kiara/Fediversity
1
0
Fork 0
forked from fediversity/fediversity
Code Pull requests Activity
872 commits 180 branches 0 tags 60 MiB
Commit graph

872 commits

This branch
This branch
All branches
Author SHA1 Message Date
Kiara Grouwstra
0633f66fee
factor out user 2025-07-11 15:38:26 +02:00
Kiara Grouwstra
b7314b4664
have attic know it doesn't do https, for now 2025-07-11 15:38:26 +02:00
Kiara Grouwstra
d387dc80ee
for now set substituters to use http as well 2025-07-11 15:38:26 +02:00
Kiara Grouwstra
3eb8a8634f
expose 8080 in nftables, pending proper TLS/reverse-proxy/port (?) 2025-07-11 15:38:26 +02:00
Kiara Grouwstra
6e3d19c315
expose port 9000 following documentation 2025-07-11 15:38:26 +02:00
Kiara Grouwstra
8a19afbc98
enquote CI command 2025-07-11 15:38:26 +02:00
Kiara Grouwstra
3d8f2fca61
still go thru shell to actually load it 2025-07-11 15:38:26 +02:00
Kiara Grouwstra
4e968e4e6a
pull attic-client into shell as CI is missing <nixpkgs> for nix-shell 2025-07-11 15:38:26 +02:00
Kiara Grouwstra
20765e6f3a
collapse caching ci test, given it seems to not carry over variables between steps 2025-07-11 15:38:26 +02:00
Kiara Grouwstra
02e5aa8e9e
test attic cache from ci 2025-07-11 15:38:26 +02:00
Kiara Grouwstra
c43045903a
allow consuming attic cache from ci runner 2025-07-11 15:38:26 +02:00
Kiara Grouwstra
de9509530f
enquote attic env values for use in source attic.env 2025-07-11 15:38:26 +02:00
Kiara Grouwstra
811a8020d4
add generator dependency 2025-07-11 15:38:26 +02:00
Nicolas “Niols” Jeannerod
0e59ad0b5a
moar extraDependencies 2025-07-11 15:38:26 +02:00
Kiara Grouwstra
bb1eb12bb7
[wip] handling env file (still fails) 
rm unused dep nix-templating

fix imports
 2025-07-11 15:38:26 +02:00
Kiara Grouwstra
399fc0a375
use templating fork 2025-07-11 15:38:17 +02:00
Kiara Grouwstra
c3bc9c3b24
add tests, fix some things 
upgrade memory to resolve oom
 2025-07-11 15:38:17 +02:00
Kiara Grouwstra
6703f2d88a
move from dev to operator 
revert

add qemu import
 2025-07-11 15:36:14 +02:00
Kiara Grouwstra
afaa7f4d75
WIP: add attic cache, see #92 
flesh out attic

TODO keys nginx-port testing

fix key

fix key
 2025-07-11 15:36:14 +02:00
Kiara Grouwstra
4bdc53ac85
ensure bare-metal fileSystems override default, resolves definition conflict on nixops4 apply forgejo-ci 2025-07-11 15:36:14 +02:00
Kiara Grouwstra
178e16cf41
resolve regressions from recent qemu files 
- move import to match module classes
- manually import sources to resolve infinite recursion
 2025-07-11 15:36:14 +02:00
Kiara Grouwstra
1be115046d
actually pass a priority level fitting my description 2025-07-11 15:36:14 +02:00
Kiara Grouwstra
2b45215ddd
use defaultOverridePriority over mkDefault to fix acme error without cashing with settings from tests 2025-07-11 15:36:14 +02:00
Kiara Grouwstra
e4c4fe91aa
use mkDefault to prevent acme clash in tests 2025-07-11 15:36:14 +02:00
Kiara Grouwstra
b74816f1cd
increase numInstances to 5 2025-07-11 15:36:02 +02:00
Kiara Grouwstra
6f730805c2
Revert "switch to podman" 
This reverts commit 60e7b841a9.
 2025-07-11 15:36:02 +02:00
Kiara Grouwstra
d6dd683c5c
runs-on: nix 2025-07-11 15:36:02 +02:00
Kiara Grouwstra
4b0d9b4775
switch to podman 2025-07-11 15:36:02 +02:00
Kiara Grouwstra
e2b5ddcc3d
increase numInstances to 3 2025-07-11 15:36:02 +02:00
Kiara Grouwstra
7e8a0eaae3
add note on podman attempt 2025-07-11 15:36:02 +02:00
Kiara Grouwstra
998f1041d4
reconciliate old/new runners 2025-07-11 15:36:02 +02:00
Kiara Grouwstra
29365712b9
explicitly use custom container in CI 2025-07-11 15:36:02 +02:00
Kiara Grouwstra
83035c58d6
explicitly allow running command to manually generating tokens from forgejo machine 
additionally serves to document the needed command, for future
automation.
 2025-07-11 15:36:02 +02:00
Kiara Grouwstra
6658371154
set up ci container from clan 
credit:
https://discourse.nixos.org/t/gitea-nix-actions-runner-setup/35279
 2025-07-11 15:36:02 +02:00
Kiara Grouwstra
89cce4eef7
try and recreate the container from icewind 
see:
https://icewind.nl/entry/gitea-actions-nix/#using-nix-to-build-our-nix-image

