false, "type": "null or string"}, "boot.loader.grub.users..hashedPasswordFile": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Specifies the path to a file containing the password hash\nfor the account, generated with grub-mkpasswd-pbkdf2.\nThis hash will be stored in /boot/grub/grub.cfg, and will\nbe visible to any local user who can read this file.\n", "example": {"_type": "literalExpression", "text": "\"/path/to/file\""}, "loc": ["boot", "loader", "grub", "users", "", "hashedPasswordFile"], "readOnly": false, "type": "null or string"}, "boot.loader.grub.users..password": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Specifies the clear text password for the account.\nThis password will be copied to the Nix store, and will be visible to all local users.\n", "example": {"_type": "literalExpression", "text": "\"Pa$$w0rd!\""}, "loc": ["boot", "loader", "grub", "users", "", "password"], "readOnly": false, "type": "null or string"}, "boot.loader.grub.users..passwordFile": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Specifies the path to a file containing the\nclear text password for the account.\nThis password will be stored in /boot/grub/grub.cfg, and will\nbe visible to any local user who can read this file.\n", "example": {"_type": "literalExpression", "text": "\"/path/to/file\""}, "loc": ["boot", "loader", "grub", "users", "", "passwordFile"], "readOnly": false, "type": "null or string"}, "boot.loader.grub.zfsSupport": {"declarations": ["nixos/modules/system/boot/loader/grub/grub.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether GRUB should be built against libzfs.\n", "loc": ["boot", "loader", "grub", "zfsSupport"], "readOnly": false, "type": "boolean"}, "boot.loader.initScript.enable": {"declarations": ["nixos/modules/system/boot/loader/init-script/init-script.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Some systems require a /sbin/init script which is started.\nOr having it makes starting NixOS easier.\nThis applies to some kind of hosting services and user mode linux.\n\nAdditionally this script will create\n/boot/init-other-configurations-contents.txt containing\ncontents of remaining configurations. You can copy paste them into\n/sbin/init manually running a rescue system or such.\n", "loc": ["boot", "loader", "initScript", "enable"], "readOnly": false, "type": "boolean"}, "boot.loader.limine.additionalFiles": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "A set of files to be copied to {file}`/boot`. Each attribute name denotes the\ndestination file name in {file}`/boot`, while the corresponding attribute value\nspecifies the source file.\n", "example": {"_type": "literalExpression", "text": "{ \"efi/memtest86/memtest86.efi\" = \"${pkgs.memtest86-efi}/BOOTX64.efi\"; }\n"}, "loc": ["boot", "loader", "limine", "additionalFiles"], "readOnly": false, "type": "attribute set of absolute path"}, "boot.loader.limine.biosDevice": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "\"nodev\""}, "description": "Device to install the BIOS version of limine on.\n", "loc": ["boot", "loader", "limine", "biosDevice"], "readOnly": false, "type": "string"}, "boot.loader.limine.biosSupport": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "!config.boot.loader.limine.efiSupport && pkgs.stdenv.hostPlatform.isx86"}, "description": "Whether or not to install limine for BIOS.\n", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "loader", "limine", "biosSupport"], "readOnly": false, "type": "boolean"}, "boot.loader.limine.efiInstallAsRemovable": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "!config.boot.loader.efi.canTouchEfiVariables"}, "description": "Whether or not to install the limine EFI files as removable.\n\nSee {option}`boot.loader.grub.efiInstallAsRemovable`\n", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "loader", "limine", "efiInstallAsRemovable"], "readOnly": false, "type": "boolean"}, "boot.loader.limine.efiSupport": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "pkgs.stdenv.hostPlatform.isEfi"}, "description": "Whether or not to install the limine EFI files.\n", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "loader", "limine", "efiSupport"], "readOnly": false, "type": "boolean"}, "boot.loader.limine.enable": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to enable the Limine Bootloader.", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "loader", "limine", "enable"], "readOnly": false, "type": "boolean"}, "boot.loader.limine.enableEditor": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to allow editing the boot entries before booting them.\nIt is recommended to set this to false, as it allows gaining root\naccess by passing `init=/bin/sh` as a kernel parameter.\n", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "loader", "limine", "enableEditor"], "readOnly": false, "type": "boolean"}, "boot.loader.limine.enrollConfig": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "boot.loader.limine.panicOnChecksumMismatch"}, "description": "Whether or not to enroll the config.\nOnly works on EFI!\n", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "loader", "limine", "enrollConfig"], "readOnly": false, "type": "boolean"}, "boot.loader.limine.extraConfig": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "A string which is prepended to limine.conf. The config format can be found [here](https://github.com/limine-bootloader/limine/blob/trunk/CONFIG.md).\n", "example": {"_type": "literalExpression", "text": "serial: yes\n"}, "loc": ["boot", "loader", "limine", "extraConfig"], "readOnly": false, "type": "strings concatenated with \"\\n\""}, "boot.loader.limine.extraEntries": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "A string which is appended to the end of limine.conf. The config format can be found [here](https://github.com/limine-bootloader/limine/blob/trunk/CONFIG.md).\n", "example": {"_type": "literalExpression", "text": "/memtest86\n protocol: chainload\n path: boot():///efi/memtest86/memtest86.efi\n"}, "loc": ["boot", "loader", "limine", "extraEntries"], "readOnly": false, "type": "strings concatenated with \"\\n\""}, "boot.loader.limine.force": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Force installation even if the safety checks fail, use absolutely only if necessary!\n", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "loader", "limine", "force"], "readOnly": false, "type": "boolean"}, "boot.loader.limine.maxGenerations": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Maximum number of latest generations in the boot menu.\nUseful to prevent boot partition of running out of disk space.\n`null` means no limit i.e. all generations that were not\ngarbage collected yet.\n", "example": {"_type": "literalExpression", "text": "50"}, "loc": ["boot", "loader", "limine", "maxGenerations"], "readOnly": false, "type": "null or signed integer"}, "boot.loader.limine.package": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "pkgs.limine"}, "description": "The limine package to use.", "loc": ["boot", "loader", "limine", "package"], "readOnly": false, "type": "package"}, "boot.loader.limine.panicOnChecksumMismatch": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether or not checksum validation failure should be a fatal\nerror at boot time.\n", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "loader", "limine", "panicOnChecksumMismatch"], "readOnly": false, "type": "boolean"}, "boot.loader.limine.partitionIndex": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "The 1-based index of the dedicated partition for limine's second stage.\n", "loc": ["boot", "loader", "limine", "partitionIndex"], "readOnly": false, "type": "null or signed integer"}, "boot.loader.limine.resolution": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "The framebuffer resolution to set when booting Linux entries.\nThis controls the GOP mode that Limine sets before handing off to the kernel,\nwhich affects early boot graphics (e.g., simpledrm, efifb).\n\nFormat: `x` or `xx`.\nIf bpp is omitted, defaults to 32.\n\nNote: Refresh rate is not supported because the UEFI GOP protocol only\ndefines framebuffer dimensions and pixel format, not display timing.\nRefresh rate is determined later by the GPU driver based on EDID.\n\nThis is distinct from {option}`boot.loader.limine.style.interface.resolution`\nwhich only affects the Limine bootloader's own menu interface.\n", "example": {"_type": "literalExpression", "text": "\"1920x1080x32\""}, "loc": ["boot", "loader", "limine", "resolution"], "readOnly": false, "type": "null or string"}, "boot.loader.limine.secureBoot.enable": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to use sign the limine binary with sbctl.\n\n::: {.note}\nThis requires you to already have generated the keys and enrolled them with {command}`sbctl`.\n\nTo create keys use {command}`sbctl create-keys`.\n\nTo enroll them first reset secure boot to \"Setup Mode\". This is device specific.\nThen enroll them using {command}`sbctl enroll-keys -m -f`.\n\nYou can now rebuild your system with this option enabled.\n\nAfterwards turn setup mode off and enable secure boot.\n:::\n", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "loader", "limine", "secureBoot", "enable"], "readOnly": false, "type": "boolean"}, "boot.loader.limine.secureBoot.sbctl": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "pkgs.sbctl"}, "description": "The sbctl package to use.", "loc": ["boot", "loader", "limine", "secureBoot", "sbctl"], "readOnly": false, "type": "package"}, "boot.loader.limine.style.backdrop": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Color to fill the rest of the screen with when wallpaper_style is centered in RRGGBB format.\n", "example": {"_type": "literalExpression", "text": "\"7EBAE4\""}, "loc": ["boot", "loader", "limine", "style", "backdrop"], "readOnly": false, "type": "null or string"}, "boot.loader.limine.style.graphicalTerminal.background": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Text background color (TTRRGGBB). TT is transparency.\n", "loc": ["boot", "loader", "limine", "style", "graphicalTerminal", "background"], "readOnly": false, "type": "null or string"}, "boot.loader.limine.style.graphicalTerminal.brightBackground": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Text background bright color (RRGGBB).\n", "loc": ["boot", "loader", "limine", "style", "graphicalTerminal", "brightBackground"], "readOnly": false, "type": "null or string"}, "boot.loader.limine.style.graphicalTerminal.brightForeground": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Text foreground bright color (RRGGBB).\n", "loc": ["boot", "loader", "limine", "style", "graphicalTerminal", "brightForeground"], "readOnly": false, "type": "null or string"}, "boot.loader.limine.style.graphicalTerminal.brightPalette": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "A ; seperated array of 8 colors in the format RRGGBB:\ndark gray, bright red, bright green, yellow, bright blue, bright magenta, bright cyan, and white.\n", "loc": ["boot", "loader", "limine", "style", "graphicalTerminal", "brightPalette"], "readOnly": false, "type": "null or string"}, "boot.loader.limine.style.graphicalTerminal.font.scale": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "The scale of the font in the format x.\n", "example": {"_type": "literalExpression", "text": "2x2"}, "loc": ["boot", "loader", "limine", "style", "graphicalTerminal", "font", "scale"], "readOnly": false, "type": "null or string"}, "boot.loader.limine.style.graphicalTerminal.font.spacing": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "The horizontal spacing between characters in pixels.\n", "loc": ["boot", "loader", "limine", "style", "graphicalTerminal", "font", "spacing"], "readOnly": false, "type": "null or signed integer"}, "boot.loader.limine.style.graphicalTerminal.foreground": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Text foreground color (RRGGBB).\n", "loc": ["boot", "loader", "limine", "style", "graphicalTerminal", "foreground"], "readOnly": false, "type": "null or string"}, "boot.loader.limine.style.graphicalTerminal.margin": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "The amount of margin around the terminal.\n", "loc": ["boot", "loader", "limine", "style", "graphicalTerminal", "margin"], "readOnly": false, "type": "null or signed integer"}, "boot.loader.limine.style.graphicalTerminal.marginGradient": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "The thickness in pixels for the margin around the terminal.\n", "loc": ["boot", "loader", "limine", "style", "graphicalTerminal", "marginGradient"], "readOnly": false, "type": "null or signed integer"}, "boot.loader.limine.style.graphicalTerminal.palette": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "A ; seperated array of 8 colors in the format RRGGBB:\nblack, red, green, brown, blue, magenta, cyan, and gray.\n", "loc": ["boot", "loader", "limine", "style", "graphicalTerminal", "palette"], "readOnly": false, "type": "null or string"}, "boot.loader.limine.style.interface.branding": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "The title at the top of the screen.\n", "loc": ["boot", "loader", "limine", "style", "interface", "branding"], "readOnly": false, "type": "null or string"}, "boot.loader.limine.style.interface.brandingColor": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Color index of the title at the top of the screen in the range of 0-7 (Limine defaults to 6 (cyan)).\n", "loc": ["boot", "loader", "limine", "style", "interface", "brandingColor"], "readOnly": false, "type": "null or signed integer"}, "boot.loader.limine.style.interface.helpHidden": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether or not to hide the keybinds at the top of the screen.\n", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "loader", "limine", "style", "interface", "helpHidden"], "readOnly": false, "type": "boolean"}, "boot.loader.limine.style.interface.resolution": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "The resolution of the interface.