dev/nixfiles
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity
Files
docs-kimi-new
nixfiles/docs/sites/home/castle.md
T
jackos1998 d51f2d62b6 docs: Document the deployment 
Add a top-level README mapping the boxes and a full docs/ tree: topic
pages (architecture, networking, deployment), per-site box pages for
colony and home with containers nested under their hosts, remote and
mobile boxes, the installer, and the home switch fabric reference
(folded in from home-switches.md, with AGENTS.md and code comments
retargeted to its new home). Box pages carry marked assignment tables
that CI regenerates from nixos.allAssignments.

AGENTS.md points at the new docs and keeps its terse agent version of
the mechanics, referring to the topic pages for depth.
2026-07-26 19:16:43 +01:00

2.5 KiB
Raw Permalink Blame History

castle

The home workstation / gaming desktop. Diskless-style: it netboots from river and keeps its root storage on NVMe-oF volumes from cellar.

Role

  • AMD desktop running the GUI stack (my.gui.enable, Sway/Wayland via home-manager), PipeWire (low-latency quantum 128, EasyEffects, jacktrip), Bluetooth, Thunderbolt (bolt).
  • Netboot client (my.netboot.client.enable): the firmware iPXE-boots off the 2.5G NIC — kea's client-class for castle matches et2.5g's MAC (c8:7f:54:6e:17:0f) and points at boot.h.nul.ie on river.
  • Root on NVMe-oF: /nix, /persist and /home are /dev/nvmeof/* LVs on the nqn.2016-06.io.spdk:castle namespace from cellar (my.nvme.boot, 192.168.68.80, RDMA). The initrd brings up et100g/lan-hi plus roceBootModules to reach it, and the running system keeps KeepConfiguration=static on lan-hi so networkd never drops the NVMe-oF address. The root itself is a 24 GiB tmpfs (my.tmproot).
  • Local virtualisation: libvirtd + virt-manager are enabled and the IOMMU is on (amd_iommu=on), but no VFIO/GPU-passthrough is configured in the box config today.
  • Both firewalls are off (networking.firewall.enable and my.firewall.enable — it's a trusted desktop on hi).
  • Misc: binfmt emulation for aarch64-linux/armv7l-linux, recursive-nix, Wireshark, rdma-core/qperf for the RoCE link. A drm-amd-display flicker patch sits commented out in kernelPatches.

Network assignments

Name Assignment IPv4 IPv6 Domain Notes
castle hi 192.168.68.40/22 gw 192.168.71.254 2a0e:97c0:4d0:1::3:1/64 h.nul.ie

Networking

  • et100g (100G, MTU 9000) carries lan-hi (the hi assignment, statically .40 — also pinned by a kea reservation on its MAC) and lan-lo.
  • lan-lo is a secondary leg: DHCPv4 with UseGateway/UseDNS off and RAs accepted with gateway/DNS use off — present for reaching lo devices, never a default route.
  • et2.5g (netboot) and et10g are renamed but carry no network config.

Notable config files

Reference in New Issue View Git Blame Copy Permalink