kiara/Fediversity
1
0
Fork 0
forked from fediversity/fediversity
Code Pull requests Activity

[HACK] explicitly pass instantiated policy to apply

Browse source
This commit is contained in:
Kiara Grouwstra 2025-07-22 17:43:41 +02:00
parent 76ee37c10e
commit 4d69cd6024
Signed by: kiara
SSH key fingerprint: SHA256:COspvLoLJ5WC5rFb9ZDe5urVCkK4LJZOsjfF4duRJFU
1 changed files with 23 additions and 25 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
deployment/data-model-test.nix
View file

@ -35,7 +35,7 @@ in
};
policy =
{ config, ... }:
{ ... }:
{
_class = "fediversity-resource-policy";
@ -45,7 +45,7 @@ in
};
apply = mkOption {
type = with types; functionTo raw;
default = requests: lib.mkMerge (requests ++ [ config.extra-config ]);
default = policy: requests: lib.mkMerge (requests ++ [ policy.extra-config ]);
};
};
};
@ -70,7 +70,7 @@ in
};
};
policy =
{ config, ... }:
{ ... }:
{
_class = "fediversity-resource-policy";
options = {
@ -86,16 +86,16 @@ in
apply = mkOption {
type = with types; functionTo raw; # TODO: splice out the user type from NixOS
default =
requests:
policy: requests:
let
# Filter out requests that need wheel if policy doesn't allow it
validRequests = lib.filterAttrs (_name: req: !req.wheel || config.wheel) requests;
validRequests = lib.filterAttrs (_name: req: !req.wheel || policy.wheel) requests;
in
lib.optionalAttrs (validRequests != { }) {
${config.username} = {
${policy.username} = {
isNormalUser = true;
packages = with lib; concatMap (request: attrValues request.packages) (attrValues validRequests);
extraGroups = lib.optional config.wheel "wheel";
extraGroups = lib.optional policy.wheel "wheel";
};
};
};
@ -121,15 +121,13 @@ in
dummy.login-shell.packages.hello = pkgs.hello;
};
};
environments.single-nixos-vm =
{ ... }:
{
environments.single-nixos-vm = environment: {
_class = "fediversity-environment";
resources.shell.login-shell.username = "operator";
implementation = requests: {
_class = "nixos";
users.users = (
config.resources.login-shell.policy.apply (
config.resources.login-shell.policy.apply environment.config.resources.shell.login-shell (
lib.concatMapAttrs (
_application: resources:
lib.mapAttrs (_k: lib.getAttr "login-shell") (