sercanto/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

modules/darwin: add community-builder

Browse source
This commit is contained in:
zowoq 2023-10-27 13:42:58 +10:00
parent 5b4fc9aeed
commit e181c309a3
23 changed files with 167 additions and 0 deletions

1
flake.nix
View file

@ -136,6 +136,7 @@
common = ./modules/darwin/common;
builder = ./modules/darwin/builder.nix;
community-builder = ./modules/darwin/community-builder;
hercules-ci = ./modules/darwin/hercules-ci;
remote-builder = ./modules/darwin/remote-builder.nix;
};

6
modules/darwin/community-builder/default.nix Normal file
View file

@ -0,0 +1,6 @@
{
imports = [
./packages.nix
./users.nix
];
}

1
modules/darwin/community-builder/keys/0x4A6F Normal file
View file

@ -0,0 +1 @@
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFuUdiPdq7neZjTSRoc4PuRg8a6M/JBaJ8fjQxPH6uUT 0x4A6F@darwin-build-box

1
modules/darwin/community-builder/keys/artturin Normal file
View file

@ -0,0 +1 @@
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPJiUxvklqkkqhqUAsyQy1fnGYB2ICqCrxFZn4pf6G1o

2
modules/darwin/community-builder/keys/delroth Normal file
View file

@ -0,0 +1,2 @@
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMct2kMJTrgBnvGK4pv7mAtIcLu6EhtgcDQo0hwy8evO
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII3tjB4KYDok3KlWxdBp/yEmqhhmybd+w0VO4xUwLKKV

2
modules/darwin/community-builder/keys/dotlambda Normal file
View file

@ -0,0 +1,2 @@
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOLD6C7Tqnesd17VpguCUPv8gbx4T/2xKwm6BmpPOGJ8 root@kurt
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID49tEIeBAeMD2zsWWIl0YbepF+KMxs6nWZn0fWDmryT root@georg

1
modules/darwin/community-builder/keys/emilylange Normal file
View file

@ -0,0 +1 @@
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILPBk7s6uA+IHDDiXH4NNB1x7W9OIA95uIMp4Jq8MKpy

2
modules/darwin/community-builder/keys/emilytrau Normal file
View file

@ -0,0 +1,2 @@
ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAxs0LYg6V2IvrwaW74RCzoZlvSAXS5fed9/sFMz51DPqGAw420Q2jPsvKsSAbOlLD3ZjTu8Xy+TPQSbFJgSp448/s9aXWtmCioP5zNrzorShvhzH9VnyraWwjgAEscr09xSelDZ7wlFtdoBYkpoOM8FWRWYYCm91yi5xzPHBo/hG6q4mkaLaJC6LdRRNXRkAaCBg/jfcv7jHudoHOVwzcm8w2GOKurI6awM8Tmvy9S2ZNeq9W20SuydnkzVP4Y4Rtss50xLU/r3H7An54Oyv9QeOkEHz0M7FHUZ2NOUVivOTCt2uJkzUOR5BQR7asFEaZ7AyEV3Y+MpeHtwq9TtW0Fw==
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDG7gZtaDbeiqyKlTWN7bflQSg1JqVJc6CD70A6ufafn

2
modules/darwin/community-builder/keys/fab Normal file
View file

@ -0,0 +1,2 @@
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAKjD9rcdx5Py8hQdIhRku1MfO6P7WFpZi+VJZspjj/2 Darwin remote builder 1
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINsRtI+bY95/AJBAaKnWvW/EwG4qs8cFn5bSI+rC78lQ Darwin remote builder 2

1
modules/darwin/community-builder/keys/figsoda Normal file
View file

@ -0,0 +1 @@
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMw76DA8ltc+mvXfckMstJgE7qXplw4IvDV+9B00JxG0

2
modules/darwin/community-builder/keys/hexa Normal file
View file

@ -0,0 +1,2 @@
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID/37GyrbkRJ98Woq6yz7le5kaFcvNHhE9uRbEtn/dRJ hexa@nyx
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEHfZrbvLfabJ1aWW2x8/dutV5jlFlVPSD+reRl81Sdp hexa@gaia

1
modules/darwin/community-builder/keys/janik Normal file
View file

@ -0,0 +1 @@
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHLuKhW4+sDUwT4DJS27VZWFTE0Uq71omTo0q4EMgxzh janik@aq0.de

1
modules/darwin/community-builder/keys/julienmalka Normal file
View file

@ -0,0 +1 @@
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGa+7n7kNzb86pTqaMn554KiPrkHRGeTJ0asY1NjSbpr julien@tower

1
modules/darwin/community-builder/keys/k900 Normal file
View file

@ -0,0 +1 @@
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOi9vgVGs+S5kEsUqHPvyMMh1Q9gqL4TcbHoe5d73tun

1
modules/darwin/community-builder/keys/lily Normal file
View file

@ -0,0 +1 @@
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGKYH3ivyXgnhXL6xgZxZifRclw+2xsxWNdNe1ghjw7A lily@bina

1
modules/darwin/community-builder/keys/ma27 Normal file
View file

@ -0,0 +1 @@
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN09FaPqWdKIPHnyC4LXTY15cJerbsrYg0ynReCx1k7V ma27

