sercanto/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

darwin03: convert to community builder

Browse source
This commit is contained in:
zowoq 2023-10-27 13:43:31 +10:00
parent e181c309a3
commit 46c8cd44dd
4 changed files with 18 additions and 13 deletions

12
docs/community-builder.md
View file

@ -1,12 +1,20 @@
We provide an `x86_64-linux` machine as a public remote builder for the nix community. We provide machines as public builders for the nix community.
`x86_64-linux`
``` ```
build-box.nix-community.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIElIQ54qAy7Dh63rBudYKdbzJHrrbrrMXLYl7Pkmk88H build-box.nix-community.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIElIQ54qAy7Dh63rBudYKdbzJHrrbrrMXLYl7Pkmk88H
``` ```
`aarch64-darwin`, `x86_64-darwin`
```
darwin-build-box.nix-community.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKX7W1ztzAtVXT+NBMITU+JLXcIE5HTEOd7Q3fQNu80S
```
#### Access #### Access
If you want access read the security guide lines on [aarch64-build-box](https://github.com/nix-community/aarch64-build-box). Than add your username to [`builder/users.nix`](https://github.com/nix-community/infra/blob/master/modules/nixos/community-builder/users.nix). Don't keep any important data in your home! We will regularly delete `/home` without further notice. If you want access read the security guide lines on [aarch64-build-box](https://github.com/nix-community/aarch64-build-box). Than add your username to [`nixos/community-builder/users.nix`](https://github.com/nix-community/infra/blob/master/modules/nixos/community-builder/users.nix) or [`darwin/community-builder/users.nix`](https://github.com/nix-community/infra/blob/master/modules/darwin/community-builder/users.nix) Don't keep any important data in your home! We will regularly delete `/home` without further notice.
#### Using your NixOS home-manager configuration on the hosts #### Using your NixOS home-manager configuration on the hosts

3
hosts/darwin03/configuration.nix
View file

@ -4,8 +4,7 @@
imports = [ imports = [
inputs.self.darwinModules.common inputs.self.darwinModules.common
inputs.self.darwinModules.builder inputs.self.darwinModules.builder
inputs.self.darwinModules.hercules-ci inputs.self.darwinModules.community-builder
inputs.self.darwinModules.remote-builder
]; ];
nix.settings.sandbox = "relaxed"; nix.settings.sandbox = "relaxed";

9
modules/nixos/remote-workers.nix
View file

@ -23,14 +23,5 @@
systems = [ "aarch64-darwin" "x86_64-darwin" ]; systems = [ "aarch64-darwin" "x86_64-darwin" ];
supportedFeatures = [ "big-parallel" ]; supportedFeatures = [ "big-parallel" ];
} }
{
hostName = "darwin03.nix-community.org";
maxJobs = 8;
protocol = "ssh";
sshKey = config.sops.secrets.id_buildfarm.path;
sshUser = "nix";
systems = [ "aarch64-darwin" "x86_64-darwin" ];
supportedFeatures = [ "big-parallel" ];
}
]; ];
} }

7
terraform/cloudflare_nix-community_org.tf
View file

@ -159,6 +159,13 @@ resource "cloudflare_record" "nix-community-org-build-box-CNAME" {
type = "CNAME" type = "CNAME"
} }
resource "cloudflare_record" "nix-community-org-darwin-build-box-CNAME" {
zone_id = local.nix_community_zone_id
name = "darwin-build-box"
value = "darwin03.nix-community.org"
type = "CNAME"
}
resource "cloudflare_record" "nix-community-org-buildbot-CNAME" { resource "cloudflare_record" "nix-community-org-buildbot-CNAME" {
zone_id = local.nix_community_zone_id zone_id = local.nix_community_zone_id
name = "buildbot" name = "buildbot"