\n", "loc": ["boot", "loader", "limine", "style", "interface", "resolution"], "readOnly": false, "type": "null or string"}, "boot.loader.limine.style.wallpaperStyle": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "\"stretched\""}, "description": "How the wallpaper should be fit to the screen.\n", "loc": ["boot", "loader", "limine", "style", "wallpaperStyle"], "readOnly": false, "type": "one of \"centered\", \"stretched\", \"tiled\""}, "boot.loader.limine.style.wallpapers": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "A list of wallpapers.\nIf more than one is specified, a random one will be selected at boot.\n", "example": {"_type": "literalExpression", "text": "[ pkgs.nixos-artwork.wallpapers.simple-dark-gray-bootloader.gnomeFilePath ]"}, "loc": ["boot", "loader", "limine", "style", "wallpapers"], "readOnly": false, "type": "list of absolute path"}, "boot.loader.limine.validateChecksums": {"declarations": ["nixos/modules/system/boot/loader/limine/limine.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Whether to validate file checksums before booting.\n", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "loader", "limine", "validateChecksums"], "readOnly": false, "type": "boolean"}, "boot.loader.refind.additionalFiles": {"declarations": ["nixos/modules/system/boot/loader/refind/refind.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "A set of files to be copied to {file}`/boot`. Each attribute name denotes the\ndestination file name in {file}`/boot`, while the corresponding attribute value\nspecifies the source file.\n", "example": {"_type": "literalExpression", "text": "{ \"efi/memtest86/memtest86.efi\" = \"${pkgs.memtest86-efi}/BOOTX64.efi\"; }\n"}, "loc": ["boot", "loader", "refind", "additionalFiles"], "readOnly": false, "type": "attribute set of absolute path"}, "boot.loader.refind.efiInstallAsRemovable": {"declarations": ["nixos/modules/system/boot/loader/refind/refind.nix"], "default": {"_type": "literalExpression", "text": "!config.boot.loader.efi.canTouchEfiVariables"}, "description": "Whether or not to install the rEFInd EFI files as removable.\n\nSee {option}`boot.loader.grub.efiInstallAsRemovable`\n", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "loader", "refind", "efiInstallAsRemovable"], "readOnly": false, "type": "boolean"}, "boot.loader.refind.enable": {"declarations": ["nixos/modules/system/boot/loader/refind/refind.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to enable the rEFInd boot loader.", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "loader", "refind", "enable"], "readOnly": false, "type": "boolean"}, "boot.loader.refind.extraConfig": {"declarations": ["nixos/modules/system/boot/loader/refind/refind.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "A string which is prepended to refind.conf.\n", "loc": ["boot", "loader", "refind", "extraConfig"], "readOnly": false, "type": "strings concatenated with \"\\n\""}, "boot.loader.refind.maxGenerations": {"declarations": ["nixos/modules/system/boot/loader/refind/refind.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Maximum number of latest generations in the boot menu.\nUseful to prevent boot partition of running out of disk space.\n`null` means no limit i.e. all generations that were not\ngarbage collected yet.\n", "example": {"_type": "literalExpression", "text": "50"}, "loc": ["boot", "loader", "refind", "maxGenerations"], "readOnly": false, "type": "null or signed integer"}, "boot.loader.refind.package": {"declarations": ["nixos/modules/system/boot/loader/refind/refind.nix"], "default": {"_type": "literalExpression", "text": "pkgs.refind"}, "description": "The refind package to use.", "loc": ["boot", "loader", "refind", "package"], "readOnly": false, "type": "package"}, "boot.loader.systemd-boot.configurationLimit": {"declarations": ["nixos/modules/system/boot/loader/systemd-boot/systemd-boot.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Maximum number of latest generations in the boot menu.\nUseful to prevent boot partition running out of disk space.\n\n`null` means no limit i.e. all generations\nthat have not been garbage collected yet.\n", "example": {"_type": "literalExpression", "text": "120"}, "loc": ["boot", "loader", "systemd-boot", "configurationLimit"], "readOnly": false, "type": "null or signed integer"}, "boot.loader.systemd-boot.consoleMode": {"declarations": ["nixos/modules/system/boot/loader/systemd-boot/systemd-boot.nix"], "default": {"_type": "literalExpression", "text": "\"keep\""}, "description": "The resolution of the console. The following values are valid:\n\n- `\"0\"`: Standard UEFI 80x25 mode\n- `\"1\"`: 80x50 mode, not supported by all devices\n- `\"2\"`: The first non-standard mode provided by the device firmware, if any\n- `\"5\"`: Applicable for SteamDeck where this mode represent horizontal mode\n- `\"auto\"`: Pick a suitable mode automatically using heuristics\n- `\"max\"`: Pick the highest-numbered available mode\n- `\"keep\"`: Keep the mode selected by firmware (the default)\n", "loc": ["boot", "loader", "systemd-boot", "consoleMode"], "readOnly": false, "type": "one of \"0\", \"1\", \"2\", \"5\", \"auto\", \"max\", \"keep\""}, "boot.loader.systemd-boot.editor": {"declarations": ["nixos/modules/system/boot/loader/systemd-boot/systemd-boot.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Whether to allow editing the kernel command-line before\nboot. It is recommended to set this to false, as it allows\ngaining root access by passing init=/bin/sh as a kernel\nparameter. However, it is enabled by default for backwards\ncompatibility.\n", "loc": ["boot", "loader", "systemd-boot", "editor"], "readOnly": false, "type": "boolean"}, "boot.loader.systemd-boot.edk2-uefi-shell.enable": {"declarations": ["nixos/modules/system/boot/loader/systemd-boot/systemd-boot.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Make the EDK2 UEFI Shell available from the systemd-boot menu.\nIt can be used to manually boot other operating systems or for debugging.\n", "loc": ["boot", "loader", "systemd-boot", "edk2-uefi-shell", "enable"], "readOnly": false, "type": "boolean"}, "boot.loader.systemd-boot.edk2-uefi-shell.sortKey": {"declarations": ["nixos/modules/system/boot/loader/systemd-boot/systemd-boot.nix"], "default": {"_type": "literalExpression", "text": "\"o_edk2-uefi-shell\""}, "description": "`systemd-boot` orders the menu entries by their sort keys,\nso if you want something to appear after all the NixOS entries,\nit should start with {file}`o` or onwards.\n\nSee also {option}`boot.loader.systemd-boot.sortKey`..\n", "loc": ["boot", "loader", "systemd-boot", "edk2-uefi-shell", "sortKey"], "readOnly": false, "type": "string"}, "boot.loader.systemd-boot.enable": {"declarations": ["nixos/modules/system/boot/loader/systemd-boot/systemd-boot.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to enable the systemd-boot (formerly gummiboot) EFI boot manager.\nFor more information about systemd-boot:\n\n", "loc": ["boot", "loader", "systemd-boot", "enable"], "readOnly": false, "type": "boolean"}, "boot.loader.systemd-boot.extraEntries": {"declarations": ["nixos/modules/system/boot/loader/systemd-boot/systemd-boot.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Any additional entries you want added to the `systemd-boot` menu.\nThese entries will be copied to {file}`$BOOT/loader/entries`.\nEach attribute name denotes the destination file name,\nand the corresponding attribute value is the contents of the entry.\n\nTo control the ordering of the entry in the boot menu, use the sort-key\nfield, see\n\nand {option}`boot.loader.systemd-boot.sortKey`.\n", "example": {"_type": "literalExpression", "text": "{ \"memtest86.conf\" = ''\n title Memtest86+\n efi /efi/memtest86/memtest.efi\n sort-key z_memtest\n''; }\n"}, "loc": ["boot", "loader", "systemd-boot", "extraEntries"], "readOnly": false, "type": "attribute set of strings concatenated with \"\\n\""}, "boot.loader.systemd-boot.extraFiles": {"declarations": ["nixos/modules/system/boot/loader/systemd-boot/systemd-boot.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "A set of files to be copied to {file}`$BOOT`.\nEach attribute name denotes the destination file name in\n{file}`$BOOT`, while the corresponding\nattribute value specifies the source file.\n", "example": {"_type": "literalExpression", "text": "{ \"efi/memtest86/memtest.efi\" = pkgs.memtest86plus.efi; }\n"}, "loc": ["boot", "loader", "systemd-boot", "extraFiles"], "readOnly": false, "type": "attribute set of absolute path"}, "boot.loader.systemd-boot.extraInstallCommands": {"declarations": ["nixos/modules/system/boot/loader/systemd-boot/systemd-boot.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "Additional shell commands inserted in the bootloader installer\nscript after generating menu entries. It can be used to expand\non extra boot entries that cannot incorporate certain pieces of\ninformation (such as the resulting `init=` kernel parameter).\n", "example": {"_type": "literalExpression", "text": "''\n default_cfg=$(cat /boot/loader/loader.conf | grep default | awk '{print $2}')\n init_value=$(cat /boot/loader/entries/$default_cfg | grep init= | awk '{print $2}')\n sed -i \"s|@INIT@|$init_value|g\" /boot/custom/config_with_placeholder.conf\n''"}, "loc": ["boot", "loader", "systemd-boot", "extraInstallCommands"], "readOnly": false, "type": "strings concatenated with \"\\n\""}, "boot.loader.systemd-boot.graceful": {"declarations": ["nixos/modules/system/boot/loader/systemd-boot/systemd-boot.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Invoke `bootctl install` with the `--graceful` option,\nwhich ignores errors when EFI variables cannot be written or when the EFI System Partition\ncannot be found. Currently only applies to random seed operations.\n\nOnly enable this option if `systemd-boot` otherwise fails to install, as the\nscope or implication of the `--graceful` option may change in the future.\n", "loc": ["boot", "loader", "systemd-boot", "graceful"], "readOnly": false, "type": "boolean"}, "boot.loader.systemd-boot.installDeviceTree": {"declarations": ["nixos/modules/system/boot/loader/systemd-boot/systemd-boot.nix"], "default": {"_type": "literalExpression", "text": "\"with config.hardware.deviceTree; enable && name != null\""}, "description": "Install the devicetree blob specified by `config.hardware.deviceTree.name`\nto the ESP and instruct systemd-boot to pass this DTB to linux.\n", "loc": ["boot", "loader", "systemd-boot", "installDeviceTree"], "readOnly": false, "type": "unspecified value"}, "boot.loader.systemd-boot.memtest86.enable": {"declarations": ["nixos/modules/system/boot/loader/systemd-boot/systemd-boot.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Make Memtest86+ available from the systemd-boot menu. Memtest86+ is a\nprogram for testing memory.\n", "loc": ["boot", "loader", "systemd-boot", "memtest86", "enable"], "readOnly": false, "type": "boolean"}, "boot.loader.systemd-boot.memtest86.sortKey": {"declarations": ["nixos/modules/system/boot/loader/systemd-boot/systemd-boot.nix"], "default": {"_type": "literalExpression", "text": "\"o_memtest86\""}, "description": "`systemd-boot` orders the menu entries by their sort keys,\nso if you want something to appear after all the NixOS entries,\nit should start with {file}`o` or onwards.\n\nSee also {option}`boot.loader.systemd-boot.sortKey`.\n", "loc": ["boot", "loader", "systemd-boot", "memtest86", "sortKey"], "readOnly": false, "type": "string"}, "boot.loader.systemd-boot.netbootxyz.enable": {"declarations": ["nixos/modules/system/boot/loader/systemd-boot/systemd-boot.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Make `netboot.xyz` available from the\n`systemd-boot` menu. `netboot.xyz`\nis a menu system that allows you to boot OS installers and\nutilities over the network.\n", "loc": ["boot", "loader", "systemd-boot", "netbootxyz", "enable"], "readOnly": false, "type": "boolean"}, "boot.loader.systemd-boot.netbootxyz.sortKey": {"declarations": ["nixos/modules/system/boot/loader/systemd-boot/systemd-boot.nix"], "default": {"_type": "literalExpression", "text": "\"o_netbootxyz\""}, "description": "`systemd-boot` orders the menu entries by their sort keys,\nso if you want something to appear after all the NixOS entries,\nit should start with {file}`o` or onwards.\n\nSee also {option}`boot.loader.systemd-boot.sortKey`.\n", "loc": ["boot", "loader", "systemd-boot", "netbootxyz", "sortKey"], "readOnly": false, "type": "string"}, "boot.loader.systemd-boot.rebootForBitlocker": {"declarations": ["nixos/modules/system/boot/loader/systemd-boot/systemd-boot.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Enable *EXPERIMENTAL* BitLocker support.\n\nTry to detect BitLocker encrypted drives along with an active\nTPM. If both are found and Windows Boot Manager is selected in\nthe boot menu, set the \"BootNext\" EFI variable and restart the\nsystem. The firmware will then start Windows Boot Manager\ndirectly, leaving the TPM PCRs in expected states so that\nWindows can unseal the encryption key.\n", "loc": ["boot", "loader", "systemd-boot", "rebootForBitlocker"], "readOnly": false, "type": "boolean"}, "boot.loader.systemd-boot.sortKey": {"declarations": ["nixos/modules/system/boot/loader/systemd-boot/systemd-boot.nix"], "default": {"_type": "literalExpression", "text": "\"nixos\""}, "description": "The sort key used for the NixOS bootloader entries.\nThis key determines sorting relative to non-NixOS entries.\nSee also \n\nThis option can also be used to control the sorting of NixOS specialisations.\n\nBy default, specialisations inherit the sort key of their parent generation\nand will have the same value for both the sort-key and the version (i.e. the generation number),\nsystemd-boot will therefore sort them based on their file name, meaning that\nin your boot menu you will have each main generation directly followed by\nits specialisations sorted alphabetically by their names.