Compare commits

..

13 commits

Author SHA1 Message Date
37c8bdc348
mv woodpecker
Some checks failed
ci/woodpecker/manual/check-deployment-basic Pipeline failed
ci/woodpecker/manual/check-deployment-cli Pipeline failed
ci/woodpecker/manual/check-deployment-panel Pipeline failed
ci/woodpecker/manual/check-mastodon Pipeline failed
ci/woodpecker/manual/check-peertube Pipeline failed
ci/woodpecker/manual/check-pre-commit Pipeline was successful
ci/woodpecker/manual/check-resources Pipeline failed
ci/woodpecker/manual/check-data-model Pipeline was successful
ci/woodpecker/manual/cd Pipeline failed
ci/woodpecker/manual/check-panel Pipeline failed
ci/woodpecker/manual/update Pipeline was successful
2025-08-04 22:56:03 +02:00
a8f5571dae
mount /dev/kvm
This reverts commit 32a8c011133045f624f23d0cacd6e2b81ccc78eb.
2025-08-04 22:56:03 +02:00
3c1971c6a4
container dns
rm dns
2025-08-04 22:56:03 +02:00
dd095fc3a4
enable firewall 2025-08-04 22:56:03 +02:00
633deebfec
document nftables 2025-08-04 22:56:03 +02:00
ae7a285b1e
generalize firewall hole 2025-08-04 22:56:03 +02:00
2b1b6a90a4
rm agent exec
plug hole in firewall

format
2025-08-04 22:56:03 +02:00
a6dd45518f
disable firewall nftables
disables nftables for woodpecker, just like for forgejo-ci
2025-08-04 22:56:03 +02:00
2bf5c008d3
disable exec agent
make service group setting conditional

make secrets conditional

make things conditional

rm group
2025-08-04 22:56:03 +02:00
f2c001ccaa
set service groups
add agent groups
2025-08-04 22:56:03 +02:00
319d3fc1e1
un-template
none like _file somehow?
2025-08-04 22:56:03 +02:00
cd42bd91c4
fix container agent 2025-08-04 22:56:03 +02:00
dce216c87c
add woodpecker CI
add woodpecker

status: agents error `agent could not auth: individual agent not found
by token: sql: no rows in result set`

allow manual

set `image: bash` to initally test `local` woodpecker back-end

split CI jobs

image: `bash` (`local` back-end) -> `nixos/nix` (`docker` back-end)

add debugging lines to CD pipeline to debug error `Could not open a connection to your authentication agent`

add more debug prints to CD

even more debugging

continue debugging

debug harder

explicitly specify flakes as nixos/nix image is missing this

rm /home

update fedi203

wrap faulty statement

fix check-resources

split

strace pkg

un-strace

un-test cd

dedupe image

max 5

un-bash strace

configure user

simplify secrets

set just group for system users

unverbose npins

schema
2025-08-04 22:56:03 +02:00
3 changed files with 2 additions and 6 deletions

View file

@ -11,5 +11,3 @@ steps:
image: nixos/nix image: nixos/nix
commands: commands:
- nix build --extra-experimental-features 'nix-command flakes' .#checks.x86_64-linux.test-mastodon-service -L - nix build --extra-experimental-features 'nix-command flakes' .#checks.x86_64-linux.test-mastodon-service -L
devices:
- /dev/kvm:/dev/kvm

View file

@ -11,5 +11,3 @@ steps:
image: nixos/nix image: nixos/nix
commands: commands:
- nix build --extra-experimental-features 'nix-command flakes' .#checks.x86_64-linux.test-peertube-service -L - nix build --extra-experimental-features 'nix-command flakes' .#checks.x86_64-linux.test-peertube-service -L
devices:
- /dev/kvm:/dev/kvm

View file

@ -18,7 +18,7 @@ steps:
- echo ==================== [ VM Options ] ==================== - echo ==================== [ VM Options ] ====================
- | - |
set -euC set -euC
machines=$(nix eval --extra-experimental-features 'nix-command flakes' --impure --raw --expr 'with builtins; toString (attrNames (getFlake (toString ./.)).vmOptions)') machines=$(nix eval --impure --raw --expr 'with builtins; toString (attrNames (getFlake (toString ./.)).vmOptions)')
for machine in $machines; do for machine in $machines; do
echo ~~~~~~~~~~~~~~~~~~~~~: $machine :~~~~~~~~~~~~~~~~~~~~~ echo ~~~~~~~~~~~~~~~~~~~~~: $machine :~~~~~~~~~~~~~~~~~~~~~
nix build --extra-experimental-features 'nix-command flakes' .#checks.x86_64-linux.vmOptions-$machine nix build --extra-experimental-features 'nix-command flakes' .#checks.x86_64-linux.vmOptions-$machine
@ -26,7 +26,7 @@ steps:
- echo ==================== [ NixOS Configurations ] ==================== - echo ==================== [ NixOS Configurations ] ====================
- | - |
set -euC set -euC
machines=$(nix eval --extra-experimental-features 'nix-command flakes' --impure --raw --expr 'with builtins; toString (attrNames (getFlake (toString ./.)).nixosConfigurations)') machines=$(nix eval --impure --raw --expr 'with builtins; toString (attrNames (getFlake (toString ./.)).nixosConfigurations)')
for machine in $machines; do for machine in $machines; do
echo ~~~~~~~~~~~~~~~~~~~~~: $machine :~~~~~~~~~~~~~~~~~~~~~ echo ~~~~~~~~~~~~~~~~~~~~~: $machine :~~~~~~~~~~~~~~~~~~~~~
nix build --extra-experimental-features 'nix-command flakes' .#checks.x86_64-linux.nixosConfigurations-$machine nix build --extra-experimental-features 'nix-command flakes' .#checks.x86_64-linux.nixosConfigurations-$machine