Commit graph

891 commits

Author SHA1 Message Date
7ade964c36
install ping 2025-08-04 14:40:27 +02:00
6284a2dd0e
install git 2025-08-04 14:40:27 +02:00
ac68e0c752
ubuntu vs nixos 2025-08-04 14:40:27 +02:00
bfd6950807
install first 2025-08-04 14:40:27 +02:00
8f7c0a2939
mv skip_clone 2025-08-04 14:40:27 +02:00
127b2bb0b1
debug by dns job 2025-08-04 14:40:27 +02:00
d6ed76ace5
plug hole in firewall 2025-08-04 14:40:27 +02:00
20145101bd
add agent groups 2025-08-04 14:40:27 +02:00
5942011504
woodpecker: add packages needed for network
https://github.com/NixOS/nixpkgs/pull/73971#issuecomment-790421418
2025-08-04 14:40:27 +02:00
26bd520b2c
test dns from a non-nix container 2025-08-04 14:40:27 +02:00
757f4a13ed
make things conditional 2025-08-04 14:40:27 +02:00
ff844b74ee
make secrets conditional 2025-08-04 14:40:27 +02:00
f772b9179e
disable exec agent 2025-08-04 14:40:27 +02:00
abff867da2
make service group setting conditional 2025-08-04 14:40:27 +02:00
81749be98e
container dns 2025-08-04 14:40:27 +02:00
74749d897a
set service groups 2025-08-04 14:40:27 +02:00
5c0db0ca43
add packages used for debugging 2025-08-04 14:40:27 +02:00
1fff38f5fa
set just group for system users 2025-08-04 14:40:27 +02:00
203063b031
image: bash (local back-end) -> nixos/nix (docker back-end) 2025-08-04 14:40:27 +02:00
29be538ec2
wrap faulty statement 2025-08-04 14:40:27 +02:00
0c551a4764
debug harder 2025-08-04 14:40:27 +02:00
ab639b9e48
continue debugging 2025-08-04 14:40:27 +02:00
1e0e47ae6d
even more debugging 2025-08-04 14:40:27 +02:00
4cb84d1b76
add more debug prints to CD 2025-08-04 14:40:27 +02:00
0ce2ad1546
add debugging lines to CD pipeline to debug error Could not open a connection to your authentication agent 2025-08-04 14:40:27 +02:00
0dbd327975
split CI jobs 2025-08-04 14:40:27 +02:00
f1e7eba88d
hard-code forgejo IP to prevent clone step issues in CI using woodpecker's local back-end 2025-08-04 14:40:27 +02:00
b99bb849ea
update: bash 2025-08-04 14:40:27 +02:00
1f65266db2
allow manual 2025-08-04 14:40:27 +02:00
6c44ea789e
set image: bash to initally test local woodpecker back-end 2025-08-04 14:40:27 +02:00
97841655a0
simplify secrets 2025-08-04 14:40:27 +02:00
7b7f3c68a8
none like _file somehow? 2025-08-04 14:40:27 +02:00
d66ae455b2
configure user 2025-08-04 14:40:27 +02:00
ef5d6855b3
un-template 2025-08-04 14:40:27 +02:00
c11f025439
fix container agent 2025-08-04 14:40:27 +02:00
a62155b690
add woodpecker CI
add woodpecker

status: agents error `agent could not auth: individual agent not found
by token: sql: no rows in result set`
2025-08-04 14:40:27 +02:00
1f99a4c6c3 listToAttrs o map o attrsToListmapAttrs' (#489)
Reviewed-on: Fediversity/Fediversity#489
Reviewed-by: kiara Grouwstra <kiara@procolix.eu>
Co-authored-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
Co-committed-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
2025-08-01 13:09:26 +02:00
588bb77a94 Infra: expose and use checks for vmOptions and nixosConfigurations (#488)
Following Fediversity/Fediversity#478 (comment), here is a PR that plugs the infra's `vmOptions` and `nixosConfigurations` outputs into flake checks, instead of calling random Nix commands from the CI. There is still a bit of magic in the CI, but that's because we don't have yet a Nix-aware CI that exposes one job per flake check.

