Feature/vgpu

system/configuration.nix

@@ -4,6 +4,7 @@
 {
   config,
   pkgs,
+  lib,
   ...
 }: {
   imports = map (n: "${./modules}/${n}") (builtins.attrNames (builtins.readDir ./modules));
@@ -44,7 +45,7 @@
 
   boot.supportedFilesystems = ["ntfs"];
   boot.initrd.systemd.enable = true;
-  boot.kernelPackages = pkgs.linuxPackages_latest;
+  boot.kernelPackages = lib.mkDefault pkgs.linuxPackages_latest;
 
   services.udisks2.enable = true;
 

system/flake.nix

@@ -1,11 +1,13 @@
 {
-  inputs.nixpkgs.url = "github:nixos/nixpkgs/nixpkgs-unstable";
+  inputs.nixpkgs.url = "github:nixos/nixpkgs/nixos-23.05";
+  # inputs.nixpkgs.url = "github:nixos/nixpkgs/nixpkgs-unstable";
   inputs.nixpkgs-master.url = "github:nixos/nixpkgs/master";
   inputs.disko.url = "github:nix-community/disko";
   inputs.disko.inputs.nixpkgs.follows = "nixpkgs";
   inputs.impermanence.url = "github:nix-community/impermanence";
   inputs.sops-nix.url = "github:Mic92/sops-nix";
   inputs.sops-nix.inputs.nixpkgs.follows = "nixpkgs";
+  inputs.nvidia-vgpu.url = "github:danielfullmer/nixos-nvidia-vgpu";
 
   outputs = {
     self,
@@ -14,6 +16,7 @@
     disko,
     impermanence,
     sops-nix,
+    nvidia-vgpu,
   }: let
     #machinedir = ./machines
     lib = nixpkgs.lib;
@@ -24,6 +27,7 @@
           disko.nixosModules.disko
           impermanence.nixosModules.impermanence
           sops-nix.nixosModules.sops
+          nvidia-vgpu.nixosModules.nvidia-vgpu
           {
             options.booq.audio = lib.mkOption {
               default = "pulseaudio";

system/machines/leilasus/default.nix

@@ -11,8 +11,8 @@
     ./services.nix
     ./users.nix
     ./cinnamon.nix
-    ./gaming.nix
     ./amd.nix
   ];
   booq.sops.enable = false;
+  booq.gaming.enable = true;
 }

system/machines/silvio-pc/default.nix

@@ -6,6 +6,9 @@
   ...
 }: {
   booq.audio = "pipewire";
+  booq.gaming.enable = true;
+
+  boot.kernelPackages = pkgs.linuxPackages_5_4;
   # TODO: luks+yubikey+secureboot https://www.reddit.com/r/NixOS/comments/xrgszw/comment/iqf1gps/?utm_source=share&utm_medium=web3x&utm_name=web3xcss&utm_term=1&utm_content=share_button
   imports = [
     ./hardware-configuration.nix
@@ -14,6 +17,7 @@
     ./bootloader.nix
     ./services.nix
     ./virtualisation.nix
+    ./nvidia.nix
     ./impermanence.nix
     ./sops.nix
   ];

