2024-12-12 14:41:43 +01:00
|
|
|
|
# SPDX-FileCopyrightText: 2024 Ryan Lahfa <ryan.lahfa@dgnum.eu>
|
|
|
|
|
# SPDX-FileCopyrightText: 2024 Tom Hubrecht <tom.hubrecht@dgnum.eu>
|
|
|
|
|
# SPDX-FileContributor: Maurice Debray <maurice.debray@dgnum.eu>
|
|
|
|
|
#
|
|
|
|
|
# SPDX-License-Identifier: EUPL-1.2
|
|
|
|
|
|
2023-05-16 23:50:06 +02:00
|
|
|
|
let
|
2024-10-08 18:37:17 +02:00
|
|
|
|
sources' = import ./npins;
|
|
|
|
|
|
|
|
|
|
# Patch sources directly
|
2024-10-08 20:49:26 +02:00
|
|
|
|
sources = builtins.mapAttrs (patch.base { pkgs = import sources'.nixos-unstable { }; })
|
|
|
|
|
.applyPatches' sources';
|
2023-05-22 15:08:33 +02:00
|
|
|
|
|
2024-10-09 17:04:30 +02:00
|
|
|
|
nix-lib = import ./lib/nix-lib;
|
2024-12-08 12:04:54 +01:00
|
|
|
|
inherit (nix-lib) mapSingleFuse;
|
2023-05-22 15:08:33 +02:00
|
|
|
|
|
2024-10-08 18:37:17 +02:00
|
|
|
|
patch = import ./lib/nix-patches { patchFile = ./patches; };
|
2024-01-22 12:46:25 +01:00
|
|
|
|
|
2024-12-09 10:20:44 +01:00
|
|
|
|
nodes' = import ./meta/nodes;
|
2024-02-23 10:50:50 +01:00
|
|
|
|
nodes = builtins.attrNames nodes';
|
|
|
|
|
|
|
|
|
|
mkNode = node: {
|
2024-12-08 13:22:07 +01:00
|
|
|
|
deployment.systemType = system node;
|
2024-02-02 10:51:31 +01:00
|
|
|
|
};
|
2023-05-22 15:08:33 +02:00
|
|
|
|
|
2024-04-03 21:21:04 +02:00
|
|
|
|
nixpkgs' = import ./meta/nixpkgs.nix;
|
2024-12-07 13:03:35 +01:00
|
|
|
|
# All supported nixpkgs versions × systems, instanciated
|
2024-12-08 12:04:54 +01:00
|
|
|
|
nixpkgs = mapSingleFuse (s: mapSingleFuse (mkSystemNixpkgs s) nixpkgs'.versions) nixpkgs'.systems;
|
2024-04-03 21:21:04 +02:00
|
|
|
|
|
|
|
|
|
# Get the configured nixos version for the node,
|
|
|
|
|
# defaulting to the one defined in meta/nixpkgs
|
2024-12-08 11:52:26 +01:00
|
|
|
|
version = node: nodes'.${node}.nixpkgs.version;
|
2024-12-08 12:04:54 +01:00
|
|
|
|
system = node: nodes'.${node}.nixpkgs.system;
|
2024-12-08 13:22:07 +01:00
|
|
|
|
category = node: nixpkgs'.categories.${system node};
|
2024-04-03 21:21:04 +02:00
|
|
|
|
|
2024-12-08 11:52:26 +01:00
|
|
|
|
nodePkgs = node: nixpkgs.${system node}.${version node};
|
|
|
|
|
|
2024-04-03 21:21:04 +02:00
|
|
|
|
# Builds a patched version of nixpkgs, only as the source
|
|
|
|
|
mkNixpkgs' =
|
|
|
|
|
v:
|
2024-10-08 18:37:17 +02:00
|
|
|
|
patch.mkNixpkgsSrc rec {
|
|
|
|
|
src = sources'.${name};
|
|
|
|
|
name = "nixos-${v}";
|
2023-07-02 17:16:17 +02:00
|
|
|
|
};
|
|
|
|
|
|
2024-12-07 13:03:35 +01:00
|
|
|
|
# Build up the nixpkgs configuration for Liminix embedded systems
|
|
|
|
|
mkLiminixConfig =
|
|
|
|
|
system: _:
|
|
|
|
|
(import "${sources.liminix}/devices/${system}").system
|
|
|
|
|
// {
|
|
|
|
|
overlays = [ (import "${sources.liminix}/overlay.nix") ];
|
|
|
|
|
config = {
|
|
|
|
|
allowUnsupportedSystem = true; # mipsel
|
|
|
|
|
permittedInsecurePackages = [
|
|
|
|
|
"python-2.7.18.8" # Python < 3.x is needed for kernel backports.
