nix-community infrastructure [maintainer=@zowoq]

Find a file

Jörg Thalheim 5a048f0836 document installing system from repo in rescue mode		2021-03-25 09:26:44 +01:00
.git-crypt	Add 1 git-crypt collaborator	2021-01-19 09:15:41 +01:00
.github	also build non-admin pull requests	2021-03-19 22:46:56 +01:00
build01	build01: fix boot partition	2021-03-25 09:24:28 +01:00
build02	simplify hetzner network do dhcp for v4	2021-03-24 18:28:27 +01:00
build03	improve globbing for mounting /boot raid	2021-03-24 18:33:51 +01:00
nix	update nixpkgs-update	2021-03-23 21:20:44 -07:00
roles	simplify hetzner network do dhcp for v4	2021-03-24 18:28:27 +01:00
secrets	declarative hydra users	2021-03-06 20:14:42 +01:00
services	hydra: update upstream fix	2021-03-20 16:43:44 +01:00
terraform	services: move hound to build03 (#62 )	2021-03-08 00:22:10 +00:00
users	mic92: replace rsa key with ed25519	2021-03-06 09:03:32 +01:00
.envrc	deploy: speed up by using caches	2020-08-08 14:34:52 +02:00
.gitignore	improve .gitignore	2020-04-26 18:49:51 +02:00
_config.yml	configure GitHub pages	2020-05-03 15:11:06 +02:00
ci.sh	ci: speed up on no-op	2021-01-18 18:30:11 +01:00
default.nix	move things around a bit (#61 )	2021-03-07 16:28:44 +00:00
deploy	ci: add basic nix and cachix support (#15 )	2020-04-07 13:31:11 +00:00
deployment.nix	services: move hound to build03 (#62 )	2021-03-08 00:22:10 +00:00
README.md	document installing system from repo in rescue mode	2021-03-25 09:26:44 +01:00
secrets.nix	secrets: only remove suffix "\n" for the buildkite token (#22 )	2020-05-01 16:44:05 +00:00
shell.nix	Revert "remove broken niv"	2021-03-21 15:59:20 +01:00

README.md

nix-community infrastructure

Welcome to the Nix Community infrastructure project. This project holds all the NixOS and Terraform configuration for this organization.

Support

If you hit any issues, ping us on IRC in the #nix-community channel (see the admin list below) or create an issue here: New Issue.

Administrators

@adisbladis
@flokli
@grahamc
@Mic92
@nlewo
@ryantm
@zimbatm

Services

BuildKite agent - on build01
GitLab agent - on build01
hound - on build01
https://hydra.nix-community.org - on build01
marvin-mk2 - on build01
matterbridge - on build01
ryantm-updater bot - on build02

Hosts

`build01`

This machine is perfect for running heavy builds.

Provider: Hetzner
CPU: AMD Ryzen 7 1700X Eight-Core Processor
RAM: 64GB
Drives: 2 x 512 GB SATA SSD

`build02`

This machine currently just runs r-ryantm/nixpkgs-update.

Provider: Hetzner
CPU: AMD Ryzen 7 3700X Eight-Core Processor
RAM: 64GB DDR4 ECC
Drives: 2 x 1 TB NVME in RAID 1

`build03`

This machine is a replacement for build01.

Provider: Hetzner
CPU: AMD Ryzen 5 3600 6-Core Processor
RAM: 64GB DDR4 ECC
Drives: 2 x 512 TB NVME in RAID 1

Cache

All the builds on these machines are pushed to https://nix-community.cachix.org/

Thanks to Cachix for sponsoring our binary cache!

File hierarchy

./build\d+ - build machines
./ci.sh - What is executed by CI
./deploy - NixOps deploy script
./nix - pinned Nix dependencies and overlays
./roles - shared NixOS configuration modules
./secrets - git-crypt encrypted secrets
./services - single instances of NixOS services
./terraform - Setup DNS
./users - NixOS configuration of our admins

Deployment commands:

$ ./deploy

If you want to reboot a machine, use the following command to also deploy secrets afterwards:

$ ./deploy --force-reboot --include build02

Install/Fix system from Hetzner recovery mode

Mount all filesystems to /mnt
Install kexec image from Hetzner recovery system as described in kexec.nix and boot into it
Download infra repo

$ nix-shell -p git --run "git clone https://github.com/nix-community/infra && cd infra && nix-shell"

Build new system closure:

nix-shell> nix-build -A buildXX-system

Install system closure

$ nixos-install --system ./result