> Error: crun: cannot find `` in $PATH: No such file or directory: OCI
runtime attempted to invoke a command that was not found
 2025-07-11 15:36:02 +02:00
Kiara Grouwstra
bab942b3f8
runs-on: docker 2025-07-11 15:36:02 +02:00
Kiara Grouwstra
b2c67897ca
rm runner file 2025-07-11 15:36:02 +02:00
Kiara Grouwstra
46e1680bfe
explicitly specify container image 2025-07-11 15:36:02 +02:00
Kiara Grouwstra
8db305a48a
add label for new runner 2025-07-11 15:36:02 +02:00
Kiara Grouwstra
a9117a8953
try out existing nix container made for gitea actions 2025-07-11 15:36:02 +02:00
Nicolas “Niols” Jeannerod
8204f22e52
Switch all CI jobs to nixos label 2025-07-11 15:36:02 +02:00
Kiara Grouwstra
2b2fb059fd fix cd command (#455) 
Reviewed-on: Fediversity/Fediversity#455
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
 2025-07-11 11:07:03 +02:00
Kiara Grouwstra
66ceb66382 add deployment pipeline (#452) 
part of #177

Reviewed-on: Fediversity/Fediversity#452
Reviewed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
 2025-07-10 16:45:46 +02:00
fricklerhandwerk
ad9c61a3db docs: fix typos 2025-07-10 00:37:27 +02:00
Nicolas “Niols” Jeannerod
b4e1c5b5b3 Restrict fileset necessary for deployment tests (#450) 
Now that we won't depend on the flake.nix anymore, we won't depend on all the flake-part.nix files (necessary to evaluate flake.nix) and all the files they depend on etc., so the Nix dependencies of the tests will be drastically reduced, and I will be able to leverage that by introducing a more subtle src. This will make the test not need to re-run if only things outside that reduced src changed (and the previous run is in the Nix store).

Reviewed-on: Fediversity/Fediversity#450
Reviewed-by: kiara Grouwstra <kiara@procolix.eu>
Reviewed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Co-authored-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
Co-committed-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
 2025-07-09 22:57:52 +02:00
Nicolas “Niols” Jeannerod
de38611572 Unflakify deployment tests (#449) 
This PR builds on top of #447 and #448. Since these might be rejected, there will be some changes needed for this PR as well. Let's see how the discussions go in #447.

In the meantime, @fricklerhandwerk, would you mind (in)validating the core idea of this PR? You only need to look at 7cf43c4041, really.

Reviewed-on: Fediversity/Fediversity#449
Reviewed-by: kiara Grouwstra <kiara@procolix.eu>
Reviewed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Co-authored-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
Co-committed-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
 2025-07-09 15:07:02 +02:00
Nicolas “Niols” Jeannerod
1d40dcfc0e Grab git-hooks from npins (#448) 
This PR builds on top of #447 and will be subject to the same discussion. Let's discuss there whether it makes sense to get rid of the `flake-parts` and `git-hooks` flake inputs.

Reviewed-on: Fediversity/Fediversity#448
Reviewed-by: kiara Grouwstra <kiara@procolix.eu>
Co-authored-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
Co-committed-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
 2025-07-09 13:21:48 +02:00
Nicolas “Niols” Jeannerod
c3bf158130 Note on extracting mkFlake to an external library (#451) 
follow-up on Fediversity/Fediversity#447 (comment)

Reviewed-on: Fediversity/Fediversity#451
Reviewed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Co-authored-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
Co-committed-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
 2025-07-09 12:34:43 +02:00
Nicolas “Niols” Jeannerod
48c6a1f22b Extract mkFlake to own file - get flake-parts from npins (#447) 
The goal is to contain the “`mkFlake` hack” to a file that we can heavily document but otherwise ignore. This also will allow me to reuse it in the “flake under test” of the deployment tests.

Reviewed-on: Fediversity/Fediversity#447
Reviewed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Reviewed-by: kiara Grouwstra <kiara@procolix.eu>
Co-authored-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
Co-committed-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
 2025-07-09 10:12:47 +02:00
Kiara Grouwstra
8a7984933d reinstate acme settings needed by applications (#434) 
closes #417

Reviewed-on: Fediversity/Fediversity#434
Reviewed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
 2025-07-08 10:02:13 +02:00