|
|
|
|
|
];
|
|
|
|
|
};
|
|
|
|
|
};
|
|
|
|
|
|
2024-12-08 12:10:50 +01:00
|
|
|
|
# Build up the arguments to instantiate a nixpkgs given a system and a version.
|
2024-12-07 13:03:35 +01:00
|
|
|
|
mkNixpkgsConfig =
|
2024-12-08 12:10:50 +01:00
|
|
|
|
system:
|
|
|
|
|
{
|
|
|
|
|
nixos = _: { };
|
|
|
|
|
zyxel-nwa50ax = mkLiminixConfig system;
|
2024-12-10 11:45:59 +01:00
|
|
|
|
netconf = _: { };
|
2024-12-08 12:10:50 +01:00
|
|
|
|
}
|
|
|
|
|
.${system} or (throw "Unknown system: ${system} for nixpkgs configuration instantiation");
|
2024-12-07 13:03:35 +01:00
|
|
|
|
|
2024-04-03 21:21:04 +02:00
|
|
|
|
# Instanciates the required nixpkgs version
|
2024-12-07 13:03:35 +01:00
|
|
|
|
mkSystemNixpkgs = system: version: import (mkNixpkgs' version) (mkNixpkgsConfig system version);
|
2023-05-22 15:08:33 +02:00
|
|
|
|
|
2023-10-04 09:23:48 +02:00
|
|
|
|
###
|
|
|
|
|
# Function to create arguments based on the node
|
|
|
|
|
#
|
2024-02-23 10:50:50 +01:00
|
|
|
|
mkArgs = node: rec {
|
2024-12-08 11:59:39 +01:00
|
|
|
|
lib = sourcePkgs.lib // {
|
2024-10-09 17:04:30 +02:00
|
|
|
|
extra = nix-lib;
|
2023-10-04 09:23:48 +02:00
|
|
|
|
};
|
2023-05-22 15:08:33 +02:00
|
|
|
|
|
2024-12-08 11:59:39 +01:00
|
|
|
|
sourcePkgs = nodePkgs node;
|
2024-12-05 12:37:51 +01:00
|
|
|
|
meta = ((import ./meta) lib).config;
|
2024-04-18 15:53:20 +02:00
|
|
|
|
|
|
|
|
|
nodeMeta = meta.nodes.${node};
|
2024-12-08 13:22:07 +01:00
|
|
|
|
nodePath = "machines/${category node}/${node}";
|
2024-02-23 10:50:50 +01:00
|
|
|
|
};
|
2024-02-02 10:51:31 +01:00
|
|
|
|
in
|
2024-04-03 21:21:04 +02:00
|
|
|
|
|
2024-02-02 10:51:31 +01:00
|
|
|
|
{
|
2023-05-16 23:50:06 +02:00
|
|
|
|
meta = {
|
2024-12-08 15:15:29 +01:00
|
|
|
|
nixpkgs = import nixpkgs.nixos.unstable.path;
|
2024-12-08 12:04:54 +01:00
|
|
|
|
nodeNixpkgs = mapSingleFuse nodePkgs nodes;
|
2023-05-22 15:08:33 +02:00
|
|
|
|
|
2023-10-04 09:23:48 +02:00
|
|
|
|
specialArgs = {
|
2024-04-03 21:21:04 +02:00
|
|
|
|
inherit nixpkgs sources;
|
2024-10-09 17:04:30 +02:00
|
|
|
|
|
|
|
|
|
dgn-keys = import ./keys;
|
2023-10-04 09:23:48 +02:00
|
|
|
|
};
|
2023-05-16 23:50:06 +02:00
|
|
|
|
|
2024-12-08 12:04:54 +01:00
|
|
|
|
nodeSpecialArgs = mapSingleFuse mkArgs nodes;
|
2023-05-16 23:50:06 +02:00
|
|
|
|
};
|
|
|
|
|
|
2024-12-07 13:03:35 +01:00
|
|
|
|
registry = {
|
2024-12-07 16:20:41 +01:00
|
|
|
|
zyxel-nwa50ax = {
