Whether to enable the validation of bootspec documents for each build. This will introduce Go in the build-time closure as we are relying on Cuelang for schema validation. Enable this option if you want to ascertain that your documents are correct .

The package to use for bootspec.

User-defined data that extends the bootspec document.

To reduce incompatibility and prevent names from clashing between applications, it is highly recommended to use a unique namespace for your extensions.

A list of additional packages supplying kernel modules.

Executable run as stage-2 PID 1, symlinked as ${config.system.build.toplevel}/init.

Whether to enable the NixOS initial RAM disk (initrd). This may be needed to perform some initialisation tasks (like mounting network/encrypted file systems) before continuing the boot process.

the initrd to use for your system... use a module to build one

The set of kernel modules in the initial ramdisk used during the boot process. This set must include all modules necessary for mounting the root device. That is, it should include modules for the physical device (e.g., SCSI drivers) and for the file system (e.g., ext3). The set specified here is automatically closed under the module dependency relation, i.e., all dependencies of the modules list here are included automatically. The modules listed here are available in the initrd, but are only loaded on demand (e.g., the ext3 module is loaded automatically when an ext3 filesystem is mounted, and modules for PCI devices are loaded when they match the PCI ID of a device in your system). To force a module to be loaded, include it in boot.initrd.kernelModules.

The compressor to use on the initrd image. May be any of:

• The name of one of the predefined compressors, see pkgs/build-support/kernel/initrd-compressor-meta.nix for the definitions.
• A function which, given the nixpkgs package set, returns the path to a compressor tool, e.g. pkgs: "${pkgs.pigz}/bin/pigz"
• (not recommended, because it does not work when cross-compiling) the full path to a compressor tool, e.g. "${pkgs.pigz}/bin/pigz"

The given program should read data from stdin and write it to stdout compressed.

Arguments to pass to the compressor for the initrd image, or null to use the compressor's defaults.

Contents of the initrd.

This option has no description.

This option has no description.

Set to true for unauthenticated emergency access to the initramfs rescue shell, and false or null for no access.

Can also be set to a hashed super user password to allow authenticated access to the rescue mode.

When access is denied, finix prints the failure reason on console and reboots after 10s instead of opening a shell.

Lines of shell commands that are run after coldbooting the device-manager and before mounting file-systems.

An attribute set of one-shot commands to run in sequence when entering a runlevel. run commands are guaranteed to be completed before running the next command. Useful when serialization is required.

See upstream documentation for additional details.

Whether to enable this stanza.

The command to execute.

See upstream documentation for details.

A human-readable description of this service, displayed by initctl.

A place for finit configuration options which have not been added to the nix module yet.

The instance identifier, derived from the attribute name if it contains an @ character.

The name of this stanza, derived from the attribute name.

Order of this run command in relation to the others. The semantics are the same as with lib.mkOrder. Smaller values have a greater priority.

See upstream documentation for details.

Shell commands executed as the main process.

Give this stanza a controlling terminal on the given device, connecting its stdin, stdout, and stderr to the TTY. May be a device node like /dev/ttyS0 or the special keyword @console.

See upstream documentation for additional details.

An attribute set of services, or daemons, to be monitored and automatically restarted if they exit prematurely.

See upstream documentation for additional details.

Whether to enable this stanza.

The command to execute.

See upstream documentation for details.

A human-readable description of this service, displayed by initctl.

A place for finit configuration options which have not been added to the nix module yet.

The instance identifier, derived from the attribute name if it contains an @ character.

The name of this stanza, derived from the attribute name.

See upstream documentation for details.

Enable endless restarts without counting toward the retry limit. When set, the service will be restarted indefinitely regardless of the restart limit.

The number of times finit tries to restart a crashing service. When this limit is reached the service is marked crashed and must be restarted manually with initctl restart NAME. When null, finit's built-in default applies.

See upstream documentation for details.

Give this stanza a controlling terminal on the given device, connecting its stdin, stdout, and stderr to the TTY. May be a device node like /dev/ttyS0 or the special keyword @console.

See upstream documentation for additional details.

An attribute set of one-shot commands to be executed by finit.

See upstream documentation for additional details.

Whether to enable this stanza.

The command to execute.

