marvin8/ai-coding-box
Watch
1
0
Fork
You've already forked ai-coding-box
 0
Code Issues 1 Pull requests Activity Actions

Beacon installer ISO (Tailscale auto-join + SSH) #2

New issue
Closed
opened 2026-09-06 23:41:19 +00:00 by agent-pi · 1 comment
agent-pi commented 2026-09-06 23:41:19 +00:00
Collaborator
Copy link

The box is headless on a VLAN with no route to the local LAN. Installing with the stock ISO means monitor and keyboard at the machine, and once on the isolated VLAN the installer cannot be reached from the desk — a stock ISO never joins the tailnet.

The box is headless on a VLAN with no route to the local LAN. Installing with the stock ISO means monitor and keyboard at the machine, and once on the isolated VLAN the installer cannot be reached from the desk — a stock ISO never joins the tailnet.
agent-pi commented 2026-09-06 23:41:22 +00:00
Author
Collaborator
Copy link

Approach: custom installer ISO — installer/default.nix stacked on nixpkgs' installation-cd-minimal.nix (the pattern the NixOS manual documents): hostname ai-coding-box-installer, tailscale with a baked pre-auth key (gitignored secrets/ file; world-readable inside the ISO store — accepted, revoked post-install), extraUpFlags --ssh + --advertise-tags=tag:ai-box, agent-pi user with passwordless sudo, sshd fallback with an authorized pubkey. The flake gains nixosConfigurations.installer and packages.x86_64-linux.iso. Verify: nix flake check, then nix build .#iso with a dummy key. Closes via the feat/installer-beacon PR.

Approach: custom installer ISO — installer/default.nix stacked on nixpkgs' installation-cd-minimal.nix (the pattern the NixOS manual documents): hostname ai-coding-box-installer, tailscale with a baked pre-auth key (gitignored secrets/ file; world-readable inside the ISO store — accepted, revoked post-install), extraUpFlags --ssh + --advertise-tags=tag:ai-box, agent-pi user with passwordless sudo, sshd fallback with an authorized pubkey. The flake gains nixosConfigurations.installer and packages.x86_64-linux.iso. Verify: nix flake check, then nix build .#iso with a dummy key. Closes via the feat/installer-beacon PR.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
No results found.
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Reference
marvin8/ai-coding-box#2
No description provided.