|
|
|
|
|
evalConfig =
|
|
|
|
|
args:
|
|
|
|
|
(import "${sources.liminix}/lib/eval-config.nix" {
|
|
|
|
|
nixpkgs = args.specialArgs.sourcePkgs.path;
|
|
|
|
|
})
|
|
|
|
|
args;
|
|
|
|
|
|
2024-12-08 15:41:24 +01:00
|
|
|
|
defaults =
|
|
|
|
|
{ name, nodePath, ... }:
|
|
|
|
|
{
|
|
|
|
|
# Import the default modules
|
|
|
|
|
imports = [
|
|
|
|
|
# Import the base configuration for each node
|
|
|
|
|
./${nodePath}/_configuration.nix
|
|
|
|
|
./modules/generic
|
|
|
|
|
./modules/${category name}
|
|
|
|
|
];
|
|
|
|
|
# It's impure, but who cares?
|
|
|
|
|
# Can Flakes even do that? :)
|
|
|
|
|
nixpkgs.buildPlatform = builtins.currentSystem;
|
|
|
|
|
};
|
2024-12-07 16:20:41 +01:00
|
|
|
|
};
|
|
|
|
|
|
2024-12-10 11:45:59 +01:00
|
|
|
|
netconf = {
|
2024-12-15 20:40:51 +01:00
|
|
|
|
evalConfig = nixpkgs.nixos.unstable.lib.evalModules;
|
2024-12-10 11:45:59 +01:00
|
|
|
|
|
|
|
|
|
defaults =
|
2024-12-15 21:00:08 +01:00
|
|
|
|
{
|
|
|
|
|
name,
|
|
|
|
|
nodeMeta,
|
|
|
|
|
nodePath,
|
|
|
|
|
...
|
|
|
|
|
}:
|
2024-12-10 11:45:59 +01:00
|
|
|
|
{
|
2024-12-15 20:40:51 +01:00
|
|
|
|
_module.args = {
|
|
|
|
|
pkgs = nixpkgs.nixos.unstable;
|
|
|
|
|
};
|
2024-12-15 21:00:08 +01:00
|
|
|
|
|
2024-12-10 11:45:59 +01:00
|
|
|
|
# Import the default modules
|
|
|
|
|
imports = [
|
|
|
|
|
# Import the base configuration for each node
|
|
|
|
|
./${nodePath}.nix
|
|
|
|
|
./modules/netconf
|
|
|
|
|
./lib/netconf-junos
|
2024-12-10 13:38:44 +01:00
|
|
|
|
"${sources.nixpkgs}/nixos/modules/misc/assertions.nix"
|
2024-12-10 11:45:59 +01:00
|
|
|
|
];
|
2024-12-10 13:38:44 +01:00
|
|
|
|
|
2024-12-15 21:00:08 +01:00
|
|
|
|
system.host-name = name;
|
|
|
|
|
|
2024-12-10 13:38:44 +01:00
|
|
|
|
inherit (nodeMeta) deployment;
|
2024-12-10 11:45:59 +01:00
|
|
|
|
};
|
|
|
|
|
};
|
|
|
|
|
|
2024-12-07 13:03:35 +01:00
|
|
|
|
nixos = {
|
2024-12-08 11:59:39 +01:00
|
|
|
|
evalConfig = args: import "${args.specialArgs.sourcePkgs.path}/nixos/lib/eval-config.nix" args;
|
2024-12-07 13:03:35 +01:00
|
|
|
|
defaults =
|
2024-12-08 13:22:07 +01:00
|
|
|
|
{
|
2024-12-08 22:31:14 +01:00
|
|
|
|
lib,
|
2024-12-08 13:22:07 +01:00
|
|
|
|
name,
|
2024-12-08 22:31:14 +01:00
|
|
|
|
nodes,
|
2024-12-08 13:22:07 +01:00
|
|
|
|
nodeMeta,
|
|
|
|
|
nodePath,
|
2024-12-08 22:31:14 +01:00
|
|
|
|
meta,
|
2024-12-08 13:22:07 +01:00
|
|
|
|
sourcePkgs,
|
|
|
|
|
...
