:PROPERTIES:
:ID: ebf221fd-e5be-49d4-a078-6113e2e5e3f2
:END:

#+title: azos/beacon-wsl
#+filetags: :project: :knowledge: :beacon-wsl:

:PROPERTIES:
:ID: azos-beacon-wsl
:END:

#+title: azos/beacon-wsl
#+filetags: :project: :knowledge: :beacon-wsl:

[[id:bf4dde56-0967-4374-94ed-771301e47c66][azos]]

* Overview

NixOS-WSL instance running on a Windows machine on the local network.

- Static IP: =192.168.1.200=
- GPU: NVIDIA RTX 3050, 6GB VRAM, CUDA 13.2
- Config: =_machines/beacon-wsl.nix= → =nixos/configuration-beacon-wsl.nix=

* SSH Access

Uses YubiKey GPG key (=cardno:29_109_265=) — same key as lauretta. Authorized key
is set in =users.users.aner.openssh.authorizedKeys.keys= in the NixOS config.
Password auth disabled; root login disabled.

* Remote Deployment

Build locally and copy FAILS due to unsigned path rejection by remote Nix daemon.
Must build on the target host itself:

#+begin_src bash
nixos-rebuild switch \
  --flake '/home/aner/azos?submodules=1#beacon-wsl' \
  --target-host aner@192.168.1.200 \
  --build-host aner@192.168.1.200 \
  --elevate=sudo
#+end_src

* CUDA / GPU

- =programs.nix-ld.enable = true= required to run WSL-provided binaries (nvidia-smi, etc.)
- =nvidia-smi= lives at =/usr/lib/wsl/lib/nvidia-smi=; needs =LD_LIBRARY_PATH=/usr/lib/wsl/lib=
- =hardware.graphics.enable = true= exposes GPU via WSL2 paravirtualization
- CUDA-enabled torch works via nix shell with =config.cudaSupport = true= (see =roll= project flake)

* Windows-Side Setup

- Mirrored networking: =C:\Users\<user>\.wslconfig= with =[wsl2] networkingMode=mirrored=
- Windows Firewall inbound rule for TCP port 22 required (=-Profile Any=)
- Static IP set via Windows network adapter settings