| hardware.cpu.amd.sevGuest.group | Group to assign to the SEV guest device.
|
| services.devmon.enable | Whether to enable devmon, an automatic device mounting daemon.
|
| security.pam.u2f.settings.interactive | Set to prompt a message and wait before testing the presence of a U2F device
|
| networking.sits.<name>.dev | The underlying network device on which the tunnel resides.
|
| services.lvm.enable | Whether to enable lvm2.
The lvm2 package contains device-mapper udev rules and without those tools like cryptsetup do not fully function!
|
| services.zwave-js.serialPort | Serial port device path for Z-Wave controller.
|
| fileSystems.<name>.autoFormat | If the device does not currently contain a filesystem (as
determined by blkid), then automatically
format it with the filesystem type specified in
fsType
|
| zramSwap.writebackDevice | Write incompressible pages to this device,
as there's no gain from keeping them in RAM.
|
| services.mpd.settings | Configuration for MPD
|
| services.multipath.devices.*.path_checker | The default method used to determine the paths state
|
| services.prometheus.exporters.fritz.settings.devices.*.password_file | Path to a file which contains the password to authenticate with the target device
|
| programs.mdevctl.enable | Whether to enable Mediated Device Management.
|
| services.ebusd.logs.bus | Only write log for matching AREAs (all|main|network|bus|device|update|other) below or equal to LEVEL (none|error|notice|info|debug)
|
| hardware.onlykey.enable | Enable OnlyKey device (https://crp.to/p/) support.
|
| services.ebusd.logs.all | Only write log for matching AREAs (all|main|network|bus|device|update|other) below or equal to LEVEL (none|error|notice|info|debug)
|
| services.syslogd.tty | The tty device on which syslogd will print important log
messages
|
| services.kmonad.keyboards.<name>.extraGroups | Extra permission groups to attach to the KMonad instance for
this keyboard
|
| networking.ipips.<name>.dev | The underlying network device on which the tunnel resides.
|
| services.ebusd.readonly | Only read from device, never write to it
|
| services.nbd.server.enable | Whether to enable the Network Block Device (nbd) server.
|
| services.ebusd.logs.main | Only write log for matching AREAs (all|main|network|bus|device|update|other) below or equal to LEVEL (none|error|notice|info|debug)
|
| services.multipath.devices.*.rr_min_io_rq | Number of I/O requests to route to a path before switching to the next in the
same path group
|
| services.prometheus.exporters.smartctl.devices | Paths to the disks that will be monitored
|
| hardware.cpu.amd.sevGuest.enable | Whether to enable access to the AMD SEV guest device.
|
| swapDevices.*.encrypted.blkDev | Location of the backing encrypted device.
|
| boot.initrd.preDeviceCommands | Shell commands to be executed before udev is started to create
device nodes.
|
| services.rshim.index | Specify the index to create device path /dev/rshim<index>
|
| services.multipath.devices.*.no_path_retry | Specify what to do when all paths are down
|
| services.multipath.devices.*.uid_attribute | The udev attribute providing a unique path identifier (WWID)
|
| services.boinc.extraEnvPackages | Additional packages to make available in the environment in which
BOINC will run
|
| services.ebusd.logs.other | Only write log for matching AREAs (all|main|network|bus|device|update|other) below or equal to LEVEL (none|error|notice|info|debug)
|
| services.zwave-js-ui.serialPort | Serial port for the Z-Wave controller
|
| services.prometheus.exporters.fritz.settings.devices | Fritz!-devices to monitor using the exporter.
|
| services.multipath.devices.*.path_selector | The default path selector algorithm to use; they are offered by the kernel multipath target
|
| services.hostapd.radios | This option allows you to define APs for one or multiple physical radios
|
| services.syncthing.settings.options.relaysEnabled | When true, relays will be connected to and potentially used for device to device connections.
|
| virtualisation.fileSystems.<name>.label | Label of the device
|
| services.jack.loopback.index | Index of an ALSA loopback device.
|
| boot.initrd.luks.cryptoModules | A list of cryptographic kernel modules needed to decrypt the root device(s)
|
| fileSystems.<name>.encrypted.blkDev | Location of the backing encrypted device.
|
| boot.nixStoreMountOpts | Defines the mount options used on a bind mount for the /nix/store
|
| services.rathole.role | Select whether rathole needs to be run as a client or a server
|
| swapDevices.*.priority | Specify the priority of the swap device
|
| virtualisation.kvmgt.enable | Whether to enable KVMGT (iGVT-g) VGPU support
|
| networking.fooOverUDP.<name>.local.dev | Network device to bind to.
|
| services.ebusd.logs.update | Only write log for matching AREAs (all|main|network|bus|device|update|other) below or equal to LEVEL (none|error|notice|info|debug)
|
| programs.k40-whisperer.group | Group assigned to the device when connected.
|
| services.libinput.mouse.dev | Path for mouse device
|
| networking.fooOverUDP.<name>.local | Local address (and optionally device) to bind to using the given port.
|
| services.xserver.enableTearFree | Whether to enable the TearFree option in the first Device section.
|
| services.zfs.expandOnBoot | After importing, expand each device in the specified pools
|
| services.jack.loopback.config | ALSA config for loopback device.
|
| zramSwap.algorithm | Compression algorithm. lzo has good compression,
but is slow. lz4 has bad compression, but is fast.
