update everything

This reverts commit d75e195136.

.gitattributes

@@ -2,3 +2,4 @@
 *.icm filter=lfs diff=lfs merge=lfs -text
 *.jpg filter=lfs diff=lfs merge=lfs -text
 *.webp filter=lfs diff=lfs merge=lfs -text
+*.efi filter=lfs diff=lfs merge=lfs -text

.sops.yaml

@@ -1,7 +1,7 @@
 keys: # cat /etc/ssh/ssh_host_ed25519_key.pub | ssh-to-age
   - &chn age19ax6vm3pv8rph5tq3mmehd9sy9jk823tw8svsd790r0lkslycquqvlwz9m
   - &pc age1ffvr5pqd2lfj24e3fh53s92z6h76fda3du4y4k6r3yjumdwvpfgqzj033a
-  - &vps4 age1nnd6u8l20julg4jz4l6kw5gmj6h2tsngpm7n8dx59umgw2s66y4shq6jv4
+  - &vps4 age1yvrl4y0r6yzcxzzkgfwshlrtsjt8uuya6rfwks09pnft7esfcyvqmrtm5q
   - &vps6 age164tyqklwhdm57tfm5u863mdt2xrzrrzac4py8a0j9y6kzqcjy9zsp073t6
   - &vps7 age137x7csalutwvfygvvzpemlsywvdxj3j4z93a50z2sjx03w6zau8q3r5902
   - &surface age1ck5vzs0xqx0jplmuksrkh45xwmkm2t05m2wyq5k2w2mnkmn79fxs6tvl3l

blog/.gitignore

@@ -0,0 +1,4 @@
+/themes
+/public
+/.hugo_build.lock
+/resources/_gen

blog/archetypes/default.md

@@ -0,0 +1,5 @@
++++
+title = '{{ replace .File.ContentBaseName "-" " " | title }}'
+date = {{ .Date }}
+draft = true
++++

blog/content/_index.md

@@ -0,0 +1,6 @@
+---
+title: Introduction
+type: docs
+---
+
+这里是主页

blog/content/docs/example/_index.md

@@ -0,0 +1,7 @@
+---
+weight: 1
+bookFlatSection: true
+title: "Example Site"
+---
+
+{{< callout emoji="​:building_construction:" >}} 施工中 {{< /callout >}}

blog/content/posts/_index.md

@@ -0,0 +1,5 @@
+---
+title: Blog
+---
+
+我得在这里写点什么

blog/content/posts/helloworld.md

@@ -0,0 +1,49 @@
+---
+title: Helloworld
+date: 2024-08-24T20:13:59+08:00
+draft: false
+summary: 为什么不问问神奇海螺呢？
+math: true
+---
+
+# 一级标题
+
+## 二级标题
+
+### 三级标题
+
+hello world!
+
+* 无序列表1
+* 无序列表2
+* 无序列表3
+
+1. 有序列表1
+2. 有序列表2
+3. 有序列表3
+
+> 这是一个引用
+> 写了两行
+
+如果段与段之间
+没有空行
+会怎样？
+
+```c++
+#include <iostream>
+using namespace std;
+int main() {
+    cout << "Hello, World!" << endl;
+    return 0;
+}
+```
+
+这是一个行内代码`printf("Hello, World!\n");`，和行内公式 $E=mc^2$。
+
+$$
+\int_{-\infty}^{+\infty} e^{-x^2} \dd x = \sqrt{\pi}
+$$
+
+**这是粗体文本**，*这是斜体文本*。
+
+[这是一个链接](https://www.example.com)

blog/default.nix

@@ -0,0 +1,13 @@
+{ stdenv, hextra, hugo }: stdenv.mkDerivation
+{
+  name = "blog";
+  src = ./.;
+  nativeBuildInputs = [ hugo ];
+  configurePhase =
+  ''
+    mkdir themes
+    ln -s ${hextra} themes/hextra
+  '';
+  buildPhase = "hugo";
+  installPhase = "cp -r public $out";
+}

blog/hugo.yaml

@@ -0,0 +1,144 @@
+baseURL: https://blog.chn.moe/
+theme: hextra
+
+enableRobotsTXT: true
+enableGitInfo: false
+enableEmoji: true
+hasCJKLanguage: true
+
+# services:
+#   googleAnalytics:
+#     ID: G-MEASUREMENT_ID
+
+outputs:
+  home: [ html ]
+  page: [ html ]
+  section: [ html, rss ]
+
+defaultContentLanguage: zh-cn
+languages:
+  zh-cn:
+    languageName: 简体中文
+    languageCode: zh-CN
+    weight: 1
+    title: My New Hugo Site
+  en:
+    languageName: English
+    weight: 2
+    title: My New Hugo Site
+    contentDir: content/en
+
+# Needed for mermaid/katex shortcodes
+markup:
+  goldmark:
+    renderer:
+      unsafe: true
+  highlight:
+    noClasses: false
+
+enableInlineShortcodes: true
+
+menu:
+  main:
+    - identifier: documentation
+      name: Documentation
+      pageRef: /docs
+      weight: 1
+    - identifier: blog
+      name: Blog
+      pageRef: /blog
+      weight: 2
+    - identifier: about
+      name: About
+      pageRef: /about
+      weight: 3
+    - name: Search
+      weight: 4
+      params:
+        type: search
+    - name: GitHub
+      weight: 5
+      url: "https://github.com/imfing/hextra"
+      params:
+        icon: github
+  sidebar:
+    - identifier: more
+      name: More
+      params:
+        type: separator
+      weight: 1
+    - identifier: about
+      name: "About"
+      pageRef: "/about"
+      weight: 2
+    - identifier: hugoDocs
+      name: "Hugo Docs ↗"
+      url: "https://gohugo.io/documentation/"
+      weight: 3
+
+params:
+  description: Modern, responsive, batteries-included Hugo theme for creating beautiful static websites.
+  navbar:
+    displayTitle: true
+    displayLogo: true
+    logo:
+      path: images/logo.svg
+      dark: images/logo-dark.svg
+      # width: 40
+      # height: 20
+      # link: /
+    width: wide
+  page:
+    # full (100%), wide (90rem), normal (1280px)
+    width: normal
+  theme:
+    # light | dark | system
+    default: system
+    displayToggle: true
+  footer:
+    enable: true
+    displayCopyright: true
+    displayPoweredBy: true
+    width: normal
+  displayUpdatedDate: true
+  dateFormat: "January 2, 2006"
+  search:
+    enable: true
+    type: flexsearch
+    flexsearch:
+      # index page by: content | summary | heading | title
+      index: content
+      # full | forward | reverse | strict
+      # https://github.com/nextapps-de/flexsearch/#tokenizer-prefix-search
+      tokenize: forward
+  editURL:
+    enable: true
+    base: "https://github.com/imfing/hextra/edit/main/exampleSite/content"
+  blog:
+    list:
+      displayTags: true
+      # date | lastmod | publishDate | title | weight
+      sortBy: date
+      sortOrder: desc # or "asc"
+  highlight:
+    copy:
+      enable: true
+      # hover | always
+      display: hover
+  comments:
+    # TODO: enable cusdis
+    enable: false
+    type: giscus
+    # https://giscus.app/
+    giscus:
+      repo: imfing/hextra
+      repoId: R_kgDOJ9fJag
+      category: General
+      categoryId: DIC_kwDOJ9fJas4CY7gW
+      # mapping: pathname
+      # strict: 0
+      # reactionsEnabled: 1
+      # emitMetadata: 0
+      # inputPosition: top
+      # lang: en
+  math: true

devices/nas/default.nix

@@ -10,12 +10,11 @@ inputs:
         {
           mount =
           {
-            vfat."/dev/disk/by-uuid/13BC-F0C9" = "/boot/efi";
+            vfat."/dev/disk/by-uuid/627D-1FAA" = "/boot";
             btrfs =
             {
-              "/dev/disk/by-uuid/0e184f3b-af6c-4f5d-926a-2559f2dc3063"."/boot" = "/boot";
               "/dev/mapper/nix"."/nix" = "/nix";
-              "/dev/mapper/root1" =
+              "/dev/mapper/root3" =
               {
                 "/nix/rootfs" = "/nix/rootfs";
                 "/nix/persistent" = "/nix/persistent";
@@ -30,8 +29,6 @@ inputs:
             enable = true;
             devices =
             {
-              "/dev/disk/by-uuid/5cf1d19d-b4a5-4e67-8e10-f63f0d5bb649".mapper = "root1";
-              "/dev/disk/by-uuid/aa684baf-fd8a-459c-99ba-11eb7636cb0d".mapper = "root2";
               "/dev/disk/by-uuid/a47f06e1-dc90-40a4-89ea-7c74226a5449".mapper = "root3";
               "/dev/disk/by-uuid/b3408fb5-68de-405b-9587-5e6fbd459ea2".mapper = "root4";
               "/dev/disk/by-uuid/a779198f-cce9-4c3d-a64a-9ec45f6f5495" = { mapper = "nix"; ssd = true; };
@@ -39,10 +36,9 @@ inputs:
             delayedMount = [ "/" "/nix" ];
           };
           swap = [ "/nix/swap/swap" ];
-          rollingRootfs.waitDevices = [ "/dev/mapper/root2" "/dev/mapper/root3" "/dev/mapper/root4" ];
+          rollingRootfs.waitDevices = [ "/dev/mapper/root4" ];
         };
         initrd.sshd.enable = true;
-        grub.installDevice = "efi";
         nixpkgs.march = "silvermont";
         nix.substituters = [ "https://cache.nixos.org/" "https://nix-store.chn.moe" ];
         networking = { hostname = "nas"; networkd = {}; };
@@ -51,17 +47,14 @@ inputs:
       services =
       {
         snapper.enable = true;
-        samba = { enable = true; hostsAllowed = "192.168. 127."; shares = { home.path = "/home"; root.path = "/"; }; };
         sshd = {};
         xray.client = { enable = true; dnsmasq.hosts."git.nas.chn.moe" = "127.0.0.1"; };
-        groupshare = {};
         smartd.enable = true;
         beesd.instances =
         {
           root = { device = "/"; hashTableSizeMB = 4096; threads = 4; };
           nix = { device = "/nix"; hashTableSizeMB = 128; };
         };
-        nginx = { enable = true; applications.webdav.instances."local.webdav.chn.moe" = {}; };
         wireguard =
         {
           enable = true;
@@ -69,10 +62,7 @@ inputs:
           publicKey = "xCYRbZEaGloMk7Awr00UR3JcDJy4AzVp4QvGNoyEgFY=";
           wireguardIp = "192.168.83.4";
         };
-        hpcstat = {};
-        gitea = { enable = true; hostname = "git.nas.chn.moe"; ssh = { hostname = "office.chn.moe"; port = 5440; }; };
       };
-      user.users = [ "chn" "xll" "zem" "yjq" "gb" ];
     };
   };
 }

devices/nas/secrets.yaml

@@ -2,26 +2,8 @@ xray-client:
     uuid: ENC[AES256_GCM,data:97aX07G5FPumdWcDxnYOs6fRgljXWuwyNXGg1d7zdbUUfNnb,iv:+wAC/DZXsg+evYFA4DMfLw5Ut3ExQl1RgZ/2AsNQDpo=,tag:ebD77muITHof+FQMydWobg==,type:str]
 acme:
     token: ENC[AES256_GCM,data:OrYgBRU1VPpkpDzYMFHINfPSHsXEKABdZOcgiAiBJKcreBoaSVHUvg==,iv:XIeZPJhzmUi5ZHKBCYN5UA9HWH1K+26SvcIWVrHAYDA=,tag:3F93syLBZjcHwnRRkUEjlw==,type:str]
-users:
-    xll: ENC[AES256_GCM,data:XLSsz6fZ23PPaJS1Y5C3FAOks3wzb2f+Pv8TgyKrDBfMeoLk1M37A00OGJ2wsYxkuR0JV6Uoh+hhRpTUjOQnmLfQrBxPxxP8DA==,iv:jxEZX/flxxduM1sdrYfGHfMtFMYduMg0Lr6hY1pkAPg=,tag:CYy0y1e2S2Txz1OSh+XDHA==,type:str]
-    zem: ENC[AES256_GCM,data:VCVLfGO9a06XhAOBciFf1u7A5jaQikAt2wZf+dCAi1BglXpM6Hof1yAunadYOwLOBFgGlP19kX53CBBlZtaqZFL2GRDzXP0woQ==,iv:AFYtHCCkzNrllN/fjQ8GKYs2TyV3uj3BsU5n1tBQAmM=,tag:5dP7c5N4yG2NS4T+Vg0Zpg==,type:str]
-    yjq: ENC[AES256_GCM,data:yn6eGrySCxlRsFioaE2p1qlTHkIGC9l64+edjuDvt232xc+iFeD03EYfuulyr0GxYFwnlAwtaJnyMi5eOrSd1W6HeV3Canzdbw==,iv:qTc6vA8uQza8CB+BvffEN9GqHkiwNM4h9RkqQR14ylk=,tag:UZ2GYCJLjcWLuVXlscLviw==,type:str]
-    gb: ENC[AES256_GCM,data:jIR3EVdATYUgWmW4J8RdURJRmDBC84t0S/c2EzWwtFMtjgKlqg52fIfQ66i7RnIYRAoF+s4Ex0aLSejWgzQ69NA/AF0AIS7Y/Q==,iv:mvTCTP0E74QlvM8TcY4o49G5kNGs5HFx3YUrj6mCrwM=,tag:LXfIOyAB10XuHA6Cg7LBeQ==,type:str]
-nginx:
-    detectAuth:
-        chn: ENC[AES256_GCM,data:44vsExbVhO3gnD4Gme92eQ==,iv:LyDvZebs1sDL1/hZQiZdHoPBm4hXtBy56jR73zSH6Aw=,tag:w5xPHnK9XOSS0+97q8b5gQ==,type:str]
-    maxmind-license: ENC[AES256_GCM,data:JbAnFQiDcJGwvb89sG2ro77nwwOWcDnqVcA902jwb2zzZci7PpXROw==,iv:eifkWK0oN73Ekn3oWzy6XbYK2GU+4tlnLPJ+96WOWJY=,tag:35ulsshxtUfOsSQOLgAt0g==,type:str]
 wireguard:
     privateKey: ENC[AES256_GCM,data:VPlB4wSbWqSYw3rYRwfAMa39xrPcPZfz7sV2Cq3rmOhifnUPwggxnA+51do=,iv:utnyrB6Yfe5O94Oq4HDVFm/lQ9ZBoyvUT68r2G2PdwA=,tag:snm01vA+z2yKK8d2i5i2ig==,type:str]
-telegram:
-    token: ENC[AES256_GCM,data:NK9Eq3jUaMVNyPyqiXEkrc4m81c2CBg3p9TjpD8TQgKRYs2uxT9lsSrLMi02Rw==,iv:N2mjY9n7QuLD2PG4gNl79c933GTCCfw35XxluiLSuOA=,tag:ZLreEQoV+O0yhHw0CM00aQ==,type:str]
-    chat: ENC[AES256_GCM,data:XJi6HftAygFH,iv:ea2m41/YXp0VyxR9U84xMCHdknZBhP2QUiX6zsipaFc=,tag:+/Y2bvUwrQsLVGUZp0Imwg==,type:str]
-hpcstat:
-    key: ENC[AES256_GCM,data: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,iv:cbPCnNi2gX1gZIdcQd7HR3c/JEsWj3nv+x+OQ0bDs40=,tag:olrGr6t2Si39wl/1rR81ig==,type:str]
-postgresql:
-    gitea: ENC[AES256_GCM,data:qssnsnlaEKwEnLbnpX+XDs7JK/2DdK1cxD6U2NddpCPnwfOinP2cuc1HLnteWQfYZXTuYM3VOXDEXQB9CexILA==,iv:+TVoTuqmxIsTlNPngMBBWgIvP5EQD5ROHZI4u0mSJGE=,tag:6X8hewc5a6C6nbuD5WozCQ==,type:str]
-mail:
-    bot: ENC[AES256_GCM,data:ugfBeRM4Ks7j+V4lLOqHrA==,iv:QwXeSrfw+TTN5N42DaaA7YgpaIJX/E+kTv9p6eWSxEk=,tag:fLUDBhsvCbOiYqhq9TCzmw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -46,8 +28,8 @@ sops:
             by9Rd0U0bzNiK21BQTNxN1RuQ09DQVkKJmSlzV5ppEkZFljsS17ZWmoI++fz4tJh
             kTdoAStG1zsKASHyZTsmdm3RBDO3qV1KhQC2gC7d4EiwNZngxOOZJg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-05-10T08:52:02Z"
-    mac: ENC[AES256_GCM,data:gKEZ0bxn+xCu7wPRCRpacErzqdajw4zNalUwZvldUP+Ygdq6KOMgjxvm3hy7GIBlhK2MLgps3X3sjdrUW1A7Tx5wiPtrqddVo5qiubZcuWqNO4SSoM2x/VxtHbKcZQMaNdIHXx3TUFjQ0tcsMuDBNNUZ192JJUDE/DaDyxTklq4=,iv:sZ98srsM68h59R9HHeh7gXdUBN2JtoWx+PhU1nsHgk0=,tag:N7211a4Jrp6AdPKhQCz65g==,type:str]
+    lastmodified: "2024-07-24T05:14:57Z"
+    mac: ENC[AES256_GCM,data:9xKBuoVeotcZfiqsKg+iXxOc5BV9kGVvR5f9Anu6DauBceYIBxgeVCDU3dRUPz67MkOK/n2w9+gLchQxUyK8G4ECRTESL+GKpZslNVThb2j6vswLXNBHqsQCoQBlYOiKw5ZM1gpdYJPni8qpsdGvTwc5JkW+FH6v1BdZWaUhc3U=,iv:SyLiMXsQhS+8FFlSMXiD9ETD+mIsz6mePXnJzBODK5g=,tag:YpiU58lJ5Nb78EMyEmJdbw==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.8.1

devices/pc/default.nix

@@ -10,30 +10,20 @@ inputs:
         {
           mount =
           {
-            vfat."/dev/disk/by-uuid/E58F-416A" = "/boot/efi";
-            btrfs =
-            {
-              "/dev/disk/by-uuid/066be4fd-8617-4fe1-9654-c133c2996d33"."/" = "/boot";
-              "/dev/mapper/root1" = { "/nix" = "/nix"; "/nix/rootfs/current" = "/"; };
-            };
+            vfat."/dev/disk/by-uuid/7A60-4232" = "/boot";
+            btrfs."/dev/mapper/root1" = { "/nix" = "/nix"; "/nix/rootfs/current" = "/"; };
           };
           decrypt.auto =
           {
             "/dev/disk/by-uuid/4c73288c-bcd8-4a7e-b683-693f9eed2d81" = { mapper = "root1"; ssd = true; };
-            "/dev/disk/by-uuid/a9bf47e2-8731-4236-a3eb-0666d49f6150" = { mapper = "root2"; ssd = true; };
             "/dev/disk/by-uuid/4be45329-a054-4c20-8965-8c5b7ee6b35d" =
-              { mapper = "swap"; ssd = true; before = [ "root1" "root2" ]; };
+              { mapper = "swap"; ssd = true; before = [ "root1" ]; };
           };
           swap = [ "/dev/mapper/swap" ];
           resume = "/dev/mapper/swap";
-          rollingRootfs.waitDevices = [ "/dev/mapper/root2" ];
-        };
-        grub =
-        {
-          # TODO: install windows
-          # windowsEntries = { "7317-1DB6" = "Windows"; "7321-FA9C" = "Windows for malware"; };
-          installDevice = "efi";
+          rollingRootfs = {};
         };
+        grub.windowsEntries."7AF0-D2F2" = "Windows";
         nix =
         {
           marches =
@@ -59,7 +49,7 @@ inputs:
         kernel =
         {
           variant = "xanmod-latest";
-          patches = [ "cjktty" "hibernate-progress" ];
+          patches = [ "hibernate-progress" "amdgpu" ];
           modules.modprobeConfig =
             [ "options iwlwifi power_save=0" "options iwlmvm power_scheme=1" "options iwlwifi uapsd_disable=1" ];
         };
@@ -73,11 +63,10 @@ inputs:
         gpu =
         {
           type = "amd+nvidia";
-          nvidia = { prime.busId = { amd = "6:0:0"; nvidia = "1:0:0"; }; dynamicBoost = true; driver = "beta"; };
+          nvidia = { prime.busId = { amd = "5:0:0"; nvidia = "1:0:0"; }; dynamicBoost = true; driver = "latest"; };
         };
         legion = {};
       };
-      packages.packageSet = "workstation";
       virtualization =
       {
         waydroid.enable = true;
@@ -146,16 +135,32 @@ inputs:
           memoryMB = 90112;
           gpus."4060" = 1;
         };
+        ollama = {};
       };
       bugs = [ "xmunet" "backlight" "amdpstate" ];
     };
-    boot.kernelParams =
-    [
-      "acpi_osi=!" ''acpi_osi="Windows 2015"''
-      "amdgpu.sg_display=0" # 混合模式下避免外接屏幕闪烁，和内置外接屏幕延迟
-      "acpi.ec_no_wakeup=1" # 睡眠时避免开盖唤醒，似乎没有用
-      "processor.max_cstate=1" # workaround for amd cpu hard lock
-    ];
+    boot =
+    {
+      kernelParams = [ "acpi_osi=!" ''acpi_osi="Windows 2015"'' ];
+      loader.grub =
+      {
+        extraFiles =
+        {
+          "DisplayEngine.efi" = ./bios/DisplayEngine.efi;
+          "SetupBrowser.efi" = ./bios/SetupBrowser.efi;
+          "UiApp.efi" = ./bios/UiApp.efi;
+          "EFI/Boot/Bootx64.efi" = ./bios/Bootx64.efi;
+        };
+        extraEntries = 
+        ''
+          menuentry 'Advanced UEFI Firmware Settings' {
+            insmod fat
+            insmod chain
+            chainloader @bootRoot@/EFI/Boot/Bootx64.efi
+          }
+        '';
+      };
+    };
     # 禁止鼠标等在睡眠时唤醒
     services.udev.extraRules = ''ACTION=="add", ATTR{power/wakeup}="disabled"'';
     networking.extraHosts = "74.211.99.69 mirism.one beta.mirism.one ng01.mirism.one";
@@ -165,7 +170,7 @@ inputs:
       hideMounts = true;
       users.chn.directories = builtins.map
         (dir: { directory = "repo/${dir}"; user = "chn"; group = "chn"; mode = "0755"; })
-        [ "lammps-SiC" "BPD-paper" "kurumi-asmr" "linwei-stuff" "BPD-paper-old" ];
+        [ "BPD-paper" "kurumi-asmr" "BPD-paper-old" "SiC-20240705" ];
     };
     specialisation =
     {
@@ -178,10 +183,10 @@ inputs:
         };
         system.nixos.tags = [ "nvidia" ];
       };
-      cachyos.configuration =
+      zen.configuration =
       {
-        nixos.system.kernel.variant = inputs.lib.mkForce "cachyos";
-        system.nixos.tags = [ "cachyos" ];
+        nixos.system.kernel = { variant = inputs.lib.mkForce "zen"; patches = inputs.lib.mkForce []; };
+        system.nixos.tags = [ "zen" ];
       };
     };
   };

devices/pcarm/default.nix

@@ -10,13 +10,13 @@ inputs:
         {
           mount =
           {
-            vfat."/dev/disk/by-uuid/CE84-E0D8" = "/boot/efi";
+            # TODO: reparition
+            vfat."/dev/disk/by-uuid/CE84-E0D8" = "/boot";
             btrfs."/dev/disk/by-uuid/61f51d93-d3e5-4028-a903-332fafbfd365" =
-              { "/nix/rootfs/current" = "/"; "/nix" = "/nix"; "/nix/boot" = "/boot"; };
+              { "/nix/rootfs/current" = "/"; "/nix" = "/nix"; };
           };
           rollingRootfs = {};
         };
-        grub.installDevice = "efi";
         networking = { hostname = "pcarm"; networkd = {}; };
         nixpkgs.arch = "aarch64";
         kernel.variant = "nixos";

devices/pcvm/default.nix

@@ -10,23 +10,18 @@ inputs:
         {
           mount =
           {
-            vfat."/dev/disk/by-uuid/AE90-1DD1" = "/boot/efi";
-            btrfs =
-            {
-              "/dev/disk/by-uuid/5a043ec5-7b47-4b0d-ad89-8c3ce5650fcd"."/" = "/boot";
-              "/dev/mapper/root" = { "/nix" = "/nix"; "/nix/rootfs/current" = "/"; };
-            };
+            # TODO: reparition
+            vfat."/dev/disk/by-uuid/AE90-1DD1" = "/boot";
+            btrfs."/dev/mapper/root" = { "/nix" = "/nix"; "/nix/rootfs/current" = "/"; };
           };
           decrypt.auto."/dev/disk/by-uuid/a9e4a508-3f0b-492e-b932-e2019be28615" = { mapper = "root"; ssd = true; };
           rollingRootfs = {};
         };
-        grub.installDevice = "efi";
         kernel.variant = "xanmod-latest";
         networking.hostname = "pcvm";
         initrd.sshd.enable = true;
       };
       hardware.cpus = [ "amd" ];
-      packages.packageSet = "server";
       services.sshd = {};
     };
   };

devices/pi3b/default.nix

@@ -10,14 +10,14 @@ inputs:
         {
           mount =
           {
-            vfat."/dev/disk/by-uuid/ABC6-6B3E" = "/boot/efi";
+            # TODO: reparition
+            vfat."/dev/disk/by-uuid/ABC6-6B3E" = "/boot";
             btrfs."/dev/disk/by-uuid/c459c6c0-23a6-4ef2-945a-0bfafa9a45b6" =
-              { "/nix/rootfs/current" = "/"; "/nix" = "/nix"; "/nix/boot" = "/boot"; };
+              { "/nix/rootfs/current" = "/"; "/nix" = "/nix"; };
           };
           swap = [ "/nix/swap/swap" ];
           rollingRootfs = {};
         };
-        grub.installDevice = "efi";
         networking = { hostname = "pi3b"; networkd = {}; };
         nixpkgs.arch = "aarch64";
         kernel.variant = "nixos";

devices/surface/default.nix

@@ -11,38 +11,40 @@ inputs:
         {
           mount =
           {
-            vfat."/dev/disk/by-uuid/7179-9C69" = "/boot/efi";
-            btrfs =
-            {
-              "/dev/disk/by-uuid/c6d35075-85fe-4129-aaa8-f436ab85ce43"."/boot" = "/boot";
-              "/dev/mapper/root" = { "/nix" = "/nix"; "/nix/rootfs/current" = "/"; };
-            };
+            vfat."/dev/disk/by-uuid/4596-D670" = "/boot";
+            btrfs."/dev/mapper/root1" = { "/nix" = "/nix"; "/nix/rootfs/current" = "/"; };
           };
           decrypt.auto =
           {
-            "/dev/disk/by-uuid/4f7420f9-ea19-4713-b084-2ac8f0a963ac" = { mapper = "root"; ssd = true; };
-            "/dev/disk/by-uuid/88bd9d44-928b-40a2-8f3d-6dcd257c4601" =
-              { mapper = "swap"; ssd = true; before = [ "root" ]; };
+            "/dev/disk/by-uuid/eda0042b-ffd5-47d1-b828-4cf99d744c9f" = { mapper = "root1"; ssd = true; };
+            "/dev/disk/by-uuid/41d83848-f3dd-4b2f-946f-de1d2ae1cbd4" = { mapper = "swap"; ssd = true; };
           };
           swap = [ "/dev/mapper/swap" ];
           resume = "/dev/mapper/swap";
           rollingRootfs = {};
         };
         nixpkgs.march = "skylake";
-        grub.installDevice = "efi";
         nix = { substituters = [ "https://cache.nixos.org/" "https://nix-store.chn.moe" ]; githubToken.enable = true; };
-        kernel = { variant = "xanmod-lts"; patches = [ "cjktty" "lantian" "surface" "hibernate-progress" ]; };
+        kernel = { variant = "xanmod-lts"; patches = [ "surface" "hibernate-progress" ]; };
         networking.hostname = "surface";
         gui.enable = true;
       };
       hardware = { cpus = [ "intel" ]; gpu.type = "intel"; };
-      packages.packageSet = "desktop-extra";
       virtualization = { docker.enable = true; waydroid.enable = true; };
       services =
       {
         snapper.enable = true;
         sshd = {};
-        xray.client.enable = true;
+        xray.client =
+        {
+          enable = true;
+          dnsmasq.hosts = builtins.listToAttrs (builtins.map
+            (name: { inherit name; value = "0.0.0.0"; })
+            [
+              "log-upload.mihoyo.com" "uspider.yuanshen.com" "ys-log-upload.mihoyo.com"
+              "dispatchcnglobal.yuanshen.com"
+            ]);
+        };
         firewall.trustedInterfaces = [ "virbr0" ];
         wireguard =
         {
@@ -54,8 +56,8 @@ inputs:
         beesd.instances.root = { device = "/"; hashTableSizeMB = 512; };
       };
       bugs = [ "xmunet" "suspend-hibernate-no-platform" ];
+      packages.vasp = null;
     };
-    environment.systemPackages = with inputs.pkgs; [ maliit-keyboard maliit-framework ];
     powerManagement.resumeCommands = ''${inputs.pkgs.systemd}/bin/systemctl restart iptsd'';
     services.iptsd.config =
     {

devices/vps4/default.nix

@@ -38,6 +38,7 @@ inputs:
         sshd = {};
         fail2ban = {};
         beesd.instances.root = { device = "/"; hashTableSizeMB = 64; };
+        xray.server = { serverName = "xserver.vps4.chn.moe"; userNumber = 4; };
       };
     };
   };

