refactor: share workstation setup and boot-staged updates

Use dev-owned checkouts and one update policy on both hosts. Keep only hardware and deployment identity in host modules, use the same SDDM/UWSM workstation module in the VM, and install a host-configured manual switch command with lock regression tests.
2026-09-05 23:52:51 -05:00
parent 209f4d8bda
commit 4893fcfec0
18 changed files with 358 additions and 247 deletions
@@ -5,9 +5,11 @@
    # Keep the image's EC2 boot, storage, metadata, SSH and SSM integration.
    "${modulesPath}/virtualisation/amazon-image.nix"
    ./common.nix
-    ./updates.nix
  ];

-  # Only the EC2 host keeps its dev-owned configuration checkout here.
-  systemd.tmpfiles.rules = [ "Z /etc/nixos - dev users -" ];
+  # Keep the existing deployment path; ownership/update policy is shared.
+  systemd.services.nixos-update.environment = {
+    NIXOS_CONFIG_REPO = "/etc/nixos";
+    NIXOS_UPDATE_HOST = "dev";
+  };
 }