switch out infra to terraform, remove flakes #319

Open

kiara wants to merge 3 commits from kiara/Fediversity:infra-tf into main

pull from: kiara/Fediversity:infra-tf

merge into: Fediversity:main

Fediversity:main

Fediversity:ci/pixelfed

Fediversity:pixelfed-ci

Conversation 0 Commits 3 Files changed 111 +1166 -1783

kiara commented 2025-04-22 21:18:12 +02:00

Owner

Copy link

presumes #307

closes #309, #279

i realize conflating stories isn't ideal, yet feel unsure how to address these separately, see #311.

moves files to a structure roughly like:

├── infra
│   ├── common
│   ├── dev
│   ├── operator
│   └── sync-nix
├── machines
│   ├── dev
│   └── operator
└── proxmox

(which isn't so much final, but i feel makes for a step forward in reflecting project terminology from the status quo default / test naming for the infra versus operator VMs, respectively.)

presumes #307 closes #309, #279 i realize conflating stories isn't ideal, yet feel unsure how to address these separately, see #311. moves files to a structure roughly like: ``` ├── infra │   ├── common │   ├── dev │   ├── operator │   └── sync-nix ├── machines │   ├── dev │   └── operator └── proxmox ``` (which isn't so much final, but i feel makes for a step forward in reflecting project terminology from the status quo `default` / `test` naming for the infra versus operator VMs, respectively.)

kiara added 51 commits 2025-04-22 21:18:14 +02:00

fix npins b851cad8fd

buttons works deployed 71bf8c33ec

rm unused provider from lock 46f00968a3

rm null from tf bb0f3df982

mv env var a00c83c9a6

kill git hook 2ab5b12c73

rm tf lock eae3ac83c2

filter for git-tracked files 585420e589

Revert "kill git hook" ... 393e92ffe0

This reverts commit f7d050a3a60a130cc5ce5c89a413031438717e6b.

set env var specific to deployed setting e4c1a77353

implicit ssh 8b85c15df1

rm some unused code fad2f46f82

rm unused file a9475bb68d

reinstate user group, fixes application-tests 75addc0c0f

ignore generated tf lock 06b7cc5ca2

more comments bb94ae3e7d

rm unused import 23e9712a06

update nixpkgs to ditch opentofu patch f7000ba9d8

Revert "update nixpkgs to ditch opentofu patch" ... 551de1fb51

This reverts commit 7bab876d1b1713937188f2c55a17a119b5f10d22.

add more comments 73bc0fd599

fix key path 3603b431e0

ditch nixpkgs link from /run/current-system c156850fd4

retain nix_path for debugging 832fa92fc5

split out vars d4128d58c7

better document TF file 7ab8d3b44e

fix returncode 9a9285eaa0

move info passed to facilitate passing extra config da030f8b4f

consolidate setup in script cb69cb41b5

add further comments 2510b68a68

add unit test: TF validate f184fd3944

rm corresponding nixops deployments 0de70fb9d7

further purge test machines from nixops 0b11397daa

fix nix-hash 457493c3ee

setup: reset lock file, prevents Error: Failed to install provider ... a82bb393a2

error example:

```
Error while installing hashicorp/external v2.3.4: the local package for
registry.opentofu.org/hashicorp/external 2.3.4 doesn't match any of the
checksums previously recorded in the dependency lock file (this might be
because the available checksums are for packages targeting different
platforms); for more information:
https://opentofu.org/docs/language/files/dependency-lock/#checksum-verification
```

buttons works deployed ebbe87b43b

clean documentation 27bcd20360

move gitignore to apply to infra dir 3185fc036b

clean out nixops bits 54d639a5ff

switch dependency management to npins, closes #279 97c0098d15

wip: handle infra by TF ac39487b4c

move stuff around, utterly untested da9edfe528

services tests run, and fail e7887b2833

fix root test/hook 46f34d1188

infra tf-validate tests working a1f068a1db

panel working again locally 2a55d364ae

import home-manager, deploy to fedipanel from tf working 4232ae5b61

update hosts c9f65d3ddf

nixpkgs version that makes peertube test pass again 41648d6e8d

fix authorized keys 4bd2cc3eb8

use a nixpkgs version unbreaking both TF and peertube ... 5b3e5b6581

see 318 about the regression breaking the peertube test

fix rebase 144f397747

kiara force-pushed infra-tf from b55e715e4c to e912cc9882 2025-05-01 14:20:57 +02:00 Compare

kiara force-pushed infra-tf from e912cc9882 to 54c3e3dd58 2025-05-01 14:34:31 +02:00 Compare

kiara force-pushed infra-tf from 54c3e3dd58 to b0e09aeff2 2025-05-01 14:35:36 +02:00 Compare

kiara added 1 commit 2025-05-01 14:55:48 +02:00

strip test as a start to convert it b6ee59c515

kiara force-pushed infra-tf from b6ee59c515 to ac7a059d05 2025-05-01 15:04:46 +02:00 Compare

kiara referenced this pull request 2025-05-05 19:11:08 +02:00

generating ephemeral state #314

kiara added 1 commit 2025-05-09 15:22:11 +02:00

account for 285 ef4876239d

Some checks are pending

Hide all checks

/ check-pre-commit (pull_request) Successful in 11s

Required

Details

/ check-services (pull_request) Successful in 17s

Details

/ check-panel (pull_request) Successful in 1m28s

Required

Details

/ check-deployment-basic (pull_request) Failing after 2s

Required

Details

/ check-infra (pull_request) Successful in 58s

Details

/ check-deployment-cli (pull_request)

Required

/ check-peertube (pull_request)

Required

This pull request has changes conflicting with the target branch.

• .forgejo/workflows/ci.yaml
• default.nix
• deployment/README.md
• deployment/check/basic/flake-part.nix
• deployment/check/basic/nixosTest.nix
• deployment/default.nix
• deployment/flake-part.nix
• flake.lock
• flake.nix
• infra/common/resource.nix

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u infra-tf:kiara-infra-tf

git checkout kiara-infra-tf

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

api service

features that may relate more to a (to be created) API service

  

blocked

  

bug

Anything that doesn't work as advertised

  

component: fediversity panel

  

component: nixops4

  

contributor experience

  

documentation

  

estimation high: >3d

  

estimation low: <2h

  

estimation mid: <8h

  

goal: devops

  

productization

features out-scoped with the decoupling of the productization effort

  

project-management

Project management related tasks

  

question

  

role: sysadmin

  

security

  

technical debt

  

testing

  

type unclear

  

type: key result

  

type: objective

  

type: task

  

type: user story

  

user experience

No labels

api service

blocked

bug

component: fediversity panel

component: nixops4

contributor experience

documentation

estimation high: >3d

estimation low: <2h

estimation mid: <8h

goal: devops

productization

project-management

question

role: sysadmin

security

technical debt

testing

type unclear

type: key result

type: objective

type: task

type: user story

user experience

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: Fediversity/Fediversity#319

No description provided.