clan-core/docs/admins/05-install-iso.md

# 03 Clan Hardware Installation

For installations on physical hardware, create a NixOS installer image and transfer it to a bootable USB drive as described below.

## Creating a Bootable USB Drive on Linux

To create a bootable USB flash drive with the NixOS installer:

### Build the Installer Image

```bash
nix build git+https://git.clan.lol/clan/clan-core.git#install-iso
```

> Make sure you do this inside

### Prepare the USB Flash Drive

1. Insert your USB flash drive into your computer.

2. Identify your flash drive with `lsblk`.

    ```bash
    $ lsblk
    NAME                                          MAJ:MIN RM   SIZE RO TYPE  MOUNTPOINTS
    sdb                                             8:0    1 117,2G  0 disk
    └─sdb1                                          8:1    1 117,2G  0 part  /run/media/qubasa/INTENSO
    nvme0n1                                       259:0    0   1,8T  0 disk
    ├─nvme0n1p1                                   259:1    0   512M  0 part  /boot
    └─nvme0n1p2                                   259:2    0   1,8T  0 part
      └─luks-f7600028-9d83-4967-84bc-dd2f498bc486 254:0    0   1,8T  0 crypt /nix/store
    ```

    In this case it's `sdb`

3. Ensure all partitions on the drive are unmounted. Replace `sdX` in the command below with your device identifier (like `sdb`, etc.):

    ```bash
    sudo umount /dev/sdb1
    ```

### Write the Image to the USB Drive

Use the `dd` utility to write the NixOS installer image to your USB drive:

  ```bash
  sudo dd bs=4M conv=fsync oflag=direct status=progress if=./result/stick.raw of=/dev/sd<X>
  ```

  In case your USB device is `sdb` use `of=/dev/sdb`

### Boot and Connect

After writing the installer to the USB drive, use it to boot the target machine.

1. For this secure boot needs to be disabled. Go into your UEFI / Bios settings by pressing one of the keys outlined below while booting:

   - **Dell**: F2/Del (BIOS Setup)
   - **HP**: Esc (Startup Menu)
   - **Lenovo**: F2/Fn+F2/Novo Button (IdeaPad Boot Menu/BIOS Setup)
   - **Acer**: F2/Del (BIOS Setup)
   - **Asus**: F2/Del (BIOS Setup)
   - **Toshiba**: Esc then F12 (Alternate Method)
   - **Sony**: F11
   - **Samsung**: F2 (BIOS Setup)
   - **MSI**: Del (BIOS Setup)
   - **Apple**: Option (Alt) Key (Boot Menu for Mac)
   - If your hardware was not listed read the manufacturers instructions how to enter the boot Menu/BIOS Setup.

2. Inside the UEFI/Bios Menu go to `Security->Secure Boot` and disable secure boot

3. Save your settings. Put in the USB stick and reboot.

4. Press one of keys outlined below to go into the Boot Menu

       - **Dell**: F12 (Boot Menu)
       - **HP**: F9 (Boot Menu)
       - **Lenovo**: F12 (ThinkPad Boot Menu)
       - **Acer**: F12 (Boot Menu)
       - **Asus**: F8/Esc (Boot Menu)
       - **Toshiba**: F12/F2 (Boot Menu)
       - **Sony**: F11
       - **Samsung**: F2/F12/Esc (Boot Menu)
       - **MSI**: F11
       - **Apple**: Option (Alt) Key (Boot Menu for Mac)
       - If your hardware was not listed read the manufacturers instructions how to enter the boot Menu/BIOS Setup.

5. Select `NixOS` to boot into the clan installer

6. The installer will display an IP address and a root password, which you can use to connect via SSH.  
    Alternatively you can also use the displayed QR code.

7. Set your keyboard language. Important for writing passwords correctly.

    ```bash
    loadkeys de
    ```

8. If you only have Wifi available, execute:

    1. Bring up the `iwd` shell

        ```bash
        iwctl
        ```

    2. List available networks. Double press tab after station for device autocompletion. In this case `wlan0` is the only network wifi device.

        ```bash
        [iwd] station wlan0 get-networks
        ```

    3. Connect to a Wifi network. Replace `SSID` with the wlan network name.

        ```bash
        [iwd] station wlan0 connect SSID
        ```

9. Now that you have internet re-execute the init script by pressing `Ctrl+D` or by executing:

    ```bash
    bash
    ```

10. Connect to the machine over ssh

    ```bash
    ssh-copy-id -o PreferredAuthentications=password root@<ip>
    ```

    Use the root password displayed on your screen as login.

---

# Whats next?

- Deploy a clan machine-configuration on your prepared machine

---