lament/pantheon

`ishtar` impermanence, and `jj` declared #89

Merged

lament merged 2 commits from ishtar-impermanence into main

2026-07-15 02:43:35 -05:00

lament commented

2026-07-15 01:45:19 -05:00

Owner

ishtar goes impermanent - tmpfs /, wiped every boot
- uefi-lvm: dropped the @ root subvol for a size=4G tmpfs /; @home/@nix/@persist survive, plus a new @log (nodatacow, matching the fleet's append-heavy journald)
- /var/lib/bluetooth -> /persist (gated on workstation.bluetooth) so pairings outlive the wipe
with ishtar in, every host is impermanent now - the role toggle is dead weight
- dropped roles.impermanent from athena/ishtar/minerva in directory.nix
- impermanence.nix: /persist.neededForBoot + environment.persistence.enable are unconditional now, per-host gate gone; neededForBoot also lifted out of ishtar's host config
jj becomes declared - nix-managed, and lint-gated since jj runs no git hooks
- new homeModules/jj: user/email, ui.default-command = log, and a jj fix nixfmt tool that closes the formatting half of the prek gate
- just push -> nix flake check before jj git pushing the current bookmark (deadnix/statix gate lives here); new just fetch forgets the now-merged bookmark after a fetch
cleanup: dropped networkmanager from lament's extraGroups
left for later: LUKS - uefi-lvm is still unencrypted, graduates to a uefi-luks layout when that rework lands

- `ishtar` goes impermanent - tmpfs `/`, wiped every boot - `uefi-lvm`: dropped the `@` root subvol for a `size=4G` tmpfs `/`; `@home`/`@nix`/`@persist` survive, plus a new `@log` (`nodatacow`, matching the fleet's append-heavy journald) - `/var/lib/bluetooth` -> `/persist` (gated on `workstation.bluetooth`) so pairings outlive the wipe - with `ishtar` in, every host is impermanent now - the role toggle is dead weight - dropped `roles.impermanent` from `athena`/`ishtar`/`minerva` in `directory.nix` - `impermanence.nix`: `/persist.neededForBoot` + `environment.persistence.enable` are unconditional now, per-host gate gone; `neededForBoot` also lifted out of `ishtar`'s host config - `jj` becomes declared - nix-managed, and lint-gated since jj runs no git hooks - new `homeModules/jj`: user/email, `ui.default-command = log`, and a `jj fix` `nixfmt` tool that closes the formatting half of the `prek` gate - `just push` -> `nix flake check` before `jj git push`ing the current bookmark (deadnix/statix gate lives here); new `just fetch` forgets the now-merged bookmark after a fetch - cleanup: dropped `networkmanager` from `lament`'s `extraGroups` - left for later: LUKS - `uefi-lvm` is still unencrypted, graduates to a `uefi-luks` layout when that rework lands

lament added 2 commits

2026-07-15 01:45:20 -05:00

ishtar becomes impermanent 1ee201a2ee

jj becomes declared

CI / check (pull_request) Successful in 51s

Details

CI / deploy (pull_request) Has been skipped

Details

CI / build (pull_request) Successful in 31m12s

Details

CI / dry-activate (pull_request) Successful in 55s

Details