try store mounted read-only

- `--store` as per https://blog.kotatsu.dev/posts/2023-04-21-woodpecker-nix-caching/ - `--eval-store` as per https://kevincox.ca/2022/01/02/nix-in-docker-caching/
schema
2025-08-04 18:56:56 +02:00 · 2025-08-04 18:56:56 +02:00 · 2025-08-04 18:56:56 +02:00 · 2025-08-04 18:56:56 +02:00 · 2025-08-04 18:56:56 +02:00 · 2025-08-04 18:56:56 +02:00
3 changed files with 6 additions and 3 deletions
--- a/.woodpecker/cd.yaml
+++ b/.woodpecker/cd.yaml
@ -13,7 +13,9 @@ steps:
        mkdir -p ~/.ssh
        echo "$CD_SSH_KEY" > ~/.ssh/id_ed25519
        chmod 600 ~/.ssh/id_ed25519
-      - nix-shell --run 'eval "$(ssh-agent -s)" && ssh-add ~/.ssh/id_ed25519 && ssh-agent -s && SHELL=$(which bash) nixops4 apply -v default'
+      - nix-shell --eval-store local --store unix:///mnt/nix/var/nix/daemon-socket/socket?root=/mnt --run 'eval "$(ssh-agent -s)" && ssh-add ~/.ssh/id_ed25519 && ssh-agent -s && SHELL=$(which bash) nixops4 apply -v default'
    environment:
      CD_SSH_KEY:
        from_secret: cd_ssh_key
    volumes:
      - /nix:/mnt/nix:ro
--- a/.woodpecker/check-deployment-basic.yaml
+++ b/.woodpecker/check-deployment-basic.yaml
@ -10,4 +10,6 @@ steps:
  - name: check-deployment-basic
    image: nixos/nix
    commands:
-      - nix build --extra-experimental-features 'nix-command flakes' .#checks.x86_64-linux.deployment-basic -L
+      - nix build --eval-store local --store unix:///mnt/nix/var/nix/daemon-socket/socket?root=/mnt --extra-experimental-features 'nix-command flakes' .#checks.x86_64-linux.deployment-basic -L
    volumes:
      - /nix:/mnt/nix:ro
--- a/.woodpecker/update.yaml
+++ b/.woodpecker/update.yaml
@ -8,7 +8,6 @@ when:
 steps:
  - name: lockfile
    image: nixos/nix
    # image: nixos/nix
    commands:
      - nix-shell --run "npins --verbose update"
      # - name: Create PR
Author	SHA1	Message	Date
Kiara Grouwstra	fff4ea3401	try store mounted read-only - `--store` as per https://blog.kotatsu.dev/posts/2023-04-21-woodpecker-nix-caching/ - `--eval-store` as per https://kevincox.ca/2022/01/02/nix-in-docker-caching/	2025-08-04 18:56:56 +02:00
Kiara Grouwstra	a3ebe4c609	schema	2025-08-04 18:56:56 +02:00
Kiara Grouwstra	43aaad3aa3	max 5	2025-08-04 18:56:56 +02:00
Kiara Grouwstra	02e8712fb1	un-bash strace	2025-08-04 18:56:56 +02:00
Kiara Grouwstra	c6070c6ed3	container dns rm dns	2025-08-04 18:56:56 +02:00
Kiara Grouwstra	ae0af10847	enable firewall	2025-08-04 18:56:56 +02:00
Kiara Grouwstra	64cda70268	document nftables	2025-08-04 18:56:56 +02:00
Kiara Grouwstra	a487d46267	generalize firewall hole	2025-08-04 18:56:56 +02:00
Kiara Grouwstra	98d240c588	rm agent exec plug hole in firewall format	2025-08-04 18:56:56 +02:00
Kiara Grouwstra	435791bf7e	disable firewall nftables disables nftables for woodpecker, just like for forgejo-ci	2025-08-04 18:56:56 +02:00
Kiara Grouwstra	8be3c4ba86	disable exec agent make service group setting conditional make secrets conditional make things conditional rm group	2025-08-04 18:56:56 +02:00
Kiara Grouwstra	776fd46b43	set service groups add agent groups	2025-08-04 18:56:56 +02:00
Kiara Grouwstra	8dbf560d9c	configure user simplify secrets set just group for system users	2025-08-04 18:56:56 +02:00
Kiara Grouwstra	609e6db07f	un-template none like _file somehow?	2025-08-04 18:56:56 +02:00
Kiara Grouwstra	53c2730c94	fix container agent	2025-08-04 18:56:56 +02:00
Kiara Grouwstra	48a707d3b5	add woodpecker CI add woodpecker status: agents error `agent could not auth: individual agent not found by token: sql: no rows in result set` allow manual set `image: bash` to initally test `local` woodpecker back-end split CI jobs image: `bash` (`local` back-end) -> `nixos/nix` (`docker` back-end) add debugging lines to CD pipeline to debug error `Could not open a connection to your authentication agent` add more debug prints to CD even more debugging continue debugging debug harder explicitly specify flakes as nixos/nix image is missing this rm /home update fedi203 wrap faulty statement fix check-resources split strace pkg un-strace un-test cd dedupe image	2025-08-04 18:56:56 +02:00