noa/nixconf
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: try again with hydra

Browse source
This commit is contained in:
Noa Aarts 2024-10-21 18:18:23 +02:00
parent a65d265c15
commit 19898a0743
Signed by: noa
GPG key ID: 1850932741EFF672
2 changed files with 60 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

19
hosts/lambdaos/configuration.nix
View file

@ -52,7 +52,13 @@
]; ];
write = true; write = true;
}; };
nix.settings.trusted-users = [ "nix-ssh" ]; nix = {
settings = {
builders-use-substitutes = true;
trusted-users = [ "root" "remotebuilder" "@wheel" ];
};
};
# Allow unfree packages # Allow unfree packages
nixpkgs.config = { nixpkgs.config = {
@ -88,6 +94,16 @@
hashedPassword = "$6$rounds=512400$Zip3xoK2zcoR4qEL$N13YTHO5tpWfx2nKb1sye.ZPwfoRtMQ5f3YrMZqKzzoFoSSHHJ.l5ulCEa9HygFxZmBtPnwlseFEtl8ERnwF50"; hashedPassword = "$6$rounds=512400$Zip3xoK2zcoR4qEL$N13YTHO5tpWfx2nKb1sye.ZPwfoRtMQ5f3YrMZqKzzoFoSSHHJ.l5ulCEa9HygFxZmBtPnwlseFEtl8ERnwF50";
openssh.authorizedKeys.keys = (import ../../common/ssh-keys.nix); openssh.authorizedKeys.keys = (import ../../common/ssh-keys.nix);
}; };
remotebuilder = {
isNormalUser = true;
hashedPassword = "!";
description = "Remote nix builder";
openssh.authorizedKeys.keys =
[
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILRZXNqs7FgVeTCt2ElOARt5f/bR1gjk5bS+zCJA6C1P root@nuOS"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII7X17VovmxkwhKxIg795yO1Sf7dwO50pybMRlUDLLcA hydra@nuOS"
];
};
}; };
home-manager = { home-manager = {
@ -345,7 +361,6 @@
# networking.firewall.enable = false; # networking.firewall.enable = false;
# This value determines the NixOS release from which the default # This value determines the NixOS release from which the default
# settings for stateful data, like file locations and database versions # settings for stateful data, like file locations and database versions
# on your system were taken. It‘s perfectly fine and recommended to leave # on your system were taken. It‘s perfectly fine and recommended to leave

56
hosts/nuos/configuration.nix
View file

@ -43,6 +43,16 @@
hashedPassword = "$6$rounds=512400$g/s4dcRttXi4ux6c$Z6pKnhJXcWxv0TBSMtvJu5.piETdUBSgBVN7oDPKiQV.lbTYz1r.0XQLwMYxzcvaaX0DL6Iw/SEUTiC2M50wC/"; hashedPassword = "$6$rounds=512400$g/s4dcRttXi4ux6c$Z6pKnhJXcWxv0TBSMtvJu5.piETdUBSgBVN7oDPKiQV.lbTYz1r.0XQLwMYxzcvaaX0DL6Iw/SEUTiC2M50wC/";
openssh.authorizedKeys.keys = import ../../common/ssh-keys.nix; openssh.authorizedKeys.keys = import ../../common/ssh-keys.nix;
}; };
remotebuilder = {
isNormalUser = true;
hashedPassword = "!";
description = "Remote nix builder";
openssh.authorizedKeys.keys =
[
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILRZXNqs7FgVeTCt2ElOARt5f/bR1gjk5bS+zCJA6C1P root@nuOS"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII7X17VovmxkwhKxIg795yO1Sf7dwO50pybMRlUDLLcA hydra@nuOS"
];
};
}; };
# Allow unfree packages # Allow unfree packages
@ -89,9 +99,29 @@
}; };
nix = { nix = {
buildMachines = [ ]; buildMachines = [
distributedBuilds = false; {
settings.builders-use-substitutes = true; hostName = "localhost";
protocol = null;
system = "x86_64-linux";
supportedFeatures = [ "kvm" "nixos-test" "big-parallel" "benchmark" ];
maxJobs = 4;
sshUser = "remotebuilder";
}
{
hostName = "lambdaos";
protocol = "ssh";
system = "x86_64-linux";
supportedFeatures = [ "kvm" "nixos-test" "big-parallel" "benchmark" ];
maxJobs = 8;
sshUser = "remotebuilder";
}
];
distributedBuilds = true;
settings = {
builders-use-substitutes = true;
trusted-users = [ "root" "remotebuilder" "@wheel" ];
};
}; };
systemd.services."update-from-flake" = { systemd.services."update-from-flake" = {
@ -146,16 +176,16 @@
}; };
services = { services = {
# hydra = { hydra = {
# enable = true; enable = true;
# hydraURL = "https://hydra.itepastra.nl"; hydraURL = "https://hydra.itepastra.nl";
# port = 9212; port = 9212;
# notificationSender = "hydra@localhost"; notificationSender = "hydra@localhost";
# useSubstitutes = true; useSubstitutes = true;
# # listenHost = "localhost"; # listenHost = "localhost";
# minimumDiskFree = 100; minimumDiskFree = 100;
# minimumDiskFreeEvaluator = 100; minimumDiskFreeEvaluator = 100;
# }; };
nix-serve = { nix-serve = {
enable = true; enable = true;
package = pkgs.nix-serve-ng; package = pkgs.nix-serve-ng;