WIP: add woodpecker CI #479

Closed

kiara wants to merge 29 commits from kiara/fediversity:woodpecker into main

pull from: kiara/fediversity:woodpecker

merge into: fediversity:main

fediversity:main

fediversity:automation/npins-update/systemd-openbao

fediversity:automation/npins-update/nixpkgs-unstable

fediversity:automation/npins-update/nixpkgs

fediversity:automation/npins-update/nix-unit

fediversity:automation/npins-update/home-manager

fediversity:automation/npins-update/git-hooks

fediversity:automation/npins-update/forgejo-src

fediversity:promote-updater

fediversity:test-action-main

fediversity:host-garage-central

fediversity:demo-new

fediversity:demo-old

fediversity:schema-change-visuals

fediversity:schema-change-viz

fediversity:ci/panel-incus

fediversity:automation/npins-update/terraform-provider-proxmox

fediversity:automation/npins-update/nix-src

fediversity:automation/npins-update/nix

fediversity:automation/npins-update/flake-parts

fediversity:automation/npins-update/clan-core

fediversity:kiara/nspawn-rebase

fediversity:fix/nixpkgs-contracts-26-05

fediversity:feat/garage-to-hosting-provider

fediversity:feat/authelia-ancilliary

fediversity:kiara/nspawn-panel-fix

fediversity:kiara/nspawn

fediversity:issues/124-database-backups

fediversity:fix/forgejo-ci-secrets-rekey

fediversity:fix/forgejo-ci-network-gateway

fediversity:fix/forgejo-ci-ipv6-gateway-interface

fediversity:feat/tests-thru-flake

fediversity:issue/126-filesystem-backup

fediversity:automation/update-workflow

fediversity:kiara/fix-pixelfed

fediversity:issues/125-garage-backups

fediversity:ci/pixelfed

fediversity:pixelfed-ci

Conversation 1 Commits 29 Files changed 25 +512 -133

kiara commented 2025-07-25 17:07:43 +02:00

Owner

Copy link

• publicly expose the machine - blocked on move by procolix - (as an ugly hack i could temporarily point the DNS to the local address so i wouldn't need to await procolix action to speed up CI - tho this would then come at the cost of CI not being publicly accessible yet.)

• set up woodpecker

• [ ] fix update pipeline? - #65

• fix CD pipeline

• check (non-kvm) pipelines work

  • cd: slow build and some (random?) connection time-out, possibly due to inferior compute on fedi203 compared to forgejo-ci

• move to forgejo-ci (fixes needed access to /dev/kvm)

• preventing rebuilds, by either:

  • [ ] cache - #92
  • [ ] custom container image
  • [ ] mount store - clashes with #362, and yields errors like /tmp/nix-shell-***/rc: line 3: <NIX-INVOKED BINARY>: command not found, using verbose nix showing:

  Unable to build with a primary store that isn't a local store; either pass a different '--store' or enable remote builds. For more information check 'man nix.conf' and search for '/machines'.

closes #463, supersedes #405.

edit: actually, woodpecker seems to still lack concurrency groups.

- [ ] publicly expose the machine - blocked on move [by procolix](https://mantis.protagio.org/view.php?id=12267) - (as an ugly hack i could temporarily point the DNS to the local address so i wouldn't need to await procolix action to speed up CI - tho this would then come at the cost of CI not being publicly accessible yet.) - [x] [set up woodpecker](https://woodpecker-ci.org/docs/3.6/administration/installation/packages#nixos) - ~~[ ] fix update pipeline?~~ - #65 - [x] fix CD pipeline - [ ] check (non-kvm) pipelines work - [ ] `cd`: slow build and some (random?) connection time-out, possibly due to inferior compute on fedi203 compared to forgejo-ci - [x] move to `forgejo-ci` (fixes needed access to `/dev/kvm`) - ~~preventing rebuilds, by either:~~ - ~~[ ] cache~~ - #92 - ~~[ ] [custom container image](https://git.fediversity.eu/Fediversity/Fediversity/pulls/405/files#diff-e93f79da6579010e9e28cbb8570053f42952c9a0)~~ - ~~[ ] [mount store](https://blog.kotatsu.dev/posts/2023-04-21-woodpecker-nix-caching/)~~ - clashes with #362, ~~and yields errors like `/tmp/nix-shell-***/rc: line 3: <NIX-INVOKED BINARY>: command not found`, using verbose nix showing:~~ > ~~Unable to build with a primary store that isn't a local store; either pass a different '--store' or enable remote builds. For more information check 'man nix.conf' and search for '/machines'.~~ closes #463, supersedes #405. edit: actually, woodpecker seems to still [lack concurrency groups](https://github.com/woodpecker-ci/woodpecker/issues/1461).