\n\nIf you want a different ordering for a specialisation, you can override\nits sort-key which will cause the specialisation to be uncoupled from its\nparent generation. It will then be sorted by its new sort-key just like\nany other boot entry.\n\nThe sort-key is stored in the generation's bootspec, which means that\ngenerations keep their sort-keys even if the original definition of the\ngeneration was removed from the NixOS configuration.\nIt also means that updating the sort-key will only affect new generations,\nwhile old ones will keep the sort-key that they were originally built with.\n", "loc": ["boot", "loader", "systemd-boot", "sortKey"], "readOnly": false, "type": "string"}, "boot.loader.systemd-boot.windows": {"declarations": ["nixos/modules/system/boot/loader/systemd-boot/systemd-boot.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Make Windows bootable from systemd-boot. This option is not necessary when Windows and\nNixOS use the same EFI System Partition (ESP). In that case, Windows will automatically be\ndetected by systemd-boot.\n\nHowever, if Windows is installed on a separate drive or ESP, you can use this option to add\na menu entry for each installation manually.\n\nThe attribute name is used for the title of the menu entry and internal file names.\n", "example": {"_type": "literalExpression", "text": "{\n \"10\".efiDeviceHandle = \"HD0c3\";\n \"11-ame\" = {\n title = \"Windows 11 Ameliorated Edition\";\n efiDeviceHandle = \"HD0b1\";\n };\n \"11-home\" = {\n title = \"Windows 11 Home\";\n efiDeviceHandle = \"FS1\";\n sortKey = \"z_windows\";\n };\n}\n"}, "loc": ["boot", "loader", "systemd-boot", "windows"], "readOnly": false, "type": "attribute set of (submodule)"}, "boot.loader.systemd-boot.windows..efiDeviceHandle": {"declarations": ["nixos/modules/system/boot/loader/systemd-boot/systemd-boot.nix"], "description": "The device handle of the EFI System Partition (ESP) where the Windows bootloader is\nlocated. This is the device handle that the EDK2 UEFI Shell uses to load the\nbootloader.\n\nTo find this handle, follow these steps:\n1. Set {option}`boot.loader.systemd-boot.edk2-uefi-shell.enable` to `true`\n2. Run `nixos-rebuild boot`\n3. Reboot and select \"EDK2 UEFI Shell\" from the systemd-boot menu\n4. Run `map -c` to list all consistent device handles\n5. For each device handle (for example, `HD0c1`), run `ls HD0c1:\\EFI`\n6. If the output contains the directory `Microsoft`, you might have found the correct device handle\n7. Run `HD0c1:\\EFI\\Microsoft\\Boot\\Bootmgfw.efi` to check if Windows boots correctly\n8. If it does, this device handle is the one you need (in this example, `HD0c1`)\n\nThis option is required, there is no useful default.\n", "example": {"_type": "literalExpression", "text": "\"HD1b3\""}, "loc": ["boot", "loader", "systemd-boot", "windows", "", "efiDeviceHandle"], "readOnly": false, "type": "string"}, "boot.loader.systemd-boot.windows..sortKey": {"declarations": ["nixos/modules/system/boot/loader/systemd-boot/systemd-boot.nix"], "default": {"_type": "literalExpression", "text": "\"attribute name of this entry, prefixed with \\\"o_windows_\\\"\""}, "description": "`systemd-boot` orders the menu entries by their sort keys,\nso if you want something to appear after all the NixOS entries,\nit should start with {file}`o` or onwards.\n\nSee also {option}`boot.loader.systemd-boot.sortKey`..\n", "loc": ["boot", "loader", "systemd-boot", "windows", "", "sortKey"], "readOnly": false, "type": "string"}, "boot.loader.systemd-boot.windows..title": {"declarations": ["nixos/modules/system/boot/loader/systemd-boot/systemd-boot.nix"], "default": {"_type": "literalExpression", "text": "\"attribute name of this entry, prefixed with \\\"Windows \\\"\""}, "description": "The title of the boot menu entry.\n", "example": {"_type": "literalExpression", "text": "\"Michaelsoft Binbows\""}, "loc": ["boot", "loader", "systemd-boot", "windows", "", "title"], "readOnly": false, "type": "string"}, "boot.loader.systemd-boot.xbootldrMountPoint": {"declarations": ["nixos/modules/system/boot/loader/systemd-boot/systemd-boot.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Where the XBOOTLDR partition is mounted.\n\nIf set, this partition will be used as $BOOT to store boot loader entries and extra files\ninstead of the EFI partition. As per the bootloader specification, it is recommended that\nthe EFI and XBOOTLDR partitions be mounted at `/efi` and `/boot`, respectively.\n", "loc": ["boot", "loader", "systemd-boot", "xbootldrMountPoint"], "readOnly": false, "type": "null or string"}, "boot.loader.timeout": {"declarations": ["nixos/modules/system/boot/loader/loader.nix"], "default": {"_type": "literalExpression", "text": "5"}, "description": "Timeout (in seconds) until loader boots the default menu item. Use null if the loader menu should be displayed indefinitely.\n", "loc": ["boot", "loader", "timeout"], "readOnly": false, "type": "null or signed integer"}, "boot.modprobeConfig.enable": {"declarations": ["nixos/modules/system/boot/modprobe.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Whether to enable modprobe config. This is useful for systems like containers which do not require a kernel.", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "modprobeConfig", "enable"], "readOnly": false, "type": "boolean"}, "boot.modprobeConfig.useUbuntuModuleBlacklist": {"declarations": ["nixos/modules/system/boot/modprobe.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Whether to enable Ubuntu distro's module blacklist.", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "modprobeConfig", "useUbuntuModuleBlacklist"], "readOnly": false, "type": "boolean"}, "boot.nixStoreMountOpts": {"declarations": ["nixos/modules/system/boot/stage-2.nix"], "default": {"_type": "literalExpression", "text": "[\n \"ro\"\n \"nodev\"\n \"nosuid\"\n]"}, "description": "Defines the mount options used on a bind mount for the {file}`/nix/store`.\nThis affects the whole system except the nix store daemon, which will undo the bind mount.\n\n`ro` enforces immutability of the Nix store.\nThe store daemon should already not put device mappers or suid binaries in the store,\nmeaning `nosuid` and `nodev` enforce what should already be the case.\n", "loc": ["boot", "nixStoreMountOpts"], "readOnly": false, "type": "list of non-empty string"}, "boot.plymouth.enable": {"declarations": ["nixos/modules/system/boot/plymouth.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to enable Plymouth boot splash screen.", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "plymouth", "enable"], "readOnly": false, "type": "boolean"}, "boot.plymouth.extraConfig": {"declarations": ["nixos/modules/system/boot/plymouth.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "Literal string to append to `configFile`\nand the config file generated by the plymouth module.\n", "loc": ["boot", "plymouth", "extraConfig"], "readOnly": false, "type": "strings concatenated with \"\\n\""}, "boot.plymouth.font": {"declarations": ["nixos/modules/system/boot/plymouth.nix"], "default": {"_type": "literalExpression", "text": "\"${pkgs.dejavu_fonts.minimal}/share/fonts/truetype/DejaVuSans.ttf\""}, "description": "Font file made available for displaying text on the splash screen.\n", "loc": ["boot", "plymouth", "font"], "readOnly": false, "type": "absolute path"}, "boot.plymouth.logo": {"declarations": ["nixos/modules/system/boot/plymouth.nix"], "default": {"_type": "literalExpression", "text": "\"${pkgs.nixos-icons}/share/icons/hicolor/48x48/apps/nix-snowflake-white.png\""}, "description": "Logo which is displayed on the splash screen.\nCurrently supports PNG file format only.\n", "example": {"_type": "literalExpression", "text": "pkgs.fetchurl {\n url = \"https://nixos.org/logo/nixos-hires.png\";\n sha256 = \"1ivzgd7iz0i06y36p8m5w48fd8pjqwxhdaavc0pxs7w1g7mcy5si\";\n}\n"}, "loc": ["boot", "plymouth", "logo"], "readOnly": false, "type": "absolute path"}, "boot.plymouth.package": {"declarations": ["nixos/modules/system/boot/plymouth.nix"], "default": {"_type": "literalExpression", "text": "pkgs.plymouth.override {\n systemd = config.boot.initrd.systemd.package;\n}\n"}, "description": "The plymouth package to use.", "loc": ["boot", "plymouth", "package"], "readOnly": false, "type": "package"}, "boot.plymouth.theme": {"declarations": ["nixos/modules/system/boot/plymouth.nix"], "default": {"_type": "literalExpression", "text": "\"bgrt\""}, "description": "Splash screen theme.\n", "loc": ["boot", "plymouth", "theme"], "readOnly": false, "type": "string"}, "boot.plymouth.themePackages": {"declarations": ["nixos/modules/system/boot/plymouth.nix"], "default": {"_type": "literalMD", "text": "A NixOS branded variant of the breeze theme when\n`config.boot.plymouth.theme == \"breeze\"`, otherwise\n`[ ]`.\n"}, "description": "Extra theme packages for plymouth.\n", "loc": ["boot", "plymouth", "themePackages"], "readOnly": false, "type": "list of package"}, "boot.plymouth.tpm2-totp.enable": {"declarations": ["nixos/modules/system/boot/plymouth-tpm2-totp.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to display a TOTP during boot using tpm2-totp and Plymouth.", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "plymouth", "tpm2-totp", "enable"], "readOnly": false, "type": "boolean"}, "boot.plymouth.tpm2-totp.package": {"declarations": ["nixos/modules/system/boot/plymouth-tpm2-totp.nix"], "default": {"_type": "literalExpression", "text": "pkgs.tpm2-totp-with-plymouth"}, "description": "The tpm2-totp package to use.", "loc": ["boot", "plymouth", "tpm2-totp", "package"], "readOnly": false, "type": "package"}, "boot.postBootCommands": {"declarations": ["nixos/modules/system/boot/stage-2.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "Shell commands to be executed just before systemd is started.\n", "example": {"_type": "literalExpression", "text": "\"rm -f /var/log/messages\""}, "loc": ["boot", "postBootCommands"], "readOnly": false, "type": "strings concatenated with \"\\n\""}, "boot.resumeDevice": {"declarations": ["nixos/modules/system/boot/stage-1.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "Device for manual resume attempt during boot. This should be used primarily\nif you want to resume from file. If left empty, the swap partitions are used.\nSpecify here the device where the file resides.\nYou should also use {var}`boot.kernelParams` to specify\n`\u00abresume_offset\u00bb`.\n", "example": {"_type": "literalExpression", "text": "\"/dev/sda3\""}, "loc": ["boot", "resumeDevice"], "readOnly": false, "type": "string"}, "boot.runSize": {"declarations": ["nixos/modules/tasks/filesystems.nix"], "default": {"_type": "literalExpression", "text": "\"25%\""}, "description": "Size limit for the /run tmpfs. Look at {manpage}`mount(8)`, tmpfs size option,\nfor the accepted syntax.\n", "example": {"_type": "literalExpression", "text": "\"256m\""}, "loc": ["boot", "runSize"], "readOnly": false, "type": "string"}, "boot.specialFileSystems..depends": {"declarations": ["nixos/modules/tasks/filesystems.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "List of paths that should be mounted before this one. This filesystem's\n{option}`device` and {option}`mountPoint` are always\nchecked and do not need to be included explicitly. If a path is added\nto this list, any other filesystem whose mount point is a parent of\nthe path will be mounted before this filesystem. The paths do not need\nto actually be the {option}`mountPoint` of some other filesystem.\n\nThis is useful for mounts which require keys and/or configuration files residing on another filesystem.\n", "example": {"_type": "literalExpression", "text": "[\n \"/persist\"\n]"}, "loc": ["boot", "specialFileSystems", "", "depends"], "readOnly": false, "type": "list of string (with check: non-empty without trailing slash)"}, "boot.specialFileSystems..device": {"declarations": ["nixos/modules/tasks/filesystems.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "The device as passed to `mount`.\n\nThis can be any of:\n\n- a filename of a block special device such as `/dev/sdc3`\n- a tag such as `UUID=fdd68895-c307-4549-8c9c-90e44c71f5b7`\n- (for bind mounts only) the source path\n- something else depending on the {option}`fsType`. For example, `nfs` device may look like `knuth.cwi.nl:/dir`\n\nThis is called `device` in {manpage}`mount(8)` and `fs_spec` in {manpage}`fstab(5)`.\n", "example": {"_type": "literalExpression", "text": "\"/dev/sda\""}, "loc": ["boot", "specialFileSystems", "", "device"], "readOnly": false, "type": "null or string (with check: non-empty)"}, "boot.specialFileSystems..enable": {"declarations": ["nixos/modules/tasks/filesystems.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Whether to enable the filesystem mount.", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "specialFileSystems", "", "enable"], "readOnly": false, "type": "boolean"}, "boot.specialFileSystems..fsType": {"declarations": ["nixos/modules/tasks/filesystems.nix"], "default": {"_type": "literalExpression", "text": "\"auto\""}, "description": "Type of the file system.\n\nThis is the `fstype` passed to `-t` in the {manpage}`mount(8)` command, and is called `fs_vfstype` in {manpage}`fstab(5)`.\n", "example": {"_type": "literalExpression", "text": "\"ext3\""}, "loc": ["boot", "specialFileSystems", "", "fsType"], "readOnly": false, "type": "string (with check: non-empty)"}, "boot.specialFileSystems..mountPoint": {"declarations": ["nixos/modules/tasks/filesystems.nix"], "default": {"_type": "literalExpression", "text": "\"\u2039name\u203a\""}, "description": "Location where the file system will be mounted.