infrastructure/hive.nix
Tom Hubrecht 1f9f56ac91
Some checks failed
Check meta / check_meta (pull_request) Successful in 2m40s
Check meta / check_dns (pull_request) Successful in 2m43s
Check workflows / check_workflows (pull_request) Successful in 2m51s
Build all the nodes / rescue01 (pull_request) Successful in 24m13s
Build all the nodes / geo01 (pull_request) Successful in 24m44s
Build all the nodes / geo02 (pull_request) Successful in 24m53s
Build all the nodes / web02 (pull_request) Successful in 3m46s
Run pre-commit on all files / check (pull_request) Successful in 36s
Build all the nodes / vault01 (pull_request) Successful in 16m18s
Build all the nodes / bridge01 (pull_request) Successful in 1m21s
Build all the nodes / storage01 (pull_request) Successful in 38m38s
Build all the nodes / web01 (pull_request) Successful in 22m5s
Build all the nodes / geo02 (push) Successful in 57s
Build all the nodes / bridge01 (push) Successful in 1m4s
Build all the nodes / geo01 (push) Successful in 1m4s
Build all the nodes / rescue01 (push) Successful in 1m7s
Build all the nodes / storage01 (push) Successful in 1m0s
Build all the nodes / vault01 (push) Successful in 1m7s
Build all the nodes / web01 (push) Successful in 1m36s
Build all the nodes / web02 (push) Successful in 59s
Run pre-commit on all files / check (push) Successful in 26s
Build all the nodes / web03 (pull_request) Successful in 19m23s
Build all the nodes / web03 (push) Successful in 2m14s
Build all the nodes / compute01 (push) Has been cancelled
Build all the nodes / compute01 (pull_request) Successful in 17m48s
chore(lix): Use the global patch infrastructure for lix
2024-11-22 12:56:39 +01:00

102 lines
2.5 KiB
Nix

let
sources' = import ./npins;
# Patch sources directly
sources = builtins.mapAttrs (patch.base { pkgs = import sources'.nixos-unstable { }; })
.applyPatches' sources';
nix-lib = import ./lib/nix-lib;
patch = import ./lib/nix-patches { patchFile = ./patches; };
nodes' = import ./meta/nodes.nix;
nodes = builtins.attrNames nodes';
mkNode = node: {
# Import the base configuration for each node
imports = [ ./machines/${node}/_configuration.nix ];
};
nixpkgs' = import ./meta/nixpkgs.nix;
# All supported nixpkgs versions, instanciated
nixpkgs = nix-lib.mapSingleFuse mkNixpkgs nixpkgs'.supported;
# Get the configured nixos version for the node,
# defaulting to the one defined in meta/nixpkgs
version = node: nodes'.${node}.nixpkgs or nixpkgs'.default;
# Builds a patched version of nixpkgs, only as the source
mkNixpkgs' =
v:
patch.mkNixpkgsSrc rec {
src = sources'.${name};
name = "nixos-${v}";
};
# Instanciates the required nixpkgs version
mkNixpkgs = version: import (mkNixpkgs' version) { };
###
# Function to create arguments based on the node
#
mkArgs = node: rec {
lib = nixpkgs.${version node}.lib // {
extra = nix-lib;
};
meta = (import ./meta) lib;
nodeMeta = meta.nodes.${node};
};
in
{
meta = {
nodeNixpkgs = nix-lib.mapSingleFuse (n: nixpkgs.${version n}) nodes;
specialArgs = {
inherit nixpkgs sources;
dgn-keys = import ./keys;
};
nodeSpecialArgs = nix-lib.mapSingleFuse mkArgs nodes;
};
defaults =
{ name, nodeMeta, ... }:
{
# Import the default modules
imports = [
./modules
(import "${sources.lix-module}/module.nix" { inherit (sources) lix; })
];
# Include default secrets
age-secrets.sources = [ ./machines/${name}/secrets ];
# Deployment config is specified in meta.nodes.${node}.deployment
inherit (nodeMeta) deployment;
nix = {
# Set NIX_PATH to the patched version of nixpkgs
nixPath = [ "nixpkgs=${mkNixpkgs' (version name)}" ];
optimise.automatic = true;
gc = {
automatic = true;
dates = "weekly";
options = "--delete-older-than 7d";
};
};
# Allow unfree packages
nixpkgs.config.allowUnfree = true;
# Use the stateVersion declared in the metadata
system = {
inherit (nodeMeta) stateVersion;
};
};
}
// (nix-lib.mapSingleFuse mkNode nodes)