system/machines/silvio-pc/nvidia.nix

@@ -0,0 +1,76 @@
+{
+  lib,
+  pkgs,
+  config,
+  ...
+}: {
+  nixpkgs.allowUnfreePackages = [
+    "nvidia-.*"
+  ];
+
+  nixpkgs.config.cudaSupport = true;
+
+  # Enable OpenGL
+  hardware.opengl = {
+    enable = true;
+    driSupport = true;
+    driSupport32Bit = true;
+  };
+
+  services.xserver.videoDrivers = ["nvidia"];
+
+  hardware.nvidia = {
+    # Modesetting is required.
+    modesetting.enable = true;
+
+    # Nvidia power management. Experimental, and can cause sleep/suspend to fail.
+    powerManagement.enable = false;
+    # Fine-grained power management. Turns off GPU when not in use.
+    # Experimental and only works on modern Nvidia GPUs (Turing or newer).
+    powerManagement.finegrained = false;
+
+    # Use the NVidia open source kernel module (not to be confused with the
+    # independent third-party "nouveau" open source driver).
+    # Support is limited to the Turing and later architectures. Full list of
+    # supported GPUs is at:
+    # https://github.com/NVIDIA/open-gpu-kernel-modules#compatible-gpus
+    # Only available from driver 515.43.04+
+    # Currently alpha-quality/buggy, so false is currently the recommended setting.
+    open = false;
+
+    # Enable the Nvidia settings menu,
+    # accessible via `nvidia-settings`.
+    nvidiaSettings = true;
+
+    # Optionally, you may need to select the appropriate driver version for your specific GPU.
+    # package = config.boot.kernelPackages.nvidiaPackages.stable;
+
+    prime = {
+      sync.enable = true;
+
+      intelBusId = "PCI:0:2:0";
+      nvidiaBusId = "PCI:2:0:0";
+    };
+
+    vgpu = {
+      enable = true; # Enable NVIDIA KVM vGPU + GRID driver
+      unlock.enable = true; # Unlock vGPU functionality on consumer cards using DualCoder/vgpu_unlock project.
+    };
+  };
+
+  # CUDA
+  # boot.kernelModules = [ "nvidia-uvm" ];
+  # boot.blacklistedKernelModules = [ "nouveau" ];
+
+  nix = {
+    settings = {
+      substituters = [
+        "https://cuda-maintainers.cachix.org"
+      ];
+      trusted-public-keys = [
+        "cuda-maintainers.cachix.org-1:0dq3bujKpuEPMCX6U4WylrUDZ9JyUG0VpVZa7CNfq5E="
+      ];
+    };
+  };
+  # TODO: check out https://github.com/guibou/nixGL
+}

system/machines/silvio-pc/virtualisation.nix

@@ -8,5 +8,5 @@
 
   # Blacklist nvidia because it's annoying.
   # TODO: pcie passthrough using ie. https://github.com/CRTified/nur-packages
-  boot.blacklistedKernelModules = ["nvidia" "nouveau"];
+  # boot.blacklistedKernelModules = ["nvidia" "nouveau"];
 }

system/modules/gaming.nix

@@ -0,0 +1,21 @@
+{
+  lib,
+  config,
+  ...
+}: {
+  options.booq.gaming.enable = lib.mkOption {
+    default = false;
+    type = lib.types.bool;
+  };
+  config = lib.mkIf config.booq.gaming.enable {
+    nixpkgs.allowUnfreePackages = [
+      "steam(-.*)?"
+    ];
+
+    programs.steam = {
+      enable = true;
+      remotePlay.openFirewall = true;
+      dedicatedServer.openFirewall = true;
+    };
+  };
+}

system/modules/unfree.nix

@@ -0,0 +1,25 @@
+{
+  config,
+  lib,
+  ...
+}: let
+  inherit (lib) mkOption types;
+  cfg = config.nixpkgs.allowUnfreePackages;
+in {
+  options = {
+    nixpkgs.allowUnfreePackages = mkOption {
+      default = [];
+      type = types.listOf types.str;
+      description = "List of unfree packages allowed to be installed";
+      example = lib.literalExpression ''[ "slack" "discord" steam-.*" ]'';
+    };
+  };
+
+  config = {
+    nixpkgs.config.allowUnfreePredicate = pkg: let
+      pkgName = lib.getName pkg;
+      matchPkgs = reg: ! builtins.isNull (builtins.match reg pkgName);
+    in
+      builtins.any matchPkgs cfg;
+  };
+}

system/modules/users/default.nix

@@ -11,7 +11,7 @@
     extraGroups = ["wheel" "networkmanager"];
     shell = pkgs.nushell;
     openssh.authorizedKeys.keys = [
-    	"ssh-rsa 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"
+      "ssh-rsa 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"
     ];
   };