Skip to main content

Nix fleet

shikanime-labs/machines is the source of truth for every host. Layout:

  • hosts/<name>/configuration.nix — per-host NixOS definition
  • hosts/telsha/darwin-configuration.nix — the nix-darwin host
  • hosts/<name>/users/<user>/home-configuration.nix — per-host Home Manager
  • hosts/<name>/facter.json — hardware facts (nixos-facter)
  • modules/nixos/ — shared Linux profiles (base, workstation, follower, distributed, nishir, ai)
  • modules/darwin/, modules/home/, modules/flake/ — darwin, Home Manager, and flake-parts glue
  • secrets/*.enc.yaml — sops-nix encrypted secrets, decrypted at activation time; some hosts materialize fragments via sops.templates

Key profiles:

  • ai.nix — runs the hermes-agent service fleet-wide and wires computer-use automation; the cua-driver binary (AT-SPI/D-Bus) is installed via flake/nixos.nix so hermes' computer-use extra can drive the desktop.
  • nishir.nix — the cluster node profile every RKE2 node imports.
  • distributed.nix — remote builders and build offload settings.

Flake outputs: nixosConfigurations.{ashira,manash,nalsha,fushi,minish,nemishi,sashina,kushira,nixtar}, darwinConfigurations.telsha, and packages.<system>.* (including the automata containerdisk).

Container images​

Two sibling repos build the fleet's OCI images from Nix:

  • wharf — builds OCI images from Nix flakes.
  • niximgs — a Bitnami-style registry of Nix-built images.

knix provides the opinionated RKE2 deployment module used to stand the cluster up on the Nix hosts.