Bootstrap ISO for NixOS

From this subdirectory directory, run just iso to generate the ISO file

Typical installation flow

Flash iso with sudo dd if=install.iso of=<usb drive> status=progress
Boot image on install host
Connect to network via Ethernet or nmcli
From a donor machine, nixos-anywwhere -i <path to install private key> --flake .#<machine> nixos@<ip>
There is a bit of a snag here, but the current protocol is to connect to ethernet and SSH in using the installer key in order to setup SOPS, this section will be amended when we figure this out
Connect new host to ethernet and SSH in
Run ssh-keyscan <host> | ssh-to-age to get the age keys for the remote
Place the public key into .sops.yaml in the secrets repo at keys.hosts.
Run age-keygen and place the public key in keys.users._
Create the .yaml file in .sops.yaml and assign *skeleton, the host key, and the user key
Run just rekey in the secrets repo and push, then run just update-secret in the primary repo and push.
Add new SSH keys to repo
Rebuild the system and test for working sops, you can now login locally