kiara/Fediversity
1
0
Fork 0
forked from Fediversity/Fediversity
Code Pull requests Activity
858 commits 107 branches 0 tags 49 MiB
Commit graph

24 commits

Author SHA1 Message Date
Kiara Grouwstra
6635a11832
scaffold deployment/check/data-model from ./basic 2025-08-01 16:20:22 +02:00
Nicolas “Niols” Jeannerod
de38611572 Unflakify deployment tests (#449) 
This PR builds on top of #447 and #448. Since these might be rejected, there will be some changes needed for this PR as well. Let's see how the discussions go in #447.

In the meantime, @fricklerhandwerk, would you mind (in)validating the core idea of this PR? You only need to look at 7cf43c4041, really.

Reviewed-on: Fediversity/Fediversity#449
Reviewed-by: kiara Grouwstra <kiara@procolix.eu>
Reviewed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Co-authored-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
Co-committed-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
 2025-07-09 15:07:02 +02:00
Kiara Grouwstra
9a25a04bfa specify _class module attributes to explicitly declare module types (#398) 
closes #93.

note that this includes classes:

- `nixos`
- `nixosTest`
- `nixops4Resource`
- `nixops4Deployment`

.. and my (made-up, as per the [docs](https://ryantm.github.io/nixpkgs/module-system/module-system/#module-system-lib-evalModules-param-class)):

- `nix-unit`
- `package`

.. while i did not manage to cover:

- service tests, given `pkgs.nixosTest` seemed to not actually like `_class = "nixosTest"` (?!)

... nor #93's mentioned destructured arguments for that matter, as per Fediversity/Fediversity#93 (comment) - let me know if that is still desired as well.

Reviewed-on: Fediversity/Fediversity#398
Reviewed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
 2025-06-23 17:24:54 +02:00
Nicolas “Niols” Jeannerod
bd1cfd7a7c Introduce test for deploying all services via FediPanel (#361) 
Closes #277

Same as #329 but where we run the FediPanel and interact with it via a browser
instead of running NixOps4 directly.

Reviewed-on: Fediversity/Fediversity#361
Reviewed-by: kiara Grouwstra <kiara@procolix.eu>
Reviewed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Co-authored-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
Co-committed-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
 2025-06-18 12:37:47 +02:00
Nicolas “Niols” Jeannerod
ee5c2b90b7 Introduce test for deploying all services with nixops4 apply (#329) 
Closes Fediversity/Fediversity#276

This PR adds a CLI deployment test. It builds on top of Fediversity/Fediversity#323. This test features a deployer node and four target nodes. The deployer node runs `nixops4 apply` on a deployment built with our actual code in `deployment/default.nix`, which pushes onto the four target machines combinations of Garage/Mastodon/Peertube/Pixelfed depending on a JSON payload. We check that the expected services are indeed deployed on the machines. Getting there involved reworking the existing basic test to extract common patterns, and adding support for ACME certificates negotiation inside the NixOS test.

What works:
- deployer successfully runs `nixops4 apply` with various payloads
- target machines indeed get the right services pushed onto them and removed
- services on target machines successfully negotiate ACME certificates

What does not work: the services themselves depend a lot on DNS and that is not taken care of at all, so they are probably very broken. Still, this is a good milestone.

Test it yourself by running `nix build .#checks.x86_64-linux.deployment-basic -vL` and `nix build .#checks.x86_64-linux.deployment-cli -vL`. On the very beefy machine that I am using, the basic test runs in ~4 minutes and the CLI test in ~17 minutes. We know from Fediversity/Fediversity#323 that the basic test runs in ~12 minutes on the CI runner, so maybe about an hour for the CLI test?

Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Reviewed-on: Fediversity/Fediversity#329
Reviewed-by: kiara Grouwstra <kiara@procolix.eu>
Reviewed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Co-authored-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
Co-committed-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
 2025-05-19 02:18:54 +02:00
Nicolas “Niols” Jeannerod
f5db62e053 Add a basic integration test (#323) 
This PR adds a basic deployment test to the repository. This test will, in a NixOS test, run a deployer VM and a target VM, and check that we manage to run `nixops4 apply` on the deployer VM to change things on the target VM. The ideas are all @roberth's and this test has been extremely heavily inspired by https://github.com/nixops4/nixops4-nixos/blob/main/test/default/nixosTest.nix.

Reviewed-on: Fediversity/Fediversity#323
Reviewed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Co-authored-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
Co-committed-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
 2025-04-30 15:03:36 +02:00
Nicolas “Niols” Jeannerod
3f9c174d97
Get rid of the deployment/ directory 2025-02-25 11:57:20 +01:00
Nicolas “Niols” Jeannerod
d77b04ec18
Apply makeInstallerIso to conf in provision.sh 2025-02-21 20:24:40 +01:00
Nicolas “Niols” Jeannerod
bf0a35de6c
makeInstaller -> makeInstallerIso 2025-02-21 20:24:40 +01:00
Nicolas “Niols” Jeannerod
cd83536e2f
Allow Garage and services to run on different machines 2025-02-21 17:52:50 +01:00
Nicolas “Niols” Jeannerod
1eeaa04df6
Introduce fediversity.garage.enable 2025-02-21 17:52:50 +01:00
Nicolas “Niols” Jeannerod
a5d226ed22
Get rid of fediversity.enable 2025-02-21 17:52:50 +01:00
Nicolas “Niols” Jeannerod
78a85b27ff
Put the S3 secrets into files 
...but not everywhere, there remains some FIXMEs where ultimately the
secrets do get into the store.
 2025-02-21 17:52:50 +01:00
Nicolas “Niols” Jeannerod
b547912794
Make access and secret keys parameters 2025-02-21 17:52:50 +01:00
Nicolas “Niols” Jeannerod
a1cfcf1d71
Same treatment for Peertube 2025-02-21 17:52:50 +01:00
Nicolas “Niols” Jeannerod
c6fb52915a
More clean up of the deployment flake 
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
 2025-02-21 10:01:06 +01:00
Nicolas “Niols” Jeannerod
5cc86bff94
Move makeInstaller to infra/ 2025-02-21 10:01:05 +01:00
Nicolas “Niols” Jeannerod
dc3a4dc4e8
Merge machine argument into the attrset argument 2025-02-21 10:01:05 +01:00
Nicolas “Niols” Jeannerod
d7bcb45789
Clean up code in deployment/ 2025-02-21 10:01:05 +01:00
kiara Grouwstra
446e866cb2 remove the currently unused RSA keys (#165) 
Reviewed-on: Fediversity/Fediversity#165
Reviewed-by: Nicolas Jeannerod <nicolas.jeannerod@moduscreate.com>
 2025-02-20 12:43:48 +01:00
Nicolas “Niols” Jeannerod
5aa6ca3ae6
Small clean up around VM ids 2025-01-27 11:57:29 +01:00
Nicolas “Niols” Jeannerod
69cad1592e
Rename “default” NixOps4 deployment 2024-11-18 10:56:38 +01:00
Nicolas “Niols” Jeannerod
95389bb615
Remove useless piece of code 
Ids must start at 100 because of Proxmox.
 2024-11-17 00:07:20 +01:00
Nicolas “Niols” Jeannerod
435d9c861a
Integrate deployment as a flake part 2024-11-14 18:07:12 +01:00