CLI: - `vmix run <qcow2>` boots image with QEMU (SDL if DISPLAY, snapshot mode) - --generalize supports delay-oobe-run=true to defer OOBE + activation to first boot on real hardware (for physical disk deployments) Templates: - essentials.virtioDrivers: installs VirtIO drivers only (no guest agent) used in laptop bundle for network access during Office download - generalize: delayOobeRun flag controls sysprep /shutdown vs /reboot delays OOBE, user creation and HWID activation to target device Build: - suppress XDG_RUNTIME_DIR and homeless-shelter warnings in SDL mode - remove invalid ICH9-LMB global properties Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
70 lines
2.5 KiB
Nix
70 lines
2.5 KiB
Nix
# Windows customization templates.
|
|
# Templates can provide:
|
|
# windowsRegistry — offline registry merge (fast, no boot)
|
|
# auditScript — runs in Audit Mode via QEMU boot
|
|
# cdroms — ISOs to attach when booting for auditScript
|
|
# uploads — files to inject into the image before auditScript
|
|
{ pkgs, lib, system, drivers, makeFilesISO, ... }:
|
|
let
|
|
args = { inherit pkgs lib system drivers makeFilesISO; };
|
|
in rec {
|
|
# Essentials (drivers, runtimes, removals, performance)
|
|
essentials = {
|
|
virtioTools = import ./essentials/virtio-tools.nix args;
|
|
removeEdge = import ./essentials/remove-edge.nix args;
|
|
removeIE = import ./essentials/remove-ie.nix args;
|
|
removeWMP = import ./essentials/remove-wmp.nix args;
|
|
removePaint = import ./essentials/remove-paint.nix args;
|
|
amdGpuDrivers = import ./essentials/amd-gpu-drivers.nix args;
|
|
vcppRuntimes = import ./essentials/vcpp-runtimes.nix args;
|
|
bestPerformance = import ./essentials/best-performance.nix args;
|
|
clearFileAssociations = import ./essentials/clear-file-associations.nix args;
|
|
virtioDrivers = import ./essentials/virtio-drivers.nix args;
|
|
};
|
|
|
|
# Applications
|
|
apps = {
|
|
thorium = import ./apps/thorium.nix args;
|
|
edgeWebview = import ./apps/edge-webview.nix args;
|
|
sevenZip = import ./apps/7zip.nix args;
|
|
vlc = import ./apps/vlc.nix args;
|
|
imageGlass = import ./apps/imageglass.nix args;
|
|
sandboxie = import ./apps/sandboxie.nix args;
|
|
office = import ./apps/office.nix args;
|
|
};
|
|
|
|
# Default file associations policy
|
|
defaultApps = import ./default-apps.nix args;
|
|
|
|
# Generalize (sysprep + OOBE). Pass seal=true for hardware deployment.
|
|
generalize = import ./generalize.nix args;
|
|
|
|
# Offline registry templates
|
|
reg = import ./registry args;
|
|
|
|
# Bundles — reusable template lists for common use cases
|
|
bundles = {
|
|
laptop = [
|
|
essentials.removeIE
|
|
essentials.removeWMP
|
|
essentials.removeEdge
|
|
essentials.vcppRuntimes
|
|
essentials.bestPerformance
|
|
reg.disableTelemetry
|
|
reg.disableErrorReporting
|
|
reg.disableUpdates
|
|
reg.disableSmartScreen
|
|
reg.disablePrivacyTracking
|
|
reg.disableAI
|
|
reg.disableConsumerFeatures
|
|
reg.performanceTweaks
|
|
apps.edgeWebview
|
|
apps.thorium
|
|
apps.sevenZip
|
|
apps.vlc
|
|
apps.imageGlass
|
|
essentials.virtioDrivers # needed for network during Office download
|
|
apps.office
|
|
];
|
|
};
|
|
}
|