See upstream documentation for details.

A human-readable description of this service, displayed by initctl.

A place for finit configuration options which have not been added to the nix module yet.

The instance identifier, derived from the attribute name if it contains an @ character.

The name of this stanza, derived from the attribute name.

See upstream documentation for details.

Shell commands executed as the main process.

Give this stanza a controlling terminal on the given device, connecting its stdin, stdout, and stderr to the TTY. May be a device node like /dev/ttyS0 or the special keyword @console.

See upstream documentation for additional details.

An attribute set of TTYs that finit should manage.

See upstream documentation for additional details.

Whether to enable this stanza.

Baud rate for serial TTYs.

Specify an external getty, like agetty or the BusyBox getty.

See upstream documentation for details.

A human-readable description of this service, displayed by initctl.

Embedded systems may want to enable automatic device by supplying the special @console device. This works regardless weather the system uses ttyS0, ttyAMA0, ttyMXC0, or anything else. finit figures it out by querying sysfs: /sys/class/tty/console/active.

A place for finit configuration options which have not been added to the nix module yet.

Disables clearing the TTY after each session. Clearing the TTY when a user logs out is usually preferable.

Disables getty and /bin/login, and gives the user a root (login) shell on the given TTY device immediately. Needless to say, this is a rather insecure option, but can be very useful for developer builds, during board bringup, or similar.

No device node mode. This is insecure and intended only for board bringup or testing scenarios.

Disables the press Enter to activate console message before actually starting the getty program.

Start sulogin instead of a regular shell, requiring the root password. Useful for rescue/single-user mode.

See upstream documentation for details.

The TERM environment variable value for the TTY.

List of modules that are always loaded by the initrd.

Packages whose /bin is linked into the initramfs PATH.

Other initrd files to prepend to the final initrd we are building.

Whether to enable support for the 9p filesystem in the initial ramdisk.

Whether to enable support for the btrfs filesystem in the initial ramdisk.

Packages providing filesystem utilities for btrfs in the initial ramdisk.

Whether to enable support for the ext2 filesystem in the initial ramdisk.

Packages providing filesystem utilities for ext2 in the initial ramdisk.

Whether to enable support for the ext4 filesystem in the initial ramdisk.

Packages providing filesystem utilities for ext4 in the initial ramdisk.

Whether to enable support for the f2fs filesystem in the initial ramdisk.

Packages providing filesystem utilities for f2fs in the initial ramdisk.

Whether to enable support for the fuse filesystem in the initial ramdisk.

Whether to enable support for the iso9660 filesystem in the initial ramdisk.

Packages providing filesystem utilities for iso9660 in the initial ramdisk.

Whether to enable LUKS encrypted device support in the initial ramdisk.

Packages providing LUKS utilities in the initial ramdisk.

Whether to enable LVM support in the initial ramdisk.

Packages providing LVM utilities in the initial ramdisk.

Whether to enable support for bind mounts in the initial ramdisk.

This option has no description.

This option has no description.

Whether to enable support for the squashfs filesystem in the initial ramdisk.

Packages providing filesystem utilities for squashfs in the initial ramdisk.

Whether to enable support for the tmpfs filesystem in the initial ramdisk.

Whether to enable support for the vfat filesystem in the initial ramdisk.

Packages providing filesystem utilities for vfat in the initial ramdisk.

Whether to enable support for the xfs filesystem in the initial ramdisk.

Packages providing filesystem utilities for xfs in the initial ramdisk.

Whether to enable support for the zfs filesystem in the initial ramdisk.

Packages providing filesystem utilities for zfs in the initial ramdisk.

Whether to enable the Linux kernel. This is useful for systemd-like containers which do not require a kernel.

Provides a custom seed for the RANDSTRUCT security option of the Linux kernel. Note that RANDSTRUCT is only enabled in NixOS hardened kernels. Using a custom seed requires building the kernel and dependent packages locally, since this customization happens at build time.

Runtime parameters of the Linux kernel, as set by sysctl(8). Note that sysctl parameters names must be enclosed in quotes (e.g. "vm.swappiness" instead of vm.swappiness). The value of each parameter may be a string, integer, boolean, or null (signifying the option will not appear at all).