Add iso jobs

config/default.nix

@@ -182,7 +182,7 @@
       # Required for deployment and sops
       enable = true;
       passwordAuthentication = lib.mkIf (!config.c3d2.k-ot.enable) false;
-      permitRootLogin = "prohibit-password";
+      permitRootLogin = lib.mkOverride 900 "prohibit-password";
     };
 
     portunus = with zentralwerk.lib.config.site.net.serv; {

flake.nix

@@ -414,6 +414,22 @@
           ];
         };
 
+        iso = nixosSystem' {
+          modules = [
+            ({ modulesPath, ... }: {
+              imports = lib.singleton "${modulesPath}/installer/cd-dvd/installation-cd-graphical-calamares-plasma5.nix";
+            })
+          ];
+        };
+
+        iso-minimal = nixosSystem' {
+          modules = [
+            ({ modulesPath, ... }: {
+              imports = lib.singleton "${modulesPath}/installer/cd-dvd/installation-cd-minimal.nix";
+            })
+          ];
+        };
+
         jabber = nixosSystem' {
           modules = [
             {
@@ -780,9 +796,12 @@
       hydraJobs =
         lib.mapAttrs (_: nixos.lib.hydraJob) (
           let
-            getBuildEntryPoint = _: nixosSystem:
+            getBuildEntryPoint = name: nixosSystem:
               let
-                cfg = nixosSystem.config.microvm.declaredRunner or nixosSystem.config.system.build.toplevel;
+                cfg = if (lib.hasPrefix "iso" name) then
+                  nixosSystem.config.system.build.isoImage
+                else
+                  nixosSystem.config.microvm.declaredRunner or nixosSystem.config.system.build.toplevel;
               in
               if nixosSystem.config.nixpkgs.system == "aarch64-linux" then
                 # increase timeout for chromium