Commit graph

802 commits

Author SHA1 Message Date
385c811a39
limit parallelism for testing to prevent out-of-memory errors 2025-04-13 21:09:20 +02:00
1f5977468c
ditch hermetic to simplify - still gets infinite recursion 2025-04-13 13:36:04 +02:00
9f689faa32
special_args -> nix_path + module 2025-04-13 13:16:57 +02:00
ef214ced10
merge tf modules 2025-04-13 13:11:04 +02:00
d955e39f4c
simplify tf 2025-04-12 22:18:21 +02:00
3418d0e76d
get terraform-nixos working deployed 2025-04-12 22:11:23 +02:00
2cc96eb530
configure debug printing 2025-04-12 16:45:52 +02:00
45c53ec150
Revert "switch subprocess output to logger"
This reverts commit d4860c8aed.
2025-04-12 14:36:25 +02:00
60093212d7
Revert "Reapply "log to file""
This reverts commit 1983508fb1.
2025-04-12 14:36:21 +02:00
1983508fb1
Reapply "log to file"
This reverts commit b0942bd174.
2025-04-12 14:10:55 +02:00
d4860c8aed
switch subprocess output to logger 2025-04-12 14:08:55 +02:00
9c53abfb4c
fix logging levels so info gets shown too, not just warn 2025-04-12 13:38:19 +02:00
81011d0062
pass deploy env vars thru 2025-04-12 12:31:47 +02:00
a41405775e
get ssh socket in prod 2025-04-12 12:31:36 +02:00
b0942bd174
Revert "log to file"
This reverts commit 1a8d940a90.
2025-04-12 11:36:18 +02:00
553753218e
pass vars separately 2025-04-12 11:33:59 +02:00
265d79aeef
local vars 2025-04-12 10:27:11 +02:00
1a8d940a90
log to file 2025-04-12 09:56:00 +02:00
f87275e384
use proper logger 2025-04-12 09:33:18 +02:00
8a50680b9f
document dev process 2025-04-10 14:01:07 +02:00
8f785d7582
point deployed TF to panel ssh key 2025-04-10 11:12:39 +02:00
4f83f51e17
rm .auto.tfvars.json, as the local ssh key and socket are not relevant deployed 2025-04-10 10:07:30 +02:00
ce0e8e39f2
un-track .terraform 2025-04-10 09:03:58 +02:00
1da2e9e497
special-args -> hermetic 2025-04-10 09:00:21 +02:00
79e58e21f4
nixos-anywhere -> terraform-nixos
intended to swap out nixos-anywhere for terraform-nixos, over:

- don't need nixos-anywhere to install nixos; we preload nixos to VMs
- [awkward non-flake
usage](https://nix-community.github.io/nixos-anywhere/howtos/use-without-flakes.html#3-set-nixos-version-to-use)
-  seemed not to pick up on config changes, as observed by test VMs
losing their panel keys after TF sync

however, it seems that terraform-nixos has its own flaws:

- its output using a random id, i.e. forcing to push even on no changes
- so far did not get ssh authentication to work
2025-04-09 17:05:00 +02:00
2b0ee4e52d
add ssh key to not need root user 2025-04-09 17:05:00 +02:00
eb3b1425d0
leave subprocess user implicit 2025-04-09 17:04:53 +02:00
551e860b5b
use root user as in #301 - given #297 seems to actually deploy! 2025-04-09 17:04:53 +02:00
3270cc89e7
update mastodon host 2025-04-09 17:04:33 +02:00
182106cd89
update nixpkgs to unstable - resolves manual deploy error on bootloader already on newer version 2025-04-09 17:04:33 +02:00
c93f16bcb2
change ssh user to root 2025-04-09 17:04:33 +02:00
e02e399a02
use a mutable HOME in TF for nixos-anywhere to make a .ssh dir in - will this not backfire? 2025-04-09 17:04:33 +02:00
76e0594956
for now gitignore .auto.tfvars.json used to track TF module of nixos-anywhere
in case we want that file for something else, we can move this (and its
ignore) to something separate.
2025-04-09 17:04:33 +02:00
0350f68427
untrack TF generated provider/module stuff - local dev now requires following launch/README.md 2025-04-09 17:04:33 +02:00
de27ec1fb2
rm comment 2025-04-09 17:04:15 +02:00
fc4fc60982
update nixos-anywhere to fix error 'installable ... does not correspond to a Nix language value' 2025-04-09 17:04:15 +02:00
b4a65169c6
rm launch flake, as i seem to have reached similar progress without it 2025-04-09 17:04:07 +02:00
29664fef8c
get TF in prod to the same 'installable ... does not correspond to a Nix language value' for non-flakes
seemingly gets further when a similar command is tried from terminal.
as per https://github.com/NixOS/nix/issues/8752#issuecomment-1694714693,
this may have to do with aligning the current working directory.
2025-04-09 17:04:07 +02:00
195a8d4de8
document updating TF module 2025-04-09 17:03:43 +02:00
727b62f588
update 2025-04-09 17:03:43 +02:00
c841c4e9fd
specify XDG_CACHE_HOME, workaround to error writing to /var/empty/.cache 2025-04-09 17:03:43 +02:00
225f2a5be6
skip tf lock in views.py over read-only nix env 2025-04-09 17:03:43 +02:00
b3e783d4a5
move tf init out of python over read-only nix env 2025-04-09 17:03:43 +02:00
c1aa71e319
properly pass repo dir for prod, be it with hard-coded TF init 2025-04-09 17:03:43 +02:00
817c724557
use flake-sourced nixos-anywhere in tf, to reproduce modules for nix 2025-04-09 17:00:20 +02:00
d599d5b640
switch launch shell to root flake's nixpkgs, see #279 2025-04-09 17:00:20 +02:00
fa770d4ef3
Revert "deduplicate flake inputs"
This reverts commit 95769084ce.
2025-04-09 17:00:20 +02:00
be03794f5f
make re-exports explicit again 2025-04-09 17:00:20 +02:00
231c564c7a
deduplicate flake inputs 2025-04-09 17:00:20 +02:00
3eb6d93216
tf 2025-04-09 17:00:20 +02:00