1 files changed, 26 insertions, 2 deletions
diff --git a/ops/nixos/default.nix b/ops/nixos/default.nix
index 02a42425fdc6..d4aa9705d6a7 100644
--- a/ops/nixos/default.nix
+++ b/ops/nixos/default.nix
@@ -1,3 +1,4 @@
+# TODO(tazjin): rename 'pkgs' -> 'depot'?
 { pkgs, ... }:
 
 let
@@ -9,7 +10,30 @@ let
       foldl' lib.recursiveUpdate {} (map (c: c config) configs)
     );
   }).system;
-in {
-  # TODO(tazjin): rename 'pkgs' -> 'depot'?
+
   nuggetSystem = systemFor [ pkgs.ops.nixos.nugget ];
+
+  rebuilder = pkgs.third_party.writeShellScriptBin "rebuilder" ''
+    set -ue
+    if [[ $EUID -ne 0 ]]; then
+      echo "Oh no! Only root is allowed to rebuild the system!" >&2
+      exit 1
+    fi
+
+    case $HOSTNAME in
+    nugget)
+      echo "Rebuilding NixOS for //ops/nixos/nugget"
+      system=$(nix-build -E '(import <depot> {}).ops.nixos.nuggetSystem' --no-out-link)
+      ;;
+    *)
+      echo "$HOSTNAME is not a known NixOS host!" >&2
+      exit 1
+      ;;
+    esac
+
+    nix-env -p /nix/var/nix/profiles/system --set $system
+    $system/bin/switch-to-configuration switch
+  '';
+in {
+  inherit nuggetSystem rebuilder;
 }