24620d555e
allow consuming attic cache from ci runner
2025-08-05 17:28:53 +02:00
81662ed8a0
enquote attic env values for use in source attic.env
2025-08-05 17:28:53 +02:00
e6fbf59dcf
add generator dependency
2025-08-05 17:28:53 +02:00
8de6112243
moar extraDependencies
2025-08-05 17:28:53 +02:00
bcda91b239
[wip] handling env file (still fails)
...
rm unused dep nix-templating
fix imports
2025-08-05 17:28:53 +02:00
a1ee234b67
use templating fork
2025-08-05 17:27:58 +02:00
f5f4b5731b
add tests, fix some things
...
upgrade memory to resolve oom
2025-08-05 17:27:58 +02:00
85ebc8db85
move from dev to operator
...
revert
add qemu import
2025-08-05 17:26:50 +02:00
4a1d8a6b83
WIP: add attic cache, see #92
...
flesh out attic
TODO keys nginx-port testing
fix key
fix key
2025-08-05 17:26:40 +02:00
cbf60fd63d
actually pass a priority level fitting my description
2025-08-05 17:19:07 +02:00
49a37f153a
use defaultOverridePriority over mkDefault to fix acme error without cashing with settings from tests
2025-08-05 17:19:07 +02:00
9707cabc05
use mkDefault to prevent acme clash in tests
2025-08-05 17:19:07 +02:00
a06d13483c
increase numInstances to 5
2025-08-05 17:19:07 +02:00
2febe3af1c
Revert "switch to podman"
...
This reverts commit 60e7b841a9 .
2025-08-05 17:19:07 +02:00
42504d6b27
runs-on: nix
2025-08-05 17:19:07 +02:00
95f23460a5
switch to podman
2025-08-05 17:19:07 +02:00
9de646410c
increase numInstances to 3
2025-08-05 17:19:07 +02:00
4cf9f92a48
add note on podman attempt
2025-08-05 17:19:07 +02:00
8ffc5aca1c
reconciliate old/new runners
2025-08-05 17:19:07 +02:00
ee8b06529f
explicitly use custom container in CI
2025-08-05 17:19:07 +02:00
b9c3960d0f
explicitly allow running command to manually generating tokens from forgejo machine
...
additionally serves to document the needed command, for future
automation.
2025-08-05 17:19:07 +02:00
17f44ab9ba
set up ci container from clan
...
credit:
https://discourse.nixos.org/t/gitea-nix-actions-runner-setup/35279
2025-08-05 17:19:07 +02:00
8b41a6e881
try and recreate the container from icewind
...
see:
https://icewind.nl/entry/gitea-actions-nix/#using-nix-to-build-our-nix-image
> Error: crun: cannot find `` in $PATH: No such file or directory: OCI
runtime attempted to invoke a command that was not found
2025-08-05 17:19:07 +02:00
105265078a
runs-on: docker
2025-08-05 17:19:07 +02:00
2ccd5e136a
rm runner file
2025-08-05 17:19:07 +02:00
11c03a2f3c
explicitly specify container image
2025-08-05 17:19:07 +02:00
a43c8289bd
add label for new runner
2025-08-05 17:19:07 +02:00
ed67097f20
try out existing nix container made for gitea actions
2025-08-05 17:19:07 +02:00
040bba246f
Switch all CI jobs to nixos label
2025-08-05 17:19:07 +02:00
1f99a4c6c3
listToAttrs o map o attrsToList → mapAttrs' (#489 )
...
Reviewed-on: Fediversity/Fediversity#489
Reviewed-by: kiara Grouwstra <kiara@procolix.eu>
Co-authored-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
Co-committed-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
2025-08-01 13:09:26 +02:00
588bb77a94
Infra: expose and use checks for vmOptions and nixosConfigurations ( #488 )
...
Following Fediversity/Fediversity#478 (comment) , here is a PR that plugs the infra's `vmOptions` and `nixosConfigurations` outputs into flake checks, instead of calling random Nix commands from the CI. There is still a bit of magic in the CI, but that's because we don't have yet a Nix-aware CI that exposes one job per flake check.
Reviewed-on: Fediversity/Fediversity#488
Reviewed-by: kiara Grouwstra <kiara@procolix.eu>
Co-authored-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
Co-committed-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
2025-07-31 15:41:02 +02:00
df3a070fa4
Infra: get rid of makeResourceModule ( #485 )
...
Reviewed-on: Fediversity/Fediversity#485
Reviewed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Reviewed-by: kiara Grouwstra <kiara@procolix.eu>
Co-authored-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
Co-committed-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
2025-07-31 00:49:00 +02:00
be72b82875
Link to upstreaming PR for lib.types.fileset ( #487 )
...
