WIP

hosts/terra/configuration.nix

@@ -43,6 +43,51 @@ in
   # https://nix.dev/permalink/stub-ld ----
   programs.nix-ld.enable = true;
 
+  # The default set above is deliberately minimal and carries no X11,
+  # freetype, wayland or xkbcommon, so a prebuilt *graphical* binary dies
+  # before it draws anything. JetBrains IDEs installed through Toolbox are the
+  # case that surfaced this: their bundled JBR aborts with `libX11.so.6:
+  # cannot open shared object file` unless the Toolbox GUI — itself an FHS
+  # wrapper — is what launches them, which makes them unusable from a terminal
+  # or from a per-repo devShell. These are the libraries `ldd` reports missing
+  # across a JBR's own .so files, plus the three it resolves by dlopen rather
+  # than DT_NEEDED: fontconfig for font discovery, libGL, and libsecret for
+  # the credential store. Definitions merge, so this adds to the module's base
+  # list rather than replacing it (zlib is already there).
+  programs.nix-ld.libraries = with pkgs; [
+    freetype
+    fontconfig
+    libGL
+    libxkbcommon
+    wayland
+    libsecret
+    libx11
+    libxext
+    libxi
+    libxrender
+    libxtst
+    libxcursor
+    libxrandr
+    libxinerama
+    libxcb
+
+    # CLion Nova's C++ backend (the clion-radler plugin) is a .NET 10
+    # application bundling its own runtime, and .NET refuses to start
+    # without ICU: libSystem.Globalization.Native.so dlopens libicuuc.so
+    # and libicui18n.so, and failing that the IDE reports "Couldn't find a
+    # valid ICU package installed on the system" and comes up degraded.
+    icu
+  ];
+
+  # ---- envfs: serves /bin and /usr/bin from the calling process's PATH ----
+  # NixOS ships only /bin/sh, but plenty of third-party tooling writes scripts
+  # with a hardcoded interpreter. JetBrains Toolbox is the standing example:
+  # it generates ~/.local/share/JetBrains/Toolbox/scripts/{clion,rider,...}
+  # with `#!/bin/bash`, so every one of those shims fails with `bad
+  # interpreter` in any shell. envfs resolves such shebangs against PATH,
+  # which fixes them all at once instead of per-IDE wrappers.
+  services.envfs.enable = true;
+
   # ---- home-manager (user-level config for darman) ----
   # Base settings (useGlobalPkgs/useUserPackages/backupFileExtension) and the
   # shared zsh baseline now live in common.nix + home/common.nix, applied to
@@ -96,7 +141,15 @@ in
     # in VRAM alone, so ollama offloads the inactive experts to CPU RAM.
     # Sparse activation makes that far less painful than it'd be for a dense
     # model this size, but still expect it to run slower than the two above.
-    loadModels = [ "gemma4:12b" "qwen3.6:35b-a3b" ];
+    # VladimirGav/qwen3.8-27B-14GB-IQ4: dense 27B at IQ4, ~14GB of weights —
+    # nominally fits the 6800 XT's 16G, but that leaves only ~2G for the KV
+    # cache and the compositor, so expect partial CPU offload as context grows
+    # (OLLAMA_CONTEXT_LENGTH below applies to every model on this server).
+    loadModels = [
+      "gemma4:12b"
+      "qwen3.6:35b-a3b"
+      "VladimirGav/qwen3.8-27B-14GB-IQ4"
+    ];
     # Ollama truncates context far below the model's real window unless
     # told otherwise (the OpenAI-compat /v1 route it's reached through has
     # no way to set this per-request). 131072 chosen as the practical