\n\nThis is called `mountpoint` in {manpage}`mount(8)` and `fs_file` in {manpage}`fstab(5)`\n", "example": {"_type": "literalExpression", "text": "\"/mnt/usb\""}, "loc": ["boot", "specialFileSystems", "", "mountPoint"], "readOnly": false, "type": "string (with check: non-empty without trailing slash)"}, "boot.specialFileSystems..options": {"declarations": ["nixos/modules/tasks/filesystems.nix"], "default": {"_type": "literalExpression", "text": "[\n \"defaults\"\n]"}, "description": "Options used to mount the file system.\n\nThis is called `options` in {manpage}`mount(8)` and `fs_mntops` in {manpage}`fstab(5)`\n\nSome options that can be used for all mounts are documented in {manpage}`mount(8)` under `FILESYSTEM-INDEPENDENT MOUNT OPTIONS`.\n\nOptions that systemd understands are documented in {manpage}`systemd.mount(5)` under `FSTAB`.\n\nEach filesystem supports additional options, see the docs for that filesystem.\n", "example": {"_type": "literalExpression", "text": "[\n \"data=journal\"\n]"}, "loc": ["boot", "specialFileSystems", "", "options"], "readOnly": false, "type": "non-empty (list of string (with check: non-empty))"}, "boot.specialFileSystems..stratis.poolUuid": {"declarations": ["nixos/modules/tasks/filesystems.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "UUID of the stratis pool that the fs is located in\n\nThis is only relevant if you are using [stratis](https://stratis-storage.github.io/).\n", "example": {"_type": "literalExpression", "text": "\"04c68063-90a5-4235-b9dd-6180098a20d9\""}, "loc": ["boot", "specialFileSystems", "", "stratis", "poolUuid"], "readOnly": false, "type": "null or string"}, "boot.stage2Greeting": {"declarations": ["nixos/modules/system/boot/stage-2.nix"], "default": {"_type": "literalExpression", "text": "\"<<< ${config.system.nixos.distroName} Stage 2 >>>\""}, "description": "The greeting message displayed during NixOS stage 2 boot.\n", "loc": ["boot", "stage2Greeting"], "readOnly": false, "type": "string"}, "boot.supportedFilesystems": {"declarations": ["nixos/modules/tasks/filesystems.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Names of supported filesystem types, or an attribute set of file system types\nand their state. The set form may be used together with `lib.mkForce` to\nexplicitly disable support for specific filesystems, e.g. to disable ZFS\nwith an unsupported kernel.\n", "example": {"_type": "literalExpression", "text": "{\n btrfs = true;\n zfs = lib.mkForce false;\n}\n"}, "loc": ["boot", "supportedFilesystems"], "readOnly": false, "type": "(attribute set of boolean) or (list of string) convertible to it"}, "boot.swraid.enable": {"declarations": ["nixos/modules/tasks/swraid.nix"], "default": {"_type": "literalExpression", "text": "\"`true` if stateVersion is older than 23.11\""}, "description": "Whether to enable support for Linux MD RAID arrays.\n\nWhen this is enabled, mdadm will be added to the system path,\nand MD RAID arrays will be detected and activated\nautomatically, both in stage-1 (initramfs) and in stage-2 (the\nfinal NixOS system).\n\nThis should be enabled if you want to be able to access and/or\nboot from MD RAID arrays. {command}`nixos-generate-config`\nshould detect it correctly in the standard installation\nprocedure.\n", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "swraid", "enable"], "readOnly": false, "type": "boolean"}, "boot.swraid.mdadmConf": {"declarations": ["nixos/modules/tasks/swraid.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "Contents of {file}`/etc/mdadm.conf`.", "loc": ["boot", "swraid", "mdadmConf"], "readOnly": false, "type": "strings concatenated with \"\\n\""}, "boot.systemdExecutable": {"declarations": ["nixos/modules/system/boot/stage-2.nix"], "default": {"_type": "literalExpression", "text": "\"/run/current-system/systemd/lib/systemd/systemd\""}, "description": "The program to execute to start systemd.\n", "loc": ["boot", "systemdExecutable"], "readOnly": false, "type": "string"}, "boot.tmp.cleanOnBoot": {"declarations": ["nixos/modules/system/boot/tmp.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to delete all files in {file}`/tmp` during boot.\n", "loc": ["boot", "tmp", "cleanOnBoot"], "readOnly": false, "type": "boolean"}, "boot.tmp.tmpfsHugeMemoryPages": {"declarations": ["nixos/modules/system/boot/tmp.nix"], "default": {"_type": "literalExpression", "text": "\"never\""}, "description": "- `never` - Do not allocate huge memory pages. This is the default.\n- `always` - Attempt to allocate huge memory page every time a new page is needed.\n- `within_size` - Only allocate huge memory pages if it will be fully within i_size. Also respect madvise(2) hints. Recommended.\n- `advise` - Only allocate huge memory pages if requested with madvise(2).\n", "example": {"_type": "literalExpression", "text": "\"within_size\""}, "loc": ["boot", "tmp", "tmpfsHugeMemoryPages"], "readOnly": false, "type": "one of \"never\", \"always\", \"within_size\", \"advise\""}, "boot.tmp.tmpfsSize": {"declarations": ["nixos/modules/system/boot/tmp.nix"], "default": {"_type": "literalExpression", "text": "\"50%\""}, "description": "Size of tmpfs in percentage.\nPercentage is defined by systemd.\n", "loc": ["boot", "tmp", "tmpfsSize"], "readOnly": false, "type": "string or (positive integer, meaning >0)"}, "boot.tmp.useTmpfs": {"declarations": ["nixos/modules/system/boot/tmp.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to mount a tmpfs on {file}`/tmp` during boot.\n\n::: {.note}\nLarge Nix builds can fail if the mounted tmpfs is not large enough.\nIn such a case either increase the tmpfsSize or disable this option.\n:::\n", "loc": ["boot", "tmp", "useTmpfs"], "readOnly": false, "type": "boolean"}, "boot.tmp.useZram": {"declarations": ["nixos/modules/system/boot/zram-as-tmp.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to mount a zram device on {file}`/tmp` during boot.\n\n::: {.note}\nLarge Nix builds can fail if the mounted zram device is not large enough.\nIn such a case either increase the zramSettings.zram-size or disable this option.\n:::\n", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "tmp", "useZram"], "readOnly": false, "type": "boolean"}, "boot.tmp.zramSettings.compression-algorithm": {"declarations": ["nixos/modules/system/boot/zram-as-tmp.nix"], "default": {"_type": "literalExpression", "text": "\"zstd\""}, "description": "The compression algorithm to use for the zram device.\n\nSee: \n", "example": {"_type": "literalExpression", "text": "\"lzo-rle\""}, "loc": ["boot", "tmp", "zramSettings", "compression-algorithm"], "readOnly": false, "type": "string"}, "boot.tmp.zramSettings.fs-type": {"declarations": ["nixos/modules/system/boot/zram-as-tmp.nix"], "default": {"_type": "literalExpression", "text": "\"ext4\""}, "description": "The file system to put on the device.\n\nSee: \n", "example": {"_type": "literalExpression", "text": "\"ext2\""}, "loc": ["boot", "tmp", "zramSettings", "fs-type"], "readOnly": false, "type": "string"}, "boot.tmp.zramSettings.options": {"declarations": ["nixos/modules/system/boot/zram-as-tmp.nix"], "default": {"_type": "literalExpression", "text": "\"X-mount.mode=1777,discard\""}, "description": "By default, file systems and swap areas are trimmed on-the-go\nby setting \"discard\".\nSetting this to the empty string clears the option.\n\nSee: \n", "loc": ["boot", "tmp", "zramSettings", "options"], "readOnly": false, "type": "string"}, "boot.tmp.zramSettings.zram-size": {"declarations": ["nixos/modules/system/boot/zram-as-tmp.nix"], "default": {"_type": "literalExpression", "text": "\"ram * 0.5\""}, "description": "The size of the zram device, as a function of MemTotal, both in MB.\nFor example, if the machine has 1 GiB, and zram-size=ram/4,\nthen the zram device will have 256 MiB.\nFractions in the range 0.1\u20130.5 are recommended\n\nSee: \n", "example": {"_type": "literalExpression", "text": "\"min(ram / 2, 4096)\""}, "loc": ["boot", "tmp", "zramSettings", "zram-size"], "readOnly": false, "type": "string"}, "boot.uki.configFile": {"declarations": ["nixos/modules/system/boot/uki.nix"], "description": "The configuration file passed to {manpage}`ukify(1)` to create the UKI.\n\nBy default this configuration file is created from {option}`boot.uki.settings`.\n", "loc": ["boot", "uki", "configFile"], "readOnly": false, "type": "absolute path"}, "boot.uki.name": {"declarations": ["nixos/modules/system/boot/uki.nix"], "description": "Name of the UKI", "loc": ["boot", "uki", "name"], "readOnly": false, "type": "string"}, "boot.uki.settings": {"declarations": ["nixos/modules/system/boot/uki.nix"], "description": "The configuration settings for ukify. These control what the UKI\ncontains and how it is built.\n", "loc": ["boot", "uki", "settings"], "readOnly": false, "type": "attribute set of section of an INI file (attrs of INI atom (null, bool, int, float or string))"}, "boot.uki.tries": {"declarations": ["nixos/modules/system/boot/uki.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Number of boot attempts before this UKI is considered bad.\n\nIf no tries are specified (the default) automatic boot assessment remains inactive.\n\nSee documentation on [Automatic Boot Assessment](https://systemd.io/AUTOMATIC_BOOT_ASSESSMENT/) and\n[boot counting](https://uapi-group.org/specifications/specs/boot_loader_specification/#boot-counting)\nfor more information.\n", "loc": ["boot", "uki", "tries"], "readOnly": false, "type": "null or (unsigned integer, meaning >=0)"}, "boot.uki.version": {"declarations": ["nixos/modules/system/boot/uki.nix"], "default": {"_type": "literalExpression", "text": "config.system.image.version"}, "description": "Version of the image or generation the UKI belongs to", "loc": ["boot", "uki", "version"], "readOnly": false, "type": "null or string"}, "boot.uvesafb.enable": {"declarations": ["nixos/modules/system/boot/uvesafb.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to enable uvesafb.", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "uvesafb", "enable"], "readOnly": false, "type": "boolean"}, "boot.uvesafb.gfx-mode": {"declarations": ["nixos/modules/system/boot/uvesafb.nix"], "default": {"_type": "literalExpression", "text": "\"1024x768-32\""}, "description": "Screen resolution in modedb format. See [uvesafb](https://docs.kernel.org/fb/uvesafb.html) and [modedb](https://docs.kernel.org/fb/modedb.html) documentation for more details. The default value is a sensible default but may be not ideal for all setups.", "loc": ["boot", "uvesafb", "gfx-mode"], "readOnly": false, "type": "string"}, "boot.uvesafb.v86d.package": {"declarations": ["nixos/modules/system/boot/uvesafb.nix"], "default": {"_type": "literalExpression", "text": "''\n config.boot.kernelPackages.v86d.overrideAttrs (old: {\n hardeningDisable = [ \"all\" ];\n })''"}, "description": "Which v86d package to use with uvesafb", "loc": ["boot", "uvesafb", "v86d", "package"], "readOnly": false, "type": "package"}, "boot.vesa": {"declarations": ["nixos/modules/system/boot/kernel.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "(Deprecated) This option, if set, activates the VESA 800x600 video\nmode on boot and disables kernel modesetting. It is equivalent to\nspecifying `[ \"vga=0x317\" \"nomodeset\" ]` in the\n{option}`boot.kernelParams` option. This option is\ndeprecated as of 2020: Xorg now works better with modesetting, and\nyou might want a different VESA vga setting, anyway.\n", "loc": ["boot", "vesa"], "readOnly": false, "type": "boolean"}, "boot.zfs.allowHibernation": {"declarations": ["nixos/modules/tasks/filesystems/zfs.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Allow hibernation support, this may be a unsafe option depending on your\nsetup. Make sure to NOT use Swap on ZFS.\n", "loc": ["boot", "zfs", "allowHibernation"], "readOnly": false, "type": "boolean"}, "boot.zfs.devNodes": {"declarations": ["nixos/modules/tasks/filesystems/zfs.nix"], "default": {"_type": "literalExpression", "text": "\"/dev/disk/by-id\""}, "description": "Name of directory from which to import ZFS device, this is passed to `zpool import`\nas the value of the `-d` option.\n\nFor guidance on choosing this value, see\n[the ZFS documentation](https://openzfs.github.io/openzfs-docs/Project%20and%20Community/FAQ.html#selecting-dev-names-when-creating-a-pool-linux).\n", "loc": ["boot", "zfs", "devNodes"], "readOnly": false, "type": "absolute path"}, "boot.zfs.enabled": {"declarations": ["nixos/modules/tasks/filesystems/zfs.nix"], "default": {"_type": "literalMD", "text": "`true` if ZFS filesystem support is enabled"}, "description": "True if ZFS filesystem support is enabled", "loc": ["boot", "zfs", "enabled"], "readOnly": true, "type": "boolean"}, "boot.zfs.extraPools": {"declarations": ["nixos/modules/tasks/filesystems/zfs.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Name or GUID of extra ZFS pools that you wish to import during boot.\n\nUsually this is not necessary. Instead, you should set the mountpoint property\nof ZFS filesystems to `legacy` and add the ZFS filesystems to\nNixOS's {option}`fileSystems` option, which makes NixOS automatically\nimport the associated pool.\n\nHowever, in some cases (e.g. if you have many filesystems) it may be preferable\nto exclusively use ZFS commands to manage filesystems. If so, since NixOS/systemd\nwill not be managing those filesystems, you will need to specify the ZFS pool here\nso that NixOS automatically imports it on every boot.\n", "example": {"_type": "literalExpression", "text": "[\n \"tank\"\n \"data\"\n]"}, "loc": ["boot", "zfs", "extraPools"], "readOnly": false, "type": "list of string"}, "boot.zfs.forceImportAll": {"declarations": ["nixos/modules/tasks/filesystems/zfs.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Forcibly import all ZFS pool(s).\n\nIf you set this option to `false` and NixOS subsequently fails to\nimport your non-root ZFS pool(s), you should manually import each pool with\n\"zpool import -f \\\", and then reboot. You should only need to do\nthis once.\n", "loc": ["boot", "zfs", "forceImportAll"], "readOnly": false, "type": "boolean"}, "boot.zfs.forceImportRoot": {"declarations": ["nixos/modules/tasks/filesystems/zfs.