kiara force-pushed woodpecker from 90604e9bff to d833de6f2a 2025-07-25 17:46:48 +02:00 Compare

kiara force-pushed woodpecker from 97f4e28c18 to 098a0447a2 2025-08-04 14:41:48 +02:00 Compare

kiara force-pushed woodpecker from 6191409a34 to a32a5ae920 2025-08-04 16:31:17 +02:00 Compare

kiara force-pushed woodpecker from a32a5ae920 to 08e04e33b7 2025-08-04 16:35:07 +02:00 Compare

kiara force-pushed woodpecker from 264aeae670 to 38b13d9cbf 2025-08-04 16:42:21 +02:00 Compare

kiara force-pushed woodpecker from 38b13d9cbf to c0d7867aa5 2025-08-04 16:47:13 +02:00 Compare

kiara force-pushed woodpecker from c0d7867aa5 to 2cb50a3113 2025-08-04 16:47:38 +02:00 Compare

kiara force-pushed woodpecker from 2cb50a3113 to bfa3843aaf 2025-08-04 16:56:47 +02:00 Compare

kiara force-pushed woodpecker from bfa3843aaf to 715da01e90 2025-08-04 16:58:42 +02:00 Compare

kiara force-pushed woodpecker from d2759ae4b2 to 9e32af4257 2025-08-04 18:02:12 +02:00 Compare

kiara force-pushed woodpecker from 9e32af4257 to cc4d4c280b 2025-08-04 18:08:53 +02:00 Compare

kiara force-pushed woodpecker from a3741929e9 to 7026ca72b1 2025-08-04 18:14:29 +02:00 Compare

kiara force-pushed woodpecker from 7026ca72b1 to fff4ea3401 2025-08-04 19:00:20 +02:00 Compare

kiara force-pushed woodpecker from fff4ea3401 to ba2870d659 2025-08-04 19:01:44 +02:00 Compare

kiara force-pushed woodpecker from 7a306394d2 to 566501573d 2025-08-04 19:50:09 +02:00 Compare

kiara force-pushed woodpecker from 566501573d to 77ea5b3585 2025-08-04 19:51:38 +02:00 Compare

kiara force-pushed woodpecker from 3e90f68d00 to 2f8844736e 2025-08-04 21:32:30 +02:00 Compare

kiara force-pushed woodpecker from 8cd6b5df5d to 9aac8687fc 2025-08-04 21:43:28 +02:00 Compare

kiara force-pushed woodpecker from 9aac8687fc to ae62d2d9a9 2025-08-04 21:44:45 +02:00 Compare

kiara force-pushed woodpecker from ae62d2d9a9 to 97f6b77695 2025-08-04 22:10:15 +02:00 Compare

kiara force-pushed woodpecker from 8565d2eddc to 5e9fdc5c9e 2025-08-04 22:46:03 +02:00 Compare

kiara force-pushed woodpecker from b0cde587dd to 9c7c38bd45 2025-08-04 22:52:23 +02:00 Compare

kiara force-pushed woodpecker from 9c7c38bd45 to 37c8bdc348 2025-08-04 22:56:17 +02:00 Compare

kiara force-pushed woodpecker from 37c8bdc348 to 9c1b1a641f 2025-08-04 23:25:15 +02:00 Compare

kiara force-pushed woodpecker from 9c1b1a641f to c415177021 2025-08-04 23:27:16 +02:00 Compare

kiara force-pushed woodpecker from c415177021 to 7c8087c0a9 2025-08-04 23:32:10 +02:00 Compare

