hax

nixos/modules/nixos/system/impermanence/default.nix

@@ -52,6 +52,11 @@ with lib;
       "d ${cfg.persistPath}/nixos/ssh/ 0755 root root -" #The - disables automatic cleanup, so the file wont be removed after a period
     ];
 
+    # set machine id for log continuity
+    environment.etc.machine-id.source = "${cfg.persistPath}/nixos/etc/machine-id";
+
+    # keep hardware clock adjustment data
+    environment.etc.adjtime.source = "${cfg.persistPath}/nixos/etc/adjtime";
 
   };
 

nixos/modules/nixos/system/security.nix

@@ -27,6 +27,8 @@ in
     {
       security = {
         sudo.wheelNeedsPassword = cfg.wheelNeedsSudoPassword;
+        # Don't bother with the lecture or the need to keep state about who's been lectured
+        security.sudo.extraConfig = "Defaults lecture=\"never\"";
 
         pam.enableSSHAgentAuth = cfg.sshAgentAuth.enable;