kiara/Fediversity
1
0
Fork 0
forked from fediversity/fediversity
Code Pull requests Activity
901 commits 172 branches 0 tags 58 MiB
Commit graph

901 commits

This branch
This branch
All branches
Author SHA1 Message Date
Kiara Grouwstra
fbe1eb0345
revert nftables ruleset 2025-08-05 17:28:53 +02:00
Kiara Grouwstra
d50942bbfc
add tls 2025-08-05 17:28:53 +02:00
Kiara Grouwstra
c1ea8065f2
remove 'attic use' lines in favor of substituter 2025-08-05 17:28:53 +02:00
Kiara Grouwstra
4a28014c5f
use cache for all steps 2025-08-05 17:28:53 +02:00
Kiara Grouwstra
c01b968cc2
make cache public 2025-08-05 17:28:53 +02:00
Kiara Grouwstra
e28a68e19b
add caching workflow 2025-08-05 17:28:53 +02:00
Kiara Grouwstra
55d5e0b4f5
rm attic config from runner as it's really the containers that need it 2025-08-05 17:28:53 +02:00
Kiara Grouwstra
b6e896062e
expose attic-client in CI container 2025-08-05 17:28:53 +02:00
Kiara Grouwstra
8d1fdb7298
manually use cache in ci 2025-08-05 17:28:53 +02:00
Kiara Grouwstra
8403d2627d
factor out user 2025-08-05 17:28:53 +02:00
Kiara Grouwstra
25b8ba4aee
have attic know it doesn't do https, for now 2025-08-05 17:28:53 +02:00
Kiara Grouwstra
b6a2b209e1
for now set substituters to use http as well 2025-08-05 17:28:53 +02:00
Kiara Grouwstra
a49aca1301
expose 8080 in nftables, pending proper TLS/reverse-proxy/port (?) 2025-08-05 17:28:53 +02:00
Kiara Grouwstra
3eac25dafc
expose port 9000 following documentation 2025-08-05 17:28:53 +02:00
Kiara Grouwstra
6eeee8e714
pull attic-client into shell as CI is missing <nixpkgs> for nix-shell 2025-08-05 17:28:53 +02:00
Kiara Grouwstra
acde681eba
collapse caching ci test, given it seems to not carry over variables between steps 2025-08-05 17:28:53 +02:00
Kiara Grouwstra
dfc770ce41
test attic cache from ci 2025-08-05 17:28:53 +02:00
Kiara Grouwstra
24620d555e
allow consuming attic cache from ci runner 2025-08-05 17:28:53 +02:00
Kiara Grouwstra
81662ed8a0
enquote attic env values for use in source attic.env 2025-08-05 17:28:53 +02:00
Kiara Grouwstra
e6fbf59dcf
add generator dependency 2025-08-05 17:28:53 +02:00
Nicolas “Niols” Jeannerod
8de6112243
moar extraDependencies 2025-08-05 17:28:53 +02:00
Kiara Grouwstra
bcda91b239
[wip] handling env file (still fails) 
rm unused dep nix-templating

fix imports
 2025-08-05 17:28:53 +02:00
Kiara Grouwstra
a1ee234b67
use templating fork 2025-08-05 17:27:58 +02:00
Kiara Grouwstra
f5f4b5731b
add tests, fix some things 
upgrade memory to resolve oom
 2025-08-05 17:27:58 +02:00
Kiara Grouwstra
85ebc8db85
move from dev to operator 
revert

add qemu import
 2025-08-05 17:26:50 +02:00
Kiara Grouwstra
4a1d8a6b83
WIP: add attic cache, see #92 
flesh out attic

