Compare commits

..

13 commits

Author SHA1 Message Date
9c1b1a641f
mv woodpecker 2025-08-04 23:25:05 +02:00
4187cf1c2c
mount /dev/kvm
This reverts commit 32a8c011133045f624f23d0cacd6e2b81ccc78eb.

add kvm
2025-08-04 23:25:05 +02:00
87b50e11b2
container dns
rm dns
2025-08-04 23:24:58 +02:00
447821035d
enable firewall 2025-08-04 23:24:58 +02:00
63439c3b28
document nftables 2025-08-04 23:24:58 +02:00
df07a9df51
generalize firewall hole 2025-08-04 23:24:58 +02:00
0c561d3a38
rm agent exec
plug hole in firewall

format
2025-08-04 23:24:58 +02:00
9bd991834d
disable firewall nftables
disables nftables for woodpecker, just like for forgejo-ci
2025-08-04 23:24:58 +02:00
b6f8aebdb9
disable exec agent
make service group setting conditional

make secrets conditional

make things conditional

rm group
2025-08-04 23:24:58 +02:00
a2d9b530d1
set service groups
add agent groups
2025-08-04 23:24:58 +02:00
0f2ad13ad7
un-template
none like _file somehow?
2025-08-04 23:24:58 +02:00
97656d2b0a
fix container agent 2025-08-04 23:24:58 +02:00
72064623ee
add woodpecker CI
add woodpecker

status: agents error `agent could not auth: individual agent not found
by token: sql: no rows in result set`

allow manual

set `image: bash` to initally test `local` woodpecker back-end

split CI jobs

image: `bash` (`local` back-end) -> `nixos/nix` (`docker` back-end)

add debugging lines to CD pipeline to debug error `Could not open a connection to your authentication agent`

add more debug prints to CD

even more debugging

continue debugging

debug harder

explicitly specify flakes as nixos/nix image is missing this

rm /home

update fedi203

wrap faulty statement

fix check-resources

split

strace pkg

un-strace

un-test cd

dedupe image

max 5

un-bash strace

configure user

simplify secrets

set just group for system users

unverbose npins

schema

add flakes
2025-08-04 23:24:58 +02:00
3 changed files with 6 additions and 2 deletions

View file

@ -11,3 +11,5 @@ steps:
image: nixos/nix
commands:
- nix build --extra-experimental-features 'nix-command flakes' .#checks.x86_64-linux.test-mastodon-service -L
devices:
- /dev/kvm:/dev/kvm

View file

@ -11,3 +11,5 @@ steps:
image: nixos/nix
commands:
- nix build --extra-experimental-features 'nix-command flakes' .#checks.x86_64-linux.test-peertube-service -L
devices:
- /dev/kvm:/dev/kvm

View file

@ -18,7 +18,7 @@ steps:
- echo ==================== [ VM Options ] ====================
- |
set -euC
machines=$(nix eval --impure --raw --expr 'with builtins; toString (attrNames (getFlake (toString ./.)).vmOptions)')
machines=$(nix eval --extra-experimental-features 'nix-command flakes' --impure --raw --expr 'with builtins; toString (attrNames (getFlake (toString ./.)).vmOptions)')
for machine in $machines; do
echo ~~~~~~~~~~~~~~~~~~~~~: $machine :~~~~~~~~~~~~~~~~~~~~~
nix build --extra-experimental-features 'nix-command flakes' .#checks.x86_64-linux.vmOptions-$machine
@ -26,7 +26,7 @@ steps:
- echo ==================== [ NixOS Configurations ] ====================
- |
set -euC
machines=$(nix eval --impure --raw --expr 'with builtins; toString (attrNames (getFlake (toString ./.)).nixosConfigurations)')
machines=$(nix eval --extra-experimental-features 'nix-command flakes' --impure --raw --expr 'with builtins; toString (attrNames (getFlake (toString ./.)).nixosConfigurations)')
for machine in $machines; do
echo ~~~~~~~~~~~~~~~~~~~~~: $machine :~~~~~~~~~~~~~~~~~~~~~
nix build --extra-experimental-features 'nix-command flakes' .#checks.x86_64-linux.nixosConfigurations-$machine