README.md

@@ -20,7 +20,7 @@ Additionally, it deploys an age identity, which is later used for decrypting sec
 
 1. Make sure your have a [Secret service](https://www.gnu.org/software/emacs/manual/html_node/auth/Secret-Service-API.html) running (such as Keepassxc) that provides the age identity.
 2. Ensure you have root SSH access to the server.
-3. Run nixos-anywhere: `./bootstrap <servername>`
+3. Run nixos-anywhere: `./bootstrap.sh <servername>`
 
 ## Deployment
 

bootstrap.sh

@@ -40,4 +40,4 @@ secret-tool lookup age-identity "$servername" > "$temp/root/age_ed25519"
 chmod 600 "$temp/root/age_ed25519"
 
 # Install NixOS to the host system with our age identity
-nixos-anywhere --extra-files "$temp" --flake ".#${servername}" "root@${servername}.hyp"
+nix run github:numtide/nixos-anywhere -- --extra-files "$temp" --flake ".#${servername}" "root@${servername}.hyp"

flake.nix

@@ -34,7 +34,10 @@
       devShells.${system}.default = pkgs.mkShell {
         packages = [
           pkgs.libsecret
-          pkgs-unstable.nixos-anywhere
+          # TODO: using nixos-anywhere from nixos-unstable produces buffer overflow.
+          # Related to this issue: https://github.com/nix-community/nixos-anywhere/issues/242
+          # Should wait until this is merged in nixos-unstable.
+          # pkgs-unstable.nixos-anywhere
           pkgs-unstable.deploy-rs
         ];
       };