shrink boot media footprint

client/power/power.go

@@ -0,0 +1,9 @@
+package power
+
+const APIVersion string = "power/v1alpha1"
+
+type PowerActionResponse struct {
+	APIVersion string `json:"apiVersion"`
+	Action     string `json:"action"`
+	Success    bool   `json:"success"`
+}

client/power/poweroff.go

@@ -0,0 +1,30 @@
+package power
+
+import (
+	"net/http"
+	"os/exec"
+
+	"git.dubyatp.xyz/orphanage/client/httputil"
+)
+
+func PowerOffResponse(success bool) PowerActionResponse {
+	resp := PowerActionResponse{
+		APIVersion: APIVersion,
+		Action:     "poweroff",
+		Success:    success,
+	}
+	return resp
+}
+
+func PowerOff(next http.Handler) http.Handler {
+	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		cmd := exec.Command("systemctl", "poweroff")
+		err := cmd.Run()
+
+		if err != nil {
+			httputil.WriteJSON(w, http.StatusOK, PowerOffResponse(false))
+		} else {
+			httputil.WriteJSON(w, http.StatusOK, PowerOffResponse(true))
+		}
+	})
+}

client/power/reboot.go

@@ -0,0 +1,30 @@
+package power
+
+import (
+	"net/http"
+	"os/exec"
+
+	"git.dubyatp.xyz/orphanage/client/httputil"
+)
+
+func RebootResponse(success bool) PowerActionResponse {
+	resp := PowerActionResponse{
+		APIVersion: APIVersion,
+		Action:     "reboot",
+		Success:    success,
+	}
+	return resp
+}
+
+func Reboot(next http.Handler) http.Handler {
+	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		cmd := exec.Command("systemctl", "reboot")
+		err := cmd.Run()
+
+		if err != nil {
+			httputil.WriteJSON(w, http.StatusOK, RebootResponse(false))
+		} else {
+			httputil.WriteJSON(w, http.StatusOK, RebootResponse(true))
+		}
+	})
+}

client/routes/routes.go

@@ -5,14 +5,17 @@ import (
 
 	"git.dubyatp.xyz/orphanage/client/facts"
 	"git.dubyatp.xyz/orphanage/client/httputil"
+	"git.dubyatp.xyz/orphanage/client/power"
 	"git.dubyatp.xyz/orphanage/client/testfunc"
 )
 
 func AddRoutes(
 	mux *http.ServeMux,
 ) {
-	mux.Handle("/", http.NotFoundHandler())
+	mux.Handle("GET /", http.NotFoundHandler())
-	mux.Handle("/helloworld", httputil.HelloWorld(nil))
+	mux.Handle("GET /helloworld", httputil.HelloWorld(nil))
-	mux.Handle("/testjson", testfunc.HelloWorldJSON(nil))
+	mux.Handle("GET /testjson", testfunc.HelloWorldJSON(nil))
-	mux.Handle("/facts", facts.GetFacts(nil))
+	mux.Handle("GET /facts", facts.GetFacts(nil))
+	mux.Handle("POST /power/reboot", power.Reboot(nil))
+	mux.Handle("POST /power/poweroff", power.PowerOff(nil))
 }

flake.nix

@@ -45,8 +45,6 @@
                 boot.initrd.kernelModules = ["hv_vmbus" "hv_storvsc"]; # Hyper-V Support
 
                 # Disable unneeded features
-                ##boot.loader.grub.enable = true; # Not needed as iso-image.nix in modulesPath defines these and cause conflict 
-                ##boot.loader.grub.device = "nodev";
                 documentation.enable = false;
                 fonts.fontconfig.enable = false;
                 services.udisks2.enable = false;
@@ -77,12 +75,20 @@
                   boot.initrd.kernelModules = ["hv_vmbus" "hv_storvsc"]; # Hyper-V Support
 
                   # Disable unneeded features
-                  ##boot.loader.grub.enable = true; # Not needed as iso-image.nix in modulesPath defines these and cause conflict 
+                  documentation.enable = nixpkgs.lib.mkForce false;
-                  ##boot.loader.grub.device = "nodev";
+                  documentation.nixos.enable = nixpkgs.lib.mkForce false;
-                  documentation.enable = false;
                   fonts.fontconfig.enable = false;
                   services.udisks2.enable = false;
 
+                  users.allowNoPasswordLogin = true;
+                  users.mutableUsers = false;
+
+                  security.sudo.enable = false;
+
+                  services.getty.helpLine = nixpkgs.lib.mkForce "";
+
+                  nix.enable = false;
+
                   networking.firewall.enable = false; # Technically we COULD use the firewall, but given that this is a network-dependent, one-time-use service, it would cause more issues
                   
                   services.getty.autologinUser = nixpkgs.lib.mkForce "root";