add nvd on activate

hosts/bolle/default.nix

@@ -9,6 +9,7 @@
     ./hardware-configuration.nix
     ../../hardware/gpu/intel.nix
     ../../profiles/auto-upgrade.nix
+    ../../profiles/upgrade-diff.nix
     ../../profiles/sshd.nix
 
     ../../users # home-manager

hosts/nord/default.nix

@@ -18,6 +18,7 @@
     ../../hardware/gpu/rocm.nix
     ../../hardware/gpu/intel.nix
     ../../profiles/auto-upgrade.nix
+    ../../profiles/upgrade-diff.nix
     ../../profiles/sshd.nix
 
     ../../users # home-manager

hosts/noximilien/default.nix

@@ -8,6 +8,7 @@
     ./hardware-configuration.nix
     ../../hardware/gpu/intel.nix
     ../../profiles/auto-upgrade.nix
+    ../../profiles/upgrade-diff.nix
     ../../profiles/sshd.nix
     ../../profiles/podman.nix
 

hosts/sopp/default.nix

@@ -24,6 +24,7 @@
     ../../hardware/gpu/intel.nix
     ../../hardware/printer/hp-laserjet-p1005.nix
     ../../profiles/auto-upgrade.nix
+    ../../profiles/upgrade-diff.nix
     ../../profiles/sshd.nix
     ../../profiles/no-suspend.nix
     ../../profiles/podman.nix

profiles/upgrade-diff.nix

@@ -0,0 +1,13 @@
+{ pkgs, ... }:
+{
+
+  # nvd: https://discourse.nixos.org/t/nvd-simple-nix-nixos-version-diff-tool/12397
+  # module from https://github.com/luishfonseca/dotfiles/blob/ab7625ec406b48493eda701911ad1cd017ce5bc1/modules/upgrade-diff.nix
+  system.activationScripts.diff = {
+    supportsDryActivation = true;
+    text = ''
+      ${pkgs.nvd}/bin/nvd --nix-bin-dir=${pkgs.nix}/bin diff /run/current-system "$systemConfig"
+    '';
+  };
+
+}

users/pbsds/home/default.nix

@@ -12,6 +12,7 @@
     ./profiles/shell.nix
     ./profiles/ssh.nix
     ./profiles/tmate.nix
+    ./profiles/update-diff.nix
   ];
 
   # TODO: add remote-exec once packaged

users/pbsds/home/profiles/update-diff.nix

@@ -0,0 +1,10 @@
+{ config, pkgs, ... }:
+{
+
+  # nvd: https://discourse.nixos.org/t/nvd-simple-nix-nixos-version-diff-tool/12397
+  # module from https://infosec.exchange/@wyndon/110662698348958506
+  home.activation.diff-update = config.lib.dag.entryAnywhere ''
+    ${pkgs.nvd}/bin/nvd diff $oldGenPath $newGenPath
+  '';
+
+}