devices/vps4/secrets.yaml

@@ -1,13 +1,25 @@
-hello: ENC[AES256_GCM,data:mX0hKnLdaujfHSyIikkannf8DDo+r7R0,iv:my9nYiaburkWHQLsNetqD3dYVwsEkJhC7hoh0XagoOk=,tag:D7uhoFGMrTWT3K4LNMFcUA==,type:str]
-example_key: ENC[AES256_GCM,data:ezHOG8aSXYlosn7ymQ==,iv:NLm785UMihcL1K/M4u7k+P2XftyLlIxtQGPmMLc+rs8=,tag:h9xk+do8pYzxYzUaKKb1PQ==,type:str]
-#ENC[AES256_GCM,data:pgOf9IVK9ijocRr0uEO0ZA==,iv:aQ2dvfAVhkFWtcDM4VeJQa+NN6kw9IlvidL/usoP/lE=,tag:49iS4s1EfQK5VhlF9nqWRQ==,type:comment]
-example_array:
-    - ENC[AES256_GCM,data:W8QJiOY6ofqE+XRodK0=,iv:KQ/mYY4N/YA9LhZvJtPJPqRVQq4ob/xa8JSQY06Vm4M=,tag:7NQgidSCjER//ru3AXgLzQ==,type:str]
-    - ENC[AES256_GCM,data:nNML0iYEFdW4S5rJVHM=,iv:LQ1/E/7FExXB16Ur4b59XAUlWSFPub6LQBaFCY+a2lE=,tag:LqPymQ7k5ZsS8d9Z09xJuA==,type:str]
-example_number: ENC[AES256_GCM,data:UiALks+CeKFusw==,iv:8gQ0aB+9YHXKVDX7moqdQmNJLGDNGfo+glezE39xXgQ=,tag:sJG+DJNzCtx+l4bBgQTtCQ==,type:float]
-example_booleans:
-    - ENC[AES256_GCM,data:n3cV5g==,iv:z2p5oh8BhEMvwwIDaO8aM8VfxmsR6Z7473pd348tsmU=,tag:oSYsNuk6vY21Nepy8Hkb7g==,type:bool]
-    - ENC[AES256_GCM,data:ns3chHI=,iv:db8M/qF03VKaT/8Q4NqfCdI1zAU9H8JWZFqnzwI7QvI=,tag:FdgUanhezouVdv+9a9/gxQ==,type:bool]
+xray-server:
+    clients:
+        #ENC[AES256_GCM,data:d7cv,iv:RHzGIDLuuKejCTQ5YlNNITkCS3VoprsqH/kHckdpAv0=,tag:3cYw7uyUmXALo3v7SiqLJA==,type:comment]
+        user0: ENC[AES256_GCM,data:o2wxpSzoqsPxs6grgYRLtPutMVwSqtzUWBrj7+7QuWWd1a1z,iv:2/5SxXq8Iw4J/LzBeclHbkrZXHitguip0WN+MINym8s=,tag:v/3oly53ORM9XAwbOzp06g==,type:str]
+        #ENC[AES256_GCM,data:0nHZmEPPaw==,iv:BtOZ8/U0yg3fthHrwerNQX3+KD/H9+fcUylYGnZqiIM=,tag:DkFGSFfq//LmWfg6DGm1aA==,type:comment]
+        user1: ENC[AES256_GCM,data:7ev7GuKLeJbPReMy0FnX02fLv5nNCpxdzfnQyAA+/IviwDMQ,iv:YbESsyIAiEAyvrHnj9A4lITX7NtRkuRhCrTv6hoG9Qs=,tag:8uledxLXqpXXLBh+cczm4g==,type:str]
+        #ENC[AES256_GCM,data:3KN/1hzeR2I=,iv:iaqJJD6iURTUlIL8e8P7fsAzJYo+y3NGZXgWmPX+4ao=,tag:e8g/JgVrMrWJamUMpiv2pQ==,type:comment]
+        user2: ENC[AES256_GCM,data:58PnLCwDayOYinsPCYPeMvuKiF7b4tZtbmEJFWEl+2Nu6HL2,iv:hSv3jCtkLm4rrm/4+ot10CBhobGwtnK5db5wR1S/XrU=,tag:SQbynYp8pDSqj4tAK6JBMQ==,type:str]
+        #ENC[AES256_GCM,data:uTZDsA==,iv:6cxvQycfji/x+DW1CnO45r+yNTLwkhYkiJwDaSpUCwo=,tag:8pMw+sYeOyZBN1idHoM9+g==,type:comment]
+        user3: ENC[AES256_GCM,data:WCVr0ylGm2SHtOGulb8TD/cI2xJXrbvY1d6+STXGxf0d0izb,iv:vhNshb38AVpwKCFRwUVruCQ0SxhHrOmwQ+IoQZeUj1k=,tag:OfdIjRrTAuVZBOEXTtnrQQ==,type:str]
+    private-key: ENC[AES256_GCM,data:akNIeVp2bfKvnzlS6KLAdqAo7qsGfPatzCZpN1tNRLhRVXmJCcUDVSmVoA==,iv:2Rny8ioDJ2x+NR+n7/Aluv7JZ+Om3MuJKsXiwONYntg=,tag:a3xubIr7hpVjRiHjFL/q5Q==,type:str]
+acme:
+    token: ENC[AES256_GCM,data:JBeN7SVxKGOe6er0eS7/v8YrXdv0nCK/KZc8Ygq0G7FIGu4hO662kg==,iv:rf59MgUCYlAA5h18wtdWoUyb2VPB13OPuJjz1VsI2dU=,tag:ViPrwduD8aWf8i8vmBG78A==,type:str]
+nginx:
+    detectAuth:
+        chn: ENC[AES256_GCM,data:lQHDpv8/Yl5/nycHoeTnCw==,iv:ernNxRpcTOSAllDpqRFVFg3qEw/slEEPPXDFq1AhNL0=,tag:2AVALUf9cDyOgCqI9wwgQQ==,type:str]
+        led: ENC[AES256_GCM,data:zyCiiH21,iv:iEYyNClDsCpWE2oNjt2NqQZ88xOOlMr0yycjKTPdmlw=,tag:kQfbshXfTBA5PtUAgpgCcA==,type:str]
+        chat: ENC[AES256_GCM,data:pXu0WPWmvUzvl2expDpQPqWwi1A4abg72npsaYXDXRcg6aVU0Ec+tgM2+uz2hT9rh3mNoBxadYXDc/zeOL1UCg==,iv:iln5UGGBK2s5pGS03PtolWTkx6KrnYBAWCFnI0V2Bag=,tag:EahTDoPIBkgWnp4MOoTCmw==,type:str]
+    maxmind-license: ENC[AES256_GCM,data:8OioibcXQ9IZ0OQhJ/zHSBQjfdHzkoqwUx5zR8Zq0atNw6SSf7vKrg==,iv:z6WTI2yeqP0h7EqKG114nRQpFVJlNzZspgS6gIFtpt4=,tag:a0dBt9pXJnncBiSKt9dsAQ==,type:str]
+telegram:
+    token: ENC[AES256_GCM,data:Si6yTh48HpA8OkkkvgHwtJYFhF8tW3oaQbldjwBc09QJxp9AoKgASMnZtbDZYA==,iv:GrNyZXjaZMviSjy/LGHHrYTr5PFvDkCXmT3MU4+SLpc=,tag:YifB1tKFLqsgXB/YLqYK4w==,type:str]
+    chat: ENC[AES256_GCM,data:ydPky0W4ZWqn,iv:uWQrZDz2GCxiKRaijM89Npt0fQeSNHbQzDefkZCkUAE=,tag:OJQwV/889Vp2/4wjbN41JA==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -17,23 +29,23 @@ sops:
         - recipient: age19ax6vm3pv8rph5tq3mmehd9sy9jk823tw8svsd790r0lkslycquqvlwz9m
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIaE9nWEZFaE51alYyTUgr
-            RVBKZ1MvNitBdGpMWURIUkhCTlF6Y1hueVFjCnp2Q0JVL0t2UEZrSmxMbFVwZ0k5
-            QVZDdXNjWmg0S3BIaXF0NDBHOThiMDAKLS0tIDBpenAyTE51MWVkaHFvTFhzNmVV
-            WnlKUFZWNWtaYUpPZkplSm04Q3RFb00Kghj7jLLcLpc8njNyxPj6JWZbBRn2Ou9j
-            FJLfCGLePuJPmdBBN4AGHmtrkfw/SMZJ50DXhKSJSxM91zuJSqFV1g==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNamN1TytweDd3blJsR2ZH
+            ZmlocFZjT3ZaUjlVbG1vVSt4a2s2SjJIaGtRCjRneDV6cHYwdGJOY1BDVS9DeDVC
+            cDdNbUdtSGRHNU1yZFpPc1MzRS92ME0KLS0tIFpmamNmTFYrRGRqbTFVSzBhUlNa
+            VllXdzZ3bEc3UFY0YjZRKzBUcGgyVkUKqI1ojiLbF87alAkEwyrm8wuW2fLbmj8d
+            YBIpoDCZ7AwR5uHWQAtl7BWJV1zab+rA3zvaf2BsrVA1A+RWOtYT/Q==
             -----END AGE ENCRYPTED FILE-----
-        - recipient: age1nnd6u8l20julg4jz4l6kw5gmj6h2tsngpm7n8dx59umgw2s66y4shq6jv4
+        - recipient: age1yvrl4y0r6yzcxzzkgfwshlrtsjt8uuya6rfwks09pnft7esfcyvqmrtm5q
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzYkJ1NllUR1pMaUdmZ3Z6
-            OEVLWC9nZHNxNWJSZ3VZUVZ3eWlLNWN5V24wClZ3dTh3SVNRS0Z4TFJrNDJBVnJj
-            aDhYNTdSV2JmUVNXR1ZkN1BOdzZzRHcKLS0tIFNhUGIxRVM5MFdvUWZWOG5kYlFM
-            RjZtLzY5b00vMExFSU1xZEl0NFJQQlEK4yUe3V0u6A3niES0Nq28rRYZ1fTEL0Fh
-            RBGZNCute1SShrLZPgNr/lFAc6d8DH6N0IuDKcjguuWtyHY/LFYuYw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWWitsSnRVSzJDZG9ZSE5I
+            bmt2NEFDanR3aFJyYVNnU1NlUldRb2RUVXhNClQrTkgzR1dPNWp3endZTUl5SmRs
+            dEtkSWk4aWJEc2hhbWlXZkxpNGhacFUKLS0tIGZNSG43R0NKYmdFMzdXbmJjSExJ
+            Ri9hM3NRTkM4Q1lDdmdPemEweEFBUmcKNLL5qH+JeFWX0GovkPFVVAnz+4tmfG6/
+            1jN8YqbMIxf5/L8tauXPf0iIiHa6pUcjtDZPr/OEmeXebmF6Bh9u9Q==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-06-27T09:40:19Z"
-    mac: ENC[AES256_GCM,data:ZdocsIbkzcWsTia7s98T5hjM5HDyBc1a0pwAb3IEFAom9Q0LjOs02BjsBKQT9Z+eMU+Ugkaz+kgP4hwYbcUuAbiVChU6sLMxUPwQDE8E7sJINZvJzth4Kl5SF4qz9fEuY8ZTP1hHc/HC6fSfWm+zH8n755aBjrzdIUvPV0Qv3xI=,iv:SSjyvgMSgZsoKHspRrNJpkmRTDdFqQlJGLUybyMcXbg=,tag:EBLpGZLNwDZxsWwh7Eva7w==,type:str]
+    lastmodified: "2024-08-25T03:19:55Z"
+    mac: ENC[AES256_GCM,data:v6yb7ZYcnPw/8SqEJnSWzmlE17PenjnBH2X8HZp+kIDXzNFyNvD19FcbCBZjwyjBLvN1ZF4M9FS7Y4+CvvMrN/4JcFufcY/V1NrOd8IZisfAT5N3WuopPee4IN9WEyPVOsbFnesZo6/wJKuqlV1UR8UZxCd3/wHXob9Lkz45cBw=,iv:XKIUiRfP0lj8V/Z1HbvhBankdcAjQqM8Way6TWjJJMY=,tag:PLYsVj6BmR132oWsxEKnfg==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
-    version: 3.8.1
+    version: 3.9.0

devices/vps6/default.nix

@@ -53,14 +53,13 @@ inputs:
             (site: { name = "${site}.chn.moe"; value.upstream.address = "wireguard.vps7.chn.moe"; })
             [
               "xn--s8w913fdga" "misskey" "synapse" "syncv3.synapse" "matrix" "syncv3.matrix"
-              "send" "kkmeeting" "api" "git" "grafana" "vikunja"
+              "send" "kkmeeting" "api" "git" "grafana" "vikunja" "write" "blog"
             ]));
           applications =
           {
             element.instances."element.chn.moe" = {};
             synapse-admin.instances."synapse-admin.chn.moe" = {};
             catalog.enable = true;
-            blog.enable = true;
             main.enable = true;
             nekomia.enable = true;
           };
@@ -80,6 +79,7 @@ inputs:
         };
         beesd.instances.root = { device = "/"; hashTableSizeMB = 64; };
       };
+      user.users = [ "chn" "zqq" ];
     };
     specialisation.generic.configuration =
     {

devices/vps7/default.nix

@@ -30,7 +30,6 @@ inputs:
         nix.substituters = [ "https://cache.nixos.org/" "https://nix-store.chn.moe" ];
         initrd.sshd.enable = true;
         networking = { hostname = "vps7"; networkd = {}; };
-        kernel.variant = "cachyos-server";
       };
       services =
       {
@@ -53,7 +52,7 @@ inputs:
         send.enable = true;
         huginn.enable = true;
         fz-new-order = {};
-        nginx.applications = { kkmeeting.enable = true; webdav.instances."webdav.chn.moe" = {}; };
+        nginx.applications = { kkmeeting.enable = true; webdav.instances."webdav.chn.moe" = {}; blog = {}; };
         httpapi.enable = true;
         gitea = { enable = true; ssh = {}; };
         grafana.enable = true;
@@ -69,6 +68,7 @@ inputs:
         vikunja.enable = true;
         chatgpt = {};
         xray.server = { serverName = "xserver.vps7.chn.moe"; userNumber = 4; };
+        writefreely = {};
       };
     };
     specialisation.generic.configuration =

devices/vps7/secrets.yaml

@@ -54,11 +54,13 @@ synapse:
         signing-key: ENC[AES256_GCM,data:hzxxDbGp1L09O7+ueUSa5lJOY/QvF2zvHdpueEHjaPQEToQt9mr2loeTQHC7ObTegfLb9UHrI1jn4A==,iv:KngfahwYZZmDQ5LeOUPWptTMGAC8TZm1G0FWcrwCwsw=,tag:U9pW6/boBIpiswn67Ezrfw==,type:str]
         sliding-sync: ENC[AES256_GCM,data:BeA6g98IWDP6hnLFI77QqG6esDwB6j3OPzAv3eJxWoTajAsByHSgSYP1vHN5Iok6IgvSSmkf0/HiOJy1Ca8IIA==,iv:ca+t/rYwc/fAVUcz0JTmrRQCOcbDNscbnE8BpHkx/OE=,tag:eEfhUChUt4kRnO82XqRY4g==,type:str]
 vaultwarden:
-    admin_token: ENC[AES256_GCM,data:muavuOY88Lm4rSEoCp4IIPp7Z+sqf36VwpnPgf+K6IwwFkUgYM1GO80ogReYWqqUM6ij1Yzl5D9ncUbq+aGTKQ==,iv:jA4MRJlz71CMmPnWjb2tGbbIoMkEsESUowhXDckKKMI=,tag:l0HaJmnU29YeFUxjOgN3Kg==,type:str]
+    #ENC[AES256_GCM,data:yFDD8GHjZWHN/Yh53DseevKAhDVwrHX60e8sGZnF4BUsUuPA/4S2PRzj7CtlpFzUH3kb0i+HkLKRvbchg93U3as=,iv:JGG7daEKs0oMKTNVi9GS7PrXn/8rFtVkHknACsEQR+g=,tag:RSN6fojLsI4dcuPu2eTiWA==,type:comment]
+    admin_token: ENC[AES256_GCM,data:OpjREmxJSRj+aGVoP8KKRE7ClNqRtaV8va4WLVmpl1AO6D0q/GapJvhORHQb5s5ZjIAgvWTz1w+fh050Q9sPwRsNUke3FIcyeNy7k0PHgnnVIdxnU1Vn9KMz/SovjQ0/qEQ7tArvW/EXtKfwnP9lsz9m94VBvA==,iv:9AvDqMa2PeQOSrP2th3YBgA2RxPl3oKZTyUzi/yjRTM=,tag:HYFTQDgWvBsHQk8IZxWkfw==,type:str]
 mariadb:
     photoprism: ENC[AES256_GCM,data:TF1SZVFnvzyE+7vrHYYUS4Juqhbiw9QcJx7p3Xj88xyBFcTqS1YjzAKs/9GQ1PuzdBrt6hXm/XtJILHiuktnSg==,iv:sd9sQEuIePL6LzUYbFtmdecJ57sMrkF0coalBf8KFqQ=,tag:P/knaKYTJ+aXu4l6IixISA==,type:str]
     freshrss: ENC[AES256_GCM,data:ydqCbj3UbsLC1e++p5ixb5Kpmk2BsYd0urcfw8T51Is5N1/gQ7P0zgR33AOteAxw2oj85WQZhxu3eAN7BCXV5A==,iv:1oiMo1wwFNXiTZLsf4UPZSJfKFIWLI3h947TC06CVy4=,tag:Otq1oeKBnWXhqNilfsywPQ==,type:str]
     huginn: ENC[AES256_GCM,data:1Tdg1WDwGgFSXdChgif8knWS24BIFYnmaiSjJXxs5uj/v/5fJ1alb4K4XHW/kFRjQbuAOFfJiJ9ogJ1KAyk17A==,iv:qLMaQpVaKrjP7g2lWzhaNLghxwiV4YJmyYY1hrpu5I8=,tag:566JCENvOxgwD7tM3aQBiw==,type:str]
+    writefreely: ENC[AES256_GCM,data:+5jsON4SpeWKWZWlbn233XuQ/6HDzaS3XxUxDbUqAp8S/XGmn/QuFK2f375QJEiyZsnrIYkbN/CiOjdTw+nNzg==,iv:8mKqWegyxrT6908P5G0olVZzpP+BwpE7SYODEry7F3A=,tag:HeYoT0RFJGzX6DWcBQy7Jg==,type:str]
 photoprism:
     adminPassword: ENC[AES256_GCM,data:gB81joOfS8h05BNy2YmD/N0cpLPa/vAduDcQBeHiY/WkcnvqSXnXsOfnvbP74KQfoP4W35oFkfyGVPUBSB83tg==,iv:AkN2NoqMXVHQA9fHTTR7xbEapEqy/D61mHn7O23hyYk=,tag:WV+siDA3VnRkOYnP4Z9Qhw==,type:str]
 nextcloud:
@@ -68,21 +70,18 @@ freshrss:
 huginn:
     invitationCode: ENC[AES256_GCM,data:+m2AabRzUiCFy3MAKTB8d1IE05WHTcmZ,iv:ccdIPHl9N+bvPR/QCwZUwZOfWTeW6gWhhBjOpL85JRg=,tag:Ir2085K04XUGkAuoCG+7VQ==,type:str]
 fz-new-order:
-    manager: ENC[AES256_GCM,data:qZc5U3SZQPWzcKVjN2+A2qWNae4GItcjvEQFgkThvIQ=,iv:fJpiUlViiUg1ea/zGhgedQG7TeTbeb9dPviYoiUBLqI=,tag:6T7rgJflsjgK++28SgsLtg==,type:str]
     token: ENC[AES256_GCM,data:qhwWRflJbW1QMOhiPfbTIrEdQJyVtfZ1QycCgstdKD1Nh40=,iv:GvZ8MJig64l34jkvuJbMMjyNaPT5yz0/pFCc6KEPTvA=,tag:cMXo/6F9thl8k2iAhT507Q==,type:str]
     uids:
-        #ENC[AES256_GCM,data:WJszzA==,iv:KvyEnUu69+L5ZxNbRmjtP2R+8lHKgdlMN0WuvDbYgE4=,tag:LP2FJ2HXWZJmTdvXpHflVQ==,type:comment]
-        user0: ENC[AES256_GCM,data:Qw18Ht6qXo3n7DD9NgNB+3IRbCmKuvJQiK5UBsg/FC8=,iv:TeeTcR0tnRrniySqKrsKfOfr2JO7+kqS3iETdCFX5ZA=,tag:rRo2yNku9JWxmILWBS/Wyw==,type:str]
         #ENC[AES256_GCM,data:O3DOE3jFCg==,iv:9shUoHCLXsJPKHELlyWdreouEcyOqhsfVI2KaqwC4CU=,tag:tYKVv+/DuesSijZwWGdrig==,type:comment]
-        user1: ENC[AES256_GCM,data:vY4qTPNqdFp2H348jAgvwKktywdVVvQK/lR2NgRE4Ho=,iv:DrweeSEJ5ETomIkRtkcVboiQindzBoxvxjlSmrQIfI8=,tag:sMz1ITHkDclBc4OY91dMGg==,type:str]
+        user0: ENC[AES256_GCM,data:2sieulGmi7mCYrJH24djrrmHArrFbOHZ9wUuKvY4f2k=,iv:lb5ODFOeQQ+D9HZnMw48n/DGRB7L51U4frBVcPx1mvk=,tag:MwZua6u+G478uGOwtGu4fQ==,type:str]
         #ENC[AES256_GCM,data:yeA9zF8Tug==,iv:VZuWLZnt1RBmkBWudKVvgJkYfqxIj/umEHVCfR6IG3k=,tag:1kj7HyjVT59n05VYJ1uP+w==,type:comment]
-        user2: ENC[AES256_GCM,data:7hlq1FEauGcKkStREDbxA3tOA5NmFo9AbXiOPUt+kZ4=,iv:urOP3ENSviWRKDIWGc1P5PkEtkoBSCSYlgGqJQznp8s=,tag:NNKCW5bFPY7t/PC7dsSJwg==,type:str]
+        user1: ENC[AES256_GCM,data:Aw0ydspmf+PXKU27Pdzn4q/nY4sxXCADL1WGB7vm3eo=,iv:uTmVvGlW1HfdvoNbupSw3GyShsWTGVCoNrvVJ5BPUy0=,tag:k9KIoCWM6bSprwR8dmN+Hg==,type:str]
         #ENC[AES256_GCM,data:4G7DyLVVgQ==,iv:Ht/exln1QtL2BxjCaOTIXHRPDiSFYP4zIa7VaeMCuhE=,tag:btVLXf+WS/YgzRFbVFoAfQ==,type:comment]
-        user3: ENC[AES256_GCM,data:nBTbmp9OP14ayVBz1UGC5g76txfUwxL2NPQCKGxsQyw=,iv:2B8ISdT+8WpfeiU9peKoMlpwcRoGZVh11VyAnS9IKP4=,tag:uBMxqrPlb6TaftnAMqodKw==,type:str]
+        user2: ENC[AES256_GCM,data:P5gmhaQ+VOWVOjTrsx34zUS8dsqIkzCwOImIE8TIfUc=,iv:IoJIUcNJmaBTyr0Ut6R7BN/UqyK8p4HtiwbXUl171pE=,tag:k99PGSL1cEALTmFVWH1uSg==,type:str]
         #ENC[AES256_GCM,data:TGrZBuCRgQ==,iv:9IOJ3Bkw9udS/y93TTtZ9o79aDq3Bb+DMEogJG77iqA=,tag:S/XcPX1f89IyfZnMoR9s/A==,type:comment]
-        user4: ENC[AES256_GCM,data:LVendDEBlPUCkXPfgbYf2X0EgJsAdLKjAudXeAgy2Is=,iv:bR0emkQa6OHUP1ucgAvJU0eEop0gp+3rwDB5XJhh4+s=,tag:YZsW9Yyr+ey9AbTO3ucWDg==,type:str]
+        user3: ENC[AES256_GCM,data:cAzf2X20rtQYyz1rLK6b4jo8utuUOdUHVYfCWdfPTDY=,iv:L5cg7aNdfnLTH2dKl4bWCqaujJ9tIvBJrJIoDIaBLwk=,tag:9Al6Wig4lz1my6hgozSsIA==,type:str]
         #ENC[AES256_GCM,data:b4iJ73sUoQ==,iv:A2hmi7lCR15E5jVR8E71GQuHgF4TdjDuQadXOtBon6k=,tag:eopTJdjN16u7PtpZdhKymQ==,type:comment]
-        user5: ENC[AES256_GCM,data:wG4awLnfB4B0qLWG6Aj+OslLMnViPjIzicfB4ZzkZPA=,iv:b9C1IDmZTMV0RYXqkM/Y3khZeSQEOISrQyPjhQe3WKM=,tag:cRMtLNU6TCwTQG4UVhvTng==,type:str]
+        user4: ENC[AES256_GCM,data:nUJ0lPuFOUVGCtq0IRSh5dAkAna7hoow1YOtFEgSoZc=,iv:D8phoZxdbQ2/Zaeq8498eRb0a7SZD5WnVdKv+u2pBak=,tag:Obu01n34JjyAVnF0f3uKzg==,type:str]
     config0:
         username: ENC[AES256_GCM,data:p8+q8u1A,iv:9s52kS5yLB4vQuGVXNtA4amZqT3eHTTybsbsQZRiFnk=,tag:7SA4SEzMHpP9H/rwoE+UJQ==,type:str]
         password: ENC[AES256_GCM,data:58+gFodT,iv:ohZlT1BwnzCYv84xHgFsLRkiPMpE8lB8QVHwr0QtDWc=,tag:XF047RnXs6IbKsTnsm0D6g==,type:str]
@@ -119,6 +118,8 @@ xray-server:
         #ENC[AES256_GCM,data:j83rYg==,iv:3oEdAoVz7aMcezcy2chTO0LQTtKpTrJJoQZx3PC03BU=,tag:ABteEIyr2Y6MbGQhmrQySQ==,type:comment]
         user3: ENC[AES256_GCM,data:Uk0Ax9FVzmmYs+ggWy7z6FEkuj2tppGlvnQdoW6PDI1VA9oI,iv:wSxigXleRUalQR1/TzKfdUVrdyEUuq+Wg42gSv1QMAI=,tag:qn6nBWv6MlGhMarCfI13BA==,type:str]
     private-key: ENC[AES256_GCM,data:TarrinCFzWkB5zCc7i7f3B3tFfxrF+cGnrg4bw9CAGKWBazSJHCviY8Imw==,iv:azHdrc6AlgS9RPwGVsYRb8bBeC/askCdut1rnv9TA3I=,tag:AT2lLraKVgbp9GmlLJiI+w==,type:str]
+writefreely:
+    chn: ENC[AES256_GCM,data:YvhPa69sVdiljm9Ix6yQh6YCEpFvC9iw5Yx72MBcGr7+swdbvWDAfMmGFY066mAPvhpwZX/IEivKvrS0t/OSnw==,iv:7s2yEb30YaCAtNeevbur0HL28nXHVIqmCx6Bngh+HWk=,tag:yx0JK8RNQMVcYLBSxNj+uw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -143,8 +144,8 @@ sops:
             SnFHS1Z0SXUzTFdEd29KTy9DU3Y3R0UKfhh+rUmWDrf+UGjclP57dHipPLFoXSqy
             HdelmfV6q4/c7ppx2E+oZw3VNgoZCsrxxzYZfwxHJiZb+5vkE0D8iA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-06-08T09:15:52Z"
-    mac: ENC[AES256_GCM,data:EY6sFc4EcTuxPgIZQ51HFZZZf+khb7mkNEvb6U12kCtoJAEo+i83uszwBZCo/QWw6VCCt9c//9y0mNH4FjZPJAxweJHcRtanyTXa5jdyv12qINUceYe7Uhcb7JuiiEns9DEbrr3UeAKfbPC+N5mD/2trzht0E8hqnFlWU/fysz8=,iv:saymdP4nFveEWx0JrBR2bW8SUl6xCJKhYqw+CsrfRG8=,tag:CHGvJAO8hpSMNdU2YE2OGw==,type:str]
+    lastmodified: "2024-08-20T15:48:48Z"
+    mac: ENC[AES256_GCM,data:buEby7ZmmEFARmRp3r7JwYdMck87u4c3TGkeF2pkc5ORnqIgwSH1XVSjlbK8vTBWz2FKXeQh9wkX3BMaam9dU873/yPBe54BnbZNggZ7jDDEpSTeddfTsM8mrka0xDO3CUHbwCsqYWFm4NLAbCfRPKhrjvSJVyEC85K3eO45Z6M=,iv:/7cOdSi6oiaaFRkSnR+1/XXapjlQdMgom31xrpIGXHk=,tag:XW4WX93bw45zPweblW4Dtg==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
-    version: 3.8.1
+    version: 3.9.0

devices/xmupc1/default.nix

@@ -10,10 +10,11 @@ inputs:
         {
           mount =
           {
-            vfat."/dev/disk/by-uuid/467C-02E3" = "/boot/efi";
+            # TODO: reparition
+            vfat."/dev/disk/by-uuid/467C-02E3" = "/boot";
             btrfs =
             {
-              "/dev/disk/by-uuid/2f9060bc-09b5-4348-ad0f-3a43a91d158b" = { "/nix" = "/nix"; "/nix/boot" = "/boot"; };
+              "/dev/disk/by-uuid/2f9060bc-09b5-4348-ad0f-3a43a91d158b"."/nix" = "/nix";
               "/dev/disk/by-uuid/a04a1fb0-e4ed-4c91-9846-2f9e716f6e12" =
               {
                 "/nix/rootfs" = "/nix/rootfs";
@@ -26,7 +27,6 @@ inputs:
           swap = [ "/nix/swap/swap" ];
           rollingRootfs = {};
         };
-        grub.installDevice = "efi";
         nixpkgs =
         {
           march = "znver3";
@@ -52,7 +52,6 @@ inputs:
         nix.remote.slave.enable = true;
       };
       hardware = { cpus = [ "amd" ]; gpu.type = "nvidia"; };
-      packages.packageSet = "workstation";
       virtualization = { waydroid.enable = true; docker.enable = true; kvmHost = { enable = true; gui = true; }; };
       services =
       {
@@ -88,9 +87,10 @@ inputs:
           shares = { home.path = "/home"; root.path = "/"; };
         };
         groupshare = {};
+        hpcstat = {};
       };
       bugs = [ "xmunet" "amdpstate" ];
-      user.users = [ "chn" "xll" "zem" "yjq" "gb" ];
+      user.users = [ "chn" "xll" "zem" "yjq" "gb" "zqq" ];
     };
     services.hardware.bolt.enable = true;
   };

devices/xmupc1/secrets/default.yaml

@@ -15,8 +15,15 @@ users:
     yjq: ENC[AES256_GCM,data:ua0DINHutjt2Pk+SfHRQRV99mT3Cnw6rRKO8VRIAlP0dY6QhK9wkNdyRYWYRBKVrWgyFQMGNFYAxIpymjF/X7mBOVI2sOHLgkw==,iv:PUZ6S0KICuqoSA2sDLxdL4gtAOQnQXOUY+5f3qDZgpc=,tag:f39P34vAUOrV23BsKkRarA==,type:str]
     #ENC[AES256_GCM,data:6qNjSdjck4Vz,iv:c/GNqCNgRgwgL+2f6Vumtjb/ub9WCBSy8R02NRCDqk8=,tag:b/tucJsHTjSfcK0vgHtE8A==,type:comment]
     gb: ENC[AES256_GCM,data:3eAKBiJoC1owCHTFd3Xq8vI8VK980evePc92xCXJJ21M9D1MdbwN8ySZ3Ovjk7VfQmEo8oRv1Ll1sftyrXYoeTHmJsNDxCpR6A==,iv:Ju/ERNuGrgO5kYlbvmkbLJkgiW3Elou34AsJTFITCUg=,tag:POVlxYh9kZ1BMSbt97IVOQ==,type:str]
+    #ENC[AES256_GCM,data:oniighfvCNGWUwdhqg==,iv:RVUuZBqCd111QJ7MpgYBuP4fDCzm4NZAtbua9kXkrJM=,tag:21zF8E/3lBTDr54I9NKPVg==,type:comment]
+    zqq: ENC[AES256_GCM,data:Vjbbs8xIlH3+of7+kLGFVp4bIizU8D5R1qRbCqP5FhzTadXA8KD9/uiYxtrV3oxYGwZ/RlLvriHMClob4ihyDF4U2t8Dc4eVqA==,iv:FjCftpfKPZYThiNOyNkhx9uNyWIsjC5sK5WWcaEBtiY=,tag:MTL490c2SeFGx3EhxEdvkA==,type:str]
 mariadb:
     slurm: ENC[AES256_GCM,data:qQMD8SKNmxb3PdScXNqppF9zkX7dV5i7rvljvZuhiI5zLnu77qYCHBW6ymh0mrY14N9NjxmQZhZWX/H8TvBlcg==,iv:J5N3LjCYW3QmuEkMBpl7qvPFW1Z9ZoPLkj45jKcIW9U=,tag:Tl+ld07+lVkmzt7f/f2MqQ==,type:str]
+hpcstat:
+    key: ENC[AES256_GCM,data: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,iv:B2eWjydl8m8nbcPw2fZfxCnj57utWM9ABj2eJ1pRKWQ=,tag:5W9ZwVSJvm1KvZnf/E5Tug==,type:str]
+telegram:
+    token: ENC[AES256_GCM,data:Mu7guAFUu+UoHvo/h1blcI6Kg3mvng6zNc/HKXuCdf73ujziK0mXwPcf7t7d/w==,iv:BkA4d0OJ4lTD7csZJQHcDnYe7SYcFbwRVYOQAWOQ2lQ=,tag:GuJ4z5pe2znTY3xNT2WF+w==,type:str]
+    chat: ENC[AES256_GCM,data:OC8ElUPmfsVL,iv:WgZMJP2ugZbqZyihdNtL1xMH8u9VpLNzO8DGpDL4w4k=,tag:u4cKABikuMUbCIm5zCnk6A==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -41,8 +48,8 @@ sops:
             ZDNHUjE2QVlCV3p0NHdKYW5IMHVBZzQKkZtfyvfroOntg3yRjMw4jQHiQj8eaB2h
             IeIHfW4y01mmVT2ofbtB0xYpjcl4gtUlQ8X3tn5iJ9P8gcVo0G598A==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-05-10T08:53:57Z"
-    mac: ENC[AES256_GCM,data:ImxIE0d7cEpudUKGs9zHCMFKlHYwFfztLWe5ZMWOrQxr7/uRxfCsiIvuU1nRri0jx2x8J6EFAG1BdrF4KRSeW5sIB9Tlk7X1TJ69zSdLhhnIuPl+rSyovoIkMQAJ0Wvyvlgimh1VQyaBkPsjnGk/dga1N0+gIlmiwFKY5uTpaaA=,iv:fo6S9fIDxnp7VWYYWH613U6bxIlDBZaNObkRR3AdgEc=,tag:ZRIMHkWRsf75K3Tg3Xv5xw==,type:str]
+    lastmodified: "2024-08-21T09:56:03Z"
+    mac: ENC[AES256_GCM,data:9+AR9Y6ik+BH1Spk62LSTU1NFQ8ID0YROF+yf8ss2RqhfP6/5+lsrNjGC7gnEEMYF8UWVtChUuljIK3Q4MtT64JhDWgp8tenbpkJnRFGylzEe37MYajdDY7nrPP7iPUPNvS1ndo6vp/yuEigBXVhCtpjMObj7zIdGnLbtz0sczA=,iv:gNb8gVp9adnlZsMM2afOlFe46Vy15ELmC9vGaaeaInY=,tag:rltLL3WSZytjEemgjCy6Ng==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
-    version: 3.8.1
+    version: 3.9.0

devices/xmupc1/tunnel.md

@@ -0,0 +1,39 @@
+# 使用 SSH 隧道连接
+
+在学校外且不使用厦大 VPN 时，无法直接连接到学校的服务器，可以通过下面的方法连接到：
+  首先连接到 vps6.chn.moe。这个服务器在校外（洛杉矶），因此可以直接连接到。
+  同时，它通过别的方式与学校的服务器保持着连接，利用这个保持着的连接，跳回到学校的服务器。
+
+这个跳转的过程不需要手动操作，只需要将软件设置好即可。
+
+## PuTTY
+
+1. 首先设置一个名为 `vps6` 的会话。
+   1. 在 Session 页，填入 `vps6.chn.moe` 作为 Host Name。
+   2. 在 Connection -> SSH -> Auth -> Credentials 页，在 “Private key file for authentication“ 选择密钥文件。
+   3. 在 Connection -> Data 页，在 “Auto-login username” 填写用户名。
+   4. 回到 Session 页，在 “Saved Sessions” 填入 `vps6` 并点击 “Save” 保存配置。
+2. 再设置一个名为 `wireguard.xmupc1` 的会话。
+   1. 在 Session 页，填入 `wireguard.xmupc1.chn.moe` 作为 Host Name。
+   2. 在 Connection -> SSH -> Auth -> Credentials 页和 Connection -> Data 页，需要修改的设置与在 `vps6` 会话中相同。
+   3. 在 Connection -> Proxy 页，设置 Proxy type 为 `SSH to proxy and use port forwarding`，Proxy hostname 为 `vps6`。
+   4. 回到 Session 页，在 “Saved Sessions” 填入 `wireguard.xmupc1` 并点击 “Save” 保存配置。
+
+之后双击双击 `wireguard.xmupc1` 会话即可连接到学校的服务器。
+
+## WinSCP
+
+1. 在登陆界面，点击 “新建站点”。
+   1. 设置 “文件协议” 为 `SCP`，“主机名” 为 `wireguard.xmupc1.chn.moe`，并输入用户名。
+   2. 然后点击右下角 “高级” 继续修改设置。
+   3. 在 连接 -> 隧道 页，勾选 “通过 SSH 隧道进行连接”，主机名填写 `vps6.chn.moe`，选择密钥文件，并填写用户名。
+   4. 在 SSH -> 验证 页，选择密钥文件。
+   5. 点击 “确定”，再点击 “保存”。
+
+## OpenSSH
+
+下面是一个命令的示例：
+
+```bash
+ssh -J username@vps6.chn.moe username@wireguard.xmupc1.chn.moe
+```

