Revert "try store mounted read-only"

This reverts commit cc4d4c280b.
try store mounted read-only
2025-08-04 18:14:17 +02:00 · 2025-08-04 18:14:17 +02:00 · 2025-08-04 18:14:17 +02:00 · 2025-08-04 18:14:17 +02:00 · 2025-08-04 18:14:17 +02:00 · 2025-08-04 18:14:17 +02:00
1 changed files with 0 additions and 5 deletions
--- a/.woodpecker/cd.yaml
+++ b/.woodpecker/cd.yaml
@ -13,11 +13,6 @@ steps:
        mkdir -p ~/.ssh
        echo "$CD_SSH_KEY" > ~/.ssh/id_ed25519
        chmod 600 ~/.ssh/id_ed25519
      - |
        eval "$(ssh-agent -s)"
        echo 'agent started'
        ssh-add ~/.ssh/id_ed25519
        echo 'key added'
      - nix-shell --run 'eval "$(ssh-agent -s)" && ssh-add ~/.ssh/id_ed25519 && ssh-agent -s && SHELL=$(which bash) nixops4 apply -v default'
    environment:
      CD_SSH_KEY:
Author	SHA1	Message	Date
Kiara Grouwstra	7026ca72b1	Revert "try store mounted read-only" This reverts commit `cc4d4c280b`.	2025-08-04 18:14:17 +02:00
Kiara Grouwstra	d83a1585ba	try store mounted read-only - `--store` as per https://blog.kotatsu.dev/posts/2023-04-21-woodpecker-nix-caching/ - `--eval-store` as per https://kevincox.ca/2022/01/02/nix-in-docker-caching/	2025-08-04 18:14:17 +02:00
Kiara Grouwstra	3962f15912	schema	2025-08-04 18:14:17 +02:00
Kiara Grouwstra	f3543d7f2e	max 5	2025-08-04 18:14:17 +02:00
Kiara Grouwstra	90556fbcca	un-bash strace	2025-08-04 18:14:17 +02:00
Kiara Grouwstra	e50e46ed9e	container dns rm dns	2025-08-04 18:14:17 +02:00
Kiara Grouwstra	2d8f2db729	enable firewall	2025-08-04 18:14:17 +02:00
Kiara Grouwstra	1e63230d27	document nftables	2025-08-04 18:14:17 +02:00
Kiara Grouwstra	8eb6a3d653	generalize firewall hole	2025-08-04 18:14:17 +02:00
Kiara Grouwstra	2b9e9e149c	rm agent exec plug hole in firewall format	2025-08-04 18:14:17 +02:00
Kiara Grouwstra	10621034b9	disable firewall nftables disables nftables for woodpecker, just like for forgejo-ci	2025-08-04 18:14:17 +02:00
Kiara Grouwstra	012da93d47	disable exec agent make service group setting conditional make secrets conditional make things conditional rm group	2025-08-04 18:14:17 +02:00
Kiara Grouwstra	3b711f2989	set service groups add agent groups	2025-08-04 18:14:17 +02:00
Kiara Grouwstra	b5aed26478	configure user simplify secrets set just group for system users	2025-08-04 18:14:17 +02:00
Kiara Grouwstra	9999e8be35	un-template none like _file somehow?	2025-08-04 18:14:17 +02:00
Kiara Grouwstra	9863dc65d0	fix container agent	2025-08-04 18:14:17 +02:00
Kiara Grouwstra	4a0841d234	add woodpecker CI add woodpecker status: agents error `agent could not auth: individual agent not found by token: sql: no rows in result set` allow manual set `image: bash` to initally test `local` woodpecker back-end split CI jobs image: `bash` (`local` back-end) -> `nixos/nix` (`docker` back-end) add debugging lines to CD pipeline to debug error `Could not open a connection to your authentication agent` add more debug prints to CD even more debugging continue debugging debug harder explicitly specify flakes as nixos/nix image is missing this rm /home update fedi203 wrap faulty statement fix check-resources split strace pkg un-strace un-test cd	2025-08-04 18:14:17 +02:00