zstd is both good compression and fast, but requires newer kernel
|
| services.libinput.mouse.buttonMapping | Sets the logical button mapping for this device, see XSetPointerMapping(3)
|
| hardware.display.edid.linuxhw | Exposes EDID files from users-sourced database at https://github.com/linuxhw/EDID
Attribute names will be mapped to EDID filenames <NAME>.bin
|
| security.tpm2.fapi.tcti | The TCTI which will be used
|
| networking.greTunnels.<name>.dev | The underlying network device on which the tunnel resides.
|
| services.samba-wsdd.enable | Whether to enable Web Services Dynamic Discovery host daemon
|
| services.hylafax.modems.<name>.name | Name of modem device,
will be searched for in /dev.
|
| services.multipath.devices.*.dev_loss_tmo | Specify the number of seconds the SCSI layer will wait after a problem has
been detected on a FC remote port before removing it from the system
|
| services.multipath.devices.*.getuid_callout | (Superseded by uid_attribute) The default program and args to callout
to obtain a unique path identifier
|
| hardware.alsa.controls | Virtual volume controls (softvols) to add to a sound card
|
| hardware.alsa.controls.<name>.name | Name of the control, as it appears in alsamixer
|
| boot.initrd.postDeviceCommands | Shell commands to be executed immediately after stage 1 of the
boot has loaded kernel modules and created device nodes in
/dev.
|
| services.quicktun.<name>.upScript | Run specified command or script after the tunnel device has been opened.
|
| services.nbd.server.exports.<name>.path | File or block device to export.
|
| services.journald.console | If non-empty, write log messages to the specified TTY device.
|
| services.ebusd.logs.network | Only write log for matching AREAs (all|main|network|bus|device|update|other) below or equal to LEVEL (none|error|notice|info|debug)
|
| boot.initrd.luks.yubikeySupport | Enables support for authenticating with a YubiKey on LUKS devices
|
| services.tabby.acceleration | Specifies the device to use for hardware acceleration.
cpu: no acceleration just use the CPU
rocm: supported by modern AMD GPUs
cuda: supported by modern NVIDIA GPUs
metal: supported on darwin aarch64 machines
Tabby will try and determine what type of acceleration that is
already enabled in your configuration when acceleration = null.
- nixpkgs.config.cudaSupport
- nixpkgs.config.rocmSupport
- if stdenv.hostPlatform.isDarwin && stdenv.hostPlatform.isAarch64
IFF multiple acceleration methods are found to be enabled or if you
haven't set either cudaSupport or rocmSupport you will have to
specify the device type manually here otherwise it will default to
the first from the list above or to cpu.
|
| services.keyd.keyboards.<name>.ids | Device identifiers, as shown by keyd(1).
|
| networking.macvlans.<name>.mode | The mode of the macvlan device.
|
| services.hardware.lcd.server.usbPid | The product ID of the USB device to claim.
|
| security.pam.u2f.control | This option sets pam "control"
|
| services.hardware.lcd.server.usbVid | The vendor ID of the USB device to claim.
|
| security.pam.p11.control | This option sets pam "control"
|
| services.multipath.enable | Whether to enable the device mapper multipath (DM-MP) daemon.
|
| services.keepalived.vrrpInstances.<name>.virtualIps.*.label | Each address may be tagged with a label string
|
| services.keyd.keyboards | Configuration for one or more device IDs
|
| networking.dhcpcd.enable | Whether to enable dhcpcd for device configuration
|
| services.pipewire.extraConfig.pipewire | Additional configuration for the PipeWire server
|
| services.jack.loopback.session | Additional commands to run to setup loopback device.
|
| services.libinput.touchpad.buttonMapping | Sets the logical button mapping for this device, see XSetPointerMapping(3)
|
| virtualisation.fileSystems | The file systems to be mounted
|
| swapDevices.*.discardPolicy | Specify the discard policy for the swap device
|
| virtualisation.fileSystems.<name>.encrypted.enable | The block device is backed by an encrypted one, adds this device as a initrd luks entry.
|
| services.input-remapper.enable | Whether to enable input-remapper, an easy to use tool to change the mapping of your input device buttons.
|
| hardware.sane.brscan5.netDevices.<name>.ip | The ip address of the device
|
| hardware.sane.brscan4.netDevices.<name>.ip | The ip address of the device
|
| services.multipath.pathGroups.*.wwid | The identifier for the multipath device
|
| services.unifi.openFirewall | Whether or not to open the minimum required ports on the firewall
|
| services.cjdns.ETHInterface.bind | Bind to this device for native ethernet operation.
all is a pseudo-name which will try to connect to all devices.
|
| services.usbmuxd.enable | Enable the usbmuxd ("USB multiplexing daemon") service
|
| hardware.logitech.lcd.startWhenNeeded | Only run the service when an actual supported device is plugged.
|
| containers.<name>.allowedDevices | A list of device nodes to which the containers has access to.
|
| virtualisation.oci-containers.containers.<name>.devices | List of devices to attach to this container.
|
| hardware.kryoflux.enable | Enables kryoflux udev rules, ensures 'floppy' group exists
|
| services.bitbox-bridge.runOnMount | Run bitbox-bridge.service only when hardware wallet is plugged, also registers the systemd device unit
|
| hardware.cpu.intel.sgx.provision.mode | Mode to set for the SGX provisioning device.
|
| hardware.cpu.intel.sgx.provision.user | Owner to assign to the SGX provisioning device.
|