devices/xmupc2/default.nix

@@ -10,17 +10,16 @@ inputs:
         {
           mount =
           {
-            vfat."/dev/disk/by-uuid/23CA-F4C4" = "/boot/efi";
+            vfat."/dev/disk/by-uuid/23CA-F4C4" = "/boot";
             btrfs =
             {
               "/dev/disk/by-uuid/d187e03c-a2b6-455b-931a-8d35b529edac" =
-                { "/nix/rootfs/current" = "/"; "/nix" = "/nix"; "/nix/boot" = "/boot"; };
+                { "/nix/rootfs/current" = "/"; "/nix" = "/nix"; };
             };
           };
           swap = [ "/nix/swap/swap" ];
           rollingRootfs = {};
         };
-        grub.installDevice = "efi";
         nixpkgs =
         {
           march = "skylake";
@@ -46,7 +45,6 @@ inputs:
         nix.remote.slave.enable = true;
       };
       hardware = { cpus = [ "intel" ]; gpu.type = "nvidia"; };
-      packages.packageSet = "workstation";
       virtualization = { waydroid.enable = true; docker.enable = true; kvmHost = { enable = true; gui = true; }; };
       services =
       {
@@ -75,7 +73,7 @@ inputs:
         groupshare = {};
       };
       bugs = [ "xmunet" ];
-      user.users = [ "chn" "xll" "zem" "yjq" "gb" ];
+      user.users = [ "chn" "xll" "zem" "yjq" "gb" "zqq" ];
     };
   };
 }

devices/xmupc2/secrets/default.yaml

@@ -15,6 +15,8 @@ users:
     yjq: ENC[AES256_GCM,data:sGPQ0xALULREnhzl9g/V91M5osMglsSps6R4gYn5OZc/4xVC1phF3qajVN3YMOr7kKgkHbF2Rjm6/2vuK0k1iYZnFswUAmFlmw==,iv:5vG1hn7SlX6HCpas2BgxBSwWqLby8OCxcH3EKNvceIc=,tag:TVwFBAuosKnEOZecq1phXw==,type:str]
     #ENC[AES256_GCM,data:ALHxkRABA+ll,iv:r1IDiHLFcTdLID3q16zrLTavAwQfddC7bXMKcFZFveI=,tag:4Pd0/Q1BmH4gJjaM4hbqqQ==,type:comment]
     gb: ENC[AES256_GCM,data:z4CrtdmdLJJ0qZzr7qvihnluJQgjtciX56KdEmtemiRu0llEJk9qz6a23aJ7m40Sfc38elF1/LsvjOuBOC87+BVkKDCj76phag==,iv:WrFVxkr3snmqDXZx5kAYCLp7ixEIzxoT7El3rV7Ovqg=,tag:iExf2Y/HObHQrKMTRvqn7A==,type:str]
+    #ENC[AES256_GCM,data:UoNCXbGIHDNsmyCJxw==,iv:uTNvqg4xm7E+yn8vFaaihbEGEhLTZ2FNFNCYzdgiDlU=,tag:4bRSZbx6FFzA6MiBYVu0qw==,type:comment]
+    zqq: ENC[AES256_GCM,data:sfgufV++PfTrdeUBXZhmF1JoSpD8Nj+m0QKFrUMJG/pHb0AUagJEWEJwPsI+m91tZE0qxM271ks+WKqLElmyD4Ftw7ywWzTE0Q==,iv:R05QFUF+fvIHidWpHIR/D/e+UeciS5ehnx1kx+saCgM=,tag:3Awnd+pUQRxjjQ58SUX7Mg==,type:str]
 mariadb:
     slurm: ENC[AES256_GCM,data:9wLQ1zF/kDaiw0s3UaRpiHgmngU7u6hwyqpddSjev0+Z0v58Q2oiJtK8vn+2VlSxx5ACfqEFbzp0PZYAxd575w==,iv:q9JTkgDymOwkbZ/PaxRAAQrtO96QmGgZcQuLTFCMoS4=,tag:dwOHlOTgZqT/1jQ+oGf7UQ==,type:str]
 sops:
@@ -41,8 +43,8 @@ sops:
             M0xoL1dQR0kvMWpzN0RMNWVCTFQxNFUKj9LPjBo5NGOrGYNvu8qZ13PLYjLEWllU
             LARzEn4XgkeHckouwvxZYMCx7WxmAruRWaOvnxTIczzSNP7wIrqnkA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-05-10T08:54:10Z"
-    mac: ENC[AES256_GCM,data:4n7bAGzORwd6vHl/Cs5YT8VZaSdfvxUm6e+fw7PYC2ov8XoRlJKU/Bci8Sbwcy2H6OjbkdRYA61cB2wAjtEY1x9N/c6qvUAOjTvOtcXoQQex8d+aMnJsFfJQ70GHCZE+KRTmy1SAMn+N00Oy0FDisdQe/jIZuWyav5j62CKqLqc=,iv:YEhiXU2IgXy4A0ZLsNY7kFqXJM5RBHE4IZwlRoF8XMA=,tag:aVc0r2g1QkY42NP59p4m2w==,type:str]
+    lastmodified: "2024-08-21T09:56:44Z"
+    mac: ENC[AES256_GCM,data:COodLhpL5EA5g15lgimsuxs1vmqJrLDVgtjw+0FLKTq6E1pcQ+zJl+dD0b9u5fYy9BBf56TI8TLJahVPR0eGxbDFlHmx8M9GStlTqaOE3jRsDT8GsihdlvLokyVt8jEfAnaWESTIgfehVL2TrLlsMnIsoVHrzdlEhX5ATXA3QOg=,iv:U/EwFmYWOcxi7ItkR/+MT8gTu7UobH5pxS00qrH/yyU=,tag:RVMcx4X0IS9yvpHrF0owpg==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
-    version: 3.8.1
+    version: 3.9.0

flake.lock

@@ -8,11 +8,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1719917903,
-        "narHash": "sha256-UJpEzS99Y/j1QiwpDaB5JLhK85AKBqJ/8jaEiIrEG8Q=",
+        "lastModified": 1723815556,
+        "narHash": "sha256-TgkChEFJHqrciuI1Va7buSs5RQHCSxbWRFmuOI+e2tY=",
         "owner": "ezKEa",
         "repo": "aagl-gtk-on-nix",
-        "rev": "55d7639b1e6aa6ed8ca5ab196b8acd1890d2fc38",
+        "rev": "4d7fa422b50b612aa29bfb8487472f1cd9bad85b",
         "type": "github"
       },
       "original": {
@@ -24,11 +24,11 @@
     "blurred-wallpaper": {
       "flake": false,
       "locked": {
-        "lastModified": 1717574881,
-        "narHash": "sha256-PUr73+1a0F347IlCPWNa3hM3tSoZRqVu6O4XF/EzjIA=",
+        "lastModified": 1721745357,
+        "narHash": "sha256-+MjnVsGHqitQytxiAH39Kx9SXuTEFfIC14Ayzu4yE4I=",
         "owner": "bouteillerAlan",
         "repo": "blurredwallpaper",
-        "rev": "f91ca4ea4eb628b0a156fe9db0660ce1913a31cb",
+        "rev": "661a067215a2a9efffc6846bc166405d0a90da96",
         "type": "github"
       },
       "original": {
@@ -59,11 +59,11 @@
     },
     "catppuccin": {
       "locked": {
-        "lastModified": 1718339789,
-        "narHash": "sha256-Q3fgY7huFE+uaw7BNsAl1x+FvjDAi3EDWPnlALJt5pM=",
+        "lastModified": 1724469296,
+        "narHash": "sha256-p3R4LUNk6gC+fTKRUm9ByXaoRIocnQMwVuJSIxECQ8o=",
         "owner": "catppuccin",
         "repo": "nix",
-        "rev": "73e06d5bd7ed34bdd0168030893ef8364fdc1d4a",
+        "rev": "874e668ddaf3687e8d38ccd0188a641ffefe1cfb",
         "type": "github"
       },
       "original": {
@@ -75,6 +75,7 @@
     "chaotic": {
       "inputs": {
         "compare-to": "compare-to",
+        "fenix": "fenix",
         "flake-schemas": "flake-schemas",
         "home-manager": [
           "home-manager"
@@ -87,11 +88,11 @@
         "yafas": "yafas"
       },
       "locked": {
-        "lastModified": 1719341523,
-        "narHash": "sha256-UhbsY1ECPo0aqyXx8mR/y7f389ZH3lzEigrgsnrvA6U=",
+        "lastModified": 1724689493,
+        "narHash": "sha256-fNjxhUlj1/tsz4NmVvGiomEhnRlzRNi4/FUmYr7QO5I=",
         "owner": "chaotic-cx",
         "repo": "nyx",
-        "rev": "d2754bc296923da7f710100e9cafee14b4f97a2e",
+        "rev": "9fbc509c51ab1e49b5c54a8c06d492830f6d8437",
         "type": "github"
       },
       "original": {
@@ -180,21 +181,17 @@
     },
     "devshell": {
       "inputs": {
-        "flake-utils": [
-          "nur-linyinfeng",
-          "flake-utils"
-        ],
         "nixpkgs": [
           "nur-linyinfeng",
           "nixpkgs"
         ]
       },
       "locked": {
-        "lastModified": 1717408969,
-        "narHash": "sha256-Q0OEFqe35fZbbRPPRdrjTUUChKVhhWXz3T9ZSKmaoVY=",
+        "lastModified": 1722113426,
+        "narHash": "sha256-Yo/3loq572A8Su6aY5GP56knpuKYRvM2a1meP9oJZCw=",
         "owner": "numtide",
         "repo": "devshell",
-        "rev": "1ebbe68d57457c8cae98145410b164b5477761f4",
+        "rev": "67cce7359e4cd3c45296fb4aaf6a19e2a9c757ae",
         "type": "github"
       },
       "original": {
@@ -206,11 +203,11 @@
     "eigen": {
       "flake": false,
       "locked": {
-        "lastModified": 1718750072,
-        "narHash": "sha256-BgaHbqaeLGFpss34xrARvmQ99nRdvLRis5JEj/3rx0M=",
+        "lastModified": 1724459406,
+        "narHash": "sha256-CzysP5sq15+5U/hBBrP9lLecAa09OJH6a1bQ+pmWAVU=",
         "owner": "libeigen",
         "repo": "eigen",
-        "rev": "d791d48859c6fc7850c9fd5270d2b236c818068d",
+        "rev": "c5189ac656c2bf5eead9bc967282cf084cbaeb64",
         "type": "gitlab"
       },
       "original": {
@@ -228,11 +225,11 @@
         "treefmt-nix": "treefmt-nix"
       },
       "locked": {
-        "lastModified": 1716853897,
-        "narHash": "sha256-vZixjUtN4zQr117r26/Q+0fivtG3AYOc8zKjZPoV/mw=",
+        "lastModified": 1724111875,
+        "narHash": "sha256-Cit1pRfzgq8G1vCMRQ4eE4YdaUJPCxvj0p3EvhIPAUY=",
         "owner": "Mic92",
         "repo": "envfs",
-        "rev": "5644572b4567e8ebecae28525f953bcb71fbf481",
+        "rev": "c8493adca165b700f53a53e06f578f3b9f64bcfc",
         "type": "github"
       },
       "original": {
@@ -241,6 +238,28 @@
         "type": "github"
       }
     },
+    "fenix": {
+      "inputs": {
+        "nixpkgs": [
+          "chaotic",
+          "nixpkgs"
+        ],
+        "rust-analyzer-src": "rust-analyzer-src"
+      },
+      "locked": {
+        "lastModified": 1724394478,
+        "narHash": "sha256-JSiv2uwI4UJo/4pxt4255BfzWCiEberJmBC6pCxnzas=",
+        "owner": "nix-community",
+        "repo": "fenix",
+        "rev": "2e7bcdc4ef73aa56abd2f970e5a8b9c0cc87e614",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "repo": "fenix",
+        "type": "github"
+      }
+    },
     "flake-compat": {
       "flake": false,
       "locked": {
@@ -368,11 +387,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1717285511,
-        "narHash": "sha256-iKzJcpdXih14qYVcZ9QC9XuZYnPc6T8YImb6dX166kw=",
+        "lastModified": 1722555600,
+        "narHash": "sha256-XOQkdLafnb/p9ij77byFQjDf5m5QYl9b2REiVClC+x4=",
         "owner": "hercules-ci",
         "repo": "flake-parts",
-        "rev": "2a55567fcf15b1b1c7ed712a2c6fadaec7412ea8",
+        "rev": "8471fe90ad337a8074e957b69ca4d0089218391d",
         "type": "github"
       },
       "original": {
@@ -386,11 +405,11 @@
         "nixpkgs-lib": "nixpkgs-lib_2"
       },
       "locked": {
-        "lastModified": 1717285511,
-        "narHash": "sha256-iKzJcpdXih14qYVcZ9QC9XuZYnPc6T8YImb6dX166kw=",
+        "lastModified": 1722555600,
+        "narHash": "sha256-XOQkdLafnb/p9ij77byFQjDf5m5QYl9b2REiVClC+x4=",
         "owner": "hercules-ci",
         "repo": "flake-parts",
-        "rev": "2a55567fcf15b1b1c7ed712a2c6fadaec7412ea8",
+        "rev": "8471fe90ad337a8074e957b69ca4d0089218391d",
         "type": "github"
       },
       "original": {
@@ -467,6 +486,22 @@
         "type": "github"
       }
     },
+    "git-lfs-transfer": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1723210978,
+        "narHash": "sha256-V/IvjUSWmp/QbSuaHzMT0AF4dqam1Ay8Uei5+11cmT8=",
+        "owner": "charmbracelet",
+        "repo": "git-lfs-transfer",
+        "rev": "2cab0ea18f7e5c07a6cc5490f861b6815abad119",
+        "type": "github"
+      },
+      "original": {
+        "owner": "charmbracelet",
+        "repo": "git-lfs-transfer",
+        "type": "github"
+      }
+    },
     "gitignore": {
       "inputs": {
         "nixpkgs": [
@@ -492,11 +527,11 @@
     "gricad": {
       "flake": false,
       "locked": {
-        "lastModified": 1709199491,
-        "narHash": "sha256-J32quO+kCOrOLkYQzFZpiPhUXJHE6GIrmb0VSlECKLM=",
+        "lastModified": 1720179285,
+        "narHash": "sha256-nJ+FKTCJz0FIWcE9S2covKGfj4SgZOjgfxcAGBZ8Kqs=",
         "owner": "Gricad",
         "repo": "nur-packages",
-        "rev": "4b4a489297f3a11b8d0883b02c0d154ce37f24e0",
+        "rev": "1605d8b20651a0a42152347e9e04096e567cd359",
         "type": "github"
       },
       "original": {
@@ -505,6 +540,22 @@
         "type": "github"
       }
     },
+    "hextra": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1724317530,
+        "narHash": "sha256-luENDR+fn9NbqNkn9wpLRnD41MeerFEUsrDgKRpnmg8=",
+        "owner": "imfing",
+        "repo": "hextra",
+        "rev": "c6de4b5b6b1ec04647b0235e9c8b1158b1d58c09",
+        "type": "github"
+      },
+      "original": {
+        "owner": "imfing",
+        "repo": "hextra",
+        "type": "github"
+      }
+    },
     "home-manager": {
       "inputs": {
         "nixpkgs": [
@@ -512,11 +563,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1719037157,
-        "narHash": "sha256-aOKd8+mhBsLQChCu1mn/W5ww79ta5cXVE59aJFrifM8=",
+        "lastModified": 1724435763,
+        "narHash": "sha256-UNky3lJNGQtUEXT2OY8gMxejakSWPTfWKvpFkpFlAfM=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "cd886711998fe5d9ff7979fdd4b4cbd17b1f1511",
+        "rev": "c2cd2a52e02f1dfa1c88f95abeb89298d46023be",
         "type": "github"
       },
       "original": {
@@ -527,11 +578,11 @@
     },
     "impermanence": {
       "locked": {
-        "lastModified": 1717932370,
-        "narHash": "sha256-7C5lCpiWiyPoIACOcu2mukn/1JRtz6HC/1aEMhUdcw0=",
+        "lastModified": 1724489415,
+        "narHash": "sha256-ey8vhwY/6XCKoh7fyTn3aIQs7WeYSYtLbYEG87VCzX4=",
         "owner": "nix-community",
         "repo": "impermanence",
-        "rev": "27979f1c3a0d3b9617a3563e2839114ba7d48d3f",
+        "rev": "c7f5b394397398c023000cf843986ee2571a1fd7",
         "type": "github"
       },
       "original": {
@@ -549,11 +600,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1719292813,
-        "narHash": "sha256-6w/buoRKo4ijH9O4D/0KjNtiWjtrJebuV7djTEEa0+k=",
+        "lastModified": 1724304322,
+        "narHash": "sha256-/nrlMDubg9oG2VNANRBxsas5RbcJtB6IIDPZC3yHLW8=",
         "owner": "Jovian-Experiments",
         "repo": "Jovian-NixOS",
-        "rev": "d6222e7818aa5528f8369afe84bc53556a57c329",
+        "rev": "924a18ea8df89a39166dd202f3e73cd022825768",
         "type": "github"
       },
       "original": {
@@ -565,11 +616,11 @@
     "kylin-virtual-keyboard": {
       "flake": false,
       "locked": {
-        "lastModified": 1710313521,
-        "narHash": "sha256-A8Y+lvAPlh0HeTxTaHCdAD/CilQCQwsX4C+fBBKaqTU=",
+        "lastModified": 1723713444,
+        "narHash": "sha256-AvuoCe9ka0tfXtNW0KxInRI6xoSayiyrX+tBlAjGNLY=",
         "ref": "refs/heads/upstream",
-        "rev": "a8ec88762d63d676aae4f5f1e6d9d1dedf07cf28",
-        "revCount": 161,
+        "rev": "eba6dbbfd5d3d4128cbd300be7e109088cd82858",
+        "revCount": 162,
         "type": "git",
         "url": "https://gitee.com/openkylin/kylin-virtual-keyboard.git"
       },
@@ -581,11 +632,11 @@
     "lepton": {
       "flake": false,
       "locked": {
-        "lastModified": 1718727150,
-        "narHash": "sha256-/i/Nqm29Dqr57pIGgl+qzmQjqJiC1Zem/+WjVxS4guA=",
+        "lastModified": 1724686250,
+        "narHash": "sha256-Ngof+vfBm/3HFtjsNZGo9sWIHuoAet8v3f/FSMbARr4=",
         "owner": "black7375",
         "repo": "Firefox-UI-Fix",
-        "rev": "5861dbaaf4e5e6671cb230ef7da0b3ae4e7d49d1",
+        "rev": "c346292707c4507e2ccd890adacba65c85dc62d1",
         "type": "github"
       },
       "original": {
@@ -597,11 +648,11 @@
     "linux-surface": {
       "flake": false,
       "locked": {
-        "lastModified": 1718132187,
-        "narHash": "sha256-gdk4ueNISIVa0mSyrvpVuto1M65DP+EwVMiVody0aV0=",
+        "lastModified": 1723861744,
+        "narHash": "sha256-a4rrhMYb75Kk4G7JEZkacJPWI4u7o5xX88hwgty38D8=",
         "owner": "linux-surface",
         "repo": "linux-surface",
-        "rev": "312dae71d425bba0df8074aedb34585cc79af385",
+        "rev": "9103a6bf08d622fd583fd9839d2dc4ef9b2a46e2",
         "type": "github"
       },
       "original": {
@@ -613,11 +664,11 @@
     "lmod": {
       "flake": false,
       "locked": {
-        "lastModified": 1718640815,
-        "narHash": "sha256-HWheEFHklmziVpLoprSO2kKekh52cJ9pVy51+NID1xE=",
+        "lastModified": 1724105894,
+        "narHash": "sha256-MhoKG0QwTAccK0NE8vnm325T8Azqy4VKf77LGaSDNZI=",
         "owner": "TACC",
         "repo": "Lmod",
-        "rev": "2fdfa8ca1bff34bd85a361493230e26fce6f3697",
+        "rev": "c7974de5ba3376c7bdc123c42a8e9c3648a84ec4",
         "type": "github"
       },
       "original": {
@@ -645,11 +696,11 @@
     "misskey": {
       "flake": false,
       "locked": {
-        "lastModified": 1717405331,
-        "narHash": "sha256-NV/H8ah8YKpnzytR4OFKf23TPPlOdyGYesbRZDznAb4=",
+        "lastModified": 1724207820,
+        "narHash": "sha256-tm4YTpKqI7g4ACn8vkJUIFQmKcHlcDTkoBCrHEd3fp8=",
         "ref": "refs/heads/chn-mod",
-        "rev": "93f76cfe6a458915a3980d389d4c1dec3c117aaa",
-        "revCount": 25668,
+        "rev": "ac5c495d437fcdba2c523308119477a750440f3d",
+        "revCount": 25947,
         "submodules": true,
         "type": "git",
         "url": "https://github.com/CHN-beta/misskey"
@@ -692,6 +743,22 @@
         "type": "github"
       }
     },
+    "nc4nix": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1724637826,
+        "narHash": "sha256-/ZI1Bs96JyTxOnG12Rqx2o8aYfwqKxF7IMCUIfLBX3w=",
+        "owner": "helsinki-systems",
+        "repo": "nc4nix",
+        "rev": "c082bb1e4d237090bec9cb845af43627766724a9",
+        "type": "github"
+      },
+      "original": {
+        "owner": "helsinki-systems",
+        "repo": "nc4nix",
+        "type": "github"
+      }
+    },
     "nix-fast-build": {
       "inputs": {
         "flake-parts": "flake-parts_2",
@@ -701,11 +768,11 @@
         "treefmt-nix": "treefmt-nix_2"
       },
       "locked": {
-        "lastModified": 1715803356,
-        "narHash": "sha256-wvsg/UMM/jekzgbggH56KLZJzRmwrB9ErevaXXyWyqc=",
+        "lastModified": 1719475157,
+        "narHash": "sha256-8zW6eWvE9T03cMpo/hY8RRZIsSCfs1zmsJOkEZzuYwM=",
         "owner": "Mic92",
         "repo": "nix-fast-build",
-        "rev": "cfff239d93716e92f6467f8953d8f8c12da1892a",
+        "rev": "030e586195c97424844965d2ce680140f6565c02",
         "type": "github"
       },
       "original": {
@@ -716,11 +783,11 @@
     },
     "nix-flatpak": {
       "locked": {
-        "lastModified": 1711997375,
-        "narHash": "sha256-KvU4gOtuFMS9Il67glRGtdNfguAINT9pCaXtvCL8uI8=",
+        "lastModified": 1721549352,
+        "narHash": "sha256-nlXJa8RSOX0kykrIYW33ukoHYq+FOSNztHLLgqKwOp8=",
         "owner": "gmodena",
         "repo": "nix-flatpak",
-        "rev": "45bf66f7068db79b552da864c0e87452be624d6c",
+        "rev": "dbce39ea8664820ba9037caaf1e2fad365ed6b4b",
         "type": "github"
       },
       "original": {
@@ -759,11 +826,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1718507237,
-        "narHash": "sha256-xBEWCxWeRpWQggFFp8ugJCDa63cOJsVvx71R9F0Eowg=",
+        "lastModified": 1724576102,
+        "narHash": "sha256-uM7n5nNL6fmA0bwMJBNll11f4cMWOFa2Ni6F5KeIldM=",
         "owner": "Mic92",
         "repo": "nix-index-database",
-        "rev": "6af2c5e58c20311276f59d247341cafeebfcb6f4",
+        "rev": "e333d62b70b179da1dd78d94315e8a390f2d12e5",
         "type": "github"
       },
       "original": {
@@ -780,11 +847,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1718507237,
-        "narHash": "sha256-xBEWCxWeRpWQggFFp8ugJCDa63cOJsVvx71R9F0Eowg=",
+        "lastModified": 1723950649,
+        "narHash": "sha256-dHMkGjwwCGj0c2MKyCjRXVBXq2Sz3TWbbM23AS7/5Hc=",
         "owner": "nix-community",
         "repo": "nix-index-database",
-        "rev": "6af2c5e58c20311276f59d247341cafeebfcb6f4",
+        "rev": "392828aafbed62a6ea6ccab13728df2e67481805",
         "type": "github"
       },
       "original": {
@@ -802,11 +869,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1719019506,
-        "narHash": "sha256-2lpbK6W3QHxc7BFeEDPumcBoNBx7dO7UE+ypwFVEOOc=",
+        "lastModified": 1724635787,
+        "narHash": "sha256-01rsv0PLT/x5BZybqTnrlYipnG1CFF5s7ZX9otCnFlM=",
         "owner": "nix-community",
         "repo": "nix-vscode-extensions",
-        "rev": "935d522e2a0306083d15e09c7d17a9358c141f29",
+        "rev": "d1980fd00e84460f6769cc1684899fead5224080",
         "type": "github"
       },
       "original": {
@@ -817,11 +884,11 @@
     },
     "nixos-hardware": {
       "locked": {
-        "lastModified": 1719366783,
-        "narHash": "sha256-uPIZDEjZmJCWy1+0Jpqq73nEMpbaTxVtX1LoIN0z9aM=",
+        "lastModified": 1723854545,
+        "narHash": "sha256-3CE8MTrYLMNzPr90Y09Js3EI9D0MR3JnQtYENVcdKB4=",
         "owner": "CHN-beta",
         "repo": "nixos-hardware",
-        "rev": "6b60a779eb5f12b5395d8c133c1cec048724faf5",
+        "rev": "0b3a6ecaa0be2e528b6a5619cf29aea77b61e5bc",
         "type": "github"
       },
       "original": {
@@ -832,11 +899,11 @@
     },
     "nixos-stable": {
       "locked": {
-        "lastModified": 1718811006,
-        "narHash": "sha256-0Y8IrGhRmBmT7HHXlxxepg2t8j1X90++qRN3lukGaIk=",
+        "lastModified": 1720535198,
+        "narHash": "sha256-zwVvxrdIzralnSbcpghA92tWu2DV2lwv89xZc8MTrbg=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "03d771e513ce90147b65fe922d87d3a0356fc125",
+        "rev": "205fd4226592cc83fd4c0885a3e4c9c400efabb5",
         "type": "github"
       },
       "original": {
@@ -848,11 +915,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1719897776,
-        "narHash": "sha256-6YOzRagJILvNM8JkYEhdmPUKEkz+jIu7yUDU5/zB8JE=",
+        "lastModified": 1724690375,
+        "narHash": "sha256-ow1HWzTNnbHBUmnIK4kKAt0SR38iyjDObUGwej1soC8=",
         "owner": "CHN-beta",
         "repo": "nixpkgs",
-        "rev": "7e36c3204bce7c9f0b0ff5cb64a954137a6d6a13",
+        "rev": "7496c107d60dfbbc0c258550bbcc1d0df570aee4",
         "type": "github"
       },
       "original": {
@@ -926,6 +993,22 @@
         "type": "github"
       }
     },
+    "nixpkgs-24_05": {
+      "locked": {
+        "lastModified": 1723938990,
+        "narHash": "sha256-9tUadhnZQbWIiYVXH8ncfGXGvkNq3Hag4RCBEMUk7MI=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "c42fcfbdfeae23e68fc520f9182dde9f38ad1890",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-24.05",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
     "nixpkgs-lib": {
       "locked": {
         "lastModified": 1714640452,
@@ -940,28 +1023,28 @@
     },
     "nixpkgs-lib_2": {
       "locked": {
-        "lastModified": 1717284937,
-        "narHash": "sha256-lIbdfCsf8LMFloheeE6N31+BMIeixqyQWbSr2vk79EQ=",
+        "lastModified": 1722555339,
+        "narHash": "sha256-uFf2QeW7eAHlYXuDktm9c25OxOyCoUOQmh5SZ9amE5Q=",
         "type": "tarball",
-        "url": "https://github.com/NixOS/nixpkgs/archive/eb9ceca17df2ea50a250b6b27f7bf6ab0186f198.tar.gz"
+        "url": "https://github.com/NixOS/nixpkgs/archive/a5d394176e64ab29c852d03346c1fc9b0b7d33eb.tar.gz"
       },
       "original": {
         "type": "tarball",
-        "url": "https://github.com/NixOS/nixpkgs/archive/eb9ceca17df2ea50a250b6b27f7bf6ab0186f198.tar.gz"
+        "url": "https://github.com/NixOS/nixpkgs/archive/a5d394176e64ab29c852d03346c1fc9b0b7d33eb.tar.gz"
       }
     },
     "nixpkgs-stable": {
       "locked": {
-        "lastModified": 1718447546,
-        "narHash": "sha256-JHuXsrC9pr4kA4n7LuuPfWFJUVlDBVJ1TXDVpHEuUgM=",
+        "lastModified": 1720386169,
+        "narHash": "sha256-NGKVY4PjzwAa4upkGtAMz1npHGoRzWotlSnVlqI40mo=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "842253bf992c3a7157b67600c2857193f126563a",
+        "rev": "194846768975b7ad2c4988bdb82572c00222c0d7",
         "type": "github"
       },
       "original": {
         "owner": "NixOS",
-        "ref": "nixos-23.11",
+        "ref": "nixos-24.05",
         "repo": "nixpkgs",
         "type": "github"
       }
@@ -996,11 +1079,11 @@
         "treefmt-nix": "treefmt-nix_3"
       },
       "locked": {
-        "lastModified": 1719037946,
-        "narHash": "sha256-ZmaV6KePuFZTBgBmMms4BOHk2ubNbMx6tpaMZPMrhPU=",
+        "lastModified": 1724610772,
+        "narHash": "sha256-XAOnvYuIAMv7V2YVnVLUpMb+kzmxFxaXCaQASyJq7Ho=",
         "owner": "linyinfeng",
         "repo": "nur-packages",
-        "rev": "03ce015ef2ac079c854f7f7794c9ed020ce53db0",
+        "rev": "4593675609c0064d9a01e11df2e5c1ff369b98be",
         "type": "github"
       },
       "original": {
@@ -1016,16 +1099,17 @@
         "nixpkgs": [
           "nixpkgs"
         ],
+        "nixpkgs-24_05": "nixpkgs-24_05",
         "nvfetcher": "nvfetcher_2",
         "pre-commit-hooks-nix": "pre-commit-hooks-nix",
         "treefmt-nix": "treefmt-nix_4"
       },
       "locked": {
-        "lastModified": 1718965750,
-        "narHash": "sha256-Z7IkEPAUBLWRF6MWp9VWClTI2T2Nln1qHGFuzqQkUHc=",
+        "lastModified": 1724379880,
+        "narHash": "sha256-PatYnOuctc4rYrY7EqUDXbGkeRbyvhNIC845b0HS+oQ=",
         "owner": "xddxdd",
         "repo": "nur-packages",
-        "rev": "5ae9da327360952e35702e1a6faf7b8e34f584e4",
+        "rev": "655aedb45bb67e16c7ac2a116614f28d36eec8b9",
         "type": "github"
       },
       "original": {
@@ -1099,6 +1183,7 @@
       "original": {
         "owner": "troldal",
         "repo": "OpenXLSX",
+        "rev": "f85f7f1bd632094b5d78d4d1f575955fc3801886",
         "type": "github"
       }
     },
@@ -1112,11 +1197,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1718956312,
-        "narHash": "sha256-iH+ilQbskYuwoOgN1w3sTgkEcVuuFPIJZ1HCGdgeh70=",
+        "lastModified": 1724556439,
+        "narHash": "sha256-gPR3sxkKxISUvydnqoj54znpUkK8av/HVFuFJuYUw3w=",
         "owner": "pjones",
         "repo": "plasma-manager",
-        "rev": "6f182700ad78f13f367fdfff2b0a4062e70eeea8",
+        "rev": "5c97fe8af2a2e561f14195ed357d8c451fdbff4c",
         "type": "github"
       },
       "original": {
@@ -1136,11 +1221,11 @@
         "nixpkgs-stable": "nixpkgs-stable"
       },
       "locked": {
-        "lastModified": 1718879355,
-        "narHash": "sha256-RTyqP4fBX2MdhNuMP+fnR3lIwbdtXhyj7w7fwtvgspc=",
+        "lastModified": 1723803910,
+        "narHash": "sha256-yezvUuFiEnCFbGuwj/bQcqg7RykIEqudOy/RBrId0pc=",
         "owner": "cachix",
         "repo": "pre-commit-hooks.nix",
-        "rev": "8cd35b9496d21a6c55164d8547d9d5280162b07a",
+        "rev": "bfef0ada09e2c8ac55bbcd0831bd0c9d42e651ba",
         "type": "github"
       },
       "original": {
@@ -1156,11 +1241,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1718920881,
-        "narHash": "sha256-2KqvALCqoNPGYXv9J82HAp18XITOzlZBQmh0zH0nhYg=",
+        "lastModified": 1724664864,
+        "narHash": "sha256-VEaGrv5sGNIdN6eQADXH9GylMp7X7qKCfOBmX93lsik=",
         "owner": "Nix-QChem",
         "repo": "NixOS-QChem",
-        "rev": "2483da74db819b9cd42d0ff0fc07ce6806700c07",
+        "rev": "7fcab915d585fd3c4261ec21585d4e9e117bc2c9",
         "type": "github"
       },
       "original": {
@@ -1183,7 +1268,9 @@
         "date": "date",
         "eigen": "eigen",
         "envfs": "envfs",
+        "git-lfs-transfer": "git-lfs-transfer",
         "gricad": "gricad",
+        "hextra": "hextra",
         "home-manager": "home-manager",
         "impermanence": "impermanence",
         "kylin-virtual-keyboard": "kylin-virtual-keyboard",
@@ -1194,6 +1281,7 @@
         "misskey": "misskey",
         "mumax": "mumax",
         "nameof": "nameof",
+        "nc4nix": "nc4nix",
         "nix-fast-build": "nix-fast-build",
         "nix-flatpak": "nix-flatpak",
         "nix-index-database": "nix-index-database",
@@ -1213,6 +1301,7 @@
         "rsshub": "rsshub",
         "rycee": "rycee",
         "slate": "slate",
+        "sockpp": "sockpp",
         "sops-nix": "sops-nix",
         "sqlite-orm": "sqlite-orm",
         "tgbot-cpp": "tgbot-cpp",
@@ -1224,11 +1313,11 @@
     "rsshub": {
       "flake": false,
       "locked": {
-        "lastModified": 1719034435,
-        "narHash": "sha256-c5RLeagj8MK7DG8WwDMLzxce4uxdO8ukJrRMNVVUGj4=",
+        "lastModified": 1724689272,
+        "narHash": "sha256-iTkKoHSO/mD+TPR3hT9PO9TdHnxiqJDREyHb6a2LqaY=",
         "owner": "DIYgod",
         "repo": "RSSHub",
-        "rev": "0b43d515ac39c3977bfe31431d638d469b5608ad",
+        "rev": "6709293f140f38fbbcf3df8fc4e851f88800eafd",
         "type": "github"
       },
       "original": {
@@ -1237,14 +1326,31 @@
         "type": "github"
       }
     },
+    "rust-analyzer-src": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1724345276,
+        "narHash": "sha256-MKvjkqVL/RJ3QXOA8tSUoK7HHXVGSB2AL+vKxU4Cf+c=",
+        "owner": "rust-lang",
+        "repo": "rust-analyzer",
+        "rev": "9b724459b5900c2424f5069023d6596a8617284b",
+        "type": "github"
+      },
+      "original": {
+        "owner": "rust-lang",
+        "ref": "nightly",
+        "repo": "rust-analyzer",
+        "type": "github"
+      }
+    },
     "rycee": {
       "flake": false,
       "locked": {
-        "lastModified": 1719039984,
-        "narHash": "sha256-+tH0AeN+4ql0VA9GZ0glN/4QI4WMJ28JEFkrf3CiR40=",
+        "lastModified": 1724645012,
+        "narHash": "sha256-XJ8B9ecksgZBlWV9pnDgBWVePyHDg/cLYJ/6YF/RdRA=",
         "owner": "rycee",
         "repo": "nur-expressions",
-        "rev": "e3ad55b79aaf8a74e29a9219c3e84238beb90347",
+        "rev": "70645c904b41b9ddf70f7218898c48df93e8254f",
         "type": "gitlab"
       },
       "original": {
@@ -1269,6 +1375,22 @@
         "type": "github"
       }
     },
+    "sockpp": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1707078447,
+        "narHash": "sha256-lV3K6OGs4bFaCKKu1FeMwTMT5Q47Gxl+GzVf4rNnYjE=",
+        "owner": "fpagliughi",
+        "repo": "sockpp",
+        "rev": "04002daccc8f66a77edf019124089a3ce966b2e3",
+        "type": "github"
+      },
+      "original": {
+        "owner": "fpagliughi",
+        "repo": "sockpp",
+        "type": "github"
+      }
+    },
     "sops-nix": {
       "inputs": {
         "nixpkgs": [
@@ -1279,11 +1401,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1718506969,
-        "narHash": "sha256-Pm9I/BMQHbsucdWf6y9G3xBZh3TMlThGo4KBbeoeczg=",
+        "lastModified": 1723501126,
+        "narHash": "sha256-N9IcHgj/p1+2Pvk8P4Zc1bfrMwld5PcosVA0nL6IGdE=",
         "owner": "Mic92",
         "repo": "sops-nix",
-        "rev": "797ce4c1f45a85df6dd3d9abdc53f2691bea9251",
+        "rev": "be0eec2d27563590194a9206f551a6f73d52fa34",
         "type": "github"
       },
       "original": {
@@ -1295,11 +1417,11 @@
     "sqlite-orm": {
       "flake": false,
       "locked": {
-        "lastModified": 1679666045,
-        "narHash": "sha256-KqphGFcnR1Y11KqL7sxODSv7lEvcURdF6kLd3cg84kc=",
+        "lastModified": 1724485979,
+        "narHash": "sha256-jgRCYOtCyXj2E5J3iYBffX2AyBwvhune+i4Pb2eCBrA=",
         "owner": "fnc12",
         "repo": "sqlite_orm",
-        "rev": "ff7c878af872f7987b62d825284fb25d6043af10",
+        "rev": "6630268477b1df9d22a6a563c62aec2c91ee4249",
         "type": "github"
       },
       "original": {
@@ -1434,11 +1556,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1718522839,
-        "narHash": "sha256-ULzoKzEaBOiLRtjeY3YoGFJMwWSKRYOic6VNw2UyTls=",
+        "lastModified": 1724338379,
+        "narHash": "sha256-kKJtaiU5Ou+e/0Qs7SICXF22DLx4V/WhG1P6+k4yeOE=",
         "owner": "numtide",
         "repo": "treefmt-nix",
-        "rev": "68eb1dc333ce82d0ab0c0357363ea17c31ea1f81",
+        "rev": "070f834771efa715f3e74cd8ab93ecc96fabc951",
         "type": "github"
       },
       "original": {
@@ -1455,11 +1577,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1718522839,
-        "narHash": "sha256-ULzoKzEaBOiLRtjeY3YoGFJMwWSKRYOic6VNw2UyTls=",
+        "lastModified": 1723808491,
+        "narHash": "sha256-rhis3qNuGmJmYC/okT7Dkc4M8CeUuRCSvW6kC2f3hBc=",
         "owner": "numtide",
         "repo": "treefmt-nix",
-        "rev": "68eb1dc333ce82d0ab0c0357363ea17c31ea1f81",
+        "rev": "1d07739554fdc4f8481068f1b11d6ab4c1a4167a",
         "type": "github"
       },
       "original": {
@@ -1471,11 +1593,11 @@
     "v-sim": {
       "flake": false,
       "locked": {
-        "lastModified": 1715973671,
-        "narHash": "sha256-+QNK8hXhqHw/WRHBZ2DAuOl2QIAT53YaFUI5qfBHGLg=",
+        "lastModified": 1722003028,
+        "narHash": "sha256-qGnlSrUwwVhCu3kSlklwQg08S7mFZ/RcfsVv3phuuko=",
         "owner": "l_sim",
         "repo": "v_sim",
-        "rev": "0816f29dca18c0f500936c6e7f3c5e687617e682",
+        "rev": "1b77971358002d3e92b18021551029e9db33e509",
         "type": "gitlab"
       },
       "original": {
@@ -1512,11 +1634,11 @@
     "zpp-bits": {
       "flake": false,
       "locked": {
-        "lastModified": 1715201662,
-        "narHash": "sha256-/KkMnRN3DBTzwMYH5WUdhziJiSWJAJqIA1uodm2M0PQ=",
+        "lastModified": 1721553062,
+        "narHash": "sha256-rqL/xEhPzgCA16DP/LIix75VtqKpBS5Rm56fb5cxaGo=",
         "owner": "eyalz800",
         "repo": "zpp_bits",
-        "rev": "2fa24112425ace55ae27a75f717ae0fd054097a0",
+        "rev": "81be2fa9652658e7b4a77f9f6ea3970eb3bbef6f",
         "type": "github"
       },
       "original": {

