kcnhub: packages: ai/ml/llm packages

flake.lock

@@ -110,11 +110,11 @@
     },
     "nixpkgs-unstable": {
       "locked": {
-        "lastModified": 1743964447,
-        "narHash": "sha256-nEo1t3Q0F+0jQ36HJfbJtiRU4OI+/0jX/iITURKe3EE=",
+        "lastModified": 1785454630,
+        "narHash": "sha256-LQy14TZp77TwbQf40gg1V3jo8FwJG0jGDkAH+zRHqg8=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "063dece00c5a77e4a0ea24e5e5a5bd75232806f8",
+        "rev": "1559d3daa3ecc813a650b79375ea61b6741b8746",
         "type": "github"
       },
       "original": {

flake.nix

@@ -52,7 +52,7 @@
       specialArgs = attrs;
       modules = [ 
          flakes
-         (applyOverlays [ unfree-overlay unstable-overlay python-overlay package-overlays ])
+         (applyOverlays [ unfree-overlay unstable-overlay unstable-unfree-overlay python-overlay package-overlays ])
          vscode-server.nixosModules.default
          ./machines/kcnhub/configuration.nix
          sops-nix.nixosModules.sops

machines/kcnhub/configuration.nix

@@ -20,10 +20,11 @@
       ./nosleep.nix
     ];
 
+
   sops.age.keyFile = "/root/.config/sops/age/keys.txt";
   sops.defaultSopsFile = ./secrets/system.yaml;
 
-  networking.networkmanager.enable = true;
+  # networking.networkmanager.enable = true;
 
   # Support NTFS(3g)
   boot.supportedFilesystems = ["ntfs"];
@@ -44,6 +45,28 @@
   # Enable the X11 forwarding over ssh
   programs.ssh.forwardX11 = true;
   programs.ssh.setXAuthLocation = true;
+  environment.etc."vnc/xstartup-minimal".mode = "0755";
+  environment.etc."vnc/xstartup-plasma".mode = "0755";
+  environment.etc."vnc/xstartup-xfce".mode = "0755";
+
+  # trying to install matlab runtime
+  programs.nix-ld = {
+    enable = true;
+    package = pkgs.nix-ld;
+    libraries = with pkgs; [
+      glibc
+      gcc.cc.lib
+      zlib
+      pam
+      libuuid
+      libxcrypt
+      openssl
+      xorg.libX11
+      xorg.libXext
+      xorg.libXrender
+      xorg.libXtst
+    ];
+  };
 
   # Enable KDE Plasma
   services.xserver.displayManager.sddm.enable = true;
@@ -84,7 +107,6 @@
     # Used for Key Generation
     age
 
-
     # To try to make X11 forwarding work we install xauth
     xorg.xauth
     xorg.xhost

machines/kcnhub/packages.nix

@@ -1,5 +1,6 @@
 { ... }: {
   imports = [
+    ./packages/ai.nix
     ./packages/ngilab.nix
     ./packages/office.nix
     ./packages/terminal.nix

machines/kcnhub/packages/ai.nix

@@ -0,0 +1,9 @@
+{ config, pkgs, lib, ... }: {
+  environment.systemPackages = with pkgs; [
+    # v-- Proprietary (hence unfree)
+    unstable-unfree.claude-code
+    unstable.pi-coding-agent
+    # v-- Depends on CUDA (hence unfree)
+    unstable-unfree.llama-cpp
+  ];
+}

machines/kcnhub/packages/python.nix

@@ -13,6 +13,7 @@
       cmake
       gnumake
       ((pkgs.python3.withPackages config.pythonPackages).override (args: { ignoreCollisions = true; }))
+      pkgs.unstable.uv
     ];
     pythonPackages = (p: with p; [
       # Common Python Libraries

machines/kcnhub/services.nix

@@ -3,6 +3,7 @@
     ./services/ssh.nix
     ./services/xrdp.nix
     ./services/vnc-startup.nix
+    ./services/earlyoom.nix
   ];
   services.vscode-server.enable = true;
 }

machines/kcnhub/services/earlyoom.nix

@@ -0,0 +1,9 @@
+{ config, pkgs, lib, ... }: {
+  services.earlyoom = {
+    enable = true;
+    # What % Memory Needs to Be left to send SIGTERM
+    freeMemThreshold = 10;
+    # What % Memory Needs to Be left to send SIGKILL
+    freeMemKillThreshold = 5;
+  };
+}

machines/kcnhub/services/vnc-startup.nix

@@ -46,7 +46,7 @@
   '';
 
   # Make scripts executable
-  system.activationScripts.vnc-scripts = ''
-    chmod +x /etc/vnc/xstartup-*
-  '';
+  #system.activationScripts.vnc-scripts = ''
+  #  sudo chmod +x /etc/vnc/xstartup-*
+  #'';
 }

machines/kcnhub/users.nix

@@ -24,10 +24,12 @@
     ./users/umar.nix
     ./users/arthur.nix
     ./users/raiyan.nix
+    ./users/elena.nix
     
     # Groups
     ./users/groups/admin.nix
     ./users/groups/nfrf.nix
+    ./users/groups/ngilab_shared.nix
     ./users/groups/nsbspl.nix
   ];
 }

machines/kcnhub/users/elena.nix

@@ -0,0 +1,11 @@
+{ pkgs, ... }: {
+  users.users.elena = {
+    isNormalUser = true;
+    extraGroups = [ ];
+    homeSize = "50g";
+    homeProjectId = 125;
+    packages = with pkgs; [
+
+    ];
+  };
+}

overlays/python-packages.nix

@@ -2,7 +2,7 @@ final: final-py: prev-py: {
   nestml = let
     pname = "nestml";
     # Newer versions require newer antlr4
-    version = "7.0.2";
+    version = "8.3.0";
   in final-py.buildPythonPackage {
     inherit pname version;
 
@@ -10,7 +10,7 @@ final: final-py: prev-py: {
       owner = "nest";
       repo = pname;
       rev = "v${version}";
-      hash = "sha256-BQzwIh2Gdq+rLwIwe7dyltDfEzpaIWGlXF0AfZGBUDw=";
+      hash = "sha256-JR5f8783IlHI1D0kBazl04TwWCJXFmwI7kCtesJxaK8=";
     };
 
     doCheck = false;