ff844b74ee
make secrets conditional
2025-08-04 14:40:27 +02:00
f772b9179e
disable exec agent
2025-08-04 14:40:27 +02:00
abff867da2
make service group setting conditional
2025-08-04 14:40:27 +02:00
81749be98e
container dns
2025-08-04 14:40:27 +02:00
74749d897a
set service groups
2025-08-04 14:40:27 +02:00
5c0db0ca43
add packages used for debugging
2025-08-04 14:40:27 +02:00
1fff38f5fa
set just group for system users
2025-08-04 14:40:27 +02:00
203063b031
image: bash (local back-end) -> nixos/nix (docker back-end)
2025-08-04 14:40:27 +02:00
29be538ec2
wrap faulty statement
2025-08-04 14:40:27 +02:00
0c551a4764
debug harder
2025-08-04 14:40:27 +02:00
ab639b9e48
continue debugging
2025-08-04 14:40:27 +02:00
1e0e47ae6d
even more debugging
2025-08-04 14:40:27 +02:00
4cb84d1b76
add more debug prints to CD
2025-08-04 14:40:27 +02:00
0ce2ad1546
add debugging lines to CD pipeline to debug error Could not open a connection to your authentication agent
2025-08-04 14:40:27 +02:00
0dbd327975
split CI jobs
2025-08-04 14:40:27 +02:00
f1e7eba88d
hard-code forgejo IP to prevent clone step issues in CI using woodpecker's local back-end
2025-08-04 14:40:27 +02:00
b99bb849ea
update: bash
2025-08-04 14:40:27 +02:00
1f65266db2
allow manual
2025-08-04 14:40:27 +02:00
6c44ea789e
set image: bash to initally test local woodpecker back-end
2025-08-04 14:40:27 +02:00
97841655a0
simplify secrets
2025-08-04 14:40:27 +02:00
7b7f3c68a8
none like _file somehow?
2025-08-04 14:40:27 +02:00
d66ae455b2
configure user
2025-08-04 14:40:27 +02:00
ef5d6855b3
un-template
2025-08-04 14:40:27 +02:00
c11f025439
fix container agent
2025-08-04 14:40:27 +02:00
a62155b690
add woodpecker CI
...
add woodpecker
status: agents error `agent could not auth: individual agent not found
by token: sql: no rows in result set`
2025-08-04 14:40:27 +02:00
1f99a4c6c3
listToAttrs o map o attrsToList → mapAttrs' (#489 )
...
Reviewed-on: Fediversity/Fediversity#489
Reviewed-by: kiara Grouwstra <kiara@procolix.eu>
Co-authored-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
Co-committed-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
2025-08-01 13:09:26 +02:00
588bb77a94
Infra: expose and use checks for vmOptions and nixosConfigurations ( #488 )
...
Following Fediversity/Fediversity#478 (comment) , here is a PR that plugs the infra's `vmOptions` and `nixosConfigurations` outputs into flake checks, instead of calling random Nix commands from the CI. There is still a bit of magic in the CI, but that's because we don't have yet a Nix-aware CI that exposes one job per flake check.
Reviewed-on: Fediversity/Fediversity#488
Reviewed-by: kiara Grouwstra <kiara@procolix.eu>
Co-authored-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
Co-committed-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
2025-07-31 15:41:02 +02:00
df3a070fa4
Infra: get rid of makeResourceModule ( #485 )
...
Reviewed-on: Fediversity/Fediversity#485
Reviewed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Reviewed-by: kiara Grouwstra <kiara@procolix.eu>
Co-authored-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
Co-committed-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
2025-07-31 00:49:00 +02:00
be72b82875
Link to upstreaming PR for lib.types.fileset ( #487 )
...
Reviewed-on: Fediversity/Fediversity#487
Reviewed-by: kiara Grouwstra <kiara@procolix.eu>
Co-authored-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
Co-committed-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
2025-07-30 13:25:22 +02:00
1b66028f32
Fix infra and add more tests ( #478 )
...
This PR contains a bunch of small fixes having to do with infra code. The goal is not to fix everything as that would require a full rewrite. Instead, we fix just what is necessary to get some testing going on. Once that is available, we will be able to work on a full refactor with more guarantees. Something of note is that most of the difficulty was to find code that would make both `nixops4 apply` _and_ `nix build .#nixosConfigurations.<machine>` happy. The takeaway is that the tests that we are adding now will not catch a whole class of tests having to do with how NixOps4 wires up the resources. Still, this is probably less significant as we are supposed to use NixOps4 every now and then.
The commits should be read separately.
