...

hosts/acern-real.nix

@@ -6,9 +6,15 @@
     inputs.networkmanager.nixosModules.networkmanager
 		inputs.home-manager.nixosModules.home-manager
     ../common/all.nix
+    ../common/nixos.nix
     ../common/nixos-headless.nix
   ];
 
+  # hack fix
+  #home-manager.users.me.programs.firefox.
+  #home-manager.users.me.programs.firefox.
+  nixpkgs.config.allowUnfree = true;
+
   services.xserver = {
     desktopManager.gnome.enable = true;
 

hosts/hpm.nix

@@ -5,7 +5,6 @@
 		../common/all.nix
 		../common/nixos.nix
 		../common/nixos-graphical.nix
-    ../mods/hec-server.nix
     ../common/building.nix
 
 		inputs.home-manager.nixosModules.home-manager

hosts/main.nix

@@ -33,6 +33,8 @@
     ntfs3g
     dhcpcd
     looking-glass-client
+    swtpm
+    win-virtio
   ];
 
 
@@ -177,6 +179,7 @@
 	networking.hostName = "main";
 
 	security.polkit.enable = true;
+  services.rpcbind.enable = true;
 
   services.avahi.enable = true;
   services.avahi.hostName = "c2vi";
@@ -210,12 +213,6 @@
   #networking.hosts = {
     #"10.1.1.3" = [ "phone" ];
   #};
-  networking.extraHosts = ''
-    ${builtins.readFile "${self}/misc/my-hosts"}
-    ${builtins.readFile "${self}/misc/my-hosts-me"}
-  '';
-  environment.etc.current_hosts.text = builtins.readFile "${self}/misc/my-hosts-me";
-  environment.etc.current_hosts.mode = "rw";
   #environment.etc.hosts.mode = "rw";
 
   networking.networkmanager.profiles = {
@@ -416,7 +413,13 @@
 
 
   ######################################### virtualisation ###############################
-  	virtualisation.libvirtd.enable = true;
+  	virtualisation.libvirtd = {
+      enable = true;
+      qemuOvmf = true;
+      qemuSwtpm = true;
+      #qemuOvmfPackage = pkgs.OVMFFull;
+    };
+
     virtualisation.podman.enable = true;
 
     virtualisation.kvmgt.enable = true;

hosts/rpi.nix

@@ -32,6 +32,7 @@
     bcache-tools
     su
     fuse3
+    terraform
   ];
 
   fileSystems."/" =
@@ -211,6 +212,44 @@
   };
 
 
+
+  ###################################### get oci ampere vm ####################################
+
+  systemd.services.oci-ampere = 
+    let 
+    oci-ampere = pkgs.writeShellApplication {
+      name = "oci-ampere";
+
+      runtimeInputs = with pkgs; [ terraform ];
+
+      text = ''
+        if [[ -f /home/me/here/oci-ampere-vm/not_gotten ]]
+        then
+          echo not gotten....................................
+          pwd
+          cd /home/me/here/oci-ampere-vm
+          terraform apply -auto-approve && rm /home/me/here/oci-ampere-vm/not_gotten
+        else
+          echo gotten!!!!!!!!!!!!!!!!!!!!!
+        fi
+      '';
+      };
+    in
+  {
+    enable = false;
+    description = "get a oci ampere vm";
+    unitConfig = {
+      Type = "simple";
+    };
+    serviceConfig = {
+      Restart = "always";
+      RestartSec = "500s";
+      ExecStart = "${oci-ampere}/bin/oci-ampere";
+    };
+    wantedBy = [ "multi-user.target" ];
+  };
+
+
   ################################## ssh ######################################
   services.openssh = {
     enable = true;