---
title: "为 NixOS 打包 REA"
url: "https://reamcp.dev/zh-cn/cases/packaging-rea-for-nixos-4ee8f5"
source: "https://github.com/yzua/nixos-config"
source_type: "github"
repo: "https://github.com/yzua/nixos-config"
author: "yzua"
author_handle: "yzua"
stars: 13
category: "工具与集成"
categories: ["tools-integrations"]
tags: []
added: "2026-10-13T03:57:36.224Z"
updated: "2026-10-12T19:27:01Z"
locale: "zh-cn"
content_locale: "zh-cn"
---

# 为 NixOS 打包 REA

REA 的 Nix 打包，包含固定 npm 完整性校验、Ghidra 摘要与离线加载器测试，是个人 NixOS 配置的一部分。

## Description

列入原因：为开源工具所做的打包工作。

## Original README

# NixOS + Home Manager

Workstation configuration with standalone Home Manager. NixOS manages the
system; Home Manager manages user apps and preferences.

## Usage

Run commands from the repo root. Use `nix develop` if the tools are missing.

```sh
just check          # validate the configuration
just status         # show active, previewed, and desired generations
```

These commands do not build or activate anything. Stage new `.nix` files
before checking, because Git flakes ignore untracked files.

For user apps and settings:

```sh
just home-preview   # build and review changes
just home-switch    # apply the reviewed build, without sudo
```

For system settings:

```sh
just preview        # build and review changes
just switch         # apply the reviewed build
```

Review each preview before switching. Switches require a current saved preview
and check the system hostname or Home Manager user and home directory.
When moving apps from NixOS to Home Manager, apply Home Manager first.
Successful previews retain their builds with per-output GC roots under the caller's
XDG state directory. Failed builds or reviews leave the previous saved preview intact.
With multiple outputs, select one using `NIXOS_CONFIG` or `HOME_CONFIG`.

Development tools come from the pinned Nixpkgs input; no npm or pip install is
needed. In `nix develop`, run `just fmt` to format files, `just fmt-check` for a
read-only formatting check, and `just lint` for static analysis. Biome handles
the locally owned TypeScript sources; Ruff handles Python formatting, import
ordering, and common mistakes. Package lockfiles stay outside the formatter.
Biome keeps its recommended rules with a few style and extension-interop
exceptions; missing callback returns and unused code still get checked.
ShellCheck checks Bash; shfmt formats it. Rust-based rumdl checks and formats
Markdown, including links and structures that affect rendering, without
requiring line wrapping or headings in prompt fragments. For quick focused
checks, use `just lint-ts`, `just lint-python`, `just lint-shell`, or
`just lint-markdown`.
Run `just test` for the explicit offline regression suites, including generation
workflows, voice actions, Pi extensions/subagents, and the RE profile/lab mocks.
These tests use isolated fixtures without activation or paid model calls.
Generated-config tests require managed Niri and tmux; local-source skill tests
require the managed skills CLI. The loader tests require managed Pi, Bun, and
installed web-fetch dependencies;
`PI_BIN` and `PI_WEB_FETCH_DIR` can select alternate installations. Ordinary Pi
suites share lazy resource checks and inherited-session isolation in
`tests/pi_test_support.py`; direct runs use the same checks as the aggregate
preflight. Live desktop focus, browser, and Android lab checks remain separate
opt-in commands.
`just test-preview-roots-gc` separately verifies preview retention by running GC
only in a disposable local Nix store, never on the workstation store.

## Gaming

Niri opens Steam game windows fullscreen automatically. Fullscreen alone does
not guarantee mouse confinement: for Proton games on multiple monitors, close
all Proton/Wine games and run `steam-mouse-grab` to enable Wine's
`GrabFullscreen` setting in existing game prefixes across your Steam libraries.
The command preserves other registry settings and saves a
`user.reg.before-mouse-grab` backup beside each changed registry. It refuses to
edit while a Wine server is running.

New games create their own prefixes on first launch; close them and rerun the
command afterward. Nothing is applied continuously or to native Linux games.
Use **Super + Shift + F** to toggle Niri fullscreen and **Alt + Tab** to switch
away. To undo confinement, close the game and remove `"GrabFullscreen"="Y"`
from its `pfx/user.reg` section `[Software\\Wine\\X11 Driver]`; avoid restoring
an old whole-registry backup after the game has made other settings changes.

## Layout

- `flake.nix` and `flake.lock`: outputs and pinned dependencies.
- `hosts/`: hardware and host settings. `modules/nixos/` holds reusable system
  settings, grouped into `desktop/` infrastructure and `networking/` VPN/Tor
  services, with explicit imports in each host.
- `packages/`: custom package definitions and their sources, shared by flake
  outputs and profiles.
- `home-manager/`: user apps and preferences. Under `modules/`, `desktop/`
  groups GNOME, Niri, and Noctalia settings; `desktop-apps/` owns applications;
  `terminal/` groups CLI tools, terminal/shell settings, tmux, and Git.
  [Shared skills ownership](home-manager/modules/ai/skills.md) explains pinned
  preparation, mutable installed copies, and installation limitations.
- `justfile`: command menu and checks; `scripts/generation.sh`: build/review policy,
  status, and guarded switches; `scripts/saved-preview-build.sh`: saved-preview
  lifecycle and freshness.

## License

Licensed under the [WTFPL, version 2](LICENSE).