|
|
|
|
|
}:
|
2024-12-07 13:03:35 +01:00
|
|
|
|
{
|
|
|
|
|
# Import the default modules
|
|
|
|
|
imports = [
|
2024-12-08 13:22:07 +01:00
|
|
|
|
# Import the base configuration for each node
|
|
|
|
|
./${nodePath}/_configuration.nix
|
|
|
|
|
./modules/generic
|
2024-12-07 13:03:35 +01:00
|
|
|
|
(import "${sources.lix-module}/module.nix" { inherit (sources) lix; })
|
2024-12-08 13:22:07 +01:00
|
|
|
|
./modules/${category name}
|
2024-12-07 13:03:35 +01:00
|
|
|
|
];
|
|
|
|
|
|
2024-12-08 22:31:14 +01:00
|
|
|
|
_module.args.serverNodes = lib.filterAttrs (
|
|
|
|
|
name: _: meta.nodes.${name}.nixpkgs.system == "nixos"
|
|
|
|
|
) nodes;
|
|
|
|
|
|
2024-12-07 13:03:35 +01:00
|
|
|
|
# Include default secrets
|
2024-12-08 13:22:07 +01:00
|
|
|
|
age-secrets.sources = [ ./${nodePath}/secrets ];
|
2024-12-07 13:03:35 +01:00
|
|
|
|
|
|
|
|
|
# Deployment config is specified in meta.nodes.${node}.deployment
|
|
|
|
|
inherit (nodeMeta) deployment;
|
|
|
|
|
|
|
|
|
|
nix = {
|
|
|
|
|
# Set NIX_PATH to the patched version of nixpkgs
|
2024-12-15 14:03:38 +01:00
|
|
|
|
nixPath = [ "nixpkgs=${builtins.storePath sourcePkgs.path}" ];
|
2024-12-07 13:03:35 +01:00
|
|
|
|
optimise.automatic = true;
|
|
|
|
|
|
|
|
|
|
gc = {
|
|
|
|
|
automatic = true;
|
|
|
|
|
dates = "weekly";
|
|
|
|
|
options = "--delete-older-than 7d";
|
|
|
|
|
};
|
2024-12-15 14:03:38 +01:00
|
|
|
|
|
|
|
|
|
settings =
|
|
|
|
|
{
|
|
|
|
|
substituters = [ "https://tvix-store.dgnum.eu/infra" ];
|
|
|
|
|
}
|
|
|
|
|
// (import ./machines/nixos/storage01/tvix-cache/cache-settings.nix {
|
|
|
|
|
caches = [ "infra" ];
|
|
|
|
|
});
|
2024-12-07 13:03:35 +01:00
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
# Allow unfree packages
|
|
|
|
|
nixpkgs.config.allowUnfree = true;
|
|
|
|
|
|
|
|
|
|
# Use the stateVersion declared in the metadata
|
|
|
|
|
system = {
|
|
|
|
|
inherit (nodeMeta) stateVersion;
|
|
|
|
|
};
|
2024-04-15 11:36:14 +02:00
|
|
|
|
};
|
2024-02-23 10:50:50 +01:00
|
|
|
|
};
|
2024-12-07 13:03:35 +01:00
|
|
|
|
};
|
2024-02-02 10:51:31 +01:00
|
|
|
|
}
|
2024-12-08 12:04:54 +01:00
|
|
|
|
// (mapSingleFuse mkNode nodes)
|