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Forcibly import the ZFS root pool(s) during early boot.\n\nThis is enabled by default for backwards compatibility purposes, but it is highly\nrecommended to disable this option, as it bypasses some of the safeguards ZFS uses\nto protect your ZFS pools.\n\nIf you set this option to `false` and NixOS subsequently fails to\nboot because it cannot import the root pool, you should boot with the\n`zfs_force=1` option as a kernel parameter (e.g. by manually\nediting the kernel params in grub during boot). You should only need to do this\nonce.\n", "loc": ["boot", "zfs", "forceImportRoot"], "readOnly": false, "type": "boolean"}, "boot.zfs.package": {"declarations": ["nixos/modules/tasks/filesystems/zfs.nix"], "default": {"_type": "literalExpression", "text": "pkgs.zfs"}, "description": "Configured ZFS userland tools package.", "loc": ["boot", "zfs", "package"], "readOnly": false, "type": "package"}, "boot.zfs.passwordTimeout": {"declarations": ["nixos/modules/tasks/filesystems/zfs.nix"], "default": {"_type": "literalExpression", "text": "0"}, "description": "Timeout in seconds to wait for password entry for decrypt at boot.\n\nDefaults to 0, which waits forever.\n", "loc": ["boot", "zfs", "passwordTimeout"], "readOnly": false, "type": "signed integer"}, "boot.zfs.pools": {"declarations": ["nixos/modules/tasks/filesystems/zfs.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Configuration for individual pools to override global defaults.\n", "loc": ["boot", "zfs", "pools"], "readOnly": false, "type": "attribute set of (submodule)"}, "boot.zfs.pools..devNodes": {"declarations": ["nixos/modules/tasks/filesystems/zfs.nix"], "default": {"_type": "literalExpression", "text": "\"config.boot.zfs.devNodes\""}, "description": "Name of directory from which to import ZFS device, this is passed to `zpool import`\nas the value of the `-d` option.\n\nFor guidance on choosing this value, see\n[the ZFS documentation](https://openzfs.github.io/openzfs-docs/Project%20and%20Community/FAQ.html#selecting-dev-names-when-creating-a-pool-linux).\n", "loc": ["boot", "zfs", "pools", "", "devNodes"], "readOnly": false, "type": "absolute path"}, "boot.zfs.removeLinuxDRM": {"declarations": ["nixos/modules/tasks/filesystems/zfs.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Patch the kernel to change symbols needed by ZFS from\nEXPORT_SYMBOL_GPL to EXPORT_SYMBOL.\n\nCurrently has no effect, but may again in future if a kernel\nupdate breaks ZFS due to symbols being newly changed to GPL.\n", "loc": ["boot", "zfs", "removeLinuxDRM"], "readOnly": false, "type": "boolean"}, "boot.zfs.requestEncryptionCredentials": {"declarations": ["nixos/modules/tasks/filesystems/zfs.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "If true on import encryption keys or passwords for all encrypted datasets\nare requested. To only decrypt selected datasets supply a list of dataset\nnames instead. For root pools the encryption key can be supplied via both\nan interactive prompt (keylocation=prompt) and from a file (keylocation=file://).\n", "example": {"_type": "literalExpression", "text": "[\n \"tank\"\n \"data\"\n]"}, "loc": ["boot", "zfs", "requestEncryptionCredentials"], "readOnly": false, "type": "boolean or list of string"}, "boot.zfs.useKeyringForCredentials": {"declarations": ["nixos/modules/tasks/filesystems/zfs.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to enable Uses the kernel keyring for encryption credentials with keyname=zfs-.", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["boot", "zfs", "useKeyringForCredentials"], "readOnly": false, "type": "boolean"}, "console.colors": {"declarations": ["nixos/modules/config/console.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "The 16 colors palette used by the virtual consoles.\nLeave empty to use the default colors.\nColors must be in hexadecimal format and listed in\norder from color 0 to color 15.\n", "example": {"_type": "literalExpression", "text": "[\n \"002b36\"\n \"dc322f\"\n \"859900\"\n \"b58900\"\n \"268bd2\"\n \"d33682\"\n \"2aa198\"\n \"eee8d5\"\n \"002b36\"\n \"cb4b16\"\n \"586e75\"\n \"657b83\"\n \"839496\"\n \"6c71c4\"\n \"93a1a1\"\n \"fdf6e3\"\n]"}, "loc": ["console", "colors"], "readOnly": false, "type": "list of string matching the pattern [[:xdigit:]]{6}"}, "console.earlySetup": {"declarations": ["nixos/modules/config/console.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Enable setting virtual console options as early as possible (in initrd).\n", "loc": ["console", "earlySetup"], "readOnly": false, "type": "boolean"}, "console.enable": {"declarations": ["nixos/modules/config/console.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Whether to enable virtual console.", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["console", "enable"], "readOnly": false, "type": "boolean"}, "console.font": {"declarations": ["nixos/modules/config/console.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "The font used for the virtual consoles.\nCan be `null`, a font name, or a path to a PSF font file.\n\nUse `null` to let the kernel choose a built-in font.\nThe default is 8x16, and, as of Linux 5.3, Terminus 32 bold for display\nresolutions of 2560x1080 and higher.\nThese fonts cover the [IBM437][] character set.\n\n[IBM437]: https://en.wikipedia.org/wiki/Code_page_437\n", "example": {"_type": "literalExpression", "text": "\"LatArCyrHeb-16\""}, "loc": ["console", "font"], "readOnly": false, "type": "null or string or absolute path"}, "console.keyMap": {"declarations": ["nixos/modules/config/console.nix"], "default": {"_type": "literalExpression", "text": "\"us\""}, "description": "The keyboard mapping table for the virtual consoles.\n", "example": {"_type": "literalExpression", "text": "\"fr\""}, "loc": ["console", "keyMap"], "readOnly": false, "type": "string or absolute path"}, "console.packages": {"declarations": ["nixos/modules/config/console.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "List of additional packages that provide console fonts, keymaps and\nother resources for virtual consoles use.\n", "loc": ["console", "packages"], "readOnly": false, "type": "list of package"}, "console.useXkbConfig": {"declarations": ["nixos/modules/config/console.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "If set, configure the virtual console keymap from the xserver\nkeyboard settings.\n", "loc": ["console", "useXkbConfig"], "readOnly": false, "type": "boolean"}, "documentation.dev.enable": {"declarations": ["nixos/modules/misc/documentation.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to install documentation targeted at developers.\n* This includes man pages targeted at developers if {option}`documentation.man.enable` is\n set (this also includes \"devman\" outputs).\n* This includes info pages targeted at developers if {option}`documentation.info.enable`\n is set (this also includes \"devinfo\" outputs).\n* This includes other pages targeted at developers if {option}`documentation.doc.enable`\n is set (this also includes \"devdoc\" outputs).\n", "loc": ["documentation", "dev", "enable"], "readOnly": false, "type": "boolean"}, "documentation.doc.enable": {"declarations": ["nixos/modules/misc/documentation.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Whether to install documentation distributed in packages' `/share/doc`.\nUsually plain text and/or HTML.\nThis also includes \"doc\" outputs.\n", "loc": ["documentation", "doc", "enable"], "readOnly": false, "type": "boolean"}, "documentation.enable": {"declarations": ["nixos/modules/misc/documentation.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Whether to install documentation of packages from\n{option}`environment.systemPackages` into the generated system path.\n\nSee \"Multiple-output packages\" chapter in the nixpkgs manual for more info.\n", "loc": ["documentation", "enable"], "readOnly": false, "type": "boolean"}, "documentation.info.enable": {"declarations": ["nixos/modules/misc/documentation.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Whether to install info pages and the {command}`info` command.\nThis also includes \"info\" outputs.\n", "loc": ["documentation", "info", "enable"], "readOnly": false, "type": "boolean"}, "documentation.man.cache.enable": {"declarations": ["nixos/modules/misc/documentation.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to generate the manual page index caches.\nThis allows searching for a page or\nkeyword using utilities like {manpage}`apropos(1)`\nand the `-k` option of\n{manpage}`man(1)`.\n", "loc": ["documentation", "man", "cache", "enable"], "readOnly": false, "type": "boolean"}, "documentation.man.cache.generateAtRuntime": {"declarations": ["nixos/modules/misc/documentation.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to generate the manual page index caches at runtime using\na systemd service. Note that this is currently only supported by the\nman-db module.\n", "loc": ["documentation", "man", "cache", "generateAtRuntime"], "readOnly": false, "type": "boolean"}, "documentation.man.enable": {"declarations": ["nixos/modules/misc/documentation.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Whether to install manual pages.\nThis also includes `man` outputs.\n", "loc": ["documentation", "man", "enable"], "readOnly": false, "type": "boolean"}, "documentation.man.man-db.enable": {"declarations": ["nixos/modules/misc/man-db.nix"], "default": {"_type": "literalExpression", "text": "config.documentation.man.enable"}, "description": "Whether to enable man-db as the default man page viewer.", "example": {"_type": "literalExpression", "text": "false"}, "loc": ["documentation", "man", "man-db", "enable"], "readOnly": false, "type": "boolean"}, "documentation.man.man-db.manualPages": {"declarations": ["nixos/modules/misc/man-db.nix"], "default": {"_type": "literalMD", "text": "all man pages in {option}`config.environment.systemPackages`"}, "description": "The manual pages to generate caches for if {option}`documentation.man.cache.enable`\nis enabled. Must be a path to a directory with man pages under\n`/share/man`; see the source for an example.\nAdvanced users can make this a content-addressed derivation to save a few rebuilds.\n", "loc": ["documentation", "man", "man-db", "manualPages"], "readOnly": false, "type": "absolute path"}, "documentation.man.man-db.package": {"declarations": ["nixos/modules/misc/man-db.nix"], "default": {"_type": "literalExpression", "text": "pkgs.man-db"}, "description": "The `man-db` derivation to use. Useful to override\nconfiguration options used for the package.\n", "loc": ["documentation", "man", "man-db", "package"], "readOnly": false, "type": "package"}, "documentation.man.mandoc.cachePath": {"declarations": ["nixos/modules/misc/mandoc.nix"], "default": {"_type": "literalExpression", "text": "config.documentation.man.mandoc.manPath"}, "description": "Change the paths where mandoc {manpage}`makewhatis(8)`generates the\nmanual page index caches. {option}`documentation.man.cache.enable`\nshould be enabled to allow cache generation. This list should only\ninclude the paths to manpages installed in the system configuration,\ni. e. /run/current-system/sw/share/man. {manpage}`makewhatis(8)`\ncreates a database in each directory using the files\n`mansection/[arch/]title.section` and `catsection/[arch/]title.0`\nin it. If a directory contains no manual pages, no database is\ncreated in that directory.\nThis option only needs to be set manually if extra paths should be\nindexed or {option}`documentation.man.manPath` contains paths that\ncan't be indexed.\n", "example": {"_type": "literalExpression", "text": "[ \"share/man\" \"share/man/fr\" ]"}, "loc": ["documentation", "man", "mandoc", "cachePath"], "readOnly": false, "type": "list of string"}, "documentation.man.mandoc.enable": {"declarations": ["nixos/modules/misc/mandoc.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to enable mandoc as the default man page viewer.", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["documentation", "man", "mandoc", "enable"], "readOnly": false, "type": "boolean"}, "documentation.man.mandoc.extraConfig": {"declarations": ["nixos/modules/misc/mandoc.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "Extra configuration to write to {manpage}`man.conf(5)`.\n", "loc": ["documentation", "man", "mandoc", "extraConfig"], "readOnly": false, "type": "strings concatenated with \"\\n\""}, "documentation.man.mandoc.manPath": {"declarations": ["nixos/modules/misc/mandoc.nix"], "default": {"_type": "literalExpression", "text": "[\n \"share/man\"\n]"}, "description": "Change the paths included in the MANPATH environment variable,\ni. e. the directories where {manpage}`man(1)`\nlooks for section-specific directories of man pages.\nYou only need to change this setting if you want extra man pages\n(e. g. in non-english languages). All values must be strings that\nare a valid path from the target prefix (without including it).\nThe first value given takes priority. Note that this will not\nadd manpath directives to {manpage}`man.conf(5)`.\n", "example": {"_type": "literalExpression", "text": "[ \"share/man\" \"share/man/fr\" ]"}, "loc": ["documentation", "man", "mandoc", "manPath"], "readOnly": false, "type": "list of string"}, "documentation.man.mandoc.package": {"declarations": ["nixos/modules/misc/mandoc.nix"], "default": {"_type": "literalExpression", "text": "pkgs.mandoc"}, "description": "The `mandoc` derivation to use. Useful to override\nconfiguration options used for the package.\n", "loc": ["documentation", "man", "mandoc", "package"], "readOnly": false, "type": "package"}, "documentation.man.mandoc.settings": {"declarations": ["nixos/modules/misc/mandoc.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Configuration for {manpage}`man.conf(5)`", "loc": ["documentation", "man", "mandoc", "settings"], "readOnly": false, "type": "submodule"}, "documentation.man.mandoc.settings.manpath": {"declarations": ["nixos/modules/misc/mandoc.