darwin02: use patched hercules-ci-agent

flake.lock

@@ -60,6 +60,22 @@
         "type": "github"
       }
     },
+    "hcia": {
+      "locked": {
+        "lastModified": 1685942767,
+        "narHash": "sha256-atm1LEDnKvCS0AboUmZpFIrGSoIZzhVEYHMlbhAModY=",
+        "owner": "qowoz",
+        "repo": "nixpkgs",
+        "rev": "9cefcdce192f5f9f7cff4474c5b57e7ff493bb02",
+        "type": "github"
+      },
+      "original": {
+        "owner": "qowoz",
+        "ref": "hcia",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
     "hercules-ci-effects": {
       "inputs": {
         "flake-parts": [
@@ -174,6 +190,7 @@
         "darwin": "darwin",
         "disko": "disko",
         "flake-parts": "flake-parts",
+        "hcia": "hcia",
         "hercules-ci-effects": "hercules-ci-effects",
         "nixpkgs": "nixpkgs",
         "nixpkgs-update": "nixpkgs-update",

flake.nix

@@ -43,6 +43,8 @@
     treefmt-nix.inputs.nixpkgs.follows = "nixpkgs";
 
     tf-pkgs.url = "github:NixOS/nixpkgs/3f697e808b31a955462bc0b20b229d4072c99aa7";
+
+    hcia.url = "github:/qowoz/nixpkgs/hcia";
   };
 
   outputs = inputs @ { flake-parts, self, ... }:

hosts/darwin02/configuration.nix

@@ -1,11 +1,15 @@
-{ pkgs, ... }:
+{ inputs, pkgs, ... }:
 let
   asGB = size: toString (size * 1024 * 1024);
 in
 {
   # hercules secrets are installed manually from ./secrets.yaml
   # https://docs.hercules-ci.com/hercules-ci/getting-started/deploy/nix-darwin
-  services.hercules-ci-agent.enable = true;
+  services.hercules-ci-agent = {
+    enable = true;
+    # https://github.com/hercules-ci/hercules-ci-agent/pull/507
+    package = inputs.hcia.legacyPackages.${pkgs.system}.hercules-ci-agent;
+  };
 
   imports = [ ./builder.nix ];