TODO keys nginx-port testing

fix key

fix key
 2025-08-05 17:26:40 +02:00
Kiara Grouwstra
cbf60fd63d
actually pass a priority level fitting my description 2025-08-05 17:19:07 +02:00
Kiara Grouwstra
49a37f153a
use defaultOverridePriority over mkDefault to fix acme error without cashing with settings from tests 2025-08-05 17:19:07 +02:00
Kiara Grouwstra
9707cabc05
use mkDefault to prevent acme clash in tests 2025-08-05 17:19:07 +02:00
Kiara Grouwstra
a06d13483c
increase numInstances to 5 2025-08-05 17:19:07 +02:00
Kiara Grouwstra
2febe3af1c
Revert "switch to podman" 
This reverts commit 60e7b841a9.
 2025-08-05 17:19:07 +02:00
Kiara Grouwstra
42504d6b27
runs-on: nix 2025-08-05 17:19:07 +02:00
Kiara Grouwstra
95f23460a5
switch to podman 2025-08-05 17:19:07 +02:00
Kiara Grouwstra
9de646410c
increase numInstances to 3 2025-08-05 17:19:07 +02:00
Kiara Grouwstra
4cf9f92a48
add note on podman attempt 2025-08-05 17:19:07 +02:00
Kiara Grouwstra
8ffc5aca1c
reconciliate old/new runners 2025-08-05 17:19:07 +02:00
Kiara Grouwstra
ee8b06529f
explicitly use custom container in CI 2025-08-05 17:19:07 +02:00
Kiara Grouwstra
b9c3960d0f
explicitly allow running command to manually generating tokens from forgejo machine 
additionally serves to document the needed command, for future
automation.
 2025-08-05 17:19:07 +02:00
Kiara Grouwstra
17f44ab9ba
set up ci container from clan 
credit:
https://discourse.nixos.org/t/gitea-nix-actions-runner-setup/35279
 2025-08-05 17:19:07 +02:00
Kiara Grouwstra
8b41a6e881
try and recreate the container from icewind 
see:
https://icewind.nl/entry/gitea-actions-nix/#using-nix-to-build-our-nix-image

> Error: crun: cannot find `` in $PATH: No such file or directory: OCI
runtime attempted to invoke a command that was not found
 2025-08-05 17:19:07 +02:00
Kiara Grouwstra
105265078a
runs-on: docker 2025-08-05 17:19:07 +02:00
Kiara Grouwstra
2ccd5e136a
rm runner file 2025-08-05 17:19:07 +02:00
Kiara Grouwstra
11c03a2f3c
explicitly specify container image 2025-08-05 17:19:07 +02:00
Kiara Grouwstra
a43c8289bd
add label for new runner 2025-08-05 17:19:07 +02:00
Kiara Grouwstra
ed67097f20
try out existing nix container made for gitea actions 2025-08-05 17:19:07 +02:00
Nicolas “Niols” Jeannerod
040bba246f
Switch all CI jobs to nixos label 2025-08-05 17:19:07 +02:00
Nicolas “Niols” Jeannerod
1f99a4c6c3 listToAttrs o map o attrsToList → mapAttrs' (#489) 
Reviewed-on: Fediversity/Fediversity#489
Reviewed-by: kiara Grouwstra <kiara@procolix.eu>
Co-authored-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
Co-committed-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
 2025-08-01 13:09:26 +02:00
Nicolas “Niols” Jeannerod
588bb77a94 Infra: expose and use checks for vmOptions and nixosConfigurations (#488) 
Following Fediversity/Fediversity#478 (comment), here is a PR that plugs the infra's `vmOptions` and `nixosConfigurations` outputs into flake checks, instead of calling random Nix commands from the CI. There is still a bit of magic in the CI, but that's because we don't have yet a Nix-aware CI that exposes one job per flake check.

Reviewed-on: Fediversity/Fediversity#488
Reviewed-by: kiara Grouwstra <kiara@procolix.eu>
Co-authored-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
Co-committed-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
 2025-07-31 15:41:02 +02:00
Nicolas “Niols” Jeannerod
df3a070fa4 Infra: get rid of makeResourceModule (#485) 
Reviewed-on: Fediversity/Fediversity#485
Reviewed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Reviewed-by: kiara Grouwstra <kiara@procolix.eu>
Co-authored-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
Co-committed-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
 2025-07-31 00:49:00 +02:00
Nicolas “Niols” Jeannerod
be72b82875 Link to upstreaming PR for lib.types.fileset (#487) 
Reviewed-on: Fediversity/Fediversity#487
Reviewed-by: kiara Grouwstra <kiara@procolix.eu>
Co-authored-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
Co-committed-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
 2025-07-30 13:25:22 +02:00