flake.nix

@@ -61,8 +61,12 @@
     kylin-virtual-keyboard = { url = "git+https://gitee.com/openkylin/kylin-virtual-keyboard.git"; flake = false; };
     cjktty = { url = "github:CHN-beta/cjktty-patches"; flake = false; };
     zxorm = { url = "github:CHN-beta/zxorm"; flake = false; };
-    openxlsx = { url = "github:troldal/OpenXLSX"; flake = false; };
+    openxlsx = { url = "github:troldal/OpenXLSX?rev=f85f7f1bd632094b5d78d4d1f575955fc3801886"; flake = false; };
     sqlite-orm = { url = "github:fnc12/sqlite_orm"; flake = false; };
+    sockpp = { url = "github:fpagliughi/sockpp"; flake = false; };
+    git-lfs-transfer = { url = "github:charmbracelet/git-lfs-transfer"; flake = false; };
+    nc4nix = { url = "github:helsinki-systems/nc4nix"; flake = false; };
+    hextra = { url = "github:imfing/hextra"; flake = false; };
 
     # does not support lfs yet
     # nixos-wallpaper = { url = "git+https://git.chn.moe/chn/nixos-wallpaper.git"; flake = false; };
@@ -70,58 +74,54 @@
 
   outputs = inputs:
     let
-      localLib = import ./local/lib inputs.nixpkgs.lib;
+      localLib = import ./lib.nix inputs.nixpkgs.lib;
       devices = builtins.filter (dir: (builtins.readDir ./devices/${dir})."default.nix" or null == "regular" )
         (builtins.attrNames (builtins.readDir ./devices));
     in
     {
-      packages =
+      packages.x86_64-linux = rec
       {
-        x86_64-linux = rec
+        pkgs = (import inputs.nixpkgs
         {
-          pkgs = (import inputs.nixpkgs
-            { system = "x86_64-linux"; config.allowUnfree = true; overlays = [ inputs.self.overlays.default ]; });
-          default = inputs.nixpkgs.legacyPackages.x86_64-linux.writeText "systems"
-            (builtins.concatStringsSep "\n" (builtins.map
-              (system: builtins.toString inputs.self.outputs.nixosConfigurations.${system}.config.system.build.toplevel)
-              devices));
-          hpcstat =
-            let
-              openssh = (pkgs.pkgsStatic.openssh.override { withLdns = false; etcDir = null; }).overrideAttrs
-                (prev: { doCheck = false; patches = prev.patches ++ [ ./local/pkgs/hpcstat/openssh.patch ];});
-              duc = pkgs.pkgsStatic.duc.override { enableCairo = false; cairo = null; pango = null; };
-            in pkgs.pkgsStatic.localPackages.hpcstat.override
-              { inherit openssh duc; standalone = true; version = inputs.self.rev or "dirty"; };
-          ufo = pkgs.pkgsStatic.localPackages.ufo.override { version = inputs.self.rev or "dirty"; };
-          chn-bsub = pkgs.pkgsStatic.localPackages.chn-bsub;
-        }
-        // (
-          builtins.listToAttrs (builtins.map
-            (system:
+          system = "x86_64-linux";
+          config.allowUnfree = true;
+          overlays = [ inputs.self.overlays.default ];
+        });
+        default = inputs.nixpkgs.legacyPackages.x86_64-linux.writeText "systems"
+          (builtins.concatStringsSep "\n" (builtins.map
+            (system: builtins.toString inputs.self.outputs.nixosConfigurations.${system}.config.system.build.toplevel)
+            devices));
+        hpcstat =
+          let
+            openssh = (pkgs.pkgsStatic.openssh.override { withLdns = false; etcDir = null; }).overrideAttrs
+              (prev: { doCheck = false; patches = prev.patches ++ [ ./packages/hpcstat/openssh.patch ];});
+            duc = pkgs.pkgsStatic.duc.override { enableCairo = false; cairo = null; pango = null; };
+          in pkgs.pkgsStatic.localPackages.hpcstat.override
+            { inherit openssh duc; standalone = true; version = inputs.self.rev or "dirty"; };
+        ufo =
+          let
+            range-v3 = pkgs.pkgsStatic.range-v3.overrideAttrs (prev:
             {
-              name = system;
-              value = inputs.self.outputs.nixosConfigurations.${system}.config.system.build.toplevel;
-            })
-            devices)
-          );
-        x86_64-w64-mingw32 = rec
+              cmakeFlags = prev.cmakeFlags or []
+                ++ [ "-DRANGE_V3_DOCS=OFF" "-DRANGE_V3_TESTS=OFF" "-DRANGE_V3_EXAMPLES=OFF" ];
+              doCheck = false;
+            });
+            tbb = pkgs.pkgsStatic.tbb_2021_11.overrideAttrs (prev: { cmakeFlags = prev.cmakeFlags or [] ++
+              [ "-DTBB_TEST=OFF" ]; });
+            biu = pkgs.pkgsStatic.localPackages.biu.override { inherit range-v3; };
+            matplotplusplus = pkgs.pkgsStatic.localPackages.matplotplusplus.override { libtiff = null; };
+          in pkgs.pkgsStatic.localPackages.ufo.override { inherit biu tbb matplotplusplus; };
+        chn-bsub = pkgs.pkgsStatic.localPackages.chn-bsub;
+        blog = pkgs.callPackage ./blog { inherit (inputs) hextra; };
+      }
+      // (builtins.listToAttrs (builtins.map
+        (system:
         {
-          pkgs = (import inputs.nixpkgs
-          {
-            crossSystem = inputs.nixpkgs.lib.systems.examples.mingwW64 // { isStatic = true; libc = "ucrt"; };
-            system = "x86_64-linux";
-            config.allowUnfree = true;
-            overlays = [ inputs.self.overlays.default ];
-          });
-          boost = pkgs.boost.override { zstd = null; };
-          magic-enum = pkgs.magic-enum.overrideAttrs (prev: { cmakeFlags = prev.cmakeFlags ++
-            [ "-DMAGIC_ENUM_OPT_BUILD_EXAMPLES=OFF" "-DMAGIC_ENUM_OPT_BUILD_TESTS=OFF" ]; });
-          range-v3 = pkgs.range-v3.overrideAttrs (prev: { cmakeFlags = prev.cmakeFlags ++
-            [ "-DRANGE_V3_DOCS=OFF" "-DRANGE_V3_TESTS=OFF" "-DRANGE_V3_EXAMPLES=OFF" ]; });
-          biu = pkgs.localPackages.biu.override { inherit boost magic-enum range-v3; };
-          winjob = pkgs.localPackages.winjob.override { inherit biu; };
-        };
-      };
+          name = system;
+          value = inputs.self.outputs.nixosConfigurations.${system}.config.system.build.toplevel;
+        })
+        devices)
+      );
       nixosConfigurations =
       (
         (builtins.listToAttrs (builtins.map
@@ -136,7 +136,7 @@
               [
                 (moduleInputs: { config.nixpkgs.overlays = [(prev: final:
                   # replace pkgs with final to avoid infinite recursion
-                  { localPackages = import ./local/pkgs (moduleInputs // { pkgs = final; }); })]; })
+                  { localPackages = import ./packages (moduleInputs // { pkgs = final; }); })]; })
                 ./modules
                 ./devices/${system}
               ];
@@ -152,7 +152,7 @@
             [
               (moduleInputs: { config.nixpkgs.overlays = [(prev: final:
                 # replace pkgs with final to avoid infinite recursion
-                { localPackages = import ./local/pkgs (moduleInputs // { pkgs = final; }); })]; })
+                { localPackages = import ./packages (moduleInputs // { pkgs = final; }); })]; })
               ./modules
               ./devices/pi3b
             ];
@@ -160,14 +160,14 @@
         }
       );
       overlays.default = final: prev:
-        { localPackages = (import ./local/pkgs { inherit (inputs) lib; pkgs = final; topInputs = inputs; }); };
+        { localPackages = (import ./packages { inherit (inputs) lib; pkgs = final; topInputs = inputs; }); };
       config = { archive = false; branch = "production"; };
       devShells.x86_64-linux = let inherit (inputs.self.packages.x86_64-linux) pkgs; in
       {
-        biu = pkgs.mkShell
+        biu = pkgs.mkShell.override { stdenv = pkgs.gcc14Stdenv; }
         {
           inputsFrom = [ pkgs.localPackages.biu ];
-          buildInputs = [ pkgs.clang-tools_18 ];
+          packages = [ pkgs.clang-tools_18 ];
           CMAKE_EXPORT_COMPILE_COMMANDS = "1";
         };
         hpcstat = pkgs.mkShell.override { stdenv = pkgs.gcc14Stdenv; }
@@ -179,10 +179,10 @@
         sbatch-tui = pkgs.mkShell
         {
           inputsFrom = [ pkgs.localPackages.sbatch-tui ];
-          buildInputs = [ pkgs.clang-tools_18 ];
+          packages = [ pkgs.clang-tools_18 ];
           CMAKE_EXPORT_COMPILE_COMMANDS = "1";
         };
-        ufo = pkgs.mkShell
+        ufo = pkgs.mkShell.override { stdenv = pkgs.gcc14Stdenv; }
         {
           inputsFrom = [ (inputs.self.packages.x86_64-linux.ufo.override { version = null; }) ];
           packages = [ pkgs.clang-tools_18 ];
@@ -191,9 +191,17 @@
         chn-bsub = pkgs.mkShell
         {
           inputsFrom = [ pkgs.localPackages.chn-bsub ];
-          buildInputs = [ pkgs.clang-tools_18 ];
+          packages = [ pkgs.clang-tools_18 ];
           CMAKE_EXPORT_COMPILE_COMMANDS = "1";
         };
+        winjob =
+          let inherit (pkgs) clang-tools_18; in let inherit (inputs.self.packages.x86_64-w64-mingw32) pkgs winjob;
+          in pkgs.mkShell.override { stdenv = pkgs.gcc14Stdenv; }
+          {
+            inputsFrom = [ winjob ];
+            packages = [ clang-tools_18 ];
+            CMAKE_EXPORT_COMPILE_COMMANDS = "1";
+          };
       };
     };
 }

local/pkgs/biu/biuConfig.cmake

@@ -1,7 +0,0 @@
-include("${CMAKE_CURRENT_LIST_DIR}/biuTargets.cmake")
-find_package(magic_enum REQUIRED)
-find_package(fmt REQUIRED)
-find_package(Boost REQUIRED COMPONENTS headers iostreams)
-find_package(Eigen3 REQUIRED)
-find_package(range-v3 REQUIRED)
-find_path(NAMEOF_INCLUDE_DIR nameof.hpp REQUIRED)

local/pkgs/biu/include/biu.hpp

@@ -1,11 +0,0 @@
-# pragma once
-// # include <biu/atomic/atomic.tpp>
-// # include <biu/called_by.hpp>
-# include <biu/common.tpp>
-# include <biu/concepts.tpp>
-# include <biu/string.tpp>
-# include <biu/format.tpp>
-// # include <biu/logger.tpp>
-// # include <biu/smartref.tpp>
-
-// # include <biu/eigen.hpp>

local/pkgs/biu/include/biu/atomic/atomic.hpp

@@ -1,41 +0,0 @@
-# pragma once
-# include <biu/logger.hpp>
-
-namespace biu::detail_
-{
-	template <DecayedType ValueType> class AtomicBase<ValueType, true>
-		: public Logger::ObjectMonitor<Atomic<ValueType, true>>, protected AtomicBase<ValueType, false>
-	{
-		using DeepBase_ = AtomicBase<ValueType, false>;
-		using DeepBase_::AtomicBase;
-		public: class TimeoutException : public Logger::Exception<TimeoutException>
-		{
-			using Logger::Exception<TimeoutException>::Exception;
-		};
-
-		protected: template
-		<
-			bool ReturnFunctionResult,
-			typename ConditionFunction = std::nullptr_t, typename Duration = std::nullptr_t, bool Nothrow = false
-		> static auto apply_
-		(
-			auto&& atomic, auto&& function,
-			ConditionFunction&& condition_function = nullptr, Duration timeout = nullptr
-		) -> DeepBase_::template ApplyReturnType_
-				<decltype(function), decltype(atomic), ReturnFunctionResult, ConditionFunction, Duration, Nothrow>
-			requires DeepBase_::template ApplyConstraint_
-				<decltype(function), decltype(atomic), ConditionFunction, Duration>;
-
-		protected: template <bool Nothrow = false, typename Duration = std::nullptr_t> static auto wait_
-			(auto&& atomic, auto&& condition_function, Duration timeout = nullptr)
-			-> DeepBase_::template WaitReturnType_<decltype(atomic), decltype(condition_function), Duration, Nothrow>
-			requires DeepBase_::template WaitConstraint_<decltype(condition_function), Duration>;
-
-		protected: template
-			<bool Nothrow = false, typename ConditionFunction = std::nullptr_t, typename Duration = std::nullptr_t>
-			static auto lock_
-			(auto&& atomic, ConditionFunction&& condition_function = nullptr, Duration timeout = nullptr)
-			-> DeepBase_::template LockReturnType_<decltype(atomic), Duration, Nothrow>
-			requires DeepBase_::template LockConstraint_<ConditionFunction, Duration>;
-	};
-}

local/pkgs/biu/include/biu/atomic/nolog.hpp

@@ -1,267 +0,0 @@
-# pragma once
-#	include <mutex>
-#	include <optional>
-#	include <condition_variable>
-#	include <cstddef>
-#	include <experimental/memory>
-#	include <biu/common.hpp>
-#	include <biu/concepts.hpp>
-#	include <biu/called_by.hpp>
-
-namespace biu
-{
-	template <DecayedType ValueType, bool UseLogger = true> class Atomic;
-	namespace detail_
-	{
-		template <DecayedType ValueType, bool UseLogger> class AtomicBase;
-		template <DecayedType ValueType> class AtomicBase<ValueType, false>
-		{
-			protected: mutable std::recursive_mutex Mutex_;
-			protected: mutable std::condition_variable_any ConditionVariable_;
-			protected: ValueType Value_;
-
-			AtomicBase() = default;
-			AtomicBase(const ValueType& value);
-			AtomicBase(ValueType&& value);
-
-			public: class TimeoutException : public std::exception
-			{
-				protected: std::string Message_;
-				public: explicit TimeoutException(std::string message);
-				public: const char* what() const noexcept override;
-			};
-
-			// Apply a function to stored value.
-			// Wait for some time (if provided) until condition funciton returns true (if provided)
-			// before applying the function.
-			protected: template
-				<
-					typename Function, typename Atomic,
-					typename ConditionFunction = std::nullptr_t, typename Duration = std::nullptr_t
-				>
-				constexpr static bool ApplyConstraint_ =
-				(
-					(std::invocable<Function, MoveQualifiers<Atomic, ValueType>> && std::is_null_pointer_v<ConditionFunction>)
-          || (
-						InvocableWithResult<ConditionFunction, bool, const ValueType&>
-							&& (std::is_null_pointer_v<Duration> || SpecializationOf<Duration, std::chrono::duration>)
-					)
-				);
-			protected: template
-				<
-					typename Function, typename Atomic, bool ReturnFunctionResult,
-					typename ConditionFunction = std::nullptr_t, typename Duration = std::nullptr_t,
-					bool Nothrow = false
-				> using ApplyReturnType_ = std::conditional_t
-					<
-						Nothrow,
-						std::conditional_t
-						<
-							ReturnFunctionResult && !std::is_void_v<std::invoke_result<Function, ValueType>>,
-							std::optional<std::remove_cvref_t<FallbackIfNoTypeDeclared<std::invoke_result
-								<Function, MoveQualifiers<Atomic, ValueType>, int>>>>,
-							bool
-						>,
-						std::conditional_t
-						<
-							ReturnFunctionResult,
-							std::invoke_result_t<Function, MoveQualifiers<Atomic, ValueType>>,
-							Atomic&&
-						>
-					>;
-			protected: template
-				<
-					bool ReturnFunctionResult,
-					typename ConditionFunction = std::nullptr_t, typename Duration = std::nullptr_t,
-					bool Nothrow = false
-				> static auto apply_
-				(
-					auto&& atomic, auto&& function,
-					ConditionFunction&& condition_function = nullptr, Duration timeout = nullptr
-				) -> ApplyReturnType_
-					<decltype(function), decltype(atomic), ReturnFunctionResult, ConditionFunction, Duration, Nothrow>
-					requires ApplyConstraint_<decltype(function), decltype(atomic), ConditionFunction, Duration>;
-
-			// Wait until condition funciton returns true, with an optional timeout
-			protected: template <typename ConditionFunction, typename Duration = std::nullptr_t>
-				constexpr static bool WaitConstraint_
-				= (InvocableWithResult<ConditionFunction, bool, const ValueType&>
-					&& (std::is_null_pointer_v<Duration> || SpecializationOf<Duration, std::chrono::duration>));
-			protected: template
-				<typename Atomic, typename ConditionFunction, typename Duration = std::nullptr_t, bool Nothrow = false>
-				using WaitReturnType_
-				= std::conditional_t<Nothrow && !std::is_null_pointer_v<Duration>, bool, Atomic&&>;
-			protected: template <bool Nothrow = false, typename Duration = std::nullptr_t> static auto wait_
-				(auto&& atomic, auto&& condition_function, Duration timeout = nullptr)
-				-> WaitReturnType_<decltype(atomic), decltype(condition_function), Duration, Nothrow>
-				requires WaitConstraint_<decltype(condition_function), Duration>;
-
-			protected: template <typename ConditionFunction = std::nullptr_t, typename Duration = std::nullptr_t>
-				constexpr static bool LockConstraint_
-				= std::is_null_pointer_v<ConditionFunction> ||
-					(
-						InvocableWithResult<ConditionFunction, bool, const ValueType&>
-							&& (std::is_null_pointer_v<Duration> || SpecializationOf<Duration, std::chrono::duration>)
-					);
-			protected: template <typename Atomic, typename Duration = std::nullptr_t, bool Nothrow = false>
-				using LockReturnType_
-				= std::conditional_t
-					<
-						Nothrow && !std::is_null_pointer_v<Duration>,
-						std::optional<std::conditional_t
-						<
-							std::is_const_v<Atomic>,
-							typename std::remove_reference_t<Atomic>::template Guard<true>,
-							typename std::remove_reference_t<Atomic>::template Guard<false>
-						>>,
-						std::conditional_t
-						<
-							std::is_const_v<Atomic>,
-							typename std::remove_reference_t<Atomic>::template Guard<true>,
-							typename std::remove_reference_t<Atomic>::template Guard<false>
-						>
-					>;
-			protected: template
-				<bool Nothrow = false, typename ConditionFunction = std::nullptr_t, typename Duration = std::nullptr_t>
-				static auto lock_
-				(auto&& atomic, ConditionFunction&& condition_function = nullptr, Duration timeout = nullptr)
-				-> LockReturnType_<decltype(atomic), Duration, Nothrow>
-				requires LockConstraint_<ConditionFunction, Duration>;
-		};
-	}
-
-	// Thread safe wrapper of custom class
-	template <DecayedType ValueType, bool UseLogger> class Atomic : public detail_::AtomicBase<ValueType, UseLogger>
-	{
-		public: Atomic() = default;
-		public: Atomic(const ValueType& value);
-		public: Atomic(ValueType&& value);
-		public: template <bool OtherUseLogger> Atomic(const Atomic<ValueType, OtherUseLogger>& other);
-		public: template <bool OtherUseLogger> Atomic(Atomic<ValueType, OtherUseLogger>&& other);
-		public: Atomic<ValueType, UseLogger>& operator=(const ValueType& value);
-		public: Atomic<ValueType, UseLogger>& operator=(ValueType&& value);
-		public: template <bool OtherUseLogger>
-			Atomic<ValueType, UseLogger>& operator=(const Atomic<ValueType, OtherUseLogger>& other);
-		public: template <bool OtherUseLogger>
-			Atomic<ValueType, UseLogger>& operator=(Atomic<ValueType, OtherUseLogger>&& other);
-		public: ValueType get() const&;
-		public: ValueType get() &&;
-		public: operator ValueType() const&;
-		public: operator ValueType() &&;
-
-		protected: using DeepBase_ = detail_::AtomicBase<ValueType, false>;
-
-		public: template <bool ReturnFunctionResult = false> auto apply(auto&& function) const&
-			-> DeepBase_::template ApplyReturnType_<decltype(function), decltype(*this), ReturnFunctionResult>
-			requires DeepBase_::template ApplyConstraint_<decltype(function), decltype(*this)>;
-		public: template <bool ReturnFunctionResult = false> auto apply(auto&& function) &
-			-> DeepBase_::template ApplyReturnType_<decltype(function), decltype(*this), ReturnFunctionResult>
-			requires DeepBase_::template ApplyConstraint_<decltype(function), decltype(*this)>;
-		public: template <bool ReturnFunctionResult = false> auto apply(auto&& function) &&
-			-> DeepBase_::template ApplyReturnType_<decltype(function), decltype(*this), ReturnFunctionResult>
-			requires DeepBase_::template ApplyConstraint_<decltype(function), decltype(*this)>;
-		public: template <bool ReturnFunctionResult = false>
-			auto apply(auto&& function, auto&& condition_function) const&
-			-> DeepBase_::template ApplyReturnType_
-				<decltype(function), decltype(*this), ReturnFunctionResult, decltype(condition_function)>
-			requires DeepBase_::template ApplyConstraint_
-				<decltype(function), decltype(*this), decltype(condition_function)>;
-		public: template <bool ReturnFunctionResult = false> auto apply(auto&& function, auto&& condition_function) &
-			-> DeepBase_::template ApplyReturnType_
-				<decltype(function), decltype(*this), ReturnFunctionResult, decltype(condition_function)>
-			requires DeepBase_::template ApplyConstraint_
-				<decltype(function), decltype(*this), decltype(condition_function)>;
-		public: template <bool ReturnFunctionResult = false> auto apply(auto&& function, auto&& condition_function) &&
-			-> DeepBase_::template ApplyReturnType_
-				<decltype(function), decltype(*this), ReturnFunctionResult, decltype(condition_function)>
-			requires DeepBase_::template ApplyConstraint_
-				<decltype(function), decltype(*this), decltype(condition_function)>;
-		public: template <bool ReturnFunctionResult = false, bool Nothrow = false>
-			auto apply(auto&& function, auto&& condition_function, auto timeout) const&
-			-> DeepBase_::template ApplyReturnType_
-			<
-				decltype(function), decltype(*this), ReturnFunctionResult,
-				decltype(condition_function), decltype(timeout), Nothrow
-			> requires DeepBase_::template ApplyConstraint_
-				<decltype(function), decltype(*this), decltype(condition_function), decltype(timeout)>;
-		public: template <bool ReturnFunctionResult = false, bool Nothrow = false>
-			auto apply(auto&& function, auto&& condition_function, auto timeout) &
-			-> DeepBase_::template ApplyReturnType_
-			<
-				decltype(function), decltype(*this), ReturnFunctionResult,
-				decltype(condition_function), decltype(timeout), Nothrow
-			> requires DeepBase_::template ApplyConstraint_
-				<decltype(function), decltype(*this), decltype(condition_function), decltype(timeout)>;
-		public: template <bool ReturnFunctionResult = false, bool Nothrow = false>
-			auto apply(auto&& function, auto&& condition_function, auto timeout) &&
-			-> DeepBase_::template ApplyReturnType_
-			<
-				decltype(function), decltype(*this), ReturnFunctionResult,
-				decltype(condition_function), decltype(timeout), Nothrow
-			> requires DeepBase_::template ApplyConstraint_
-				<decltype(function), decltype(*this), decltype(condition_function), decltype(timeout)>;
-
-		public: auto wait(auto&& condition_function) const&
-			-> DeepBase_::template WaitReturnType_<decltype(*this), decltype(condition_function)>
-			requires DeepBase_::template WaitConstraint_<decltype(condition_function)>;
-		public: auto wait(auto&& condition_function) &
-			-> DeepBase_::template WaitReturnType_<decltype(*this), decltype(condition_function)>
-			requires DeepBase_::template WaitConstraint_<decltype(condition_function)>;
-		public: auto wait(auto&& condition_function) &&
-			-> DeepBase_::template WaitReturnType_<decltype(*this), decltype(condition_function)>
-			requires DeepBase_::template WaitConstraint_<decltype(condition_function)>;
-		public: template <bool Nothrow = false> auto wait(auto&& condition_function, auto timeout) const&
-			-> DeepBase_::template WaitReturnType_
-				<decltype(*this), decltype(condition_function), decltype(timeout), Nothrow>
-			requires DeepBase_::template WaitConstraint_<decltype(condition_function), decltype(timeout)>;
-		public: template <bool Nothrow = false> auto wait(auto&& condition_function, auto timeout) &
-			-> DeepBase_::template WaitReturnType_
-				<decltype(*this), decltype(condition_function), decltype(timeout), Nothrow>
-			requires DeepBase_::template WaitConstraint_<decltype(condition_function), decltype(timeout)>;
-		public: template <bool Nothrow = false> auto wait(auto&& condition_function, auto timeout) &&
-			-> DeepBase_::template WaitReturnType_
-				<decltype(*this), decltype(condition_function), decltype(timeout), Nothrow>
-			requires DeepBase_::template WaitConstraint_<decltype(condition_function), decltype(timeout)>;
-
-		// Attain lock from outside when constructing, and release when destructing.
-		// For non-const variant, When destructing, ConditionVariable_.notify_all() is called.
-		public: template <bool Const> class Guard
-		{
-			protected: std::unique_lock<std::recursive_mutex> Lock_;
-			protected: std::experimental::observer_ptr
-				<std::conditional_t<Const, const Atomic<ValueType, UseLogger>, Atomic<ValueType, UseLogger>>> Value_;
-
-			public: template <bool OtherConst> Guard(const Guard<OtherConst>& other) requires (Const || !OtherConst);
-			public: Guard
-				(decltype(Lock_)&& lock, decltype(Value_) value, CalledBy<detail_::AtomicBase<ValueType, UseLogger>>);
-			public: ~Guard();
-
-			public: std::conditional_t<Const, const ValueType&, ValueType&> operator*() const&;
-			public: std::conditional_t<Const, const ValueType*, ValueType*> operator->() const&;
-			public: std::conditional_t<Const, const ValueType&, ValueType&> value() const&;
-			public: auto operator*() const&& = delete;
-			public: auto operator->() const&& = delete;
-			public: auto value() const&& = delete;
-		};
-
-		public: auto lock() const& -> DeepBase_::template LockReturnType_<decltype(*this)>
-			requires DeepBase_::template LockConstraint_<>;
-		public: auto lock() & -> DeepBase_::template LockReturnType_<decltype(*this)>
-			requires DeepBase_::template LockConstraint_<>;
-		public: auto lock() const&& = delete;
-		public: auto lock(auto&& condition_function) const&
-			-> DeepBase_::template LockReturnType_<decltype(*this), decltype(condition_function)>
-			requires DeepBase_::template LockConstraint_<decltype(condition_function)>;
-		public: auto lock(auto&& condition_function) &
-			-> DeepBase_::template LockReturnType_<decltype(*this), decltype(condition_function)>
-			requires DeepBase_::template LockConstraint_<decltype(condition_function)>;
-		public: auto lock(auto&& condition_function) const&& = delete;
-		public: template <bool Nothrow = false> auto lock(auto&& condition_function, auto timeout) const&
-			-> DeepBase_::template LockReturnType_<decltype(*this), decltype(timeout), Nothrow>
-			requires DeepBase_::template LockConstraint_<decltype(condition_function), decltype(timeout)>;
-		public: template <bool Nothrow = false> auto lock(auto&& condition_function, auto timeout) &
-			-> DeepBase_::template LockReturnType_<decltype(*this), decltype(timeout), Nothrow>
-			requires DeepBase_::template LockConstraint_<decltype(condition_function), decltype(timeout)>;
-		public: template <bool Nothrow = false> auto lock(auto&& condition_function, auto timeout) const&& = delete;
-	};
-}