kiara added 1 commit 2025-08-05 11:40:23 +02:00

enable flakes thru env var 4e2f0e810c

kiara added 1 commit 2025-08-05 12:09:13 +02:00

unverbose 1eae31c876

kiara added 1 commit 2025-08-05 12:32:55 +02:00

simplify 6df2cc78c0

kiara force-pushed woodpecker from 88c1dd1d38 to f9b05f36f5 2025-08-05 15:03:26 +02:00 Compare

kiara added 1 commit 2025-08-05 17:06:54 +02:00

make it secure 10f4764e45

kiara force-pushed woodpecker from 7ae89e4e90 to 25908ad324 2025-08-05 21:26:31 +02:00 Compare

kiara force-pushed woodpecker from c3f5ad8c30 to 029d98b191 2025-08-06 09:03:48 +02:00 Compare

kiara added 1 commit 2025-08-06 10:22:00 +02:00

poke forceSSL hole to fix ACME issue Timeout during connect (likely firewall problem) e620a56ab4

kiara added 4 commits 2025-08-06 21:10:11 +02:00

try more firewall holes 2feb245231

unforce ssl 7cfcf39209

nginx group acme b415e5d597

comment forgejo actions runner 6da6cc678a

kiara referenced this pull request 2025-08-07 22:41:27 +02:00

WIP: add attic cache #397

kiara added 1 commit 2025-08-13 12:52:20 +02:00

proper templating 51345a4d8e

kiara added 1 commit 2025-08-15 13:22:56 +02:00

automatically generate secrets c7c9aad5da

kiara added 1 commit 2025-08-21 10:15:08 +02:00

use branches that include license e64ca89679

kiara referenced this pull request 2025-11-03 21:55:55 +01:00

split out CI checks to separate jobs #567

kiara commented 2026-06-19 11:55:00 +02:00

Author

Owner

Copy link

as per #362 we settled for forgejo-runner

as per #362 we settled for `forgejo-runner`

kiara closed this pull request 2026-06-19 11:55:01 +02:00

Pull request closed

Please reopen this pull request to perform a merge.

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

0 points

fibonacci complexity: 0 points

  

0.5 points

fibonacci complexity: 0.5 points

  

1 point

fibonacci complexity: 1 point

  

13 points

fibonacci complexity: 13 points

  

2 points

fibonacci complexity: 2 points

  

21 points

fibonacci complexity: 21 points

  

3 points

fibonacci complexity: 3 points

  

34 points

fibonacci complexity: 34 points

  

5 points

fibonacci complexity: 5 points

  

55 points

fibonacci complexity: 55 points

  

8 points

fibonacci complexity: 8 points

  

ambition

application-offering

  

ambition

configure-applications

  

ambition

front-end

  

ambition/install-applications

  

ambition

security

  

ambition

switch-host

  

ambition

update-applications

  

ambition

user-management

  

api service

features that may relate more to a (to be created) API service

  

blocked

  

component: fediversity panel

  

component: nixops4

  

documentation

  

estimation high: >3d

  

estimation low: <2h

  

estimation mid: <8h

  

infinite points

fibonacci complexity: infinite points

  

productisation

features out-scoped with the decoupling of the productisation effort

  

project-management

Project management related tasks

  

question

  

role: application developer

  

role: application operator

  

role: hosting provider

  

role: maintainer

  

security

  

technical debt

  

testing

  

type unclear

  

type: bug

Anything that doesn't work as advertised

  

type: deliverable

  

type: key result

  

type: objective

  

type: task

  

type: user story

  

user experience

No labels

0 points

0.5 points

1 point

13 points

2 points

21 points

3 points

34 points

5 points

55 points

8 points

ambition

application-offering

ambition

configure-applications

ambition

front-end

ambition/install-applications

ambition

security

ambition

switch-host

ambition

update-applications

ambition

user-management

api service

blocked

component: fediversity panel

component: nixops4

documentation

estimation high: >3d

estimation low: <2h

estimation mid: <8h

infinite points

productisation

project-management

question

role: application developer

role: application operator

role: hosting provider

role: maintainer

security

technical debt

testing

type unclear

type: bug

type: deliverable

type: key result

type: objective

type: task

type: user story

user experience

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

fediversity/fediversity!479

No description provided.