In flake inputs:

    nixpkgs = {
      url = "github:NixOS/nixpkgs/release-22.11";
    };

in colmena:

    colmena = {
      meta = {
        nixpkgs = import nixpkgs {
          system = "x86_64-linux";
          overlays = [];
        };
        specialArgs = inputs;
      };
      cherry = {
        imports = [
          ./hosts/cherry.nix
          home-manager.nixosModules.home-manager
          stylix.nixosModules.stylix
        ];
        deployment.targetHost = "192.168.1.19";
      };

another odd thing, it seems to build stale versions of whatever my source is. For example:

  # Setup keyfile
  boot.initrd.secrets = {
    "/luks.bin" = "/luks.bin";
  };
  # Enable grub cryptodisk
  boot.loader.grub.enableCryptodisk=true;
  boot.initrd.luks.devices."luks-uuid-here".keyFile = "/luks.bin";

but it errors with:

[ERROR]   stderr) updating GRUB 2 menu...
[ERROR]   stderr) cp: cannot stat '/cryptokeyfile.bin': No such file or directory
[ERROR]   stderr) failed to create initrd secrets: No such file or directory

In reply to @cw:kernelpanic.cafe
Why would my systems still be built as 22.11-pre when my nixpkgs is 22.11 release?

In reply to @raphi:tapesoftware.net
that's fine, the "pre-git" suffix is just the default if nixpkgs can't figure out its own version
also you should use the "nixos-22.11" branch instead of the "release-22.11" branch. the release-* branches are the active development branches, and are untested. the nixos-* branches require tests to pass.

In reply to @cw:kernelpanic.cafe
now that there's no more filenames to cycle through, it just pretends it's not there

In reply to @raphi:tapesoftware.net
that's fine, the "pre-git" suffix is just the default if nixpkgs can't figure out its own version
also you should use the "nixos-22.11" branch instead of the "release-22.11" branch. the release-* branches are the active development branches, and are untested. the nixos-* branches require tests to pass.