local/pkgs/biu/include/biu/atomic/nolog.tpp

@@ -1,366 +0,0 @@
-# pragma once
-# include <biu/atomic/nolog.hpp>
-
-namespace biu
-{
-	template <DecayedType ValueType> detail_::AtomicBase<ValueType, false>::AtomicBase(const ValueType& value)
-		: Value_{value} {}
-	template <DecayedType ValueType> detail_::AtomicBase<ValueType, false>::AtomicBase(ValueType&& value)
-		: Value_{std::move(value)} {}
-
-	template <DecayedType ValueType>
-		detail_::AtomicBase<ValueType, false>::TimeoutException::TimeoutException(std::string)
-		: Message_{"TimeoutException"} {}
-	template <DecayedType ValueType>
-		const char* detail_::AtomicBase<ValueType, false>::TimeoutException::what() const noexcept
-		{return Message_.c_str();}
-
-	template <DecayedType ValueType>
-		template <bool ReturnFunctionResult, typename ConditionFunction, typename Duration, bool Nothrow>
-		auto detail_::AtomicBase<ValueType, false>::apply_
-			(auto&& atomic, auto&& function, ConditionFunction&& condition_function, Duration timeout)
-		-> ApplyReturnType_
-			<decltype(function), decltype(atomic), ReturnFunctionResult, ConditionFunction, Duration, Nothrow>
-		requires ApplyConstraint_<decltype(function), decltype(atomic), ConditionFunction, Duration>
-	{
-		std::unique_lock lock{atomic.Mutex_};
-
-		// try to meet the condition
-		if constexpr (!std::is_null_pointer_v<ConditionFunction>)
-		{
-			if constexpr (std::is_null_pointer_v<Duration>)
-				atomic.ConditionVariable_.wait(lock, [&]
-					{return std::forward<ConditionFunction>(condition_function)(std::as_const(atomic.Value_));});
-			else if (!atomic.ConditionVariable_.wait_for(lock, timeout, [&]
-				{return std::forward<ConditionFunction>(condition_function)(std::as_const(atomic.Value_));}))
-			{
-				if constexpr (Nothrow)
-				{
-					if constexpr
-						(ReturnFunctionResult && !std::is_void_v<std::invoke_result_t<decltype(function), ValueType>>)
-						return std::nullopt;
-					else return false;
-				}
-				else throw TimeoutException{};
-			}
-		}
-
-		// apply the function and return
-		if constexpr (ReturnFunctionResult && !std::is_void_v<std::invoke_result_t<decltype(function), ValueType>>)
-		{
-			auto&& result = std::forward<decltype(function)>(function)
-				(static_cast<MoveQualifiers<decltype(atomic), ValueType>&&>(atomic.Value_));
-			if constexpr (!std::is_const_v<decltype(atomic)>) atomic.ConditionVariable_.notify_all();
-			return std::forward<decltype(result)>(result);
-		}
-		else
-		{
-			std::forward<decltype(function)>(function)
-				(static_cast<MoveQualifiers<decltype(atomic), ValueType>&&>(atomic.Value_));
-			if constexpr (!std::is_const_v<decltype(atomic)>) atomic.ConditionVariable_.notify_all();
-			if constexpr (ReturnFunctionResult && std::is_void_v<std::invoke_result_t<decltype(function), ValueType>>)
-				return;
-			else return std::forward<decltype(atomic)>(atomic);
-		}
-	}
-
-	template <DecayedType ValueType> template <bool Nothrow, typename Duration>
-		auto detail_::AtomicBase<ValueType, false>::wait_(auto&& atomic, auto&& condition_function, Duration timeout)
-		-> WaitReturnType_<decltype(atomic), decltype(condition_function), Duration, Nothrow>
-		requires WaitConstraint_<decltype(condition_function), Duration>
-	{
-		std::unique_lock lock{atomic.Mutex_};
-
-		if constexpr (std::is_null_pointer_v<Duration>)
-		{
-			atomic.ConditionVariable_.wait(lock, [&]
-				{return std::forward<decltype(condition_function)>(condition_function)(std::as_const(atomic.Value_));});
-			return std::forward<decltype(atomic)>(atomic);
-		}
-		else
-		{
-			if (!atomic.ConditionVariable_.wait_for(lock, timeout, [&]
-				{return std::forward<decltype(condition_function)>(condition_function)(std::as_const(atomic.Value_));}))
-			{
-				if constexpr (Nothrow) return false;
-				else throw TimeoutException{};
-			}
-			else
-			{
-				if constexpr (Nothrow) return true;
-				else return std::forward<decltype(atomic)>(atomic);
-			}
-		}
-	}
-
-	template <DecayedType ValueType> template <bool Nothrow, typename ConditionFunction, typename Duration>
-		auto detail_::AtomicBase<ValueType, false>::lock_
-		(auto&& atomic, ConditionFunction&& condition_function, Duration timeout)
-		-> LockReturnType_<decltype(atomic), Duration, Nothrow> requires LockConstraint_<ConditionFunction, Duration>
-	{
-		if constexpr (std::is_null_pointer_v<ConditionFunction>)
-			return {std::unique_lock{atomic.Mutex_}, std::experimental::make_observer(&atomic), {}};
-		else if constexpr (std::is_null_pointer_v<Duration>)
-		{
-			std::unique_lock lock{atomic.Mutex_};
-			atomic.ConditionVariable_.wait(lock, [&]
-				{return std::forward<ConditionFunction>(condition_function)(std::as_const(atomic.Value_));});
-			return {std::move(lock), std::experimental::make_observer(&atomic), {}};
-		}
-		else
-		{
-			std::unique_lock lock{atomic.Mutex_};
-			if (!atomic.ConditionVariable_.wait_for(lock, timeout, [&]
-				{return std::forward<ConditionFunction>(condition_function)(std::as_const(atomic.Value_));}))
-			{
-				if constexpr (Nothrow) return std::nullopt;
-				else throw TimeoutException{};
-			}
-			else
-				return {{std::move(lock), std::experimental::make_observer(&atomic), {}}};
-		}
-	}
-
-	template <DecayedType ValueType, bool UseLogger> Atomic<ValueType, UseLogger>::Atomic(const ValueType& value)
-		: detail_::AtomicBase<ValueType, UseLogger>{value} {}
-	template <DecayedType ValueType, bool UseLogger> Atomic<ValueType, UseLogger>::Atomic(ValueType&& value)
-		: detail_::AtomicBase<ValueType, UseLogger>{std::move(value)} {}
-	template <DecayedType ValueType, bool UseLogger> template <bool OtherUseLogger>
-		Atomic<ValueType, UseLogger>::Atomic(const Atomic<ValueType, OtherUseLogger>& other)
-		: detail_::AtomicBase<ValueType, UseLogger>{other} {}
-	template <DecayedType ValueType, bool UseLogger> template <bool OtherUseLogger>
-		Atomic<ValueType, UseLogger>::Atomic(Atomic<ValueType, OtherUseLogger>&& other)
-		: detail_::AtomicBase<ValueType, UseLogger>{std::move(other)} {}
-	template <DecayedType ValueType, bool UseLogger>
-		Atomic<ValueType, UseLogger>& Atomic<ValueType, UseLogger>::operator=(const ValueType& value)
-	{
-		std::scoped_lock lock{DeepBase_::Mutex_};
-		DeepBase_::Value_ = value;
-		DeepBase_::ConditionVariable_.notify_all();
-		return *this;
-	}
-	template <DecayedType ValueType, bool UseLogger>
-		Atomic<ValueType, UseLogger>& Atomic<ValueType, UseLogger>::operator=(ValueType&& value)
-	{
-		std::scoped_lock lock{DeepBase_::Mutex_};
-		DeepBase_::Value_ = std::move(value);
-		DeepBase_::ConditionVariable_.notify_all();
-		return *this;
-	}
-	template <DecayedType ValueType, bool UseLogger> template <bool OtherUseLogger>
-		Atomic<ValueType, UseLogger>& operator=(const Atomic<ValueType, OtherUseLogger>& other)
-	{
-		std::scoped_lock lock{DeepBase_::Mutex_};
-		DeepBase_::Value_ = value;
-		DeepBase_::ConditionVariable_.notify_all();
-		return *this;
-	}
-	template <DecayedType ValueType, bool UseLogger> template <bool OtherUseLogger>
-		Atomic<ValueType, UseLogger>& operator=(Atomic<ValueType, OtherUseLogger>&& other)
-	{
-		std::scoped_lock lock{DeepBase_::Mutex_};
-		DeepBase_::Value_ = std::move(value);
-		DeepBase_::ConditionVariable_.notify_all();
-		return *this;
-	}
-	template <DecayedType ValueType, bool UseLogger> ValueType Atomic<ValueType, UseLogger>::get() const&
-	{
-		std::scoped_lock lock{DeepBase_::Mutex_};
-		return DeepBase_::Value_;
-	}
-	template <DecayedType ValueType, bool UseLogger> ValueType Atomic<ValueType, UseLogger>::get() &&
-	{
-		std::scoped_lock lock{DeepBase_::Mutex_};
-		return std::move(DeepBase_::Value_);
-	}
-	template <DecayedType ValueType, bool UseLogger> Atomic<ValueType, UseLogger>::operator ValueType() const&
-		{return get();}
-	template <DecayedType ValueType, bool UseLogger> Atomic<ValueType, UseLogger>::operator ValueType() &&
-		{return std::move(*this).get();}
-
-	template <DecayedType ValueType, bool UseLogger> template <bool ReturnFunctionResult>
-		auto Atomic<ValueType, UseLogger>::apply(auto&& function) const&
-		-> DeepBase_::template ApplyReturnType_<decltype(function), decltype(*this), ReturnFunctionResult>
-		requires DeepBase_::template ApplyConstraint_<decltype(function), decltype(*this)>
-		{return apply_<ReturnFunctionResult>(*this, std::forward<decltype(function)>(function));}
-	template <DecayedType ValueType, bool UseLogger> template <bool ReturnFunctionResult>
-		auto Atomic<ValueType, UseLogger>::apply(auto&& function) &
-		-> DeepBase_::template ApplyReturnType_<decltype(function), decltype(*this), ReturnFunctionResult>
-		requires DeepBase_::template ApplyConstraint_<decltype(function), decltype(*this)>
-		{return apply_<ReturnFunctionResult>(*this, std::forward<decltype(function)>(function));}
-	template <DecayedType ValueType, bool UseLogger> template <bool ReturnFunctionResult>
-		auto Atomic<ValueType, UseLogger>::apply(auto&& function) &&
-		-> DeepBase_::template ApplyReturnType_<decltype(function), decltype(*this), ReturnFunctionResult>
-		requires DeepBase_::template ApplyConstraint_<decltype(function), decltype(*this)>
-		{return apply_<ReturnFunctionResult>(std::move(*this), std::forward<decltype(function)>(function));}
-	template <DecayedType ValueType, bool UseLogger> template <bool ReturnFunctionResult>
-		auto Atomic<ValueType, UseLogger>::apply(auto&& function, auto&& condition_function) const&
-		-> DeepBase_::template ApplyReturnType_
-			<decltype(function), decltype(*this), ReturnFunctionResult, decltype(condition_function)>
-		requires DeepBase_::template ApplyConstraint_<decltype(function), decltype(*this), decltype(condition_function)>
-	{
-		return apply_<ReturnFunctionResult>
-		(
-			*this, std::forward<decltype(function)>(function),
-			std::forward<decltype(condition_function)>(condition_function)
-		);
-	}
-	template <DecayedType ValueType, bool UseLogger> template <bool ReturnFunctionResult>
-		auto Atomic<ValueType, UseLogger>::apply(auto&& function, auto&& condition_function) &
-		-> DeepBase_::template ApplyReturnType_
-			<decltype(function), decltype(*this), ReturnFunctionResult, decltype(condition_function)>
-		requires DeepBase_::template ApplyConstraint_<decltype(function), decltype(*this), decltype(condition_function)>
-	{
-		return apply_<ReturnFunctionResult>
-		(
-			*this, std::forward<decltype(function)>(function),
-			std::forward<decltype(condition_function)>(condition_function)
-		);
-	}
-	template <DecayedType ValueType, bool UseLogger> template <bool ReturnFunctionResult>
-		auto Atomic<ValueType, UseLogger>::apply(auto&& function, auto&& condition_function) &&
-		-> DeepBase_::template ApplyReturnType_
-			<decltype(function), decltype(*this), ReturnFunctionResult, decltype(condition_function)>
-		requires DeepBase_::template ApplyConstraint_<decltype(function), decltype(*this), decltype(condition_function)>
-	{
-		return apply_<ReturnFunctionResult>
-		(
-			std::move(*this), std::forward<decltype(function)>(function),
-			std::forward<decltype(condition_function)>(condition_function)
-		);
-	}
-	template <DecayedType ValueType, bool UseLogger> template <bool ReturnFunctionResult, bool Nothrow>
-		auto Atomic<ValueType, UseLogger>::apply(auto&& function, auto&& condition_function, auto timeout) const&
-		-> DeepBase_::template ApplyReturnType_
-		<
-			decltype(function), decltype(*this), ReturnFunctionResult,
-			decltype(condition_function), decltype(timeout), Nothrow
-		> requires DeepBase_::template ApplyConstraint_
-			<decltype(function), decltype(*this), decltype(condition_function), decltype(timeout)>
-	{
-		return apply_<ReturnFunctionResult, Nothrow>
-		(
-			*this, std::forward<decltype(function)>(function),
-			std::forward<decltype(condition_function)>(condition_function), timeout
-		);
-	}
-	template <DecayedType ValueType, bool UseLogger> template <bool ReturnFunctionResult, bool Nothrow>
-		auto Atomic<ValueType, UseLogger>::apply(auto&& function, auto&& condition_function, auto timeout) &
-		-> DeepBase_::template ApplyReturnType_
-		<
-			decltype(function), decltype(*this), ReturnFunctionResult,
-			decltype(condition_function), decltype(timeout), Nothrow
-		> requires DeepBase_::template ApplyConstraint_
-			<decltype(function), decltype(*this), decltype(condition_function), decltype(timeout)>
-	{
-		return apply_<ReturnFunctionResult, Nothrow>
-		(
-			*this, std::forward<decltype(function)>(function),
-			std::forward<decltype(condition_function)>(condition_function), timeout
-		);
-	}
-	template <DecayedType ValueType, bool UseLogger> template <bool ReturnFunctionResult, bool Nothrow>
-		auto Atomic<ValueType, UseLogger>::apply(auto&& function, auto&& condition_function, auto timeout) &&
-		-> DeepBase_::template ApplyReturnType_
-		<
-			decltype(function), decltype(*this), ReturnFunctionResult,
-			decltype(condition_function), decltype(timeout), Nothrow
-		> requires DeepBase_::template ApplyConstraint_
-			<decltype(function), decltype(*this), decltype(condition_function), decltype(timeout)>
-	{
-		return apply_<ReturnFunctionResult, Nothrow>
-		(
-			std::move(*this), std::forward<decltype(function)>(function),
-			std::forward<decltype(condition_function)>(condition_function), timeout
-		);
-	}
-
-	template <DecayedType ValueType, bool UseLogger>
-		auto Atomic<ValueType, UseLogger>::wait(auto&& condition_function) const&
-		-> DeepBase_::template WaitReturnType_<decltype(*this), decltype(condition_function)>
-		requires DeepBase_::template WaitConstraint_<decltype(condition_function)>
-		{return wait_(*this, std::forward<decltype(condition_function)>(condition_function));}
-	template <DecayedType ValueType, bool UseLogger>
-		auto Atomic<ValueType, UseLogger>::wait(auto&& condition_function) &
-		-> DeepBase_::template WaitReturnType_<decltype(*this), decltype(condition_function)>
-		requires DeepBase_::template WaitConstraint_<decltype(condition_function)>
-		{return wait_(*this, std::forward<decltype(condition_function)>(condition_function));}
-	template <DecayedType ValueType, bool UseLogger>
-		auto Atomic<ValueType, UseLogger>::wait(auto&& condition_function) &&
-		-> DeepBase_::template WaitReturnType_<decltype(*this), decltype(condition_function)>
-		requires DeepBase_::template WaitConstraint_<decltype(condition_function)>
-		{return wait_(std::move(*this), std::forward<decltype(condition_function)>(condition_function));}
-	template <DecayedType ValueType, bool UseLogger> template <bool Nothrow>
-		auto Atomic<ValueType, UseLogger>::wait(auto&& condition_function, auto timeout) const&
-		-> DeepBase_::template WaitReturnType_
-			<decltype(*this), decltype(condition_function), decltype(timeout), Nothrow>
-		requires DeepBase_::template WaitConstraint_<decltype(condition_function), decltype(timeout)>
-		{return wait_<Nothrow>(*this, std::forward<decltype(condition_function)>(condition_function), timeout);}
-	template <DecayedType ValueType, bool UseLogger> template <bool Nothrow>
-		auto Atomic<ValueType, UseLogger>::wait(auto&& condition_function, auto timeout) &
-		-> DeepBase_::template WaitReturnType_
-			<decltype(*this), decltype(condition_function), decltype(timeout), Nothrow>
-		requires DeepBase_::template WaitConstraint_<decltype(condition_function), decltype(timeout)>
-		{return wait_<Nothrow>(*this, std::forward<decltype(condition_function)>(condition_function), timeout);}
-	template <DecayedType ValueType, bool UseLogger> template <bool Nothrow>
-		auto Atomic<ValueType, UseLogger>::wait(auto&& condition_function, auto timeout) &&
-		-> DeepBase_::template WaitReturnType_
-			<decltype(*this), decltype(condition_function), decltype(timeout), Nothrow>
-		requires DeepBase_::template WaitConstraint_<decltype(condition_function), decltype(timeout)>
-	{
-		return wait_<Nothrow>
-			(std::move(*this), std::forward<decltype(condition_function)>(condition_function), timeout);
-	}
-
-	template <DecayedType ValueType, bool UseLogger> template <bool Const> template <bool OtherConst>
-		Atomic<ValueType, UseLogger>::Guard<Const>::Guard(const Guard<OtherConst>& other)
-		requires (Const || !OtherConst)
-		: Lock_{other.Lock_}, Value_{other.Value_} {}
-	template <DecayedType ValueType, bool UseLogger> template <bool Const>
-		Atomic<ValueType, UseLogger>::Guard<Const>::Guard
-		(decltype(Lock_)&& lock, decltype(Value_) value, CalledBy<detail_::AtomicBase<ValueType, UseLogger>>)
-		: Lock_{std::move(lock)}, Value_{value} {}
-	template <DecayedType ValueType, bool UseLogger> template <bool Const>
-		Atomic<ValueType, UseLogger>::Guard<Const>::~Guard()
-		{Value_->ConditionVariable_.notify_all();}
-
-	template <DecayedType ValueType, bool UseLogger> template <bool Const>
-		std::conditional_t<Const, const ValueType&, ValueType&>
-		Atomic<ValueType, UseLogger>::Guard<Const>::operator*() const&
-		{return Value_->Value_;}
-	template <DecayedType ValueType, bool UseLogger> template <bool Const>
-		std::conditional_t<Const, const ValueType*, ValueType*>
-		Atomic<ValueType, UseLogger>::Guard<Const>::operator->() const&
-		{return &Value_->Value_;}
-	template <DecayedType ValueType, bool UseLogger> template <bool Const>
-		std::conditional_t<Const, const ValueType&, ValueType&>
-		Atomic<ValueType, UseLogger>::Guard<Const>::value() const&
-		{return Value_->Value_;}
-
-	template <DecayedType ValueType, bool UseLogger> auto Atomic<ValueType, UseLogger>::lock() const&
-		-> DeepBase_::template LockReturnType_<decltype(*this)> requires DeepBase_::template LockConstraint_<>
-		{return lock_(*this);}
-	template <DecayedType ValueType, bool UseLogger> auto Atomic<ValueType, UseLogger>::lock() &
-		-> DeepBase_::template LockReturnType_<decltype(*this)> requires DeepBase_::template LockConstraint_<>
-		{return lock_(*this);}
-	template <DecayedType ValueType, bool UseLogger>
-		auto Atomic<ValueType, UseLogger>::lock(auto&& condition_function) const&
-		-> DeepBase_::template LockReturnType_<decltype(*this), decltype(condition_function)>
-		requires DeepBase_::template LockConstraint_<decltype(condition_function)>
-		{return lock_(*this, condition_function);}
-	template <DecayedType ValueType, bool UseLogger>
-		auto Atomic<ValueType, UseLogger>::lock(auto&& condition_function) &
-		-> DeepBase_::template LockReturnType_<decltype(*this), decltype(condition_function)>
-		requires DeepBase_::template LockConstraint_<decltype(condition_function)>
-		{return lock_(*this, condition_function);}
-	template <DecayedType ValueType, bool UseLogger> template <bool Nothrow>
-		auto Atomic<ValueType, UseLogger>::lock(auto&& condition_function, auto timeout) const&
-		-> DeepBase_::template LockReturnType_<decltype(*this), decltype(timeout), Nothrow>
-		requires DeepBase_::template LockConstraint_<decltype(condition_function), decltype(timeout)>
-		{return lock_<Nothrow>(*this, condition_function, timeout);}
-	template <DecayedType ValueType, bool UseLogger> template <bool Nothrow>
-		auto Atomic<ValueType, UseLogger>::lock(auto&& condition_function, auto timeout) &
-		-> DeepBase_::template LockReturnType_<decltype(*this), decltype(timeout), Nothrow>
-		requires DeepBase_::template LockConstraint_<decltype(condition_function), decltype(timeout)>
-		{return lock_<Nothrow>(*this, condition_function, timeout);}
-}

local/pkgs/biu/include/biu/eigen.hpp

@@ -1,54 +0,0 @@
-# pragma once
-# include <vector>
-# include <span>
-# include <Eigen/Dense>
-# include <biu/concepts.hpp>
-
-namespace biu
-{
-  namespace detail_::eigen
-  {
-    // user-specified size of destination container: dynamic, unspecified(use default), or fixed
-    constexpr std::size_t dynamicSize = std::dynamic_extent, unspecifiedSize = std::dynamic_extent - 1;
-    static_assert(std::dynamic_extent == std::numeric_limits<std::size_t>::max());
-
-    // supported types of standard containers
-		template <typename T, typename Scalar> struct SpecializationOfArrayHelper : std::false_type {};
-		template <typename Scalar, std::size_t N>
-      struct SpecializationOfArrayHelper<std::array<Scalar, N>, Scalar> : std::true_type {};
-		template <typename Scalar, std::size_t N>
-      struct SpecializationOfArrayHelper<std::array<Scalar, N>, void> : std::true_type {};
-    template <typename T, typename Scalar = void> concept SpecializationOfArray =
-      SpecializationOfArrayHelper<T, Scalar>::value;
-    template <typename T, typename Scalar> concept StandardContainer =
-      SpecializationOf<T, std::vector, Scalar> || SpecializationOfArray<T, Scalar>;
-
-    // helper operator| to specify the size of the destination container
-    // usage: some_value | toEigen<Row, Col>
-    template <std::size_t Row, std::size_t Col> struct ToEigenHelper {};
-    template <std::size_t Row = unspecifiedSize, std::size_t Col = unspecifiedSize>
-      inline constexpr ToEigenHelper<Row, Col> toEigen;
-    // convert 1D standard container to Eigen::Vector
-    // if no size is specified, convert std::vector to dynamic-size Eigen::Vector,
-    //  std::array to fixed-size Eigen::Vector;
-    // if size is std::dynamic_extent, always convert to dynamic-size Eigen::Vector
-    // if size is specified as a number, convert to fixed-size Eigen::Vector if specified size equals the size of the
-    //  input, otherwise throw an error
-    template <template <int N> typename Callback, std::size_t ToSize> auto deduce_eigen_size(auto&& container);
-    template <Arithmetic T, StandardContainer<T> From, std::size_t ToSize> auto operator|
-      (const From&, const ToEigenHelper<ToSize, unspecifiedSize>&);
-    // convert 2D standard container to Eigen::Matrix
-    // the same rules as above apply
-    // besides, all rows must have the same size, otherwise throw an error
-    template
-    <
-      Arithmetic T, StandardContainer<T> FromPerRow, StandardContainer<FromPerRow> From,
-      std::size_t ToRow, std::size_t ToCol
-    >
-      auto operator|(const From&, const ToEigenHelper<ToRow, ToCol>&);
-
-    // TODO: implement fromEigen
-  }
-
-  inline namespace eigen { using detail_::eigen::toEigen; using detail_::eigen::operator|; }
-}

local/pkgs/biu/include/biu/eigen.tpp

@@ -1,29 +0,0 @@
-# pragma once
-# include <biu/eigen.hpp>
-// TODO: fix biu::logger
-// # include <biu/logger.hpp>
-# include <range/v3/view.hpp>
-
-namespace biu
-{
-  namespace detail_::eigen
-  {
-    template <template <int N> typename Callback, std::size_t ToSize> auto deduce_eigen_size(auto&& from)
-    {
-      if constexpr (ToSize == dynamicSize)
-        return Callback<Eigen::Dynamic>()(from.data(), from.size());
-      else if constexpr (ToSize == unspecifiedSize)
-        if constexpr (SpecializationOfArray<decltype(from)>)
-          return Callback<from.size()>()(from.data());
-        else
-          return Callback<Eigen::Dynamic>()(from.data(), from.size());
-      else
-        if (from.size() != ToSize)
-          // TODO: use biu::logger
-          throw std::invalid_argument("biu::toEigen: size mismatch");
-        else
-          return Callback<ToSize>()(from.data());
-    }
-    // TODO: implement 2D case
-  }
-}

local/pkgs/biu/src/logger.cpp

@@ -1,36 +0,0 @@
-# include <tgbot/tgbot.h>
-# include <biu.hpp>
-
-namespace biu
-{
-	Atomic<std::optional<typename Logger::LoggerConfigType_>, false> Logger::LoggerConfig_;
-	void Logger::init(std::experimental::observer_ptr<std::ostream> stream, Level level)
-	{
-		auto&& lock = LoggerConfig_.lock();
-		lock->emplace(stream, nullptr, level);
-	}
-	void Logger::init(std::shared_ptr<std::ostream> stream, Level level)
-	{
-		auto&& lock = LoggerConfig_.lock();
-		lock->emplace(std::experimental::make_observer(stream.get()), stream, level);
-	}
-
-	Atomic<std::optional<std::pair<std::string, std::string>>, false> Logger::TelegramConfig_;
-	void Logger::telegram_init(const std::string& token, const std::string& chat_id)
-		{TelegramConfig_ = std::make_pair(token, chat_id);}
-	void Logger::telegram_notify(const std::string& message)
-	{
-		if (auto&& lock = TelegramConfig_.lock(); *lock)
-		{
-			TgBot::Bot bot{lock.value()->first};
-			bot.getApi().sendMessage(lock.value()->first, message);
-		}
-	}
-	void Logger::telegram_notify_async(const std::string& message)
-		{std::thread{Logger::telegram_notify, message}.detach();}
-
-	Atomic<std::multimap<const void*, std::string_view>, false> Logger::Objects_;
-
-	thread_local unsigned Logger::Guard::Indent_ = 0;
-	Atomic<std::map<std::size_t, std::size_t>, false> Logger::Threads_;
-}

local/pkgs/default.nix

@@ -1,87 +0,0 @@
-inputs: rec
-{
-  typora = inputs.pkgs.callPackage ./typora {};
-  vesta = inputs.pkgs.callPackage ./vesta {};
-  rsshub = inputs.pkgs.callPackage ./rsshub.nix
-  {
-    inherit mkPnpmPackage;
-    src = inputs.topInputs.rsshub;
-    nodejs = nodejs-with-pnpm9.override { nodejs = inputs.pkgs.nodejs_22; };
-  };
-  misskey = inputs.pkgs.callPackage ./misskey.nix
-    { inherit mkPnpmPackage; src = inputs.topInputs.misskey; nodejs = nodejs-with-pnpm9; };
-  mk-meili-mgn = inputs.pkgs.callPackage ./mk-meili-mgn {};
-  vaspkit = inputs.pkgs.callPackage ./vaspkit { inherit (inputs.localLib) attrsToList; };
-  v-sim = inputs.pkgs.callPackage ./v-sim { src = inputs.topInputs.v-sim; };
-  concurrencpp = inputs.pkgs.callPackage ./concurrencpp { src = inputs.topInputs.concurrencpp; };
-  eigengdb = inputs.pkgs.python3Packages.callPackage ./eigengdb {};
-  nodesoup = inputs.pkgs.callPackage ./nodesoup { src = inputs.topInputs.nodesoup; };
-  matplotplusplus = inputs.pkgs.callPackage ./matplotplusplus
-    { inherit nodesoup glad; src = inputs.topInputs.matplotplusplus; };
-  zpp-bits = inputs.pkgs.callPackage ./zpp-bits { src = inputs.topInputs.zpp-bits; };
-  eigen = inputs.pkgs.callPackage ./eigen { src = inputs.topInputs.eigen; };
-  nameof = inputs.pkgs.callPackage ./nameof { src = inputs.topInputs.nameof; };
-  pslist = inputs.pkgs.callPackage ./pslist {};
-  glad = inputs.pkgs.callPackage ./glad {};
-  chromiumos-touch-keyboard = inputs.pkgs.callPackage ./chromiumos-touch-keyboard {};
-  yoga-support = inputs.pkgs.callPackage ./yoga-support {};
-  tgbot-cpp = inputs.pkgs.callPackage ./tgbot-cpp { src = inputs.topInputs.tgbot-cpp; };
-  mirism = inputs.pkgs.callPackage ./mirism
-  {
-    inherit cppcoro nameof tgbot-cpp date;
-    nghttp2 = inputs.pkgs.callPackage "${inputs.topInputs."nixpkgs-23.05"}/pkgs/development/libraries/nghttp2"
-      { enableAsioLib = true; stdenv = inputs.pkgs.gcc12Stdenv; };
-    stdenv = inputs.pkgs.gcc12Stdenv;
-  };
-  cppcoro = inputs.pkgs.callPackage ./cppcoro { src = inputs.topInputs.cppcoro; };
-  date = inputs.pkgs.callPackage ./date { src = inputs.topInputs.date; };
-  esbonio = inputs.pkgs.python3Packages.callPackage ./esbonio {};
-  pix2tex = inputs.pkgs.python3Packages.callPackage ./pix2tex {};
-  pyreadline3 = inputs.pkgs.python3Packages.callPackage ./pyreadline3 {};
-  torchdata = inputs.pkgs.python3Packages.callPackage ./torchdata {};
-  torchtext = inputs.pkgs.python3Packages.callPackage ./torchtext { inherit torchdata; };
-  blurred-wallpaper = inputs.pkgs.callPackage ./blurred-wallpaper.nix { src = inputs.topInputs.blurred-wallpaper; };
-  slate = inputs.pkgs.callPackage ./slate { src = inputs.topInputs.slate; };
-  nvhpc = inputs.pkgs.callPackage ./nvhpc {};
-  lmod = inputs.pkgs.callPackage ./lmod { src = inputs.topInputs.lmod; };
-  vasp = rec
-  {
-    src = inputs.pkgs.callPackage ./vasp/source.nix {};
-    gnu = inputs.pkgs.callPackage ./vasp/gnu
-    {
-      inherit (inputs.pkgs.llvmPackages) openmp;
-      inherit src;
-      hdf5 = inputs.pkgs.hdf5.override { mpiSupport = true; fortranSupport = true; cppSupport = false; };
-    };
-    nvidia = inputs.pkgs.callPackage ./vasp/nvidia
-      { inherit lmod nvhpc vtst src; hdf5 = hdf5-nvhpc; };
-    intel = inputs.pkgs.callPackage ./vasp/intel
-      { inherit lmod oneapi vtst src; hdf5 = hdf5-oneapi; };
-    hdf5-nvhpc = inputs.pkgs.callPackage ./vasp/hdf5-nvhpc { inherit lmod nvhpc; inherit (inputs.pkgs.hdf5) src; };
-    hdf5-oneapi = inputs.pkgs.callPackage ./vasp/hdf5-oneapi { inherit lmod oneapi; inherit (inputs.pkgs.hdf5) src; };
-    vtst = (inputs.pkgs.callPackage ./vasp/vtst.nix {});
-    vtstscripts = inputs.pkgs.callPackage ./vasp/vtstscripts.nix {};
-  };
-  # TODO: use other people packaged hpc version
-  oneapi = inputs.pkgs.callPackage ./oneapi {};
-  mumax = inputs.pkgs.callPackage ./mumax { src = inputs.topInputs.mumax; };
-  kylin-virtual-keyboard = inputs.pkgs.libsForQt5.callPackage ./kylin-virtual-keyboard
-    { src = inputs.topInputs.kylin-virtual-keyboard; };
-  biu = inputs.pkgs.callPackage ./biu { inherit nameof zpp-bits; };
-  zxorm = inputs.pkgs.callPackage ./zxorm { src = inputs.topInputs.zxorm; };
-  hpcstat = inputs.pkgs.callPackage ./hpcstat
-    { inherit sqlite-orm date biu openxlsx; stdenv = inputs.pkgs.gcc14Stdenv; };
-  openxlsx = inputs.pkgs.callPackage ./openxlsx { src = inputs.topInputs.openxlsx; };
-  sqlite-orm = inputs.pkgs.callPackage ./sqlite-orm { src = inputs.topInputs.sqlite-orm; };
-  mkPnpmPackage = inputs.pkgs.callPackage ./mkPnpmPackage.nix {};
-  nodejs-with-pnpm9 = inputs.pkgs.callPackage ./nodejs-with-pnpm9.nix {};
-  sbatch-tui = inputs.pkgs.callPackage ./sbatch-tui { inherit biu; };
-  ufo = inputs.pkgs.callPackage ./ufo
-    { inherit concurrencpp biu glad matplotplusplus zpp-bits; tbb = inputs.pkgs.tbb_2021_11; };
-  chn-bsub = inputs.pkgs.callPackage ./chn-bsub { inherit biu; };
-  winjob = inputs.pkgs.callPackage ./winjob { inherit sqlite-orm biu; stdenv = inputs.pkgs.gcc14Stdenv; };
-
-  fromYaml = content: builtins.fromJSON (builtins.readFile
-    (inputs.pkgs.runCommand "toJSON" {}
-      "${inputs.pkgs.remarshal}/bin/yaml2json ${builtins.toFile "content.yaml" content} $out"));
-}

