dotfiles

1. Target OS

• macOS (Apple Silicon)
• Ubuntu 24.04 LTS (including WSL2)

2. Common Setup

2.1. GitHub Authentication

1. Connect to the machine via SSH with OpenSSH or so if needed

   # server side
   hostname -I
   

   # client side
   ssh username@hostname
   

2. Generate SSH key

   ssh-keygen -t ed25519 -N "" -f ~/.ssh/github
   

3. Copy public key

   cat ~/.ssh/github.pub
   

4. Add SSH key to GitHub

   • Go to https://github.com/settings/keys
   • Click "New SSH key"
   • Title: any name (e.g., PC name)
   • Key type: Authentication Key
   • Paste the public key

5. Add Signing key to GitHub

   • Click "New SSH key" again
   • Title: any name
   • Key type: Signing Key
   • Paste the same public key

6. Configure SSH

   cat >> ~/.ssh/config << 'EOF'
   Host github.com
       IdentityFile ~/.ssh/github
       User git
   EOF
   

7. Verify connection

   ssh -T github.com
   

2.2. Install Nix

sh <(curl --proto '=https' --tlsv1.2 -L https://nixos.org/nix/install) --daemon

or

curl --proto '=https' --tlsv1.2 -L https://nixos.org/nix/install | sh -s -- --daemon

Open a new terminal to verify:

nix --version

cf. Download | Nix & NixOS

2.3. Enable Nix Flakes

mkdir -p ~/.config/nix

echo "experimental-features = nix-command flakes" > ~/.config/nix/nix.conf

2.4. Clone dotfiles

nix run nixpkgs#git -- clone git@github.com:i9wa4/dotfiles ~/ghq/github.com/i9wa4/dotfiles

cd ~/ghq/github.com/i9wa4/dotfiles

2.5. Set up direnv

.envrc is gitignored. Create it from the example file:

cp ~/ghq/github.com/i9wa4/dotfiles/.envrc.example ~/ghq/github.com/i9wa4/dotfiles/.envrc

Then allow direnv:

direnv allow ~/ghq/github.com/i9wa4/dotfiles

3. Ubuntu

3.1. Configure /etc/nix/nix.conf

/etc/nix/nix.conf is a real file (not managed by Nix). Configure it manually with sudo.

Add the current user to trusted-users so that binary caches (e.g., cache.numtide.com) work. Without this, caches are silently ignored and packages are compiled from source.

cat /etc/nix/nix.conf

Ensure there is exactly one trusted-users line that includes your username:

sudo nano /etc/nix/nix.conf

Example:

# Bad: last line wins, earlier entries are ignored
trusted-users = root userA
trusted-users = root userB

# Good: all users in one line
trusted-users = root userA userB

Also consider setting max-jobs = auto to use all available CPU cores for builds (default is 1):

max-jobs = auto

Restart nix-daemon to apply:

sudo systemctl restart nix-daemon

3.2. Initial home-manager switch

nix run home-manager -- switch --flake '.#ubuntu' --impure -b backup

3.3. Set zsh as default shell (optional)

~/.bashrc auto-switches to zsh, but setting the login shell is useful for regular SSH connections:

sudo chsh -s $(which zsh) $(id -un)

4. macOS

4.1. Backup Shell Configs

nix-darwin will fail if /etc/zshenv or /etc/zshrc exist with unrecognized content.

sudo mv /etc/bashrc /etc/bashrc.before-nix-darwin 2>/dev/null || true

sudo mv /etc/zshrc /etc/zshrc.before-nix-darwin 2>/dev/null || true

cf. https://github.com/nix-darwin/nix-darwin/issues/149

4.2. Install Homebrew

nix-darwin manages Homebrew packages, but Homebrew itself must be installed manually.

/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"

cf. Homebrew

4.3. Initial darwin-rebuild

sudo nix run nix-darwin -- switch --flake '.#macos-p' --impure --no-update-lock-file

or

sudo nix run nix-darwin -- switch --flake '.#macos-w' --impure --no-update-lock-file

Open a new terminal after completion.

5. Post Installation

5.1. Git

git config --file ~/.gitconfig user.name "Your Name"
git config --file ~/.gitconfig user.email "your@email.com"

5.2. gh (GitHub CLI)

gh auth login
# Choose SSH for Git operation protocol
# Skip uploading SSH public key
# Login with a web browser

To copy auth to another machine:

gh auth status --show-token

gh auth login --with-token

5.3. AWS CLI

• Configuring IAM Identity Center authentication with the AWS CLI
• Configuration and credential file settings

5.4. Web Browser

5.4.1. Setting Synchronization

• Password: No
• Address: No
• Google Pay: No
• The Others: Yes

5.4.2. Search Engine

• Google Japanese: https://www.google.com/search?q=%s
• Google English: https://www.google.com/search?q=%s&gl=us&hl=en&gws_rd=cr&pws=0

5.4.3. Extensions

• Okta Browser Plugin
• Slack Channels Grouping