feat: Adds workflow for NixOS build

.github/workflows/kiosk-iso.yml

@@ -0,0 +1,43 @@
+name: Build NixOS Kiosk ISO
+
+on:
+  push:
+    branches: [ main, profile-install ]
+  workflow_dispatch:
+
+jobs:
+  flake-check:
+    runs-on: ubuntu-latest
+    container:
+      image: nixos/nix:2.33.0
+    env:
+      NIX_CONFIG: extra-experimental-features = nix-command flakes
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Flake check
+        run: nix flake check -L
+
+  build-iso:
+    runs-on: ubuntu-latest
+    needs: [ flake-check ]
+    container:
+      image: nixos/nix:2.33.0
+    env:
+      NIX_CONFIG: extra-experimental-features = nix-command flakes
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Build ISO
+        run: |
+          nix --version
+          nix build .#iso -L --system x86_64-linux
+          ls -la result
+          mkdir -p artifacts
+          cp -v result/iso/*.iso artifacts/
+      - name: Upload ISO artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: kiosk-iso
+          path: artifacts/*.iso
+          if-no-files-found: error

flake.lock

@@ -0,0 +1,61 @@
+{
+  "nodes": {
+    "flake-utils": {
+      "inputs": {
+        "systems": "systems"
+      },
+      "locked": {
+        "lastModified": 1731533236,
+        "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "nixpkgs": {
+      "locked": {
+        "lastModified": 1751274312,
+        "narHash": "sha256-/bVBlRpECLVzjV19t5KMdMFWSwKLtb5RyXdjz3LJT+g=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "50ab793786d9de88ee30ec4e4c24fb4236fc2674",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-24.11",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "root": {
+      "inputs": {
+        "flake-utils": "flake-utils",
+        "nixpkgs": "nixpkgs"
+      }
+    },
+    "systems": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    }
+  },
+  "root": "root",
+  "version": 7
+}

flake.nix

@@ -4,26 +4,25 @@
   inputs = {
     nixpkgs.url = "github:NixOS/nixpkgs/nixos-24.11";
     flake-utils.url = "github:numtide/flake-utils";
-    nixos-generators.url = "github:nix-community/nixos-generators";
   };
 
-  outputs = { self, nixpkgs, flake-utils, nixos-generators }:
+  outputs = { self, nixpkgs, flake-utils }:
-    flake-utils.lib.eachDefaultSystem (system: let
+    flake-utils.lib.eachDefaultSystem (system: {
-      pkgs = import nixpkgs { inherit system; };
+      # Build a bootable ISO image using the built-in NixOS iso module
-    in {
+      packages.iso = (
-      # Build a bootable ISO image using nixos-generators
+        (nixpkgs.lib.nixosSystem {
-      packages.iso = nixos-generators.nixosGenerate {
+          system = "x86_64-linux";
-        inherit pkgs;
+          modules = [
-        format = "iso";
+            ./nixos/kiosk.nix
-        modules = [ ./nixos/kiosk.nix ];
+            (import "${nixpkgs}/nixos/modules/installer/cd-dvd/iso-image.nix")
-      };
+          ];
+        }).config.system.build.isoImage
+      );
 
       # Expose the NixOS configuration for direct use if desired
-      nixosConfigurations.kiosk = let
+      nixosConfigurations.kiosk = (nixpkgs.lib.nixosSystem {
-        lib = nixpkgs.lib;
-      in lib.nixosSystem {
         system = "x86_64-linux";
         modules = [ ./nixos/kiosk.nix ];
-      };
+      });
     });
 }

nixos/kiosk.nix

@@ -123,6 +123,16 @@ EOF
     chown kiosk:kiosk /home/kiosk/.bash_profile
   '';
 
+  # Unpack preconfigured Firefox profile from the repository into kiosk's home
+  system.activationScripts.kioskFirefoxProfile = lib.stringAfter ["users"] ''
+    mkdir -p /home/kiosk/.mozilla/firefox
+    # Only unzip if directory is empty (first activation)
+    if [ -z "$(ls -A /home/kiosk/.mozilla/firefox 2>/dev/null)" ]; then
+      ${pkgs.unzip}/bin/unzip -o ${../Firefox.zip} -d /home/kiosk/.mozilla/firefox
+      chown -R kiosk:kiosk /home/kiosk/.mozilla/firefox
+    fi
+  '';
+
   ############################################
   # Include your userscripts in the image for easy import
   ############################################
@@ -135,6 +145,7 @@ EOF
   time.timeZone = "UTC";
   services.openssh.enable = true; # optional, mirrors preseed tasksel ssh-server
 
+
   # Keep system simple, disable unneeded DM
   services.displayManager.enable = false;
 }