local/pkgs/hpcstat/doc/setup.md

@@ -1,214 +1 @@
-# 设置 SSH agent forwarding
-
-为了区分登陆 jykang@hpc.xmu.edu.cn 时使用的密钥，并分密钥统计使用情况，需要启用一项名为“SSH agent forwarding”的功能。
-接下来的内容将带领您在 Windows 系统上配置 SSH agent forwarding。
-
-> [!NOTE]
-> 在 Linux 上的配置方法放在了文章末尾。大多数用户不需要阅读。
-
-要启用“SSH agent forwarding”，需要下面三个步骤：
-1. 启动 Pageant 并添加密钥。 **这一步骤每次登陆前都需要执行。**
-2. 配置 PuTTY，使 PuTTY 在每次登陆时不直接使用密钥，而是利用 Pageant 完成认证。这一步骤只需要执行一次。
-3. 配置 WinSCP，使 WinSCP 在每次登陆时不直接使用密钥，而是利用 Pageant 完成认证。这一步骤只需要执行一次。
-
-接下来将分别说明这三个步骤。
-
-## Pageant:
-
-1. 找到 Pageant 程序。Pageant 会随着 PuTTY 一起安装，一般来说您可以直接在开始菜单中搜索 “pageant” 找到它，也可以在 PuTTY 的安装目录中找到它。
-2. 启动 Pageant。启动后可能没有任何反应，也可能有一个黑框闪过，这是正常的。只要右下角的系统托盘中出现了 pageant 的图标就可以了。
-   
-   ![](pageant1.png)
-
-3. 双击 Pageant 图标，打开 Pageant 窗口。选择 “Add Key”，然后选择您的密钥文件。
-   
-   ![](pageant2.png)
-
-4. 在使用服务器期间保持 Pageant 启动（可以关闭 Pageant 的窗口，但不要在系统托盘中右键退出）。
-5. 使用完毕后，在系统托盘中右键退出 Pageant。
-
-> [!NOTE]
-> 无论是使用 WinSCP 还是 PuTTY，每次使用前，都需要如此启动 Pageant 并添加密钥。
-
-> [!TIP]
-> 如果您觉得每次打开 Pageant 都要手动添加密钥很麻烦，并且熟悉 Windows 命令行的使用，
->   可以编写一个批处理文件（将下方代码用记事本保存，然后将扩展名从 `.txt` 改为 `.bat`），每次双击该文件即可启动 Pageant 并自动添加密钥：
-> 
-> `"C:\ProgramData\chocolatey\bin\PAGEANT.EXE" "Z:\.ssh\id_rsa.ppk"`
-> 
-> 其中第一个引号内为 Pageant 的路径，第二个引号内为您的密钥文件的路径。也可以将该批处理文件放入开机启动项中，使得 Pageant 在开机时自动启动。
-> 
-> 因为每个人的密钥文件以及 Pageant 的路径都可能不同，所以这里无法提供通用的批处理文件。
-
-## PuTTY:
-
-1. 在 Connection -> SSH -> Auth，勾选“Attempt authentication using Pageant”和“Allow agent forwarding”。
-   
-   ![](putty1.png)
-
-2. 在 Connection -> SSH -> Auth -> Credentials，清空 “Private key file for authentication”，然后保存。
-   
-   ![](putty2.png)
-
-3. （选做但推荐）在 Connection -> Data 中，将 “Auto-login username” 设置为 `jykang`，这样每次登陆时就不需要手动输入用户名了。
-
-## WinSCP:
-
-1. 在 SSH -> Authentication，勾选 “使用 Pageant 进行认证”，勾选 “允许代理转发”，清空 “密钥文件”，然后保存。
-   
-   ![](winscp1.png)
-
-2. (选做)如果您需要通过 WinSCP 打开 PuTTY 的话，需要在 WinSCP 主界面 -> 工具 -> 选项 -> 集成 -> 应用程序路径中，
-    在原来的基础上增加 `-A` 参数。
-   
-   ![](winscp2.png)
-
-> [!TIP]
-> 如果 WinSCP 不让你直接修改那个字符串，就把它复制到记事本里修改，然后再复制回去。
-
-至此，您已经成功配置了 SSH agent forwarding。
-之后使用 PuTTY 登陆 `jykang@hpc.xmu.edu.cn` 时，会收到包含了您的名字的提示（如图所示），表明您已经成功启用了 SSH agent forwarding。
-
-   ![](putty3.png)
-
-> [!NOTE]
-> 无论是 PuTTY 还是 WinSCP，改完设置后都记得保存。
-
-> [!IMPORTANT]
-> 如果您确认已经按照教程设置好了却仍然不能连接，可以尝试将 WinSCP 和 PuTTY 都更新到最新。
->
-> 我测试使用的版本是：PuTTY 0.78 和 WinSCP 6.3.3。
-
----
-
-# 其它内容
-
-接下来的内容不是使用 jykang@hpc.xmu.edu.cn 的必需内容，不须要阅读。
-如果您按照上面的步骤配置 SSH agent forwarding 失败，那么请再次仔细阅读上面的内容，**接下来的内容对您没有帮助**。
-
-接下来的内容包括：
-* 解释为什么不转发 agent 就无法区分不同密钥。
-* 介绍一些可能有用的附加功能，例如区分使用同一个密钥的不同用户，以及如何设置任务进度微信通知。
-
-## 为什么不转发 agent 就无法区分不同密钥？
-
-如果你好奇为什么不使用 Pageant 就无法区分使用不同密钥的登陆：
-
-SSH 连接并不是直接由 jykang 用户处理的，
-   而是由一个名为 `sshd` 的程序处理，它通常以 `root` 用户的身份运行。
-在完成认证后，`sshd` 会将 Windows 电脑发来的信息解密后转发给以 `jykang` 用户运行的进程，
-   并将以 `jykang` 用户运行的进程的输出加密后发回给 Windows 电脑。
-我们只能控制 `jykang` 用户运行的进程，但这里拿不到任何关于密钥的信息。
-
-```mermaid
-flowchart TB
-   subgraph "Run on windows"
-      A[(密钥文件)] -.->|从硬盘读取| B["SSH client (putty, WinSCP, etc.)"]
-   end
-   subgraph "Run on hpc by root"
-      C["SSH server (sshd)"]
-   end
-   B <--> |"认证信息 & 加密的数据"| C
-   subgraph "Run on hpc by <b>jykang</b>"
-      D["Other programs (bash, VASP, etc.)"] 
-   end
-   C <--> |"解密后的数据(不包含密钥信息)"| D
-```
-
-Pageant 程序就是所谓的“SSH agent”。“SSH agent forwarding” 就是将到 Pageant 的连接通过已经建立的 SSH 连接转发给远程服务器，
-   使得远程服务器可以与 Pageant 通信，进而读取密钥信息。
-“SSH agent forwarding” 典型的用途是在远程服务器上使用本地的密钥再次登陆其他服务器，而不是为了区分使用不同密钥的登陆。
-
-```mermaid
-flowchart TB
-   subgraph "Run on windows"
-      A[(密钥文件)] -.->|从硬盘读取| E["SSH agent (pageant)"]
-      E <-->|认证信息| B["SSH client (putty, WinSCP, etc.)"]
-   end
-   subgraph "Run on hpc by root"
-      C["SSH server (sshd)"]
-   end
-   B <--> |"认证信息 & 加密的数据"| C
-   subgraph "Run on hpc by <b>jykang</b>"
-      D["Other programs (bash, VASP, etc.)"] 
-   end
-   C <--> |"解密后的数据(不包含密钥信息)"| D
-   E <-...-> |"通过已经建立的 SSH 连接转发密钥信息"| D
-```
-
-事实上，linux 的管理（统计用户使用的资源，等）非常依赖于不同的用户，即用高权限的用户去管理低权限的用户。
-大家都使用同一个账户的情况下，很多管理的功能没有现成的解决方案（要自己手写代码、思考如何设计），甚至完全无法实现。
-整这个东西真的挺麻烦的。我也嫌麻烦（而且我要做的事情比大多数用户多得多）。要不是康老师一定要我做，我才不会做。
-如果你嫌这些麻烦，与其埋怨我，不如去建议自己的导师去自己申请一个账号用。
-
-## 设置子账户:
-
-一个老师拿到密钥后，可能会将它分发给多个不同的学生。
-如果希望区分不同学生的使用情况，可以修改 `TERM` 变量，加上 `hpcstat_subaccount:your_name:` 前缀，
-   以此来进一步区分使用同一个密钥的不同用户。
-
-对于 PuTTY 来说，`TERM` 变量在 Connection -> Data -> Ternimal-type string 中修改。
-例如，如果原本的 `TERM` 变量是 `xterm`，那么修改后的 `TERM` 变量可以是 `hpcstat_subaccount:chn:xterm`。
-`TERM` 变量只在交互式登陆时有效，因此无法在 WinSCP 中使用。
-
-如果设置了这个参数，那么会额外统计不同子账户的使用情况（登陆次数、投递的任务、占用的核时，等）。
-是否设置这个参数都不影响按密钥统计的功能（即，按照密钥统计的核时，是所有使用这个密钥的用户的总和，无论是否设置了这个参数）。
-
-同时，子账户的统计结果也仅供参考，事实上这个统计结果很容易造假
-   （如果 A 和 B 都使用同一个密钥登陆，那么显然 B 可以在 TERM 中填入 A 的名字以假装自己是 A，把自己用的核时都算到 A 头上）。
-
-> [!CAUTION]
-> 如果 `TERM` 变量的格式设置得不正确，PuTTY 登陆后一些程序会无法正常工作，因此尝试时应该仔细且小心。
-
-## PuTTY 登陆时自动跳转:
-
-如果您希望在登陆时自动跳转到自己的目录下，可以在 `TERM` 中再增加以下前缀：`chn_cd:your_path:`。
-
-例如，将 `TERM` 变量修改为 `chn_cd:linwei/chn:xterm`，那么使用 PuTTY 登陆后会自动跳转到 `linwei/chn` 目录下。
-
-如果同时使用了 `hpcstat_subaccount` 和 `chn_cd`，那么 `hpcstat_subaccount` 必须在 `chn_cd` 之后，
-   例如 `chn_cd:linwei/chn:hpcstat_subaccount:chn:xterm`。
-
-## 任务进度微信通知:
-
-用微信打开下面的链接：
-
-```
-https://wxpusher.zjiecode.com/wxuser/?type=1&id=75864#/follow
-```
-
-您应该会被引导去关注一个公众号（WxPusher 消息推送平台）。关注这个公众号之后会收到一条包含 UID 的消息。
-然后把下面的信息发给我：
-* 您的 UID
-* 您使用的密钥的指纹（用 PuTTY 登陆时会提示）
-* 如果使用了子账户（在 `TERM` 中设置了 `hpcstat_subaccount`），还需要告诉我您设置的子账户名
-
-之后您投递的任务有新进度（例如，开始运行、运行结束）时就会通过这个公众号收到通知。
-
-需要注意的是，这个 UID 会被明文写到 jykang 上的文件里。
-也就是说存在这样的风险：有权限登陆 jykang 的人都有权限通过这个公众号给您发消息。
-
-## 在 Linux 上配置 SSH agent forwarding
-
-1. 使用以下命令将 `.ppk` 的私钥部分拆分出来：
-
-   ```bash
-   puttygen id_rsa.ppk -O private-openssh -o ./id_rsa
-   ```
-
-   确保 `id_rsa` 的权限为 `600`。
-
-2. 在 `~/.ssh/config` 中添加以下内容：
-
-   ```
-   Host jykang
-      AddKeysToAgent yes
-      ForwardAgent yes
-      IdentityFile ~/path/to/id_rsa
-   ```
-
-然后就可以正常使用了，例如：
-
-```bash
-ssh jykang
-```
+Moved to [../../../../packages/hpcstat/doc/setup.md](../../../../packages/hpcstat/doc/setup.md)

local/pkgs/matplotplusplus/default.nix

@@ -1,18 +0,0 @@
-{
-  stdenv, src, cmake, pkg-config, substituteAll,
-  gnuplot, libjpeg, libtiff, zlib, libpng, lapack, blas, fftw, opencv, nodesoup, cimg, glfw, libGL, python3, glad
-}: stdenv.mkDerivation
-{
-  name = "matplotplusplus";
-  inherit src;
-  cmakeFlags =
-  [
-    "-DBUILD_SHARED_LIBS=ON" "-DMATPLOTPP_BUILD_SHARED_LIBS=ON" "-DMATPLOTPP_BUILD_EXAMPLES=OFF"
-    "-DMATPLOTPP_WITH_SYSTEM_NODESOUP=ON" "-DMATPLOTPP_WITH_SYSTEM_CIMG=ON"
-    "-DMATPLOTPP_BUILD_EXPERIMENTAL_OPENGL_BACKEND=ON" "-DGLAD_REPRODUCIBLE=ON"
-  ];
-  buildInputs = [ gnuplot libjpeg libtiff zlib libpng lapack blas fftw opencv nodesoup cimg glfw libGL glad ];
-  nativeBuildInputs = [ cmake pkg-config python3 ];
-  propagatedBuildInputs = [ libGL glad glfw ];
-  propagatedNativeBuildInputs = [ python3 ];
-}

local/pkgs/nodejs-with-pnpm9.nix

@@ -1,15 +0,0 @@
-{ nodejs, fetchurl }: nodejs.overrideAttrs (prev:
-{
-  passthru.pkgs = prev.passthru.pkgs.extend (final: prev:
-  {
-    pnpm = prev.pnpm.override
-    {
-      version = "9.1.0";
-      src = fetchurl
-      {
-        url = "https://registry.npmjs.org/pnpm/-/pnpm-9.1.0.tgz";
-        sha512 = "Z/WHmRapKT5c8FnCOFPVcb6vT3U8cH9AyyK+1fsVeMaq07bEEHzLO6CzW+AD62IaFkcayDbIe+tT+dVLtGEnJA==";
-      };
-    };
-  });
-})

local/pkgs/ufo/default.nix

@@ -1,10 +0,0 @@
-{
-  stdenv, cmake, pkg-config,
-  yaml-cpp, eigen, fmt, concurrencpp, highfive, tbb, glad, matplotplusplus, biu, zpp-bits
-}: stdenv.mkDerivation
-{
-  name = "ufo";
-  src = ./.;
-  buildInputs = [ yaml-cpp eigen fmt concurrencpp highfive tbb glad matplotplusplus biu zpp-bits ];
-  nativeBuildInputs = [ cmake pkg-config ];
-}

local/pkgs/ufo/include/ufo/solver.hpp

@@ -1,141 +0,0 @@
-# pragma once
-# include <iostream>
-# include <array>
-# include <numbers>
-# include <numeric>
-# include <fstream>
-# include <optional>
-# include <array>
-# include <utility>
-# include <execution>
-# include <syncstream>
-# include <any>
-# include <map>
-# include <vector>
-# include <span>
-# include <yaml-cpp/yaml.h>
-# include <Eigen/Dense>
-# include <concurrencpp/concurrencpp.h>
-# include <fmt/format.h>
-# include <fmt/std.h>
-# include <fmt/ranges.h>
-# include <highfive/H5File.hpp>
-# include <zpp_bits.h>
-# include <matplot/matplot.h>
-# include <matplot/backend/opengl.h>
-
-// 在相位中, 约定为使用 $\exp (2 \pi i \vec{q} \cdot \vec{r})$ 来表示原子的运动状态
-//  (而不是 $\exp (-2 \pi i \vec{q} \cdot \vec{r})$)
-// 一些书定义的倒格矢中包含了 $2 \pi$ 的部分, 我们这里约定不包含这部分.
-//  也就是说, 正格子与倒格子的转置相乘, 得到单位矩阵.
-
-namespace Eigen
-{
-  constexpr inline auto serialize(auto & archive, Eigen::Matrix3d& matrix)
-    { return archive(std::span(matrix.data(), matrix.size())); }
-  constexpr inline auto serialize(auto & archive, const Eigen::Matrix3d& matrix)
-    { return archive(std::span(matrix.data(), matrix.size())); }
-  constexpr inline auto serialize(auto & archive, Eigen::Vector3d& vector)
-    { return archive(std::span(vector.data(), vector.size())); }
-  constexpr inline auto serialize(auto & archive, const Eigen::Vector3d& vector)
-    { return archive(std::span(vector.data(), vector.size())); }
-}
-
-namespace ufo
-{
-  using namespace std::literals;
-  struct PhonopyComplex { double r, i; };
-  inline HighFive::CompoundType create_compound_complex()
-    { return {{ "r", HighFive::AtomicType<double>{}}, {"i", HighFive::AtomicType<double>{}}}; }
-
-	namespace detail_
-	{
-		template <typename T> struct SpecializationOfBitsMembersHelper : std::false_type {};
-		template <std::size_t N> struct SpecializationOfBitsMembersHelper<zpp::bits::members<N>> : std::true_type {};
-	}
-	template <typename T> concept ZppSerializable
-    = requires() { detail_::SpecializationOfBitsMembersHelper<T>::value == true; };
-
-  class Solver
-  {
-    public:
-      virtual Solver& operator()() = 0;
-      virtual ~Solver() = default;
-
-      static concurrencpp::generator<std::pair<Eigen::Vector<unsigned, 3>, unsigned>>
-        triplet_sequence(Eigen::Vector<unsigned, 3> range);
-
-      template <ZppSerializable T> inline static void zpp_write(const T& object, std::string filename)
-      {
-        auto [data, out] = zpp::bits::data_out();
-        out(object).or_throw();
-        static_assert(sizeof(char) == sizeof(std::byte));
-        std::ofstream file(filename, std::ios::binary | std::ios::out);
-        file.exceptions(std::ios::badbit | std::ios::failbit);
-        file.write(reinterpret_cast<const char*>(data.data()), data.size());
-      }
-      template <ZppSerializable T> inline static T zpp_read(std::string filename)
-      {
-        auto input = std::ifstream(filename, std::ios::binary | std::ios::in);
-        input.exceptions(std::ios::badbit | std::ios::failbit);
-        static_assert(sizeof(std::byte) == sizeof(char));
-        std::vector<std::byte> data;
-        {
-          std::vector<char> string(std::istreambuf_iterator<char>(input), {});
-          data.assign
-          (
-            reinterpret_cast<std::byte*>(string.data()),
-            reinterpret_cast<std::byte*>(string.data() + string.size())
-          );
-        }
-        auto in = zpp::bits::in(data);
-        T output;
-        in(output).or_throw();
-        return output;
-      }
-
-      class Hdf5file
-      {
-        public:
-          inline Hdf5file& open_for_read(std::string filename)
-          {
-            File_ = HighFive::File(filename, HighFive::File::ReadOnly);
-            return *this;
-          }
-          inline Hdf5file& open_for_write(std::string filename)
-          {
-            File_ = HighFive::File(filename, HighFive::File::ReadWrite | HighFive::File::Create
-              | HighFive::File::Truncate);
-            return *this;
-          }
-          template <typename T> inline Hdf5file& read(T& object, std::string name)
-          {
-            object = File_->getDataSet(name).read<std::remove_cvref_t<decltype(object)>>();
-            return *this;
-          }
-          template <typename T> inline Hdf5file& write(const T& object, std::string name)
-          {
-            File_->createDataSet(name, object);
-            return *this;
-          }
-        protected:
-          std::optional<HighFive::File> File_;
-      };
-
-      struct DataFile
-      {
-        std::string Filename;
-        std::string Format;
-        std::map<std::string, std::any> ExtraParameters;
-        inline DataFile() = default;
-        DataFile
-        (
-          YAML::Node node, std::set<std::string> supported_format,
-          std::string config_file, bool allow_same_as_config_file = false
-        );
-      };
-
-  };
-}
-
-HIGHFIVE_REGISTER_TYPE(ufo::PhonopyComplex, ufo::create_compound_complex)

local/pkgs/winjob/.envrc

@@ -1 +0,0 @@
-use flake .#hpcstat

modules/hardware/cpus.nix

@@ -18,9 +18,6 @@ inputs:
           amd = [];
         };
         in builtins.concatLists (builtins.map (cpu: modules.${cpu}) cpus);
-      kernelParams =
-        let params = { intel = [ "intel_iommu=off" ]; amd = [ "amd_iommu=fullflush" ]; };
-        in builtins.concatLists (builtins.map (cpu: params.${cpu}) cpus);
     };
     environment.systemPackages =
       let packages = with inputs.pkgs; { intel = []; amd = [ zenmonitor ]; };

modules/hardware/default.nix

@@ -39,7 +39,6 @@ inputs:
       {
         hardware.pulseaudio.enable = false;
         services.pipewire = { enable = true; alsa = { enable = true; support32Bit = true; }; pulse.enable = true; };
-        sound.enable = true;
         security.rtkit.enable = true;
       }
     )

modules/hardware/gpu.nix

@@ -21,7 +21,7 @@ inputs:
         mode = mkOption { type = types.enum [ "offload" "sync" ]; default = "offload"; };
         busId = mkOption { type = types.attrsOf types.nonEmptyStr; default = {}; };
       };
-      driver = mkOption { type = types.enum [ "production" "beta" ]; default = "production"; };
+      driver = mkOption { type = types.enum [ "production" "latest" "beta" ]; default = "production"; };
     };
   };
   config = let inherit (inputs.config.nixos.hardware) gpu; in inputs.lib.mkIf (gpu.type != null) (inputs.lib.mkMerge
@@ -34,8 +34,8 @@ inputs:
           let modules =
           {
             intel = [ "i915" ];
-            nvidia = [ "nvidia" "nvidia_drm" "nvidia_modeset" ]; # nvidia-uvm should not be loaded
-            amd = [ "amdgpu" ];
+            nvidia = []; # early loading breaks resume from hibernation
+            amd = [];
           };
           in builtins.concatLists (builtins.map (gpu: modules.${gpu}) gpus);
         hardware =
@@ -48,12 +48,9 @@ inputs:
               {
                 intel = [ intel-vaapi-driver libvdpau-va-gl intel-media-driver ];
                 nvidia = [ vaapiVdpau ];
-                amd = [ amdvlk rocmPackages.clr rocmPackages.clr.icd ];
+                amd = [];
               };
               in builtins.concatLists (builtins.map (gpu: packages.${gpu}) gpus);
-            extraPackages32 =
-              let packages = { intel = []; nvidia = []; amd = [ inputs.pkgs.driversi686Linux.amdvlk ]; };
-              in builtins.concatLists (builtins.map (gpu: packages.${gpu}) gpus);
           };
           nvidia = inputs.lib.mkIf (builtins.elem "nvidia" gpus)
           {
@@ -61,25 +58,27 @@ inputs:
             powerManagement.enable = true;
             dynamicBoost.enable = inputs.lib.mkIf gpu.nvidia.dynamicBoost true;
             nvidiaSettings = true;
-            forceFullCompositionPipeline = true;
-            package =
-              let actualDriver = { production = "legacy_535"; }.${gpu.nvidia.driver} or gpu.nvidia.driver;
-              in inputs.config.boot.kernelPackages.nvidiaPackages.${actualDriver};
+            package = inputs.config.boot.kernelPackages.nvidiaPackages.${gpu.nvidia.driver};
+            open = true; # TODO: remove when 560 is stable
             prime.allowExternalGpu = true;
-            # nvidia 555 package have some bug, should use open
-            open = inputs.lib.mkIf (gpu.nvidia.driver == "beta") true;
           };
         };
-        boot =
-        {
-          kernelParams = inputs.lib.mkIf (builtins.elem "amd" gpus)
-            [ "radeon.cik_support=0" "amdgpu.cik_support=1" "radeon.si_support=0" "amdgpu.si_support=1" ];
-          blacklistedKernelModules = [ "nouveau" ];
-        };
-        environment.variables.VDPAU_DRIVER = inputs.lib.mkIf (builtins.elem "intel" gpus) "va_gl";
+        boot.blacklistedKernelModules = [ "nouveau" ];
+        environment.variables =
+          if builtins.elem "nvidia" gpus then { VDPAU_DRIVER = "nvidia"; }
+          else if builtins.elem "intel" gpus then { VDPAU_DRIVER = "va_gl"; }
+          else {};
         services.xserver.videoDrivers =
           let driver = { intel = "modesetting"; amd = "amdgpu"; nvidia = "nvidia"; };
           in builtins.map (gpu: driver.${gpu}) gpus;
+        nixos.packages.packages._packages =
+          let packages = with inputs.pkgs;
+          {
+            intel = [ intel-gpu-tools ];
+            nvidia = [ nvtopPackages.full ];
+            amd = [];
+          };
+          in builtins.concatLists (builtins.map (gpu: packages.${gpu}) gpus);
       }
     )
     # nvidia prime offload
@@ -97,5 +96,15 @@ inputs:
         powerManagement.finegrained = inputs.lib.mkIf (gpu.nvidia.prime.mode == "offload") true;
       };}
     )
+    # amdgpu
+    (
+      inputs.lib.mkIf (inputs.lib.strings.hasPrefix "amd" gpu.type) { hardware.amdgpu =
+      {
+        opencl.enable = true;
+        legacySupport.enable = true;
+        initrd.enable = true;
+        amdvlk = { enable = true; support32Bit.enable = true; supportExperimental.enable = true; };
+      };}
+    )
   ]);
 }

modules/packages/chromium.nix

@@ -1,6 +1,11 @@
 inputs:
 {
-  config = inputs.lib.mkIf (builtins.elem "desktop-extra" inputs.config.nixos.packages._packageSets)
+  options.nixos.packages.chromium = let inherit (inputs.lib) mkOption types; in mkOption
+  {
+    type = types.nullOr (types.submodule {});
+    default = if inputs.config.nixos.system.gui.enable then {} else null;
+  };
+  config = let inherit (inputs.config.nixos.packages) chromium; in inputs.lib.mkIf (chromium != null)
   {
     programs.chromium = { enable = true; extraOpts.PasswordManagerEnabled = false; };
   };

modules/packages/default.nix

@@ -1,47 +1,21 @@
 inputs:
 {
   imports = inputs.localLib.findModules ./.;
-  options.nixos.packages =
-    let
-      inherit (inputs.lib) mkOption types;
-      packageSets =
-      [
-        # no gui, only used for specific purpose
-        "server"
-        "server-extra"
-        # gui, for daily use, but not install large programs such as matlab
-        "desktop"
-        "desktop-extra"
-        # nearly everything
-        "workstation"
-      ];
-    in
-    {
-      packageSet = mkOption
-      {
-        type = types.enum packageSets;
-        default = if inputs.config.nixos.system.gui.enable then "desktop" else "server";
-      };
-      extraPackages = mkOption { type = types.listOf types.unspecified; default = []; };
-      excludePackages = mkOption { type = types.listOf types.unspecified; default = []; };
-      extraPythonPackages = mkOption { type = types.listOf types.unspecified; default = []; };
-      excludePythonPackages = mkOption { type = types.listOf types.unspecified; default = []; };
-      extraPrebuildPackages = mkOption { type = types.listOf types.unspecified; default = []; };
-      excludePrebuildPackages = mkOption { type = types.listOf types.unspecified; default = []; };
-      _packageSets = mkOption
-      {
-        type = types.listOf types.nonEmptyStr;
-        readOnly = true;
-        default = builtins.genList (i: builtins.elemAt packageSets i)
-          ((inputs.localLib.findIndex inputs.config.nixos.packages.packageSet packageSets) + 1);
-      };
-      _packages = mkOption { type = types.listOf types.unspecified; default = []; };
-      _pythonPackages = mkOption { type = types.listOf types.unspecified; default = []; };
-      _prebuildPackages = mkOption { type = types.listOf types.unspecified; default = []; };
-    };
+  options.nixos.packages.packages = let inherit (inputs.lib) mkOption types; in
+  {
+    extraPackages = mkOption { type = types.listOf types.unspecified; default = []; };
+    excludePackages = mkOption { type = types.listOf types.unspecified; default = []; };
+    extraPythonPackages = mkOption { type = types.listOf types.unspecified; default = []; };
+    excludePythonPackages = mkOption { type = types.listOf types.unspecified; default = []; };
+    extraPrebuildPackages = mkOption { type = types.listOf types.unspecified; default = []; };
+    excludePrebuildPackages = mkOption { type = types.listOf types.unspecified; default = []; };
+    _packages = mkOption { type = types.listOf types.unspecified; default = []; };
+    _pythonPackages = mkOption { type = types.listOf types.unspecified; default = []; };
+    _prebuildPackages = mkOption { type = types.listOf types.unspecified; default = []; };
+  };
   config =
   {
-    environment.systemPackages = let inherit (inputs.lib.lists) subtractLists; in with inputs.config.nixos.packages;
+    environment.systemPackages = with inputs.config.nixos.packages.packages;
       (inputs.lib.lists.subtractLists excludePackages (_packages ++ extraPackages))
       ++ [
         (inputs.pkgs.python3.withPackages (pythonPackages:

modules/packages/desktop-extra.nix

@@ -1,46 +0,0 @@
-inputs:
-{
-  config = inputs.lib.mkIf (builtins.elem "desktop-extra" inputs.config.nixos.packages._packageSets)
-  {
-    nixos =
-    {
-      packages = with inputs.pkgs;
-      {
-        _packages =
-        [
-          # system management
-          btrfs-assistant snapper-gui kdePackages.qtstyleplugin-kvantum ventoy-full cpu-x
-          inputs.pkgs."pkgs-23.11".etcher
-          # password and key management
-          yubikey-manager yubikey-manager-qt yubikey-personalization yubikey-personalization-gui bitwarden
-          # download
-          qbittorrent nur-xddxdd.baidupcs-go wgetpaste
-          # development
-          scrcpy weston cage openbox krita
-          # media
-          spotify yesplaymusic simplescreenrecorder imagemagick gimp netease-cloud-music-gtk vlc obs-studio
-          waifu2x-converter-cpp inkscape blender whalebird
-          # editor
-          typora
-          # news
-          fluent-reader
-          # nix tools
-          nixpkgs-fmt appimage-run nixd nix-serve node2nix nix-prefetch-github prefetch-npm-deps
-          nix-prefetch-docker
-          # instant messager
-          element-desktop telegram-desktop discord fluffychat zoom-us signal-desktop slack nur-linyinfeng.wemeet
-          # browser
-          google-chrome
-          # office
-          crow-translate zotero pandoc ydict libreoffice-qt texstudio poppler_utils pdftk gnuplot pdfchain hdfview
-          texliveFull
-          # math, physics and chemistry
-          octaveFull root ovito localPackages.vesta localPackages.vaspkit localPackages.v-sim
-        ]
-        ++ (builtins.filter (p: !((p.meta.broken or false) || (builtins.elem p.pname or null [ "falkon" ])))
-          (builtins.filter inputs.lib.isDerivation (builtins.attrValues kdePackages.kdeGear)));
-      };
-    };
-    programs.kdeconnect.enable = true;
-  };
-}