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Override the default search path for {manpage}`man(1)`,\n{manpage}`apropos(1)`, and {manpage}`makewhatis(8)`. It can be\nused multiple times to specify multiple paths, with the order\ndetermining the manual page search order.\nThis is not recommended in favor of\n{option}`documentation.man.mandoc.manPath`, but if it's needed to\nspecify the manpath in this way, set\n{option}`documentation.man.mandoc.manPath` to an empty list (`[]`).\n", "example": {"_type": "literalExpression", "text": "[ \"/run/current-system/sw/share/man\" ]"}, "loc": ["documentation", "man", "mandoc", "settings", "manpath"], "readOnly": false, "type": "list of string"}, "documentation.man.mandoc.settings.output.fragment": {"declarations": ["nixos/modules/misc/mandoc.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to omit the declaration and the , , and \nelements and only emit the subtree below the element in HTML\noutput of {manpage}`mandoc(1)`. The style argument will be ignored.\nThis is useful when embedding manual content within existing documents.\n", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["documentation", "man", "mandoc", "settings", "output", "fragment"], "readOnly": false, "type": "boolean"}, "documentation.man.mandoc.settings.output.includes": {"declarations": ["nixos/modules/misc/mandoc.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "A string of relative path used as a template for the output path of\nlinked header files (usually via the In macro) in HTML output.\nInstances of `%I` are replaced with the include filename. The\ndefault is not to present a hyperlink.\n", "example": {"_type": "literalExpression", "text": "../src/%I.html"}, "loc": ["documentation", "man", "mandoc", "settings", "output", "includes"], "readOnly": false, "type": "null or string"}, "documentation.man.mandoc.settings.output.indent": {"declarations": ["nixos/modules/misc/mandoc.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Number of blank characters at the left margin for normal text,\ndefault of `5` for {manpage}`mdoc(7)` and `7` for\n{manpage}`man(7)`. Increasing this is not recommended; it may\nresult in degraded formatting, for example overfull lines or ugly\nline breaks. When output is to a pager on a terminal that is less\nthan 66 columns wide, the default is reduced to three columns.\n", "loc": ["documentation", "man", "mandoc", "settings", "output", "indent"], "readOnly": false, "type": "null or signed integer"}, "documentation.man.mandoc.settings.output.man": {"declarations": ["nixos/modules/misc/mandoc.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "A template for linked manuals (usually via the Xr macro) in HTML\noutput. Instances of \u2018%N\u2019 and \u2018%S\u2019 are replaced with the linked\nmanual's name and section, respectively. If no section is included,\nsection 1 is assumed. The default is not to present a hyperlink.\nIf two formats are given and a file %N.%S exists in the current\ndirectory, the first format is used; otherwise, the second format is used.\n", "example": {"_type": "literalExpression", "text": "../html%S/%N.%S.html"}, "loc": ["documentation", "man", "mandoc", "settings", "output", "man"], "readOnly": false, "type": "null or string"}, "documentation.man.mandoc.settings.output.paper": {"declarations": ["nixos/modules/misc/mandoc.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "This option is for generating PostScript and PDF output. The paper\nsize name may be one of `a3`, `a4`, `a5`, `legal`, or `letter`.\nYou may also manually specify dimensions as `NNxNN`, width by\nheight in millimetres. If an unknown value is encountered, letter\nis used. Output pages default to letter sized and are rendered in\nthe Times font family, 11-point. Margins are calculated as 1/9 the\npage length and width. Line-height is 1.4m.\n", "loc": ["documentation", "man", "mandoc", "settings", "output", "paper"], "readOnly": false, "type": "null or string"}, "documentation.man.mandoc.settings.output.style": {"declarations": ["nixos/modules/misc/mandoc.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Path to the file used for an external style-sheet. This must be a\nvalid absolute or relative URI.\n", "loc": ["documentation", "man", "mandoc", "settings", "output", "style"], "readOnly": false, "type": "null or absolute path"}, "documentation.man.mandoc.settings.output.toc": {"declarations": ["nixos/modules/misc/mandoc.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to enable printing a table of contents near the beginning of the HTML output\nof {manpage}`mandoc(1)` if an input file contains at least two\nnon-standard sections\n.", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["documentation", "man", "mandoc", "settings", "output", "toc"], "readOnly": false, "type": "boolean"}, "documentation.man.mandoc.settings.output.width": {"declarations": ["nixos/modules/misc/mandoc.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "The ASCII and UTF-8 output width, default is `78`. When output is a\npager on a terminal that is less than 79 columns wide, the\ndefault is reduced to one less than the terminal width. In any case,\nlines that are output in literal mode are never wrapped and may\nexceed the output width.\n", "loc": ["documentation", "man", "mandoc", "settings", "output", "width"], "readOnly": false, "type": "null or signed integer"}, "documentation.nixos.checkRedirects": {"declarations": ["nixos/modules/misc/documentation.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Check redirects for manualHTML.\n", "loc": ["documentation", "nixos", "checkRedirects"], "readOnly": false, "type": "boolean"}, "documentation.nixos.enable": {"declarations": ["nixos/modules/misc/documentation.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Whether to install NixOS's own documentation.\n\n- This includes man pages like\n {manpage}`configuration.nix(5)` if {option}`documentation.man.enable` is\n set.\n- This includes the HTML manual and the {command}`nixos-help` command if\n {option}`documentation.doc.enable` is set.\n", "loc": ["documentation", "nixos", "enable"], "readOnly": false, "type": "boolean"}, "documentation.nixos.extraModuleSources": {"declarations": ["nixos/modules/misc/documentation.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Which extra NixOS module paths the generated NixOS's documentation should strip\nfrom options.\n", "example": {"_type": "literalExpression", "text": "# e.g. with options from modules in ${pkgs.customModules}/nix:\n[ pkgs.customModules ]\n"}, "loc": ["documentation", "nixos", "extraModuleSources"], "readOnly": false, "type": "list of (absolute path or string)"}, "documentation.nixos.extraModules": {"declarations": ["nixos/modules/misc/documentation.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Modules for which to show options even when not imported.\n", "loc": ["documentation", "nixos", "extraModules"], "readOnly": false, "type": "list of raw value"}, "documentation.nixos.includeAllModules": {"declarations": ["nixos/modules/misc/documentation.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether the generated NixOS's documentation should include documentation for all\nthe options from all the NixOS modules included in the current\n`configuration.nix`. Disabling this will make the manual\ngenerator to ignore options defined outside of `baseModules`.\n", "loc": ["documentation", "nixos", "includeAllModules"], "readOnly": false, "type": "boolean"}, "documentation.nixos.options.splitBuild": {"declarations": ["nixos/modules/misc/documentation.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Whether to split the option docs build into a cacheable and an uncacheable part.\nSplitting the build can substantially decrease the amount of time needed to build\nthe manual, but some user modules may be incompatible with this splitting.\n", "loc": ["documentation", "nixos", "options", "splitBuild"], "readOnly": false, "type": "boolean"}, "documentation.nixos.options.warningsAreErrors": {"declarations": ["nixos/modules/misc/documentation.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Treat warning emitted during the option documentation build (eg for missing option\ndescriptions) as errors.\n", "loc": ["documentation", "nixos", "options", "warningsAreErrors"], "readOnly": false, "type": "boolean"}, "ec2.zfs.datasets": {"declarations": ["nixos/modules/virtualisation/amazon-options.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Datasets to create under the `tank` and `boot` zpools.\n\n**NOTE:** This option is used only at image creation time, and\ndoes not attempt to declaratively create or manage datasets\non an existing system.\n", "loc": ["ec2", "zfs", "datasets"], "readOnly": false, "type": "attribute set of (submodule)"}, "ec2.zfs.datasets..mount": {"declarations": ["nixos/modules/virtualisation/amazon-options.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Where to mount this dataset.", "loc": ["ec2", "zfs", "datasets", "", "mount"], "readOnly": false, "type": "null or string"}, "ec2.zfs.datasets..properties": {"declarations": ["nixos/modules/virtualisation/amazon-options.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Properties to set on this dataset.", "loc": ["ec2", "zfs", "datasets", "", "properties"], "readOnly": false, "type": "attribute set of string"}, "environment.budgie.excludePackages": {"declarations": ["nixos/modules/services/desktop-managers/budgie.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Which packages Budgie should exclude from the default environment.", "example": {"_type": "literalExpression", "text": "[ pkgs.mate-terminal ]"}, "loc": ["environment", "budgie", "excludePackages"], "readOnly": false, "type": "list of package"}, "environment.cinnamon.excludePackages": {"declarations": ["nixos/modules/services/x11/desktop-managers/cinnamon.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Which packages cinnamon should exclude from the default environment", "example": {"_type": "literalExpression", "text": "[ pkgs.blueman ]"}, "loc": ["environment", "cinnamon", "excludePackages"], "readOnly": false, "type": "list of package"}, "environment.corePackages": {"declarations": ["nixos/modules/config/system-path.nix"], "default": {"_type": "literalMD", "text": "these packages, with their `meta.priority` numerically increased\n(thus lowering their installation priority):\n\n [ pkgs.acl pkgs.attr pkgs.bashInteractive pkgs.bzip2 pkgs.coreutils-full pkgs.cpio pkgs.curl pkgs.diffutils pkgs.findutils pkgs.gawk pkgs.getent pkgs.getconf pkgs.gnugrep pkgs.gnupatch pkgs.gnused pkgs.gnutar pkgs.gzip pkgs.xz pkgs.less pkgs.libcap pkgs.ncurses pkgs.netcat pkgs.mkpasswd pkgs.procps pkgs.su pkgs.time pkgs.util-linux pkgs.which pkgs.zstd ]\n"}, "description": "Set of core packages for a normal interactive system.\n\nOnly change this if you know what you're doing!\n\nLike with systemPackages, packages are installed to\n{file}`/run/current-system/sw`. They are\nautomatically available to all users, and are\nautomatically updated every time you rebuild the system\nconfiguration.\n", "example": {"_type": "literalExpression", "text": "[ ]"}, "loc": ["environment", "corePackages"], "readOnly": false, "type": "list of package"}, "environment.cosmic.excludePackages": {"declarations": ["nixos/modules/services/desktop-managers/cosmic.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "List of packages to exclude from the COSMIC environment.", "example": {"_type": "literalExpression", "text": "[ pkgs.cosmic-player ]"}, "loc": ["environment", "cosmic", "excludePackages"], "readOnly": false, "type": "list of package"}, "environment.debuginfodServers": {"declarations": ["nixos/modules/config/debug-info.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "List of urls of debuginfod servers for tools like {command}`gdb` and {command}`valgrind` to use.\n\nUnrelated to {option}`environment.enableDebugInfo`.\n", "loc": ["environment", "debuginfodServers"], "readOnly": false, "type": "list of string"}, "environment.defaultPackages": {"declarations": ["nixos/modules/config/system-path.nix"], "default": {"_type": "literalMD", "text": "these packages, with their `meta.priority` numerically increased\n(thus lowering their installation priority):\n\n [ pkgs.perl pkgs.rsync pkgs.strace ]\n"}, "description": "Set of default packages that aren't strictly necessary\nfor a running system, entries can be removed for a more\nminimal NixOS installation.\n\nLike with systemPackages, packages are installed to\n{file}`/run/current-system/sw`. They are\nautomatically available to all users, and are\nautomatically updated every time you rebuild the system\nconfiguration.\n", "example": {"_type": "literalExpression", "text": "[ ]"}, "loc": ["environment", "defaultPackages"], "readOnly": false, "type": "list of package"}, "environment.enableAllTerminfo": {"declarations": ["nixos/modules/config/terminfo.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to install all terminfo outputs\n", "loc": ["environment", "enableAllTerminfo"], "readOnly": false, "type": "boolean"}, "environment.enableDebugInfo": {"declarations": ["nixos/modules/config/debug-info.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Some NixOS packages provide debug symbols. However, these are\nnot included in the system closure by default to save disk\nspace. Enabling this option causes the debug symbols to appear\nin {file}`/run/current-system/sw/lib/debug/.build-id`,\nwhere tools such as {command}`gdb` can find them.\nIf you need debug symbols for a package that doesn't\nprovide them by default, you can enable them as follows:\n\n nixpkgs.config.packageOverrides = pkgs: {\n hello = pkgs.hello.overrideAttrs (oldAttrs: {\n separateDebugInfo = true;\n });\n };\n", "loc": ["environment", "enableDebugInfo"], "readOnly": false, "type": "boolean"}, "environment.enlightenment.excludePackages": {"declarations": ["nixos/modules/services/x11/desktop-managers/enlightenment.