Reviewed-on: Fediversity/Fediversity#487
Reviewed-by: kiara Grouwstra <kiara@procolix.eu>
Co-authored-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
Co-committed-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
2025-07-30 13:25:22 +02:00
1b66028f32
Fix infra and add more tests ( #478 )
...
This PR contains a bunch of small fixes having to do with infra code. The goal is not to fix everything as that would require a full rewrite. Instead, we fix just what is necessary to get some testing going on. Once that is available, we will be able to work on a full refactor with more guarantees. Something of note is that most of the difficulty was to find code that would make both `nixops4 apply` _and_ `nix build .#nixosConfigurations.<machine>` happy. The takeaway is that the tests that we are adding now will not catch a whole class of tests having to do with how NixOps4 wires up the resources. Still, this is probably less significant as we are supposed to use NixOps4 every now and then.
The commits should be read separately.
Reviewed-on: Fediversity/Fediversity#478
Reviewed-by: kiara Grouwstra <kiara@procolix.eu>
Co-authored-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
Co-committed-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
2025-07-30 12:31:03 +02:00
4509d277d3
move arguments from _module.args to specialArgs ( #469 )
...
Reviewed-on: Fediversity/Fediversity#469
Reviewed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
2025-07-23 18:12:55 +02:00
e488230d7b
updater: make npins command verbose ( #477 )
...
Reviewed-on: Fediversity/Fediversity#477
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
2025-07-19 13:00:33 +02:00
765183cd0d
fix typo in users ( #475 )
...
Reviewed-on: Fediversity/Fediversity#475
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
2025-07-17 19:02:14 +02:00
6cf1d87f0b
get parity in authorized keys between procolix and root for nixops4 ssh to non-VMs ( #474 )
...
Reviewed-on: Fediversity/Fediversity#474
Reviewed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
2025-07-17 18:59:31 +02:00
8253288f8a
remove pixelfed from CI until fixed ( #472 )
...
this test is still borked as per #33 .
the intent would be to get this test on a feature branch pertaining to that issue - the point being we should be able to rely on CI's boolean result for detecting (newly induced) regressions.
Reviewed-on: Fediversity/Fediversity#472
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
2025-07-17 15:25:17 +02:00
67f50f08de
enable continuous deployment ( #471 )
...
closes #177
Reviewed-on: Fediversity/Fediversity#471
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
2025-07-17 10:01:51 +02:00
5402178e7b
reinstate import statement for panel module, fixes error deploying fedi201 ( #468 )
...
resolves error on CI run https://git.fediversity.eu/Fediversity/Fediversity/actions/runs/1026 :
```
123456 error: attempt to call something which is not a function but a path: /nix/store/93yyf22vw60l1j3l6h02c99p93lp55q5-source/panel
at /nix/store/93yyf22vw60l1j3l6h02c99p93lp55q5-source/machines/dev/fedi201/fedipanel.nix:13:6:
12| imports = [
13| (../../../panel { }).module
| ^
14| "${sources.home-manager}/nixos"```
```
Reviewed-on: Fediversity/Fediversity#468
2025-07-16 20:51:23 +02:00
e627815399
pass SHELL env var in CD ( #466 )
...
see #177
Reviewed-on: Fediversity/Fediversity#466
2025-07-16 18:18:16 +02:00
354dba260a
verbose CD ( #465 )
...
debugging effort part of #177
Reviewed-on: Fediversity/Fediversity#465
2025-07-16 14:14:06 +02:00
b791bd515d
pass sources via specialArgs ( #464 )
...
this gets rid of ugly in-place imports and upward paths
Reviewed-on: Fediversity/Fediversity#464
Reviewed-by: kiara Grouwstra <kiara@procolix.eu>
Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Co-committed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
2025-07-16 10:53:36 +02:00
f2017aaeb4
CD: lump SSH commands into a single shell invocation ( #462 )
...
Reviewed-on: Fediversity/Fediversity#462
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
2025-07-15 13:00:47 +02:00
980a994f83
run ssh commands thru the shell (which has openssh) ( #461 )
...
Reviewed-on: Fediversity/Fediversity#461
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
2025-07-15 12:26:16 +02:00
b9b13df04e
allow SSH access from continuous deployment ( #460 )
...
Reviewed-on: Fediversity/Fediversity#460
Reviewed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
2025-07-15 11:56:22 +02:00
159e4107b8
fix Pixelfed test eval failure ( #458 )
...
Reviewed-on: Fediversity/Fediversity#458
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
2025-07-15 10:38:10 +02:00
86305a6a2e
fix link; readability
2025-07-15 09:04:56 +02:00
e62f14d9be
expose panel tests in flake
2025-07-15 08:54:48 +02:00