modules/packages/desktop/default.nix

@@ -1,47 +1,135 @@
 inputs:
 {
-  config = inputs.lib.mkIf (builtins.elem "desktop" inputs.config.nixos.packages._packageSets)
+  options.nixos.packages.desktop = let inherit (inputs.lib) mkOption types; in mkOption
+  {
+    type = types.nullOr (types.submodule {});
+    default = if inputs.config.nixos.system.gui.enable then {} else null;
+  };
+  config = let inherit (inputs.config.nixos.packages) desktop; in inputs.lib.mkIf (desktop != null)
   {
     nixos =
     {
-      packages._packages = with inputs.pkgs;
-      [
-        # system management
-        gparted wayland-utils clinfo glxinfo vulkan-tools dracut
-        (
-          writeShellScriptBin "xclip"
-          ''
-            #!${bash}/bin/bash
-            if [ "$XDG_SESSION_TYPE" = "x11" ]; then
-              exec ${xclip}/bin/xclip -sel clip "$@"
-            else
-              exec ${wl-clipboard-x11}/bin/xclip "$@"
-            fi
-          ''
-        )
-        # color management
-        argyllcms xcalib
-        # networking
-        remmina putty mtr-gui
-        # media
-        mpv nomacs
-        # themes
-        catppuccin catppuccin-sddm catppuccin-cursors catppuccinifier-gui catppuccinifier-cli catppuccin-plymouth
-        (catppuccin-kde.override { flavour = [ "latte" ]; }) (catppuccin-kvantum.override { variant = "latte"; })
-        localPackages.slate localPackages.blurred-wallpaper tela-circle-icon-theme
-        # terminal
-        warp-terminal
-        # development
-        adb-sync
-        # desktop sharing
-        rustdesk-flutter
-      ];
+      packages.packages =
+      {
+        _packages = with inputs.pkgs;
+        [
+          # system management
+          # TODO: module should add yubikey-touch-detector into path
+          gparted wayland-utils clinfo glxinfo vulkan-tools dracut yubikey-touch-detector btrfs-assistant snapper-gui
+          kdePackages.qtstyleplugin-kvantum ventoy-full cpu-x inputs.pkgs."pkgs-23.11".etcher wl-mirror
+          (
+            writeShellScriptBin "xclip"
+            ''
+              #!${bash}/bin/bash
+              if [ "$XDG_SESSION_TYPE" = "x11" ]; then
+                exec ${xclip}/bin/xclip -sel clip "$@"
+              else
+                exec ${wl-clipboard-x11}/bin/xclip "$@"
+              fi
+            ''
+          )
+          # color management
+          argyllcms xcalib
+          # networking
+          remmina putty mtr-gui
+          # media
+          mpv nomacs spotify yesplaymusic simplescreenrecorder imagemagick gimp netease-cloud-music-gtk vlc obs-studio
+          waifu2x-converter-cpp inkscape blender whalebird paraview
+          # themes
+          catppuccin catppuccin-sddm catppuccin-cursors catppuccinifier-gui catppuccinifier-cli catppuccin-plymouth
+          (catppuccin-kde.override { flavour = [ "latte" ]; }) (catppuccin-kvantum.override { variant = "latte"; })
+          localPackages.slate localPackages.blurred-wallpaper tela-circle-icon-theme
+          # terminal
+          warp-terminal
+          # development
+          adb-sync scrcpy weston cage openbox krita jetbrains.clion android-studio dbeaver-bin cling fprettify
+          aircrack-ng
+          # desktop sharing
+          rustdesk-flutter
+          # password and key management
+          yubikey-manager yubikey-manager-qt yubikey-personalization yubikey-personalization-gui bitwarden electrum
+          jabref
+          john crunch hashcat
+          # download
+          qbittorrent nur-xddxdd.baidupcs-go wgetpaste onedrive onedrivegui rclone
+          # editor
+          typora appflowy notion-app-enhanced joplin-desktop standardnotes logseq
+          # news
+          fluent-reader rssguard newsflash newsboat
+          # nix tools
+          nixpkgs-fmt appimage-run nixd nix-serve node2nix nix-prefetch-github prefetch-npm-deps nix-prefetch-docker
+          nix-template nil pnpm-lock-export bundix
+          # instant messager
+          element-desktop telegram-desktop discord fluffychat zoom-us signal-desktop slack nur-linyinfeng.wemeet
+          cinny-desktop nheko # qq nur-xddxdd.wechat-uos
+          # browser
+          google-chrome tor-browser microsoft-edge
+          # office
+          crow-translate zotero pandoc ydict libreoffice-qt texstudio poppler_utils pdftk gnuplot pdfchain hdfview
+          davinci-resolve
+          texliveFull
+          # math, physics and chemistry
+          octaveFull root ovito localPackages.vesta localPackages.vaspkit localPackages.v-sim
+          (mathematica.overrideAttrs (prev: { postInstall = prev.postInstall or "" + "ln -s ${src} $out/src"; }))
+          (quantum-espresso.override { stdenv = gcc14Stdenv; gfortran = gfortran14; }) jmol mpi
+          # virtualization
+          # TODO: broken on python 3.12: playonlinux
+          wineWowPackages.stagingFull virt-viewer bottles genymotion
+          # media
+          nur-xddxdd.svp
+          # for kdenlive auto subtitle
+          openai-whisper
+        ]
+          ++ (builtins.filter (p: !((p.meta.broken or false) || (builtins.elem p.pname or null [ "falkon" "kalzium" ])))
+            (builtins.filter inputs.lib.isDerivation (builtins.attrValues kdePackages.kdeGear)));
+          # TODO: fix it
+          # ++ inputs.lib.optional (inputs.config.nixos.system.nixpkgs.march != null) localPackages.mumax;
+        _pythonPackages = [(pythonPackages: with pythonPackages;
+        [
+          phonopy scipy scikit-learn jupyterlab autograd # localPackages.pix2tex
+          # TODO: broken on python 3.12: tensorflow keras
+        ])];
+      };
+      user.sharedModules =
+      [{
+        config.programs =
+        {
+          plasma = 
+          {
+            enable = true;
+            configFile =
+            {
+              plasma-localerc = { Formats.LANG.value = "en_US.UTF-8"; Translations.LANGUAGE.value = "zh_CN"; };
+              baloofilerc."Basic Settings".Indexing-Enabled.value = false;
+            };
+            powerdevil =
+              let config =
+              {
+                autoSuspend.action = "nothing";
+                dimDisplay.enable = false;
+                powerButtonAction = "turnOffScreen";
+                turnOffDisplay.idleTimeout = "never";
+                whenLaptopLidClosed = "turnOffScreen";
+              };
+              in { AC = config; battery = config; lowBattery = config; };
+          };
+          obs-studio =
+          {
+            enable = true;
+            plugins = with inputs.pkgs.obs-studio-plugins; [ wlrobs obs-vaapi obs-nvfbc droidcam-obs obs-vkcapture ];
+          };
+        };
+      }];
     };
     programs =
     {
       adb.enable = true;
       wireshark = { enable = true; package = inputs.pkgs.wireshark; };
       yubikey-touch-detector.enable = true;
+      kdeconnect.enable = true;
+      anime-game-launcher = { enable = true; package = inputs.pkgs.anime-game-launcher; };
+      honkers-railway-launcher = { enable = true; package = inputs.pkgs.honkers-railway-launcher; };
+      sleepy-launcher = { enable = true; package = inputs.pkgs.sleepy-launcher; };
     };
     nixpkgs.overlays = [(final: prev:
     {

modules/packages/firefox.nix

@@ -1,6 +1,11 @@
 inputs:
 {
-  config = inputs.lib.mkIf (builtins.elem "desktop" inputs.config.nixos.packages._packageSets)
+  options.nixos.packages.firefox = let inherit (inputs.lib) mkOption types; in mkOption
+  {
+    type = types.nullOr (types.submodule {});
+    default = if inputs.config.nixos.system.gui.enable then {} else null;
+  };
+  config = let inherit (inputs.config.nixos.packages) firefox; in inputs.lib.mkIf (firefox != null)
   {
     # still enable global firefox, to install language packs
     programs.firefox =

modules/packages/flatpak.nix

@@ -1,11 +1,12 @@
 inputs:
 {
-  config = inputs.lib.mkIf (builtins.elem "desktop-extra" inputs.config.nixos.packages._packageSets)
+  options.nixos.packages.flatpak = let inherit (inputs.lib) mkOption types; in mkOption
   {
-    services.flatpak =
-    {
-      enable = true;
-      uninstallUnmanaged = true;
-    };
+    type = types.nullOr (types.submodule {});
+    default = if inputs.config.nixos.system.gui.enable then {} else null;
+  };
+  config = let inherit (inputs.config.nixos.packages) flatpak; in inputs.lib.mkIf (flatpak != null)
+  {
+    services.flatpak = { enable = true; uninstallUnmanaged = true; };
   };
 }

modules/packages/git.nix

@@ -1,6 +1,8 @@
 inputs:
 {
-  config = inputs.lib.mkIf (builtins.elem "server" inputs.config.nixos.packages._packageSets)
+  options.nixos.packages.git = let inherit (inputs.lib) mkOption types; in mkOption
+    { type = types.nullOr (types.submodule {}); default = {}; };
+  config = let inherit (inputs.config.nixos.packages) git; in inputs.lib.mkIf (git != null)
   {
     programs.git =
     {
@@ -11,7 +13,10 @@ inputs:
       {
         init.defaultBranch = "main";
         core.quotepath = false;
+        lfs.ssh.automultiplex = false; # 避免 lfs 一直要求触摸 yubikey
+        receive.denyCurrentBranch = "warn"; # 允许 push 到非 bare 的仓库
       };
     };
+    nixos.packages.packages._packages = [ inputs.pkgs.localPackages.git-lfs-transfer ]; # make pure ssh lfs work
   };
 }

modules/packages/gpg.nix

@@ -1,6 +1,8 @@
 inputs:
 {
-  config = inputs.lib.mkIf (builtins.elem "server" inputs.config.nixos.packages._packageSets)
+  options.nixos.packages.gpg = let inherit (inputs.lib) mkOption types; in mkOption
+    { type = types.nullOr (types.submodule {}); default = {}; };
+  config = let inherit (inputs.config.nixos.packages) gpg; in inputs.lib.mkIf (gpg != null)
   {
     programs.gnupg.agent.enable = true;
   };

modules/packages/plasma.nix

@@ -1,18 +0,0 @@
-inputs:
-{
-  config = inputs.lib.mkIf (builtins.elem "desktop" inputs.config.nixos.packages._packageSets)
-  {
-    nixos.user.sharedModules =
-    [{
-      config.programs.plasma = 
-      {
-        enable = true;
-        configFile =
-        {
-          plasma-localerc = { Formats.LANG.value = "en_US.UTF-8"; Translations.LANGUAGE.value = "zh_CN"; };
-          baloofilerc."Basic Settings".Indexing-Enabled.value = false;
-        };
-      };
-    }];
-  };
-}

modules/packages/server-extra.nix

@@ -1,32 +0,0 @@
-inputs:
-{
-  config = inputs.lib.mkIf (builtins.elem "server-extra" inputs.config.nixos.packages._packageSets)
-  {
-    nixos =
-    {
-      packages = with inputs.pkgs;
-      {
-        _packages =
-        [
-          # shell
-          ksh
-          # basic tools
-          neofetch
-          # office
-          todo-txt-cli pdfgrep ffmpeg-full
-          # development
-          hexo-cli gh nix-init
-        ]
-        ++ (with inputs.config.boot.kernelPackages; [ cpupower usbip ])
-        ++ (inputs.lib.optional (inputs.config.nixos.system.nixpkgs.arch == "x86_64") rar);
-        _pythonPackages = [(pythonPackages: with pythonPackages;
-        [
-          openai python-telegram-bot fastapi pypdf2 pandas matplotlib plotly gunicorn redis jinja2
-          certifi charset-normalizer idna orjson psycopg2 inquirerpy requests tqdm pydbus
-        ])];
-      };
-    };
-    programs.yazi.enable = true;
-    services.fwupd.enable = true;
-  };
-}

modules/packages/server.nix

@@ -1,41 +1,53 @@
 inputs:
 {
-  config = inputs.lib.mkIf (builtins.elem "server" inputs.config.nixos.packages._packageSets)
+  options.nixos.packages.server = let inherit (inputs.lib) mkOption types; in mkOption
+    { type = types.nullOr (types.submodule {}); default = {}; };
+  config = let inherit (inputs.config.nixos.packages) server; in inputs.lib.mkIf (server != null)
   {
-    nixos.packages._packages = with inputs.pkgs;
-    [
-      # basic tools
-      beep dos2unix gnugrep pv tmux screen parallel tldr cowsay jq zellij ipfetch localPackages.pslist
-      fastfetch reptyr nushell duc ncdu progress
-      # lsxx
-      pciutils usbutils lshw util-linux lsof dmidecode lm_sensors
-      # top
-      iotop iftop htop btop powertop s-tui
-      # editor
-      nano bat
-      # downloader
-      wget aria2 curl yt-dlp
-      # file manager
-      tree eza trash-cli lsd broot file xdg-ninja mlocate
-      # compress
-      pigz upx unzip zip lzip p7zip
-      # file system management
-      sshfs e2fsprogs duperemove compsize exfatprogs
-      # disk management
-      smartmontools hdparm
-      # encryption and authentication
-      apacheHttpd openssl ssh-to-age gnupg age sops pam_u2f yubico-piv-tool
-      # networking
-      ipset iptables iproute2 dig nettools traceroute tcping-go whois tcpdump nmap inetutils wireguard-tools
-      # nix tools
-      nix-output-monitor nix-tree ssh-to-age (callPackage "${inputs.topInputs.nix-fast-build}" {}) nix-inspect
-      # development
-      gdb try inputs.topInputs.plasma-manager.packages.${inputs.pkgs.system}.rc2nix
-      # stupid things
-      toilet lolcat
-    ]
-    ++ (with inputs.config.boot.kernelPackages; [ cpupower usbip ])
-    ++ (inputs.lib.optional (inputs.config.nixos.system.nixpkgs.arch == "x86_64") rar);
+    nixos.packages.packages =
+    {
+      _packages = with inputs.pkgs;
+      [
+        # basic tools
+        beep dos2unix gnugrep pv tmux screen parallel tldr cowsay jq zellij ipfetch localPackages.pslist
+        fastfetch reptyr nushell duc ncdu progress libva-utils ksh neofetch
+        # lsxx
+        pciutils usbutils lshw util-linux lsof dmidecode lm_sensors
+        # top
+        iotop iftop htop btop powertop s-tui
+        # editor
+        nano bat
+        # downloader
+        wget aria2 curl yt-dlp ffsend
+        # file manager
+        tree eza trash-cli lsd broot file xdg-ninja mlocate
+        # compress
+        pigz upx unzip zip lzip p7zip
+        # file system management
+        sshfs e2fsprogs duperemove compsize exfatprogs
+        # disk management
+        smartmontools hdparm
+        # encryption and authentication
+        apacheHttpd openssl ssh-to-age gnupg age sops pam_u2f yubico-piv-tool
+        # networking
+        ipset iptables iproute2 dig nettools traceroute tcping-go whois tcpdump nmap inetutils wireguard-tools
+        # nix tools
+        nix-output-monitor nix-tree ssh-to-age (callPackage "${inputs.topInputs.nix-fast-build}" {}) nix-inspect
+        # development
+        gdb try inputs.topInputs.plasma-manager.packages.${inputs.pkgs.system}.rc2nix rr hexo-cli gh nix-init hugo
+        # stupid things
+        toilet lolcat
+        # office
+        todo-txt-cli pdfgrep ffmpeg-full
+      ]
+        ++ (with inputs.config.boot.kernelPackages; [ cpupower usbip ])
+        ++ (inputs.lib.optional (inputs.config.nixos.system.nixpkgs.arch == "x86_64") rar);
+      _pythonPackages = [(pythonPackages: with pythonPackages;
+      [
+        openai python-telegram-bot fastapi pypdf2 pandas matplotlib plotly gunicorn redis jinja2
+        certifi charset-normalizer idna orjson psycopg2 inquirerpy requests tqdm pydbus
+      ])];
+    };
     programs =
     {
       nix-index-database.comma.enable = true;
@@ -44,8 +56,13 @@ inputs:
       autojump.enable = true;
       direnv = { enable = true; nix-direnv.enable = true; };
       mosh.enable = true;
+      yazi.enable = true;
+    };
+    services =
+    {
+      udev.packages = with inputs.pkgs; [ yubikey-personalization libfido2 ];
+      fwupd.enable = true;
     };
-    services.udev.packages = with inputs.pkgs; [ yubikey-personalization libfido2 ];
     home-manager = { useGlobalPkgs = true; useUserPackages = true; };
   };
 }

modules/packages/ssh.nix

@@ -1,10 +1,22 @@
 inputs:
 {
-  config = inputs.lib.mkIf (builtins.elem "server" inputs.config.nixos.packages._packageSets)
+  options.nixos.packages.ssh = let inherit (inputs.lib) mkOption types; in mkOption
+    { type = types.nullOr (types.submodule {}); default = {}; };
+  config = let inherit (inputs.config.nixos.packages) ssh; in inputs.lib.mkIf (ssh != null)
   {
     services.openssh.knownHosts =
       let servers =
       {
+        vps4 =
+        {
+          ed25519 = "AAAAC3NzaC1lZDI1NTE5AAAAIF7Y0tjt1XLPjqJ8HEB26W9jVfJafRQ3pv5AbPaxEc/Z";
+          hostnames = [ "vps4.chn.moe" "104.234.37.61" ];
+        };
+        "initrd.vps4" =
+        {
+          ed25519 = "AAAAC3NzaC1lZDI1NTE5AAAAIJkOPTFvX9f+Fn/KHOIvUgoRiJfq02T42lVGQhpMUGJq";
+          hostnames = [ "initrd.vps4.chn.moe" "104.234.37.61" ];
+        };
         vps6 =
         {
           ed25519 = "AAAAC3NzaC1lZDI1NTE5AAAAIO5ZcvyRyOnUCuRtqrM/Qf+AdUe3a5bhbnfyhw2FSLDZ";
@@ -28,17 +40,17 @@ inputs:
         nas =
         {
           ed25519 = "AAAAC3NzaC1lZDI1NTE5AAAAIIktNbEcDMKlibXg54u7QOLt0755qB/P4vfjwca8xY6V";
-          hostnames = [ "wireguard.nas.chn.moe" "[office.chn.moe]:5440" "192.168.1.185" "192.168.83.4" ];
+          hostnames = [ "wireguard.nas.chn.moe" "192.168.1.2" "192.168.83.4" ];
         };
         "initrd.nas" =
         {
           ed25519 = "AAAAC3NzaC1lZDI1NTE5AAAAIAoMu0HEaFQsnlJL0L6isnkNZdRq0OiDXyaX3+fl3NjT";
-          hostnames = [ "initrd.nas.chn.moe" "[office.chn.moe]:5440" "192.168.1.185" ];
+          hostnames = [ "initrd.nas.chn.moe" "192.168.1.2" ];
         };
         surface =
         {
           ed25519 = "AAAAC3NzaC1lZDI1NTE5AAAAIFdm3DcfHdcLP0oSpVrWwIZ/b9lZuakBSPwCFz2BdTJ7";
-          hostnames = [ "192.168.1.166" "wireguard.surface.chn.moe" "192.168.83.5" ];
+          hostnames = [ "192.168.1.4" "wireguard.surface.chn.moe" "192.168.83.5" ];
         };
         pc =
         {
@@ -97,7 +109,7 @@ inputs:
         (
           (builtins.map
             (host: { name = host; value = { inherit host; hostname = "${host}.chn.moe"; }; })
-            [ "vps6" "wireguard.vps6" "vps7" "wireguard.vps7" "wireguard.nas" ])
+            [ "vps4" "vps6" "wireguard.vps6" "vps7" "wireguard.vps7" "wireguard.nas" ])
           ++ (builtins.map
             (host: { name = host; value = { inherit host; hostname = "${host}.chn.moe"; forwardX11 = true; }; })
             [ "wireguard.pc" "wireguard.surface" "wireguard.xmupc1" "wireguard.xmupc2" ])
@@ -118,9 +130,9 @@ inputs:
         // rec {
           xmupc1 = { host = "xmupc1"; hostname = "xmupc1.chn.moe"; port = 6007; forwardX11 = true; };
           xmupc2 = { host = "xmupc2"; hostname = "xmupc2.chn.moe"; port = 6394; forwardX11 = true; };
-          nas = { host = "nas"; hostname = "office.chn.moe"; port = 5440; };
-          pc = { host = "pc"; hostname = "office.chn.moe"; port = 3673; forwardX11 = true; };
-          surface = { host = "surface"; hostname = "192.168.1.166"; forwardX11 = true; };
+          nas = { host = "nas"; hostname = "192.168.1.2"; forwardX11 = true; };
+          pc = { host = "pc"; hostname = "192.168.1.3"; forwardX11 = true; };
+          surface = { host = "surface"; hostname = "192.168.1.4"; forwardX11 = true; };
           gitea = { host = "gitea"; hostname = "ssh.git.chn.moe"; };
           jykang =
           {
@@ -130,7 +142,7 @@ inputs:
             forwardAgent = true;
             extraOptions.AddKeysToAgent = "yes";
           };
-          "internal.jykang" = jykang // { host = "internal.jykang"; proxyJump = "wireguard.nas"; };
+          "wireguard.jykang" = jykang // { host = "internal.jykang"; proxyJump = "wireguard.xmupc1"; };
         };
       };
     })];

modules/packages/steam.nix

@@ -1,6 +1,11 @@
 inputs:
 {
-  config = inputs.lib.mkIf (builtins.elem "desktop-extra" inputs.config.nixos.packages._packageSets)
+  options.nixos.packages.steam = let inherit (inputs.lib) mkOption types; in mkOption
+  {
+    type = types.nullOr (types.submodule {});
+    default = if inputs.config.nixos.system.gui.enable then {} else null;
+  };
+  config = let inherit (inputs.config.nixos.packages) steam; in inputs.lib.mkIf (steam != null)
   {
     programs.steam =
     {
@@ -15,6 +20,12 @@ inputs:
           '';
         });
       });
+      extraPackages = [ inputs.pkgs.openssl_1_1 ];
+      extraCompatPackages = [ inputs.pkgs.proton-ge-bin ];
+      remotePlay.openFirewall = true;
+      protontricks.enable = true;
+      localNetworkGameTransfers.openFirewall = true;
+      dedicatedServer.openFirewall = true;
     };
   };
 }

modules/packages/vasp.nix

@@ -1,7 +1,14 @@
 inputs:
 {
-  config = inputs.lib.mkIf (builtins.elem "workstation" inputs.config.nixos.packages._packageSets)
+  options.nixos.packages.vasp = let inherit (inputs.lib) mkOption types; in mkOption
   {
-    nixos.packages._packages = with inputs.pkgs.localPackages.vasp; [ intel nvidia vtstscripts ];
+    type = types.nullOr (types.submodule {});
+    default = if inputs.config.nixos.system.gui.enable then {} else null;
+  };
+  # TODO: add more options to correctly configure VASP
+  config = let inherit (inputs.config.nixos.packages) vasp; in inputs.lib.mkIf (vasp != null)
+  {
+    nixos.packages.packages._packages = inputs.lib.optionals (inputs.config.nixos.system.nixpkgs.march != null)
+      (with inputs.pkgs.localPackages.vasp; [ intel nvidia vtstscripts ]);
   };
 }

modules/packages/vim.nix

@@ -1,6 +1,8 @@
 inputs:
 {
-  config = inputs.lib.mkIf (builtins.elem "server" inputs.config.nixos.packages._packageSets)
+  options.nixos.packages.vim = let inherit (inputs.lib) mkOption types; in mkOption
+    { type = types.nullOr (types.submodule {}); default = {}; };
+  config = let inherit (inputs.config.nixos.packages) vim; in inputs.lib.mkIf (vim != null)
   {
     nixos.user.sharedModules =
     [{

modules/packages/vscode.nix

@@ -1,8 +1,13 @@
 inputs:
 {
-  config = inputs.lib.mkIf (builtins.elem "desktop" inputs.config.nixos.packages._packageSets)
+  options.nixos.packages.vscode = let inherit (inputs.lib) mkOption types; in mkOption
   {
-    nixos.packages = with inputs.pkgs;
+    type = types.nullOr (types.submodule {});
+    default = if inputs.config.nixos.system.gui.enable then {} else null;
+  };
+  config = let inherit (inputs.config.nixos.packages) vscode; in inputs.lib.mkIf (vscode != null)
+  {
+    nixos.packages.packages = with inputs.pkgs;
     {
       _packages =
       [(

modules/packages/workstation.nix

@@ -1,62 +0,0 @@
-inputs:
-{
-  config = inputs.lib.mkIf (builtins.elem "workstation" inputs.config.nixos.packages._packageSets)
-  {
-    nixos =
-    {
-      packages = with inputs.pkgs;
-      {
-        _packages =
-        [
-          # password and key management
-          electrum jabref
-          # system management
-          wl-mirror nvtopPackages.full
-          # nix tools
-          nix-template nil pnpm-lock-export bundix
-          # instant messager
-          cinny-desktop nheko # qq nur-xddxdd.wechat-uos 
-          # development
-          jetbrains.clion android-studio dbeaver-bin cling fprettify aircrack-ng
-          # install per project
-          # clang-tools_16 ccls 
-          # media
-          nur-xddxdd.svp
-          # virtualization
-          wineWowPackages.stagingFull virt-viewer bottles # wine64
-          # text editor
-          appflowy notion-app-enhanced joplin-desktop standardnotes logseq
-          # math, physics and chemistry
-          (mathematica.overrideAttrs (prev: { postInstall = prev.postInstall or "" + "ln -s ${src} $out/src"; }))
-          (quantum-espresso.override { stdenv = gcc14Stdenv; gfortran = gfortran14; })
-          paraview jmol mpi localPackages.mumax
-          # encryption and password management
-          john crunch hashcat
-          # container and vm
-          genymotion davinci-resolve playonlinux
-          # browser
-          microsoft-edge tor-browser
-          # news
-          rssguard newsflash newsboat
-        ];
-        _pythonPackages = [(pythonPackages: with pythonPackages;
-        [
-          phonopy tensorflow keras scipy scikit-learn jupyterlab autograd # localPackages.pix2tex
-        ])];
-      };
-      user.sharedModules =
-      [{
-        config.programs.obs-studio =
-        {
-          enable = true;
-          plugins = with inputs.pkgs.obs-studio-plugins; [ wlrobs obs-vaapi obs-nvfbc droidcam-obs obs-vkcapture ];
-        };
-      }];
-    };
-    programs =
-    {
-      anime-game-launcher = { enable = true; package = inputs.pkgs.anime-game-launcher; };
-      honkers-railway-launcher = { enable = true; package = inputs.pkgs.honkers-railway-launcher; };
-    };
-  };
-}

modules/packages/zsh/default.nix

@@ -1,6 +1,8 @@
 inputs:
 {
-  config = inputs.lib.mkIf (builtins.elem "server" inputs.config.nixos.packages._packageSets)
+  options.nixos.packages.zsh = let inherit (inputs.lib) mkOption types; in mkOption
+    { type = types.nullOr (types.submodule {}); default = {}; };
+  config = let inherit (inputs.config.nixos.packages) zsh; in inputs.lib.mkIf (zsh != null)
   {
     nixos.user.sharedModules = [(home-inputs: { config.programs =
     {
@@ -37,11 +39,7 @@ inputs:
             name = "powerlevel10k";
             src = "${inputs.pkgs.zsh-powerlevel10k}/share/zsh-powerlevel10k";
           }
-          {
-            file = "p10k.zsh";
-            name = "powerlevel10k-config";
-            src = ./p10k-config;
-          }
+          { file = "p10k.zsh"; name = "powerlevel10k-config"; src = ./p10k-config; }
           {
             name = "zsh-lsd";
             src = inputs.pkgs.fetchFromGitHub
@@ -71,10 +69,7 @@ inputs:
       autosuggestions.enable = true;
       enableCompletion = true;
       ohMyZsh =
-      {
-        enable = true;
-        plugins = [ "git" "colored-man-pages" "extract" "history-substring-search" "autojump" ];
-      };
+        { enable = true; plugins = [ "git" "colored-man-pages" "extract" "history-substring-search" "autojump" ]; };
     };
   };
 }

modules/services/beesd.nix

@@ -41,6 +41,7 @@ inputs:
             "--thread-count" "${builtins.toString instance.value.threads or 1}"
             "--loadavg-target" "${builtins.toString instance.value.loadAverage or 1}"
             "--scan-mode" "3"
+            "--verbose" "6"
           ];
         };
       })

modules/services/fz-new-order/default.nix

@@ -1,10 +1,7 @@
 inputs:
 {
   options.nixos.services.fz-new-order = let inherit (inputs.lib) mkOption types; in mkOption
-  {
-    type = types.nullOr (types.submodule {});
-    default = null;
-  };
+    { type = types.nullOr (types.submodule {}); default = null; };
   config = let inherit (inputs.config.nixos.services) fz-new-order; in inputs.lib.mkIf (fz-new-order != null)
   {
     users =
@@ -72,7 +69,7 @@ inputs:
         "Z /var/lib/fz-new-order - fz-new-order fz-new-order"
       ];
     };
-    sops = let userNum = 6; configNum = 2; in
+    sops = let userNum = 5; configNum = 2; in
     {
       templates."fz-new-order/config.json" =
       {
@@ -80,7 +77,6 @@ inputs:
         group = inputs.config.users.users."fz-new-order".group;
         content = let placeholder = inputs.config.sops.placeholder; in builtins.toJSON
         {
-          manager = placeholder."fz-new-order/manager";
           token = placeholder."fz-new-order/token";
           uids = builtins.map (j: placeholder."fz-new-order/uids/user${builtins.toString j}")
             (builtins.genList (n: n) userNum);
@@ -92,7 +88,7 @@ inputs:
         };
       };
       secrets =
-        { "fz-new-order/manager" = {}; "fz-new-order/token" = {}; }
+        { "fz-new-order/token" = {}; }
         // (builtins.listToAttrs (builtins.map
           (i: { name = "fz-new-order/uids/user${toString i}"; value = {}; })
           (builtins.genList (n: n) userNum)))

modules/services/fz-new-order/main.cpp

@@ -48,7 +48,7 @@ std::string urlencode(std::string s)
 void oneshot
 (
   const std::string& username, const std::string& password, const std::string& comment,
-  const std::set<std::string>& wxuser, const std::set<std::string>& manager, const std::string& token
+  const std::set<std::string>& wxuser, const std::string& token
 )
 {
   httplib::Client fzclient("http://scmv9.fengzhansy.com:8882");
@@ -152,16 +152,6 @@ void oneshot
     for (const auto& order : order_list)
       if (!order_old.contains(order.first))
       {
-        for (const auto& user : manager)
-        {
-          auto path = fmt::format
-          (
-            "/api/send/message/?appToken={}&content={}&uid={}",
-            token, urlencode(fmt::format("push {}", order.first)), user
-          );
-          auto wxresult = wxclient.Get(path.c_str());
-        }
-
         auto body = fmt::format
         (
           "method=dgate&rand=1234&op=scmmgr_pcggl&nv%5B%5D=opmode&nv%5B%5D=ddsp_qry&nv%5B%5D=bill&nv%5B%5D={}",
@@ -248,7 +238,7 @@ int main(int argc, char** argv)
     oneshot
     (
       config["username"].asString(), config["password"].asString(), config["comment"].asString(),
-      uids, { configs["manager"].asString() }, configs["token"].asString()
+      uids, configs["token"].asString()
     );
 }
 

modules/services/meilisearch.nix

@@ -106,7 +106,8 @@ inputs:
         (inputs.localLib.attrsToList meilisearch.instances));
     };
     environment.persistence =
-      let inherit (inputs.config.nixos.system) impermanence; in inputs.lib.mkIf impermanence.enable
+      let inherit (inputs.config.nixos.system) impermanence;
+      in inputs.lib.mkIf (impermanence.enable && meilisearch.instances != {})
         { "${impermanence.nodatacow}".directories = [ "/var/lib/meilisearch" ]; };
   };
 }

modules/services/nextcloud.nix

@@ -42,36 +42,23 @@ inputs:
       secretFile = inputs.config.sops.templates."nextcloud/secret".path;
       extraApps =
         let
-          githubRelease = repo: file: "https://github.com/${repo}/releases/download/${file}";
-        in
-        {
-          # nix-prefetch-url --unpack
-          maps = inputs.pkgs.fetchNextcloudApp
+          version = inputs.lib.versions.major inputs.config.services.nextcloud.package.version;
+          info = builtins.fromJSON (builtins.readFile "${inputs.topInputs.nc4nix}/${version}.json");
+          getInfo = package:
           {
-            url = githubRelease "nextcloud/maps" "v1.4.0/maps-1.4.0.tar.gz";
-            sha256 = "1gqms3rrdpjmpb1h5d72b4lwbvsl8p10zwnkhgnsmvfcf93h3r1c";
-            license = "agpl3Only";
+            inherit (info.${package}) hash url description homepage;
+            appName = package;
+            appVersion = info.${package}.version;
+            license =
+              let
+                licenses = { agpl = "agpl3Only"; };
+                originalLincense = builtins.head info.${package}.licenses;
+              in licenses.${originalLincense} or originalLincense;
           };
-          phonetrack = inputs.pkgs.fetchNextcloudApp
-          {
-            url = githubRelease "julien-nc/phonetrack" "v0.8.1/phonetrack-0.8.1.tar.gz";
-            sha256 = "1i28xgzp85yb44ay2l2zw18fk00yd6fh6yddj92gdrljb3w9zpap";
-            license = "agpl3Only";
-          };
-          twofactor_webauthn = inputs.pkgs.fetchNextcloudApp
-          {
-            url = githubRelease "nextcloud-releases/twofactor_webauthn" "v1.4.0/twofactor_webauthn-v1.4.0.tar.gz";
-            sha256 = "0llxakzcdcy9hscyzw3na5zp1p57h03w5fmm0gs9g62k1b88k6kw";
-            license = "agpl3Only";
-          };
-          calendar = inputs.pkgs.fetchNextcloudApp
-          {
-            url = githubRelease "nextcloud-releases/calendar" "v4.7.6/calendar-v4.7.6.tar.gz";
-            sha256 = "09rsp5anpaqzwmrixza5qh12vmq9hd3an045064vm3rnynz537qc";
-            license = "agpl3Only";
-          };
-        };
-      };
+        in builtins.listToAttrs (builtins.map
+          (package: { name = package; value = inputs.pkgs.fetchNextcloudApp (getInfo package); })
+          [ "maps" "phonetrack" "twofactor_webauthn" "calendar" ]);
+    };
     nixos.services =
     {
       postgresql.instances.nextcloud = {};

modules/services/nginx/applications/blog.nix

@@ -1,17 +1,13 @@
 inputs:
 {
-  options.nixos.services.nginx.applications.blog = let inherit (inputs.lib) mkOption types; in
+  options.nixos.services.nginx.applications.blog = let inherit (inputs.lib) mkOption types; in mkOption
   {
-    enable = mkOption { type = types.bool; default = false; };
+    type = types.nullOr (types.submodule {});
+    default = null;
   };
-  config =
-    let
-      inherit (inputs.config.nixos.services.nginx.applications) blog;
-      inherit (inputs.lib) mkIf;
-    in mkIf blog.enable
+  config = let inherit (inputs.config.nixos.services.nginx.applications) blog; in inputs.lib.mkIf (blog != null)
     {
       nixos.services.nginx.https."blog.chn.moe".location."/".static =
-        { root = "/srv/blog"; index = [ "index.html" ]; };
-      systemd.tmpfiles.rules = [ "d /srv/blog 0700 nginx nginx" "Z /srv/blog - nginx nginx" ];
+        { root = builtins.toString inputs.topInputs.self.packages.x86_64-linux.blog; index = [ "index.html" ]; };
     };
 }