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Which packages Enlightenment should exclude from the default environment", "example": {"_type": "literalExpression", "text": "[ pkgs.enlightenment.ephoto ]"}, "loc": ["environment", "enlightenment", "excludePackages"], "readOnly": false, "type": "list of package"}, "environment.etc": {"declarations": ["nixos/modules/system/etc/etc.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Set of files that have to be linked in {file}`/etc`.\n", "example": {"_type": "literalExpression", "text": "{ example-configuration-file =\n { source = \"/nix/store/.../etc/dir/file.conf.example\";\n mode = \"0440\";\n };\n \"default/useradd\".text = \"GROUP=100 ...\";\n}\n"}, "loc": ["environment", "etc"], "readOnly": false, "type": "attribute set of (submodule)"}, "environment.etc..enable": {"declarations": ["nixos/modules/system/etc/etc.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Whether this /etc file should be generated. This\noption allows specific /etc files to be disabled.\n", "loc": ["environment", "etc", "", "enable"], "readOnly": false, "type": "boolean"}, "environment.etc..gid": {"declarations": ["nixos/modules/system/etc/etc.nix"], "default": {"_type": "literalExpression", "text": "0"}, "description": "GID of created file. Only takes effect when the file is\ncopied (that is, the mode is not 'symlink').\n", "loc": ["environment", "etc", "", "gid"], "readOnly": false, "type": "signed integer"}, "environment.etc..group": {"declarations": ["nixos/modules/system/etc/etc.nix"], "default": {"_type": "literalExpression", "text": "\"+0\""}, "description": "Group name of file owner.\n\nOnly takes effect when the file is copied (that is, the\nmode is not `symlink`).\n\nWhen `services.userborn.enable`, this option has no effect.\nYou have to assign a `gid` instead. Otherwise this option\ntakes precedence over `gid`.\n", "loc": ["environment", "etc", "", "group"], "readOnly": false, "type": "string"}, "environment.etc..mode": {"declarations": ["nixos/modules/system/etc/etc.nix"], "default": {"_type": "literalExpression", "text": "\"symlink\""}, "description": "If set to something else than `symlink`,\nthe file is copied instead of symlinked, with the given\nfile mode.\n", "example": {"_type": "literalExpression", "text": "\"0600\""}, "loc": ["environment", "etc", "", "mode"], "readOnly": false, "type": "string"}, "environment.etc..source": {"declarations": ["nixos/modules/system/etc/etc.nix"], "description": "Path of the source file.", "loc": ["environment", "etc", "", "source"], "readOnly": false, "type": "absolute path"}, "environment.etc..target": {"declarations": ["nixos/modules/system/etc/etc.nix"], "description": "Name of symlink (relative to\n{file}`/etc`). Defaults to the attribute\nname.\n", "loc": ["environment", "etc", "", "target"], "readOnly": false, "type": "string"}, "environment.etc..text": {"declarations": ["nixos/modules/system/etc/etc.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Text of the file.", "loc": ["environment", "etc", "", "text"], "readOnly": false, "type": "null or strings concatenated with \"\\n\""}, "environment.etc..uid": {"declarations": ["nixos/modules/system/etc/etc.nix"], "default": {"_type": "literalExpression", "text": "0"}, "description": "UID of created file. Only takes effect when the file is\ncopied (that is, the mode is not 'symlink').\n", "loc": ["environment", "etc", "", "uid"], "readOnly": false, "type": "signed integer"}, "environment.etc..user": {"declarations": ["nixos/modules/system/etc/etc.nix"], "default": {"_type": "literalExpression", "text": "\"+0\""}, "description": "User name of file owner.\n\nOnly takes effect when the file is copied (that is, the\nmode is not `symlink`).\n\nWhen `services.userborn.enable`, this option has no effect.\nYou have to assign a `uid` instead. Otherwise this option\ntakes precedence over `uid`.\n", "loc": ["environment", "etc", "", "user"], "readOnly": false, "type": "string"}, "environment.extraInit": {"declarations": ["nixos/modules/config/shells-environment.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "Shell script code called during global environment initialisation\nafter all variables and profileVariables have been set.\nThis code is assumed to be shell-independent, which means you should\nstick to pure sh without sh word split.\n", "loc": ["environment", "extraInit"], "readOnly": false, "type": "strings concatenated with \"\\n\""}, "environment.extraOutputsToInstall": {"declarations": ["nixos/modules/config/system-path.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Entries listed here will be appended to the `meta.outputsToInstall` attribute for each package in `environment.systemPackages`, and the files from the corresponding derivation outputs symlinked into {file}`/run/current-system/sw`.\n\nFor example, this can be used to install the `dev` and `info` outputs for all packages in the system environment, if they are available.\n\nTo use specific outputs instead of configuring them globally, select the corresponding attribute on the package derivation, e.g. `libxml2.dev` or `coreutils.info`.\n", "example": {"_type": "literalExpression", "text": "[\n \"dev\"\n \"info\"\n]"}, "loc": ["environment", "extraOutputsToInstall"], "readOnly": false, "type": "list of string"}, "environment.extraSetup": {"declarations": ["nixos/modules/config/system-path.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "Shell fragments to be run after the system environment has been created. This should only be used for things that need to modify the internals of the environment, e.g. generating MIME caches. The environment being built can be accessed at $out.", "loc": ["environment", "extraSetup"], "readOnly": false, "type": "strings concatenated with \"\\n\""}, "environment.freetds": {"declarations": ["nixos/modules/programs/freetds.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "Configure freetds database entries. Each attribute denotes\na section within freetds.conf, and the value (a string) is the config\ncontent for that section. When at least one entry is configured\nthe global environment variables FREETDSCONF, FREETDS and SYBASE\nwill be configured to allow the programs that use freetds to find the\nlibrary and config.\n", "example": {"_type": "literalExpression", "text": "{ MYDATABASE = ''\n host = 10.0.2.100\n port = 1433\n tds version = 7.2\n '';\n}\n"}, "loc": ["environment", "freetds"], "readOnly": false, "type": "attribute set of string"}, "environment.gnome.excludePackages": {"declarations": ["nixos/modules/services/desktop-managers/gnome.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Which packages gnome should exclude from the default environment", "example": {"_type": "literalExpression", "text": "[ pkgs.showtime ]"}, "loc": ["environment", "gnome", "excludePackages"], "readOnly": false, "type": "list of package"}, "environment.homeBinInPath": {"declarations": ["nixos/modules/config/shells-environment.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Include ~/bin/ in $PATH.\n", "loc": ["environment", "homeBinInPath"], "readOnly": false, "type": "boolean"}, "environment.interactiveShellInit": {"declarations": ["nixos/modules/config/shells-environment.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "Shell script code called during interactive shell initialisation.\nThis code is assumed to be shell-independent, which means you should\nstick to pure sh without sh word split.\n", "loc": ["environment", "interactiveShellInit"], "readOnly": false, "type": "strings concatenated with \"\\n\""}, "environment.ldso": {"declarations": ["nixos/modules/config/ldso.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "The executable to link into the normal FHS location of the ELF loader.\n", "loc": ["environment", "ldso"], "readOnly": false, "type": "null or absolute path"}, "environment.ldso32": {"declarations": ["nixos/modules/config/ldso.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "The executable to link into the normal FHS location of the 32-bit ELF loader.\n\nThis currently only works on x86_64 architectures.\n", "loc": ["environment", "ldso32"], "readOnly": false, "type": "null or absolute path"}, "environment.localBinInPath": {"declarations": ["nixos/modules/config/shells-environment.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Add ~/.local/bin/ to $PATH\n", "loc": ["environment", "localBinInPath"], "readOnly": false, "type": "boolean"}, "environment.loginShellInit": {"declarations": ["nixos/modules/config/shells-environment.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "Shell script code called during login shell initialisation.\nThis code is assumed to be shell-independent, which means you should\nstick to pure sh without sh word split.\n", "loc": ["environment", "loginShellInit"], "readOnly": false, "type": "strings concatenated with \"\\n\""}, "environment.lxqt.excludePackages": {"declarations": ["nixos/modules/services/x11/desktop-managers/lxqt.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Which LXQt packages to exclude from the default environment", "example": {"_type": "literalExpression", "text": "with pkgs; [ lxqt.qterminal ]"}, "loc": ["environment", "lxqt", "excludePackages"], "readOnly": false, "type": "list of package"}, "environment.mate.excludePackages": {"declarations": ["nixos/modules/services/x11/desktop-managers/mate.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Which MATE packages to exclude from the default environment", "example": {"_type": "literalExpression", "text": "[ pkgs.mate-terminal pkgs.pluma ]"}, "loc": ["environment", "mate", "excludePackages"], "readOnly": false, "type": "list of package"}, "environment.memoryAllocator.provider": {"declarations": ["nixos/modules/config/malloc.nix"], "default": {"_type": "literalExpression", "text": "\"libc\""}, "description": "The system-wide memory allocator.\n\nBriefly, the system-wide memory allocator providers are:\n\n- `libc`: the standard allocator provided by libc\n- `graphene-hardened`: Hardened memory allocator coming from GrapheneOS project. The default configuration template has all normal optional security features enabled and is quite aggressive in terms of sacrificing performance and memory usage for security. \n- `graphene-hardened-light`: Hardened memory allocator coming from GrapheneOS project. The light configuration template disables the slab quarantines, write after free check, slot randomization and raises the guard slab interval from 1 to 8 but leaves zero-on-free and slab canaries enabled. The light configuration has solid performance and memory usage while still being far more secure than mainstream allocators with much better security properties. \n- `jemalloc`: A general purpose allocator that emphasizes fragmentation avoidance and scalable concurrency support. \n- `mimalloc`: A compact and fast general purpose allocator, which may optionally be built with mitigations against various heap vulnerabilities. \n- `scudo`: A user-mode allocator based on LLVM Sanitizer\u2019s CombinedAllocator, which aims at providing additional mitigations against heap based vulnerabilities, while maintaining good performance. \n\n::: {.warning}\nSelecting an alternative allocator (i.e., anything other than\n`libc`) may result in instability, data loss,\nand/or service failure.\n:::\n", "loc": ["environment", "memoryAllocator", "provider"], "readOnly": false, "type": "one of \"libc\", \"graphene-hardened\", \"graphene-hardened-light\", \"jemalloc\", \"mimalloc\", \"scudo\""}, "environment.pantheon.excludePackages": {"declarations": ["nixos/modules/services/desktop-managers/pantheon.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Which packages pantheon should exclude from the default environment", "example": {"_type": "literalExpression", "text": "[ pkgs.pantheon.elementary-camera ]"}, "loc": ["environment", "pantheon", "excludePackages"], "readOnly": false, "type": "list of package"}, "environment.pathsToLink": {"declarations": ["nixos/modules/config/system-path.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "List of directories to be symlinked in {file}`/run/current-system/sw`.", "example": {"_type": "literalExpression", "text": "[\n \"/\"\n]"}, "loc": ["environment", "pathsToLink"], "readOnly": false, "type": "list of string"}, "environment.plasma6.excludePackages": {"declarations": ["nixos/modules/services/desktop-managers/plasma6.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "List of default packages to exclude from the configuration", "example": {"_type": "literalExpression", "text": "[ pkgs.kdePackages.elisa ]"}, "loc": ["environment", "plasma6", "excludePackages"], "readOnly": false, "type": "list of package"}, "environment.profileRelativeEnvVars": {"declarations": ["nixos/modules/config/shells-environment.nix"], "description": "Attribute set of environment variable. Each attribute maps to a list\nof relative paths. Each relative path is appended to the each profile\nof {option}`environment.profiles` to form the content of the\ncorresponding environment variable.\n", "example": {"_type": "literalExpression", "text": "{\n MANPATH = [\n \"/man\"\n \"/share/man\"\n ];\n PATH = [\n \"/bin\"\n ];\n}"}, "loc": ["environment", "profileRelativeEnvVars"], "readOnly": false, "type": "attribute set of list of string"}, "environment.profileRelativeSessionVariables": {"declarations": ["nixos/modules/config/system-environment.nix"], "description": "Attribute set of environment variable used in the global\nenvironment. These variables will be set by PAM early in the\nlogin process.\n\nVariable substitution is available as described in\n{manpage}`pam_env.conf(5)`.\n\nEach attribute maps to a list of relative paths. Each relative\npath is appended to the each profile of\n{option}`environment.profiles` to form the content of\nthe corresponding environment variable.