1
modules/darwin/community-builder/keys/phaer Normal file
View file

@ -0,0 +1 @@
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLopgIL2JS/XtosC8K+qQ1ZwkOe1gFi8w2i1cd13UehWwkxeguU6r26VpcGn8gfh6lVbxf22Z9T2Le8loYAhxANaPghvAOqYQH/PJPRztdimhkj2h7SNjP1/cuwlQYuxr/zEy43j0kK0flieKWirzQwH4kNXWrscHgerHOMVuQtTJ4Ryq4GIIxSg17VVTA89tcywGCL+3Nk4URe5x92fb8T2ZEk8T9p1eSUL+E72m7W7vjExpx1PLHgfSUYIkSGBr8bSWf3O1PW6EuOgwBGidOME4Y7xNgWxSB/vgyHx3/3q5ThH0b8Gb3qsWdN22ZILRAeui2VhtdUZeuf2JYYh8L

2
modules/darwin/community-builder/keys/raitobezarius Normal file
View file

@ -0,0 +1,2 @@
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA3hCOyFwuoCLt5W9e9yQSwj9I+VspB0kNNHsoFngbgZ Nix remote builder key (Thors)
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF07Sy0O+oletFYlrfS0+XtBWJO2F+Rc9J/ocNLBa/OE Nix remote builder key (Thorkell)

1
modules/darwin/community-builder/keys/stephank Normal file
View file

@ -0,0 +1 @@
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEM89t08F2XADDgHOrq/6tqYgTxvShlu5AozW8J0D5tTNN0wxAPoOUb2VC5Rd2mviQeYvvR+ihH21F4w+/GFgET+UnYvTy8e/jiOhvuIPqvgo4fJt4NDPmClL9jFDkXmlC+uQUT3WtkhOTtPmbaLnKU5rb7q2igJ6UtNOAOFrUvq1/1Sw9M8apOLGlederSzbV6X7RnZDWRmZkKsxh+7b1lQE6PXHV99U1nioiQJoFlINUa2CfWTV/ODGKRbYkhe+FmRQw2lig4QW7MqrI3gWpy3/H0y7Ri5YaxBhLqzmsBiTV79OZkC2URg/c3ybUwhWmfNV8a/z30zDsY3ICpFOf

1
modules/darwin/community-builder/keys/toonn Normal file
View file

@ -0,0 +1 @@
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPGvIn51XMn1DXred/QGQWBFF6/RwE8cG2dgyrOsXqnT toonn@darwin-build-box

1
modules/darwin/community-builder/keys/winter Normal file
View file

@ -0,0 +1 @@
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB48pH8R4ofvGo5dph4I3lZ5CM6He95TRu1h1oURydhf

7
modules/darwin/community-builder/packages.nix Normal file
View file

@ -0,0 +1,7 @@
{ pkgs, ... }:
{
environment.systemPackages = with pkgs; [
git
vim
];
}

128
modules/darwin/community-builder/users.nix Normal file
View file

@ -0,0 +1,128 @@
let
# To add yourself:
# 1. Add an entry to this list, using the next UID.
# 2. Create a file in `keys` named your user name that contains your SSH key(s), separated by newlines.
users = [
{
name = "winter";
trusted = true;
uid = 502;
}
{
name = "stephank";
trusted = true;
uid = 503;
}
{
name = "hexa";
trusted = true;
uid = 504;
}
{
name = "0x4A6F";
trusted = true;
uid = 505;
}
{
name = "artturin";
trusted = true;
uid = 506;
}
{
name = "figsoda";
trusted = true;
uid = 507;
}
{
name = "raitobezarius";
trusted = true;
uid = 508;
}
{
name = "k900";
trusted = true;
uid = 510;
}
{
name = "julienmalka";
trusted = true;
uid = 511;
}
{
name = "dotlambda";
trusted = true;
uid = 512;
}
{
name = "lily";
trusted = true;
uid = 513;
}
{
name = "ma27";
trusted = true;
uid = 514;
}
{
name = "fab";
trusted = true;
uid = 515;
}
{
name = "phaer";
trusted = true;
uid = 516;
}
{
name = "emilylange";
trusted = true;
uid = 517;
}
{
name = "emilytrau";
trusted = true;
uid = 518;
}
{
name = "janik";
trusted = true;
uid = 519;
}
{
name = "delroth";
trusted = true;
uid = 520;
}
{
name = "toonn";
trusted = true;
uid = 542;
}
];
in
{
users.users = builtins.listToAttrs (builtins.map
(u: {
inherit (u) name;
value = {
inherit (u) uid;
home = "/Users/${u.name}";
createHome = true;
shell = "/bin/zsh";
};
})
users);
users.knownUsers = builtins.map (u: u.name) users;
users.forceRecreate = true;
environment.etc = builtins.listToAttrs (builtins.map
(u: {
name = "ssh/authorized_keys.d/${u.name}";
value = { source = ./keys/${u.name}; };
})
users);
nix.settings.trusted-users = builtins.map (u: u.name) (builtins.filter (u: u.trusted) users);
}