Reviewed-on: Fediversity/Fediversity#488
Reviewed-by: kiara Grouwstra <kiara@procolix.eu>
Co-authored-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
Co-committed-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
2025-07-31 15:41:02 +02:00
df3a070fa4 Infra: get rid of makeResourceModule (#485)
Reviewed-on: Fediversity/Fediversity#485
Reviewed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Reviewed-by: kiara Grouwstra <kiara@procolix.eu>
Co-authored-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
Co-committed-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
2025-07-31 00:49:00 +02:00
be72b82875 Link to upstreaming PR for lib.types.fileset (#487)
Reviewed-on: Fediversity/Fediversity#487
Reviewed-by: kiara Grouwstra <kiara@procolix.eu>
Co-authored-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
Co-committed-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
2025-07-30 13:25:22 +02:00
1b66028f32 Fix infra and add more tests (#478)
This PR contains a bunch of small fixes having to do with infra code. The goal is not to fix everything as that would require a full rewrite. Instead, we fix just what is necessary to get some testing going on. Once that is available, we will be able to work on a full refactor with more guarantees. Something of note is that most of the difficulty was to find code that would make both `nixops4 apply` _and_ `nix build .#nixosConfigurations.<machine>` happy. The takeaway is that the tests that we are adding now will not catch a whole class of tests having to do with how NixOps4 wires up the resources. Still, this is probably less significant as we are supposed to use NixOps4 every now and then.

The commits should be read separately.

Reviewed-on: Fediversity/Fediversity#478
Reviewed-by: kiara Grouwstra <kiara@procolix.eu>
Co-authored-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
Co-committed-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
2025-07-30 12:31:03 +02:00
4509d277d3 move arguments from _module.args to specialArgs (#469)
Reviewed-on: Fediversity/Fediversity#469
Reviewed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
2025-07-23 18:12:55 +02:00
e488230d7b updater: make npins command verbose (#477)
Reviewed-on: Fediversity/Fediversity#477
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
2025-07-19 13:00:33 +02:00
765183cd0d fix typo in users (#475)
Reviewed-on: Fediversity/Fediversity#475
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
2025-07-17 19:02:14 +02:00
6cf1d87f0b get parity in authorized keys between procolix and root for nixops4 ssh to non-VMs (#474)
Reviewed-on: Fediversity/Fediversity#474
Reviewed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
2025-07-17 18:59:31 +02:00
8253288f8a remove pixelfed from CI until fixed (#472)
this test is still borked as per #33.
the intent would be to get this test on a feature branch pertaining to that issue - the point being we should be able to rely on CI's boolean result for detecting (newly induced) regressions.

Reviewed-on: Fediversity/Fediversity#472
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
2025-07-17 15:25:17 +02:00
67f50f08de enable continuous deployment (#471)
closes #177

Reviewed-on: Fediversity/Fediversity#471
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
2025-07-17 10:01:51 +02:00
5402178e7b reinstate import statement for panel module, fixes error deploying fedi201 (#468)
resolves error on CI run https://git.fediversity.eu/Fediversity/Fediversity/actions/runs/1026:

```
123456       error: attempt to call something which is not a function but a path: /nix/store/93yyf22vw60l1j3l6h02c99p93lp55q5-source/panel
       at /nix/store/93yyf22vw60l1j3l6h02c99p93lp55q5-source/machines/dev/fedi201/fedipanel.nix:13:6:
           12|   imports = [
           13|     (../../../panel { }).module
             |      ^
           14|     "${sources.home-manager}/nixos"```
```

Reviewed-on: Fediversity/Fediversity#468
2025-07-16 20:51:23 +02:00
e627815399 pass SHELL env var in CD (#466)
see #177

Reviewed-on: Fediversity/Fediversity#466
2025-07-16 18:18:16 +02:00
354dba260a verbose CD (#465)
debugging effort part of #177

Reviewed-on: Fediversity/Fediversity#465
2025-07-16 14:14:06 +02:00