clerie/nixfiles
1
0
Fork 0
Code Activity

profiles/hydra-build-machine: Migrate configuration to profile

Browse Source
This commit is contained in:
clerie
2025-05-08 17:17:01 +02:00
parent fe23b7745f
commit 1042cf279f
5 changed files with 29 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
configuration/hydra-build-machine/default.nix
View File

@@ -1,16 +0,0 @@
{ ... }:
{
# Allow Hydra to fetch remote URLs in restricted mode
nix.settings.allowed-uris = "http: https: git+https: github:";
services.openssh.settings= {
PermitRootLogin = "yes";
};
users.extraUsers.root.openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMv8Lbca/CR4das3HJ2F/sQ9dA7kdGS1hSVTt5lX4diP root@hydra-1"
];
}

2
hosts/hydra-1/configuration.nix
View File

@@ -4,7 +4,6 @@
imports = imports =
[ [
./hardware-configuration.nix ./hardware-configuration.nix
../../configuration/hydra-build-machine
./build-machines.nix ./build-machines.nix
./hydra.nix ./hydra.nix
@@ -12,6 +11,7 @@
]; ];
profiles.clerie.mercury-vm.enable = true; profiles.clerie.mercury-vm.enable = true;
profiles.clerie.hydra-build-machine.enable = true;
boot.loader.grub.enable = true; boot.loader.grub.enable = true;
boot.loader.grub.device = "/dev/vda"; boot.loader.grub.device = "/dev/vda";

2
hosts/hydra-2/configuration.nix
View File

@@ -4,10 +4,10 @@
imports = imports =
[ [
./hardware-configuration.nix ./hardware-configuration.nix
../../configuration/hydra-build-machine
]; ];
profiles.clerie.cybercluster-vm.enable = true; profiles.clerie.cybercluster-vm.enable = true;
profiles.clerie.hydra-build-machine.enable = true;
boot.loader.grub.enable = true; boot.loader.grub.enable = true;
boot.loader.grub.device = "/dev/vda"; boot.loader.grub.device = "/dev/vda";

1
profiles/default.nix
View File

@@ -11,6 +11,7 @@
./fem-net ./fem-net
./firefox ./firefox
./hetzner-cloud ./hetzner-cloud
./hydra-build-machine
./mercury-vm ./mercury-vm
./netcup ./netcup
./network-fallback-dhcp ./network-fallback-dhcp

26
profiles/hydra-build-machine/default.nix Normal file
View File

@@ -0,0 +1,26 @@
{ config, lib, pkgs, ... }:
with lib;
{
options.profiles.clerie.hydra-build-machine = {
enable = mkEnableOption "Set defaults for hydra build machines";
};
config = mkIf config.profiles.clerie.hydra-build-machine.enable {
# Allow Hydra to fetch remote URLs in restricted mode
nix.settings.allowed-uris = "http: https: git+https: github:";
services.openssh.settings= {
PermitRootLogin = "yes";
};
users.extraUsers.root.openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMv8Lbca/CR4das3HJ2F/sQ9dA7kdGS1hSVTt5lX4diP root@hydra-1"
];
};
}