Reviewed-on: Fediversity/Fediversity#478
Reviewed-by: kiara Grouwstra <kiara@procolix.eu>
Co-authored-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
Co-committed-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
2025-07-30 12:31:03 +02:00
4509d277d3
move arguments from _module.args to specialArgs ( #469 )
...
Reviewed-on: Fediversity/Fediversity#469
Reviewed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
2025-07-23 18:12:55 +02:00
e488230d7b
updater: make npins command verbose ( #477 )
...
Reviewed-on: Fediversity/Fediversity#477
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
2025-07-19 13:00:33 +02:00
765183cd0d
fix typo in users ( #475 )
...
Reviewed-on: Fediversity/Fediversity#475
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
2025-07-17 19:02:14 +02:00
6cf1d87f0b
get parity in authorized keys between procolix and root for nixops4 ssh to non-VMs ( #474 )
...
Reviewed-on: Fediversity/Fediversity#474
Reviewed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
2025-07-17 18:59:31 +02:00
8253288f8a
remove pixelfed from CI until fixed ( #472 )
...
this test is still borked as per #33 .
the intent would be to get this test on a feature branch pertaining to that issue - the point being we should be able to rely on CI's boolean result for detecting (newly induced) regressions.
Reviewed-on: Fediversity/Fediversity#472
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
2025-07-17 15:25:17 +02:00
67f50f08de
enable continuous deployment ( #471 )
...
closes #177
Reviewed-on: Fediversity/Fediversity#471
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
2025-07-17 10:01:51 +02:00
5402178e7b
reinstate import statement for panel module, fixes error deploying fedi201 ( #468 )
...
resolves error on CI run https://git.fediversity.eu/Fediversity/Fediversity/actions/runs/1026 :
```
123456 error: attempt to call something which is not a function but a path: /nix/store/93yyf22vw60l1j3l6h02c99p93lp55q5-source/panel
at /nix/store/93yyf22vw60l1j3l6h02c99p93lp55q5-source/machines/dev/fedi201/fedipanel.nix:13:6:
12| imports = [
13| (../../../panel { }).module
| ^
14| "${sources.home-manager}/nixos"```
```
Reviewed-on: Fediversity/Fediversity#468
2025-07-16 20:51:23 +02:00
e627815399
pass SHELL env var in CD ( #466 )
...
see #177
Reviewed-on: Fediversity/Fediversity#466
2025-07-16 18:18:16 +02:00
354dba260a
verbose CD ( #465 )
...
debugging effort part of #177
Reviewed-on: Fediversity/Fediversity#465
2025-07-16 14:14:06 +02:00
b791bd515d
pass sources via specialArgs ( #464 )
...
this gets rid of ugly in-place imports and upward paths
Reviewed-on: Fediversity/Fediversity#464
Reviewed-by: kiara Grouwstra <kiara@procolix.eu>
Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Co-committed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
2025-07-16 10:53:36 +02:00
f2017aaeb4
CD: lump SSH commands into a single shell invocation ( #462 )
...
Reviewed-on: Fediversity/Fediversity#462
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
2025-07-15 13:00:47 +02:00
980a994f83
run ssh commands thru the shell (which has openssh) ( #461 )
...
Reviewed-on: Fediversity/Fediversity#461
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
2025-07-15 12:26:16 +02:00
b9b13df04e
allow SSH access from continuous deployment ( #460 )
...
Reviewed-on: Fediversity/Fediversity#460
Reviewed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
2025-07-15 11:56:22 +02:00
159e4107b8
fix Pixelfed test eval failure ( #458 )
...
Reviewed-on: Fediversity/Fediversity#458
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
2025-07-15 10:38:10 +02:00
86305a6a2e
fix link; readability
2025-07-15 09:04:56 +02:00
e62f14d9be
expose panel tests in flake
2025-07-15 08:54:48 +02:00
82f83eea0d
fix mastodon test ( #457 )
...
closes #34 .
Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Reviewed-on: Fediversity/Fediversity#457
Reviewed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
2025-07-15 08:54:20 +02:00
aef414ffe8
resolve regressions from recent qemu files ( #432 )
...
- move import to match module classes
- manually import sources to resolve infinite recursion
closes #431 .
Reviewed-on: Fediversity/Fediversity#432
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
2025-07-11 16:09:27 +02:00
6d74112518
ditch sources arg in fedi201, fixing infinite recursion error ( #454 )
...
c.f. #432 .
closes #453 .
Reviewed-on: Fediversity/Fediversity#454
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
2025-07-11 16:06:15 +02:00
2b2fb059fd
fix cd command ( #455 )
...
Reviewed-on: Fediversity/Fediversity#455
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
2025-07-11 11:07:03 +02:00
