laptop-config/MIGRATION.md

Laptop Migration: MacBook → x86_64 NixOS

Order of operations

1. Install NixOS

Boot the NixOS ISO on the new laptop. Partition, format, mount to /mnt.

# Generate base config
nixos-generate-config --root /mnt

# Then rebuild from the flake (replaces generated config):
sudo nixos-rebuild switch --flake git+https://os.scoble.me/forgejo/sscoble/laptop-config.git#laptop --root /mnt

2. First build: npmDepsHash

The first nixos-rebuild will fail with a hash mismatch error for pi-coding-agent. The error output contains the correct hash:

error: hash mismatch in fixed-output derivation ...
  specified: sha256-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
  got:       sha256-1q2w3e4r5t6y7u8i9o0p1q2w3e4r5t6y7u8i9o0p1q=

Copy the got: hash, paste into flake.nix → npmDepsHash = "sha256-...". Commit, push, rebuild.

3. Transfer secrets (before reboot!)

From the MacBook, while both laptops are on the same LAN:

# SSH keys
scp ~/.ssh/id_ed25519 ~/.ssh/id_ed25519.pub new-laptop:~/.ssh/

# Pi agent config (has API keys — do NOT commit to git)
scp ~/.pi/agent/SYSTEM.md new-laptop:~/.pi/agent/
scp ~/.pi/agent/models.json new-laptop:~/.pi/agent/
scp ~/.pi/agent/mcp.json new-laptop:~/.pi/agent/
scp ~/.pi/agent/settings.json new-laptop:~/.pi/agent/
scp ~/.pi/agent/auth.json new-laptop:~/.pi/agent/

# Wallpapers
scp ~/path/to/wallpaper.jpg new-laptop:~/wallpapers/default.jpg

4. Transfer projects

Push any repos not yet in Forgejo, then re-clone:

# From MacBook: push scobleclaw to Forgejo
cd ~/Projects/scobleclaw
git remote add forgejo https://os.scoble.me/forgejo/sscoble/scobleclaw.git
git push forgejo main

# From new laptop: re-clone
cd ~/Projects
git clone https://os.scoble.me/forgejo/sscoble/scobleclaw.git
git clone https://os.scoble.me/forgejo/sscoble/wgu.git

# Other projects: rsync or push individually
rsync -avz --progress ~/Projects/other-project/ new-laptop:~/Projects/other-project/

5. Transfer documents and media

# Documents (small, ~30MB)
rsync -avz --progress ~/Documents/ new-laptop:~/Documents/

# Personal media (larger — be selective)
rsync -avz --progress ~/Pictures/ new-laptop:~/Pictures/
rsync -avz --progress ~/Music/ new-laptop:~/Music/

6. Reboot and login

sudo reboot
# Login via greetd → sscoble password → Hyprland starts
# SUPER+Return → ghostty with zellij

7. Verify everything works

pi                              # pi agent should start
qmd status                      # vault search
zotero                          # reference manager
obsidian ~/vault                # vault notes
code ~/Projects/scobleclaw      # VS Code

# OB1 tunnel
ssh -fNL 3987:localhost:3987 n97-mini
curl -s http://localhost:3987/health  # should return ok

# Discord: @mention Marcus in #speaker-site

8. T490 hardware setup

# Firmware updates (BIOS, EC, Thunderbolt, fingerprint reader)
fwupdmgr refresh && fwupdmgr update
# May need to disable Boot Order Lock in BIOS first

# Enroll fingerprint
fprintd-enroll

# Check sleep mode
cat /sys/power/mem_sleep
# Should show [deep] if S3 is available and configured

# Set up remote build SSH key
sudo ssh-keygen -t ed25519 -f /root/.ssh/remote-build -N ""
# Copy /root/.ssh/remote-build.pub to each cluster node's /root/.ssh/authorized_keys

# Set up Syncthing (pair with cluster nodes for vault sync)
systemctl --user enable --now syncthing

Files to NOT transfer

These contain caches, build artifacts, or macOS-specific junk:

• ~/Library/ — macOS only
• ~/Applications/ — macOS apps
• ~/.ollama/ — model cache (too large, re-download)
• ~/.cargo/ — rust cache
• ~/.bun/ — bun cache
• ~/.npm/ — npm cache
• ~/go/ — go module cache
• ~/tmp/ — temp files
• ~/Downloads/ — temp downloads (clean first, then selectively transfer)
• ~/.Trash/ — obviously

Post-migration checklist

• pi works
• qmd status works
• vscode opens with typst LSP
• zotero launches
• obsidian ~/vault opens vault
• brave launches and syncs
• SSH keys work (ssh n97-mini)
• OB1 tunnel works
• Hyprland: SUPER+D opens rofi, SUPER+Return opens ghostty+zellij
• Discord: @mention Marcus → gets a reply
• Wallpaper appears after login
• Firmware updated (fwupdmgr update)
• Fingerprint enrolled (fprintd-enroll)
• S3 sleep working (cat /sys/power/mem_sleep shows [deep])
• Remote Nix builders working (nix build --rebuild nixpkgs#hello)
• Syncthing running for vault sync