\n\nAlso, these variables are merged into\n[](#opt-environment.profileRelativeEnvVars) and it is\ntherefore not possible to use PAM style variables such as\n`@{HOME}`.\n", "example": {"_type": "literalExpression", "text": "{\n MANPATH = [\n \"/man\"\n \"/share/man\"\n ];\n PATH = [\n \"/bin\"\n ];\n}"}, "loc": ["environment", "profileRelativeSessionVariables"], "readOnly": false, "type": "attribute set of list of string"}, "environment.profiles": {"declarations": ["nixos/modules/config/shells-environment.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "A list of profiles used to setup the global environment.\n", "loc": ["environment", "profiles"], "readOnly": false, "type": "list of string"}, "environment.sessionVariables": {"declarations": ["nixos/modules/config/system-environment.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "A set of environment variables used in the global environment.\nThese variables will be set by PAM early in the login process.\n\nThe value of each session variable can be either a string or a\nlist of strings. The latter is concatenated, interspersed with\ncolon characters.\n\nSetting a variable to `null` does nothing. You can override a\nvariable set by another module to `null` to unset it.\n\nNote, due to limitations in the PAM format values may not\ncontain the `\"` character.\n\nAlso, these variables are merged into\n[](#opt-environment.variables) and it is\ntherefore not possible to use PAM style variables such as\n`@{HOME}`.\n", "loc": ["environment", "sessionVariables"], "readOnly": false, "type": "attribute set of (null or (list of (signed integer or string or absolute path)) or signed integer or string or absolute path)"}, "environment.shellAliases": {"declarations": ["nixos/modules/config/shells-environment.nix"], "description": "An attribute set that maps aliases (the top level attribute names in\nthis option) to command strings or directly to build outputs. The\naliases are added to all users' shells.\nAliases mapped to `null` are ignored.\n", "example": {"_type": "literalExpression", "text": "{\n l = null;\n ll = \"ls -l\";\n}"}, "loc": ["environment", "shellAliases"], "readOnly": false, "type": "attribute set of (null or string or absolute path)"}, "environment.shellInit": {"declarations": ["nixos/modules/config/shells-environment.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "Shell script code called during shell initialisation.\nThis code is assumed to be shell-independent, which means you should\nstick to pure sh without sh word split.\n", "loc": ["environment", "shellInit"], "readOnly": false, "type": "strings concatenated with \"\\n\""}, "environment.shells": {"declarations": ["nixos/modules/config/shells-environment.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "A list of permissible login shells for user accounts.\nNo need to mention `/bin/sh`\nhere, it is placed into this list implicitly.\n", "example": {"_type": "literalExpression", "text": "[ pkgs.bashInteractive pkgs.zsh ]"}, "loc": ["environment", "shells"], "readOnly": false, "type": "list of (package or absolute path)"}, "environment.stub-ld.enable": {"declarations": ["nixos/modules/config/stub-ld.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Install a stub ELF loader to print an informative error message\nin the event that a user attempts to run an ELF binary not\ncompiled for NixOS.\n", "example": {"_type": "literalExpression", "text": "false"}, "loc": ["environment", "stub-ld", "enable"], "readOnly": false, "type": "boolean"}, "environment.systemPackages": {"declarations": ["nixos/modules/config/system-path.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "The set of packages that appear in\n/run/current-system/sw. These packages are\nautomatically available to all users, and are\nautomatically updated every time you rebuild the system\nconfiguration. (The latter is the main difference with\ninstalling them in the default profile,\n{file}`/nix/var/nix/profiles/default`.\n", "example": {"_type": "literalExpression", "text": "[ pkgs.firefox pkgs.thunderbird ]"}, "loc": ["environment", "systemPackages"], "readOnly": false, "type": "list of package"}, "environment.unixODBCDrivers": {"declarations": ["nixos/modules/config/unix-odbc-drivers.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Specifies Unix ODBC drivers to be registered in\n{file}`/etc/odbcinst.ini`. You may also want to\nadd `pkgs.unixODBC` to the system path to get\na command line client to connect to ODBC databases.\n", "example": {"_type": "literalExpression", "text": "with pkgs.unixODBCDrivers; [ sqlite psql ]"}, "loc": ["environment", "unixODBCDrivers"], "readOnly": false, "type": "list of package"}, "environment.variables": {"declarations": ["nixos/modules/config/shells-environment.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "A set of environment variables used in the global environment.\nThese variables will be set on shell initialisation (e.g. in /etc/profile).\n\nThe value of each variable can be either a string or a list of\nstrings. The latter is concatenated, interspersed with colon\ncharacters.\n\nSetting a variable to `null` does nothing. You can override a\nvariable set by another module to `null` to unset it.\n", "example": {"_type": "literalExpression", "text": "{\n EDITOR = \"nvim\";\n VISUAL = \"nvim\";\n}"}, "loc": ["environment", "variables"], "readOnly": false, "type": "attribute set of (null or (list of (signed integer or string or absolute path)) or signed integer or string or absolute path)"}, "environment.wordlist.enable": {"declarations": ["nixos/modules/misc/wordlist.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "Whether to enable environment variables for lists of words.", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["environment", "wordlist", "enable"], "readOnly": false, "type": "boolean"}, "environment.wordlist.lists": {"declarations": ["nixos/modules/misc/wordlist.nix"], "default": {"_type": "literalExpression", "text": "{\n WORDLIST = [ \"${pkgs.scowl}/share/dict/words.txt\" ];\n}\n"}, "description": "A set with the key names being the environment variable you'd like to\nset and the values being a list of paths to text documents containing\nlists of words. The various files will be merged, sorted, duplicates\nremoved, and extraneous spacing removed.\n\nIf you have a handful of words that you want to add to an already\nexisting wordlist, you may find `builtins.toFile` useful for this\ntask.\n", "example": {"_type": "literalExpression", "text": "{\n WORDLIST = [ \"${pkgs.scowl}/share/dict/words.txt\" ];\n AUGMENTED_WORDLIST = [\n \"${pkgs.scowl}/share/dict/words.txt\"\n \"${pkgs.scowl}/share/dict/words.variants.txt\"\n (builtins.toFile \"extra-words\" ''\n desynchonization\n oobleck'')\n ];\n}\n"}, "loc": ["environment", "wordlist", "lists"], "readOnly": false, "type": "attribute set of non-empty (list of absolute path)"}, "environment.wvdial.dialerDefaults": {"declarations": ["nixos/modules/services/networking/wvdial.nix"], "default": {"_type": "literalExpression", "text": "\"\""}, "description": "Contents of the \"Dialer Defaults\" section of\n/etc/wvdial.conf.\n", "example": {"_type": "literalExpression", "text": "\"Init1 = AT+CGDCONT=1,\\\"IP\\\",\\\"internet.t-mobile\\\"\""}, "loc": ["environment", "wvdial", "dialerDefaults"], "readOnly": false, "type": "string"}, "environment.wvdial.pppDefaults": {"declarations": ["nixos/modules/services/networking/wvdial.nix"], "default": {"_type": "literalExpression", "text": "''\n noipdefault\n usepeerdns\n defaultroute\n persist\n noauth\n''"}, "description": "Default ppp settings for wvdial.", "loc": ["environment", "wvdial", "pppDefaults"], "readOnly": false, "type": "string"}, "environment.xfce.excludePackages": {"declarations": ["nixos/modules/services/x11/desktop-managers/xfce.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "Which packages XFCE should exclude from the default environment", "example": {"_type": "literalExpression", "text": "[ pkgs.xfce4-volumed-pulse ]"}, "loc": ["environment", "xfce", "excludePackages"], "readOnly": false, "type": "list of package"}, "fileSystems": {"declarations": ["nixos/modules/tasks/filesystems/overlayfs.nix", "nixos/modules/tasks/filesystems.nix", "nixos/modules/tasks/encrypted-devices.nix", "nixos/modules/system/boot/stage-1.nix"], "default": {"_type": "literalExpression", "text": "{ }"}, "description": "The file systems to be mounted. It must include an entry for\nthe root directory (`mountPoint = \"/\"`). Each\nentry in the list is an attribute set with the following fields:\n`mountPoint`, `device`,\n`fsType` (a file system type recognised by\n{command}`mount`; defaults to\n`\"auto\"`), and `options`\n(the mount options passed to {command}`mount` using the\n{option}`-o` flag; defaults to `[ \"defaults\" ]`).\n\nInstead of specifying `device`, you can also\nspecify a volume label (`label`) for file\nsystems that support it, such as ext2/ext3 (see {command}`mke2fs -L`).\n", "example": {"_type": "literalExpression", "text": "{\n \"/\".device = \"/dev/hda1\";\n \"/data\" = {\n device = \"/dev/hda2\";\n fsType = \"ext3\";\n options = [ \"data=journal\" ];\n };\n \"/bigdisk\".label = \"bigdisk\";\n}\n"}, "loc": ["fileSystems"], "readOnly": false, "type": "attribute set of (submodule)"}, "fileSystems..autoFormat": {"declarations": ["nixos/modules/tasks/filesystems.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "If the device does not currently contain a filesystem (as\ndetermined by {command}`blkid`), then automatically\nformat it with the filesystem type specified in\n{option}`fsType`. Use with caution.\n", "loc": ["fileSystems", "", "autoFormat"], "readOnly": false, "type": "boolean"}, "fileSystems..autoResize": {"declarations": ["nixos/modules/tasks/filesystems.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "If set, the filesystem is grown to its maximum size before\nbeing mounted. (This is typically the size of the containing\npartition.) This is currently only supported for ext2/3/4\nfilesystems that are mounted during early boot.\n", "loc": ["fileSystems", "", "autoResize"], "readOnly": false, "type": "boolean"}, "fileSystems..depends": {"declarations": ["nixos/modules/tasks/filesystems.nix"], "default": {"_type": "literalExpression", "text": "[ ]"}, "description": "List of paths that should be mounted before this one. This filesystem's\n{option}`device` and {option}`mountPoint` are always\nchecked and do not need to be included explicitly. If a path is added\nto this list, any other filesystem whose mount point is a parent of\nthe path will be mounted before this filesystem. The paths do not need\nto actually be the {option}`mountPoint` of some other filesystem.\n\nThis is useful for mounts which require keys and/or configuration files residing on another filesystem.\n", "example": {"_type": "literalExpression", "text": "[\n \"/persist\"\n]"}, "loc": ["fileSystems", "", "depends"], "readOnly": false, "type": "list of string (with check: non-empty without trailing slash)"}, "fileSystems..device": {"declarations": ["nixos/modules/tasks/filesystems.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "The device as passed to `mount`.\n\nThis can be any of:\n\n- a filename of a block special device such as `/dev/sdc3`\n- a tag such as `UUID=fdd68895-c307-4549-8c9c-90e44c71f5b7`\n- (for bind mounts only) the source path\n- something else depending on the {option}`fsType`. For example, `nfs` device may look like `knuth.cwi.nl:/dir`\n\nThis is called `device` in {manpage}`mount(8)` and `fs_spec` in {manpage}`fstab(5)`.\n", "example": {"_type": "literalExpression", "text": "\"/dev/sda\""}, "loc": ["fileSystems", "", "device"], "readOnly": false, "type": "null or string (with check: non-empty)"}, "fileSystems..enable": {"declarations": ["nixos/modules/tasks/filesystems.nix"], "default": {"_type": "literalExpression", "text": "true"}, "description": "Whether to enable the filesystem mount.", "example": {"_type": "literalExpression", "text": "true"}, "loc": ["fileSystems", "", "enable"], "readOnly": false, "type": "boolean"}, "fileSystems..encrypted.blkDev": {"declarations": ["nixos/modules/tasks/encrypted-devices.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Location of the backing encrypted device.", "example": {"_type": "literalExpression", "text": "\"/dev/sda1\""}, "loc": ["fileSystems", "", "encrypted", "blkDev"], "readOnly": false, "type": "null or string"}, "fileSystems..encrypted.enable": {"declarations": ["nixos/modules/tasks/encrypted-devices.nix"], "default": {"_type": "literalExpression", "text": "false"}, "description": "The block device is backed by an encrypted one, adds this device as a initrd luks entry.", "loc": ["fileSystems", "", "encrypted", "enable"], "readOnly": false, "type": "boolean"}, "fileSystems..encrypted.keyFile": {"declarations": ["nixos/modules/tasks/encrypted-devices.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Path to a keyfile used to unlock the backing encrypted\ndevice. When systemd stage 1 is not enabled, at the time\nthis keyfile is accessed, the `neededForBoot` filesystems\n(see `utils.fsNeededForBoot`) will have been mounted under\n`/mnt-root`, so the keyfile path should usually start with\n\"/mnt-root/\". When systemd stage 1 is enabled,\n`fsNeededForBoot` file systems will be mounted as needed\nunder `/sysroot`, and the keyfile will not be accessed until\nits requisite mounts are done.\n", "example": {"_type": "literalExpression", "text": "\"/mnt-root/root/.swapkey\""}, "loc": ["fileSystems", "", "encrypted", "keyFile"], "readOnly": false, "type": "null or string"}, "fileSystems..encrypted.label": {"declarations": ["nixos/modules/tasks/encrypted-devices.nix"], "default": {"_type": "literalExpression", "text": "null"}, "description": "Label of the unlocked encrypted device. Set `fileSystems..device` to `/dev/mapper/