modules/services/nixseperatedebuginfo.nix

@@ -3,7 +3,7 @@ inputs:
   options.nixos.services.nixseparatedebuginfo = let inherit (inputs.lib) mkOption types; in mkOption
   {
     type = types.nullOr (types.submodule {});
-    default = if builtins.elem "desktop-extra" inputs.config.nixos.packages._packageSets then {} else null;
+    default = if inputs.config.nixos.system.gui.enable then {} else null;
   };
   config =
     let inherit (inputs.config.nixos.services) nixseparatedebuginfo; in inputs.lib.mkIf (nixseparatedebuginfo != {})

modules/services/ollama.nix

@@ -0,0 +1,17 @@
+inputs:
+{
+  options.nixos.services.ollama = let inherit (inputs.lib) mkOption types; in mkOption
+    { type = types.nullOr (types.submodule {}); default = null; };
+  config = let inherit (inputs.config.nixos.services) ollama; in inputs.lib.mkIf (ollama != null)
+  {
+    services =
+    {
+      ollama.enable = true;
+      open-webui =
+        { enable = true; package = inputs.pkgs.genericPackages.open-webui; environment.WEBUI_AUTH = "False"; };
+      nextjs-ollama-llm-ui.enable = true;
+    };
+    # TODO: broken in python 3.12
+    # nixos.packages._packages = [ inputs.pkgs.oterm ];
+  };
+}

modules/services/slurm.nix

@@ -116,7 +116,7 @@ inputs:
     };
     nixos =
     {
-      packages._packages = [(inputs.pkgs.localPackages.sbatch-tui.override { sbatchConfig =
+      packages.packages._packages = [(inputs.pkgs.localPackages.sbatch-tui.override { sbatchConfig =
       {
         cpuMpiThreads = slurm.cpu.mpiThreads;
         cpuOpenmpThreads = slurm.cpu.openmpThreads;

modules/services/snapper.nix

@@ -5,33 +5,25 @@ inputs:
     enable = mkOption { type = types.bool; default = false; };
     configs = mkOption { type = types.attrsOf types.nonEmptyStr; default.persistent = "/nix/persistent"; };
   };
-  config =
-    let
-      inherit (inputs.lib) mkMerge mkIf;
-      inherit (inputs.localLib) stripeTabs attrsToList;
-      inherit (inputs.config.nixos) services;
-      inherit (builtins) map listToAttrs toString;
-    in mkIf services.snapper.enable
-    {
-      services.snapper.configs =
-        let
-          f = (config:
-          {
-            inherit (config) name;
-            value =
-            {
-              SUBVOLUME = config.value;
-              TIMELINE_CREATE = true;
-              TIMELINE_CLEANUP = true;
-              TIMELINE_MIN_AGE = 1800;
-              TIMELINE_LIMIT_HOURLY = "10";
-              TIMELINE_LIMIT_DAILY = "7";
-              TIMELINE_LIMIT_WEEKLY = "1";
-              TIMELINE_LIMIT_MONTHLY = "0";
-              TIMELINE_LIMIT_YEARLY = "0";
-            };
-          });
-        in
-          listToAttrs (map f (attrsToList services.snapper.configs));
-    };
+  config = let inherit (inputs.config.nixos.services) snapper; in inputs.lib.mkIf snapper.enable
+  {
+    services.snapper.configs = builtins.listToAttrs (builtins.map
+      (config:
+      {
+        inherit (config) name;
+        value =
+        {
+          SUBVOLUME = config.value;
+          TIMELINE_CREATE = true;
+          TIMELINE_CLEANUP = true;
+          TIMELINE_MIN_AGE = 1800;
+          TIMELINE_LIMIT_HOURLY = 10;
+          TIMELINE_LIMIT_DAILY = 7;
+          TIMELINE_LIMIT_WEEKLY = 1;
+          TIMELINE_LIMIT_MONTHLY = 0;
+          TIMELINE_LIMIT_YEARLY = 0;
+        };
+      })
+      (inputs.localLib.attrsToList snapper.configs));
+  };
 }

modules/services/writefreely.nix

@@ -0,0 +1,38 @@
+inputs:
+{
+  options.nixos.services.writefreely = let inherit (inputs.lib) mkOption types; in mkOption
+  {
+    type = types.nullOr (types.submodule (submoduleInputs: { options =
+    {
+      hostname = mkOption { type = types.nonEmptyStr; default = "write.chn.moe"; };
+    };}));
+    default = null;
+  };
+  config = let inherit (inputs.config.nixos.services) writefreely; in inputs.lib.mkIf (writefreely != null)
+  {
+    services.writefreely =
+    {
+      enable = true;
+      settings = { server.port = 7264; app = { host = "https://${writefreely.hostname}"; federation = true; }; };
+      host = writefreely.hostname;
+      database = { type = "mysql"; passwordFile = inputs.config.sops.secrets."writefreely/mariadb".path; };
+      admin = { name = "chn"; initialPasswordFile = inputs.config.sops.secrets."writefreely/chn".path; };
+    };
+    systemd.services = { writefreely.after = [ "mysql.service" ]; writefreely-mysql-init.after = [ "mysql.service" ]; };
+    sops.secrets =
+    {
+      "writefreely/chn".owner = "writefreely";
+      "writefreely/mariadb" = { owner = "writefreely"; key = "mariadb/writefreely"; };
+    };
+    nixos.services =
+    {
+      mariadb.instances.writefreely = {};
+      nginx =
+      {
+        enable = true;
+        https.${writefreely.hostname}.location."/".proxy.upstream =
+          "http://127.0.0.1:${builtins.toString inputs.config.services.writefreely.settings.server.port}";
+      };
+    };
+  };
+}

modules/services/xray/default.nix

@@ -86,7 +86,7 @@ inputs:
               in
               builtins.toJSON
               {
-                log.loglevel = "info";
+                log.loglevel = "warning";
                 dns =
                 {
                   servers =

modules/system/binfmt.nix

@@ -1,10 +1,8 @@
 inputs:
 {
-  options.nixos.system.binfmt = let inherit (inputs.lib) mkOption types; in
-  {
-    enable = mkOption { type = types.bool; default = inputs.config.nixos.packages.packageSet == "workstation"; };
-  };
-  config = inputs.lib.mkIf inputs.config.nixos.system.binfmt.enable
+  options.nixos.system.binfmt = let inherit (inputs.lib) mkOption types; in mkOption
+    { type = types.nullOr (types.submodule {}); default = null; };
+  config = let inherit (inputs.config.nixos.system) binfmt; in inputs.lib.mkIf (binfmt != null)
   {
     programs.java = { enable = true; binfmt = true; };
     boot.binfmt.emulatedSystems = [ "aarch64-linux" "x86_64-windows" ];

modules/system/catppuccin.nix

@@ -4,7 +4,6 @@ inputs:
   {
     catppuccin.flavor = "latte";
     console.catppuccin.enable = true;
-    boot.loader.grub.catppuccin.enable = true;
     nixos.user.sharedModules =
     [{
       config =

modules/system/default.nix

@@ -8,7 +8,8 @@ inputs:
       dbus.implementation = "broker";
       fstrim.enable = true;
       acpid.enable = true;
-      kubo = { enable = true; autoMount = true; };
+      # TODO: set ipfs as separate service
+      # kubo = { enable = true; autoMount = true; };
     };
     time.timeZone = "Asia/Shanghai";
     boot =
@@ -43,8 +44,7 @@ inputs:
       };
       # pathsToLink = [ "/include" ];
     };
-    i18n =
-      { defaultLocale = "C.UTF-8"; supportedLocales = [ "zh_CN.UTF-8/UTF-8" "en_US.UTF-8/UTF-8" "C.UTF-8/UTF-8" ]; };
+    i18n = { defaultLocale = "C.UTF-8"; supportedLocales = [ "all" ]; };
     users.mutableUsers = false;
     virtualisation.oci-containers.backend = "docker";
     home-manager.sharedModules = [{ home.stateVersion = "22.11"; }];

modules/system/envfs.nix

@@ -1,10 +1,7 @@
 inputs:
 {
   options.nixos.system.envfs = let inherit (inputs.lib) mkOption types; in mkOption
-  {
-    type = types.nullOr (types.submodule {});
-    default = if inputs.config.nixos.packages.packageSet == "workstation" then {} else null;
-  };
+    { type = types.nullOr (types.submodule {}); default = null; };
   config = let inherit (inputs.config.nixos.system) envfs; in inputs.lib.mkIf (envfs != null) (inputs.lib.mkMerge
   [
     (builtins.elemAt inputs.topInputs.envfs.nixosModules.envfs.imports 0 inputs)

modules/system/fileSystems/default.nix

@@ -214,7 +214,7 @@ inputs:
           else
           {
             resumeDevice = fileSystems.resume.device;
-            kernelModules = [ "resume_offset=${fileSystems.resume.offset}" ];
+            kernelModules = [ "resume_offset=${builtins.toString fileSystems.resume.offset}" ];
           }
         );}
       )

modules/system/grub.nix

@@ -5,7 +5,7 @@ inputs:
     timeout = mkOption { type = types.int; default = 5; };
     windowsEntries = mkOption { type = types.attrsOf types.nonEmptyStr; default = {}; };
     # "efi" using efi, "efiRemovable" using efi with install grub removable, or dev path like "/dev/sda" using bios
-    installDevice = mkOption { type = types.str; };
+    installDevice = mkOption { type = types.str; default = "efi"; };
   };
   config = let inherit (inputs.config.nixos.system) grub; in inputs.lib.mkMerge
   [
@@ -23,11 +23,7 @@ inputs:
           efiSupport = builtins.elem grub.installDevice [ "efi" "efiRemovable" ];
           efiInstallAsRemovable = grub.installDevice == "efiRemovable";
         };
-        efi =
-        {
-          canTouchEfiVariables = grub.installDevice == "efi";
-          efiSysMountPoint = inputs.lib.mkIf (builtins.elem grub.installDevice [ "efi" "efiRemovable" ]) "/boot/efi";
-        };
+        efi.canTouchEfiVariables = grub.installDevice == "efi";
       };
     }
     # extra grub entries
@@ -36,7 +32,7 @@ inputs:
       {
         memtest86.enable = inputs.lib.mkIf (inputs.config.nixos.system.nixpkgs.arch == "x86_64") true;
         extraFiles = inputs.lib.mkIf (builtins.elem grub.installDevice [ "efi" "efiRemovable" ])
-          { "shell.efi" = "${inputs.pkgs.edk2-uefi-shell}/shell.efi"; };
+          { "shell.efi" = "${inputs.pkgs.genericPackages.edk2-uefi-shell}/shell.efi"; };
         extraEntries = inputs.lib.mkMerge (builtins.concatLists
         [
           (builtins.map

modules/system/gui.nix

@@ -11,17 +11,20 @@ inputs:
     services =
     {
       displayManager =
-        { sddm = { enable = true; wayland.enable = true; theme = "breeze"; }; defaultSession = "plasma"; };
+      {
+        sddm = { enable = inputs.lib.mkDefault true; wayland.enable = true; theme = "breeze"; };
+        defaultSession = "plasma";
+      };
       desktopManager.plasma6.enable = true;
       xserver.enable = true;
     };
-    systemd.services.display-manager.enable = gui.autoStart;
+    systemd.services.display-manager.enable = inputs.lib.mkDefault gui.autoStart;
     environment =
     {
       sessionVariables =
       {
-        "GTK_USE_PORTAL" = "1";
-        "NIXOS_OZONE_WL" = inputs.lib.mkIf gui.preferred "1";
+        GTK_USE_PORTAL = "1";
+        NIXOS_OZONE_WL = inputs.lib.mkIf gui.preferred "1";
       };
       plasma6.excludePackages = inputs.lib.mkIf (!gui.preferred) [ inputs.pkgs.kdePackages.plasma-nm ];
       persistence = let inherit (inputs.config.nixos.system) impermanence; in inputs.lib.mkIf impermanence.enable
@@ -33,7 +36,8 @@ inputs:
     xdg.portal.extraPortals = builtins.map (p: inputs.pkgs."xdg-desktop-portal-${p}") [ "gtk" "wlr" ];
     i18n.inputMethod =
     {
-      enabled = "fcitx5";
+      enable = true;
+      type = "fcitx5";
       fcitx5.addons = builtins.map (p: inputs.pkgs."fcitx5-${p}")
         [ "rime" "chinese-addons" "mozc" "nord" "material-color" ];
     };

modules/system/initrd.nix

@@ -11,6 +11,7 @@ inputs:
         default = [ "/nix/persistent/etc/ssh/initrd_ssh_host_ed25519_key" ];
       };
     };
+    unl0kr = mkOption { type = types.nullOr (types.submodule {}); default = null; };
   };
   config = let inherit (inputs.config.nixos.system) initrd; in inputs.lib.mkMerge
   [
@@ -32,9 +33,11 @@ inputs:
             # resolved does not work in initrd, causing network.target to fail
             services.resolved.enable = false;
           };
-          kernelParams = [ "ip=dhcp" ];
+          # ip=dhcp only attain ipv4
+          kernelParams = [ "ip=on" ];
         };
       }
     )
+    (inputs.lib.mkIf (initrd.unl0kr != null) { boot.initrd.unl0kr.enable = true; })
   ];
 }

modules/system/kernel/0001-drm-amdgpu-sdma5.2-limit-wptr-workaround-to-sdma-5.2.patch

@@ -0,0 +1,47 @@
+From 123c4d46272b7e72d7db3fe8b4131a8cc99613fb Mon Sep 17 00:00:00 2001
+From: Alex Deucher <alexander.deucher@amd.com>
+Date: Wed, 14 Aug 2024 10:28:24 -0400
+Subject: [PATCH] drm/amdgpu/sdma5.2: limit wptr workaround to sdma 5.2.1
+
+The workaround seems to cause stability issues on other
+SDMA 5.2.x IPs.
+
+Fixes: a03ebf116303 ("drm/amdgpu/sdma5.2: Update wptr registers as well as doorbell")
+Closes: https://gitlab.freedesktop.org/drm/amd/-/issues/3556
+Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
+---
+ drivers/gpu/drm/amd/amdgpu/sdma_v5_2.c | 18 ++++++++++--------
+ 1 file changed, 10 insertions(+), 8 deletions(-)
+
+diff --git a/drivers/gpu/drm/amd/amdgpu/sdma_v5_2.c b/drivers/gpu/drm/amd/amdgpu/sdma_v5_2.c
+index d740255edf5a..bc9b240a3488 100644
+--- a/drivers/gpu/drm/amd/amdgpu/sdma_v5_2.c
++++ b/drivers/gpu/drm/amd/amdgpu/sdma_v5_2.c
+@@ -225,14 +225,16 @@ static void sdma_v5_2_ring_set_wptr(struct amdgpu_ring *ring)
+ 		DRM_DEBUG("calling WDOORBELL64(0x%08x, 0x%016llx)\n",
+ 				ring->doorbell_index, ring->wptr << 2);
+ 		WDOORBELL64(ring->doorbell_index, ring->wptr << 2);
+-		/* SDMA seems to miss doorbells sometimes when powergating kicks in.
+-		 * Updating the wptr directly will wake it. This is only safe because
+-		 * we disallow gfxoff in begin_use() and then allow it again in end_use().
+-		 */
+-		WREG32(sdma_v5_2_get_reg_offset(adev, ring->me, mmSDMA0_GFX_RB_WPTR),
+-		       lower_32_bits(ring->wptr << 2));
+-		WREG32(sdma_v5_2_get_reg_offset(adev, ring->me, mmSDMA0_GFX_RB_WPTR_HI),
+-		       upper_32_bits(ring->wptr << 2));
++		if (amdgpu_ip_version(adev, SDMA0_HWIP, 0) == IP_VERSION(5, 2, 1)) {
++			/* SDMA seems to miss doorbells sometimes when powergating kicks in.
++			 * Updating the wptr directly will wake it. This is only safe because
++			 * we disallow gfxoff in begin_use() and then allow it again in end_use().
++			 */
++			WREG32(sdma_v5_2_get_reg_offset(adev, ring->me, mmSDMA0_GFX_RB_WPTR),
++			       lower_32_bits(ring->wptr << 2));
++			WREG32(sdma_v5_2_get_reg_offset(adev, ring->me, mmSDMA0_GFX_RB_WPTR_HI),
++			       upper_32_bits(ring->wptr << 2));
++		}
+ 	} else {
+ 		DRM_DEBUG("Not using doorbell -- "
+ 				"mmSDMA%i_GFX_RB_WPTR == 0x%08x "
+-- 
+2.46.0
+

modules/system/kernel/btrfs.patch

@@ -0,0 +1,141 @@
+From ae1e766f623f7a2a889a0b09eb076dd9a60efbe9 Mon Sep 17 00:00:00 2001
+From: Filipe Manana <fdmanana@suse.com>
+Date: Sun, 11 Aug 2024 11:53:42 +0100
+Subject: btrfs: only run the extent map shrinker from kswapd tasks
+
+Currently the extent map shrinker can be run by any task when attempting
+to allocate memory and there's enough memory pressure to trigger it.
+
+To avoid too much latency we stop iterating over extent maps and removing
+them once the task needs to reschedule. This logic was introduced in commit
+b3ebb9b7e92a ("btrfs: stop extent map shrinker if reschedule is needed").
+
+While that solved high latency problems for some use cases, it's still
+not enough because with a too high number of tasks entering the extent map
+shrinker code, either due to memory allocations or because they are a
+kswapd task, we end up having a very high level of contention on some
+spin locks, namely:
+
+1) The fs_info->fs_roots_radix_lock spin lock, which we need to find
+   roots to iterate over their inodes;
+
+2) The spin lock of the xarray used to track open inodes for a root
+   (struct btrfs_root::inodes) - on 6.10 kernels and below, it used to
+   be a red black tree and the spin lock was root->inode_lock;
+
+3) The fs_info->delayed_iput_lock spin lock since the shrinker adds
+   delayed iputs (calls btrfs_add_delayed_iput()).
+
+Instead of allowing the extent map shrinker to be run by any task, make
+it run only by kswapd tasks. This still solves the problem of running
+into OOM situations due to an unbounded extent map creation, which is
+simple to trigger by direct IO writes, as described in the changelog
+of commit 956a17d9d050 ("btrfs: add a shrinker for extent maps"), and
+by a similar case when doing buffered IO on files with a very large
+number of holes (keeping the file open and creating many holes, whose
+extent maps are only released when the file is closed).
+
+Reported-by: kzd <kzd@56709.net>
+Link: https://bugzilla.kernel.org/show_bug.cgi?id=219121
+Reported-by: Octavia Togami <octavia.togami@gmail.com>
+Link: https://lore.kernel.org/linux-btrfs/CAHPNGSSt-a4ZZWrtJdVyYnJFscFjP9S7rMcvEMaNSpR556DdLA@mail.gmail.com/
+Fixes: 956a17d9d050 ("btrfs: add a shrinker for extent maps")
+CC: stable@vger.kernel.org # 6.10+
+Tested-by: kzd <kzd@56709.net>
+Tested-by: Octavia Togami <octavia.togami@gmail.com>
+Signed-off-by: Filipe Manana <fdmanana@suse.com>
+Reviewed-by: David Sterba <dsterba@suse.com>
+Signed-off-by: David Sterba <dsterba@suse.com>
+---
+ fs/btrfs/extent_map.c | 22 ++++++----------------
+ fs/btrfs/super.c      | 10 ++++++++++
+ 2 files changed, 16 insertions(+), 16 deletions(-)
+
+diff --git a/fs/btrfs/extent_map.c b/fs/btrfs/extent_map.c
+index 23b65dc73c0048..10ac5f657e3889 100644
+--- a/fs/btrfs/extent_map.c
++++ b/fs/btrfs/extent_map.c
+@@ -1147,8 +1147,7 @@ static long btrfs_scan_inode(struct btrfs_inode *inode, struct btrfs_em_shrink_c
+ 		return 0;
+ 
+ 	/*
+-	 * We want to be fast because we can be called from any path trying to
+-	 * allocate memory, so if the lock is busy we don't want to spend time
++	 * We want to be fast so if the lock is busy we don't want to spend time
+ 	 * waiting for it - either some task is about to do IO for the inode or
+ 	 * we may have another task shrinking extent maps, here in this code, so
+ 	 * skip this inode.
+@@ -1191,9 +1190,7 @@ next:
+ 		/*
+ 		 * Stop if we need to reschedule or there's contention on the
+ 		 * lock. This is to avoid slowing other tasks trying to take the
+-		 * lock and because the shrinker might be called during a memory
+-		 * allocation path and we want to avoid taking a very long time
+-		 * and slowing down all sorts of tasks.
++		 * lock.
+ 		 */
+ 		if (need_resched() || rwlock_needbreak(&tree->lock))
+ 			break;
+@@ -1222,12 +1219,7 @@ static long btrfs_scan_root(struct btrfs_root *root, struct btrfs_em_shrink_ctx
+ 		if (ctx->scanned >= ctx->nr_to_scan)
+ 			break;
+ 
+-		/*
+-		 * We may be called from memory allocation paths, so we don't
+-		 * want to take too much time and slowdown tasks.
+-		 */
+-		if (need_resched())
+-			break;
++		cond_resched();
+ 
+ 		inode = btrfs_find_first_inode(root, min_ino);
+ 	}
+@@ -1285,14 +1277,12 @@ long btrfs_free_extent_maps(struct btrfs_fs_info *fs_info, long nr_to_scan)
+ 							   ctx.last_ino);
+ 	}
+ 
+-	/*
+-	 * We may be called from memory allocation paths, so we don't want to
+-	 * take too much time and slowdown tasks, so stop if we need reschedule.
+-	 */
+-	while (ctx.scanned < ctx.nr_to_scan && !need_resched()) {
++	while (ctx.scanned < ctx.nr_to_scan) {
+ 		struct btrfs_root *root;
+ 		unsigned long count;
+ 
++		cond_resched();
++
+ 		spin_lock(&fs_info->fs_roots_radix_lock);
+ 		count = radix_tree_gang_lookup(&fs_info->fs_roots_radix,
+ 					       (void **)&root,
+diff --git a/fs/btrfs/super.c b/fs/btrfs/super.c
+index 83478deada3bd2..11044e9e2cb110 100644
+--- a/fs/btrfs/super.c
++++ b/fs/btrfs/super.c
+@@ -28,6 +28,7 @@
+ #include <linux/btrfs.h>
+ #include <linux/security.h>
+ #include <linux/fs_parser.h>
++#include <linux/swap.h>
+ #include "messages.h"
+ #include "delayed-inode.h"
+ #include "ctree.h"
+@@ -2409,6 +2410,15 @@ static long btrfs_free_cached_objects(struct super_block *sb, struct shrink_cont
+ 	const long nr_to_scan = min_t(unsigned long, LONG_MAX, sc->nr_to_scan);
+ 	struct btrfs_fs_info *fs_info = btrfs_sb(sb);
+ 
++	/*
++	 * We may be called from any task trying to allocate memory and we don't
++	 * want to slow it down with scanning and dropping extent maps. It would
++	 * also cause heavy lock contention if many tasks concurrently enter
++	 * here. Therefore only allow kswapd tasks to scan and drop extent maps.
++	 */
++	if (!current_is_kswapd())
++		return 0;
++
+ 	return btrfs_free_extent_maps(fs_info, nr_to_scan);
+ }
+ 
+-- 
+cgit 1.2.3-korg
+

modules/system/kernel/default.nix

@@ -4,10 +4,10 @@ inputs:
   {
     variant = mkOption
     {
-      type = types.enum [ "nixos" "xanmod-lts" "xanmod-latest" "cachyos" "cachyos-lto" "cachyos-server" ];
+      type = types.enum [ "nixos" "xanmod-lts" "xanmod-latest" "cachyos" "cachyos-lto" "cachyos-server" "zen" ];
       default = "xanmod-latest";
     };
-    patches = mkOption { type = types.listOf types.nonEmptyStr; default = [ "cjktty" ]; };
+    patches = mkOption { type = types.listOf types.nonEmptyStr; default = []; };
     modules =
     {
       install = mkOption { type = types.listOf types.str; default = []; };
@@ -47,6 +47,7 @@ inputs:
           cachyos-lto = inputs.pkgs.linuxPackages_cachyos-lto;
           cachyos-server = inputs.pkgs.linuxPackages_cachyos-server;
           rpi3 = inputs.pkgs.linuxPackages_rpi3;
+          zen = inputs.pkgs.linuxPackages_zen;
         }.${kernel.variant};
         kernelPatches =
           let
@@ -127,17 +128,26 @@ inputs:
                   let version = inputs.lib.versions.majorMinor inputs.config.boot.kernelPackages.kernel.version;
                   in ./hibernate-progress-${version}.patch;
               }];
+              amdgpu =
+              [{
+                name = "amdgpu";
+                patch = ./0001-drm-amdgpu-sdma5.2-limit-wptr-workaround-to-sdma-5.2.patch;
+              }];
+              # TODO: remove in 6.11
+              btrfs =
+              [{
+                name = "btrfs";
+                patch =
+                  let version = inputs.lib.versions.majorMinor inputs.config.boot.kernelPackages.kernel.version;
+                  in if version == "6.10" then ./btrfs.patch else null;
+              }];
             };
-          in builtins.concatLists (builtins.map (name: patches.${name}) kernel.patches);
+          in builtins.concatLists (builtins.map (name: patches.${name}) (kernel.patches ++ [ "btrfs" ]));
       };
     }
     (
-      inputs.lib.mkIf
-      (
-        inputs.lib.strings.hasPrefix "cachyos" kernel.variant
-        && builtins.elem "server-extra" inputs.config.nixos.packages._packageSets
-      )
-      { environment.systemPackages = [ inputs.pkgs.scx ]; }
+      inputs.lib.mkIf (inputs.lib.strings.hasPrefix "cachyos" kernel.variant)
+        { nixos.packages.packages._packages = [ inputs.pkgs.scx ]; }
     )
     (
       inputs.lib.mkIf (kernel.variant == "rpi3")

modules/system/kernel/hibernate-progress-6.10.patch

@@ -0,0 +1,128 @@
+diff --git a/kernel/power/swap.c b/kernel/power/swap.c
+index 5bc04bfe2db1..6e7b17b97de7 100644
+--- a/kernel/power/swap.c
++++ b/kernel/power/swap.c
+@@ -563,7 +563,7 @@ static int save_image(struct swap_map_handle *handle,
+ 
+ 	hib_init_batch(&hb);
+ 
+-	pr_info("Saving image data pages (%u pages)...\n",
++	pr_err("Saving image data pages (%u pages)...\n",
+ 		nr_to_write);
+ 	m = nr_to_write / 10;
+ 	if (!m)
+@@ -578,7 +578,7 @@ static int save_image(struct swap_map_handle *handle,
+ 		if (ret)
+ 			break;
+ 		if (!(nr_pages % m))
+-			pr_info("Image saving progress: %3d%%\n",
++			pr_err("Image saving progress: %3d%%\n",
+ 				nr_pages / m * 10);
+ 		nr_pages++;
+ 	}
+@@ -588,7 +588,7 @@ static int save_image(struct swap_map_handle *handle,
+ 	if (!ret)
+ 		ret = err2;
+ 	if (!ret)
+-		pr_info("Image saving done\n");
++		pr_err("Image saving done\n");
+ 	swsusp_show_speed(start, stop, nr_to_write, "Wrote");
+ 	return ret;
+ }
+@@ -795,8 +795,8 @@ static int save_compressed_image(struct swap_map_handle *handle,
+ 	 */
+ 	handle->reqd_free_pages = reqd_free_pages();
+ 
+-	pr_info("Using %u thread(s) for %s compression\n", nr_threads, hib_comp_algo);
+-	pr_info("Compressing and saving image data (%u pages)...\n",
++	pr_err("Using %u thread(s) for %s compression\n", nr_threads, hib_comp_algo);
++	pr_err("Compressing and saving image data (%u pages)...\n",
+ 		nr_to_write);
+ 	m = nr_to_write / 10;
+ 	if (!m)
+@@ -817,7 +817,7 @@ static int save_compressed_image(struct swap_map_handle *handle,
+ 				       data_of(*snapshot), PAGE_SIZE);
+ 
+ 				if (!(nr_pages % m))
+-					pr_info("Image saving progress: %3d%%\n",
++					pr_err("Image saving progress: %3d%%\n",
+ 						nr_pages / m * 10);
+ 				nr_pages++;
+ 			}
+@@ -888,9 +888,9 @@ static int save_compressed_image(struct swap_map_handle *handle,
+ 	if (!ret)
+ 		ret = err2;
+ 	if (!ret)
+-		pr_info("Image saving done\n");
++		pr_err("Image saving done\n");
+ 	swsusp_show_speed(start, stop, nr_to_write, "Wrote");
+-	pr_info("Image size after compression: %d kbytes\n",
++	pr_err("Image size after compression: %d kbytes\n",
+ 		(atomic_read(&compressed_size) / 1024));
+ 
+ out_clean:
+@@ -1105,7 +1105,7 @@ static int load_image(struct swap_map_handle *handle,
+ 	hib_init_batch(&hb);
+ 
+ 	clean_pages_on_read = true;
+-	pr_info("Loading image data pages (%u pages)...\n", nr_to_read);
++	pr_err("Loading image data pages (%u pages)...\n", nr_to_read);
+ 	m = nr_to_read / 10;
+ 	if (!m)
+ 		m = 1;
+@@ -1123,7 +1123,7 @@ static int load_image(struct swap_map_handle *handle,
+ 		if (ret)
+ 			break;
+ 		if (!(nr_pages % m))
+-			pr_info("Image loading progress: %3d%%\n",
++			pr_err("Image loading progress: %3d%%\n",
+ 				nr_pages / m * 10);
+ 		nr_pages++;
+ 	}
+@@ -1133,7 +1133,7 @@ static int load_image(struct swap_map_handle *handle,
+ 	if (!ret)
+ 		ret = err2;
+ 	if (!ret) {
+-		pr_info("Image loading done\n");
++		pr_err("Image loading done\n");
+ 		ret = snapshot_write_finalize(snapshot);
+ 		if (!ret && !snapshot_image_loaded(snapshot))
+ 			ret = -ENODATA;
+@@ -1328,8 +1328,8 @@ static int load_compressed_image(struct swap_map_handle *handle,
+ 	}
+ 	want = ring_size = i;
+ 
+-	pr_info("Using %u thread(s) for %s decompression\n", nr_threads, hib_comp_algo);
+-	pr_info("Loading and decompressing image data (%u pages)...\n",
++	pr_err("Using %u thread(s) for %s decompression\n", nr_threads, hib_comp_algo);
++	pr_err("Loading and decompressing image data (%u pages)...\n",
+ 		nr_to_read);
+ 	m = nr_to_read / 10;
+ 	if (!m)
+@@ -1459,7 +1459,7 @@ static int load_compressed_image(struct swap_map_handle *handle,
+ 				       data[thr].unc + off, PAGE_SIZE);
+ 
+ 				if (!(nr_pages % m))
+-					pr_info("Image loading progress: %3d%%\n",
++					pr_err("Image loading progress: %3d%%\n",
+ 						nr_pages / m * 10);
+ 				nr_pages++;
+ 
+@@ -1485,7 +1485,7 @@ static int load_compressed_image(struct swap_map_handle *handle,
+ 	}
+ 	stop = ktime_get();
+ 	if (!ret) {
+-		pr_info("Image loading done\n");
++		pr_err("Image loading done\n");
+ 		ret = snapshot_write_finalize(snapshot);
+ 		if (!ret && !snapshot_image_loaded(snapshot))
+ 			ret = -ENODATA;
+@@ -1593,7 +1593,7 @@ int swsusp_check(bool exclusive)
+ 		}
+ 		if (!error && swsusp_header->flags & SF_HW_SIG &&
+ 		    swsusp_header->hw_sig != swsusp_hardware_signature) {
+-			pr_info("Suspend image hardware signature mismatch (%08x now %08x); aborting resume.\n",
++			pr_err("Suspend image hardware signature mismatch (%08x now %08x); aborting resume.\n",
+ 				swsusp_header->hw_sig, swsusp_hardware_signature);
+ 			error = -EINVAL;
+ 		}

modules/system/networking.nix

@@ -37,7 +37,7 @@ inputs:
         "net.core.wmem_max" = 67108864;
         "net.ipv4.tcp_rmem" = "4096 87380 67108864";
         "net.ipv4.tcp_wmem" = "4096 65536 67108864";
-        "net.ipv4.tcp_mtu_probing" = true;
+        "net.ipv4.tcp_mtu_probing" = inputs.lib.mkDefault true;
         "net.ipv4.tcp_tw_reuse" = true;
         "net.ipv4.tcp_max_syn_backlog" = 8388608;
         "net.core.netdev_max_backlog" = 8388608;

modules/system/nix-ld.nix

@@ -1,10 +1,7 @@
 inputs:
 {
   options.nixos.system.nix-ld = let inherit (inputs.lib) mkOption types; in mkOption
-  {
-    type = types.nullOr (types.submodule {});
-    default = if inputs.config.nixos.packages.packageSet == "workstation" then {} else null;
-  };
+    { type = types.nullOr (types.submodule {}); default = null; };
   config = let inherit (inputs.config.nixos.system) nix-ld; in inputs.lib.mkIf (nix-ld != null)
   {
     programs.nix-ld = { enable = true; libraries = [ inputs.pkgs.steam-run.fhsenv ]; };