infrastructure/hive.nix

171 lines
4.6 KiB
Nix
Raw Normal View History

2023-05-16 23:50:06 +02:00
let
2024-10-08 18:37:17 +02:00
sources' = import ./npins;
# Patch sources directly
sources = builtins.mapAttrs (patch.base { pkgs = import sources'.nixos-unstable { }; })
.applyPatches' sources';
2023-05-22 15:08:33 +02:00
nix-lib = import ./lib/nix-lib;
inherit (nix-lib) mapSingleFuse;
2023-05-22 15:08:33 +02:00
2024-10-08 18:37:17 +02:00
patch = import ./lib/nix-patches { patchFile = ./patches; };
2024-01-22 12:46:25 +01:00
2024-02-23 10:50:50 +01:00
nodes' = import ./meta/nodes.nix;
nodes = builtins.attrNames nodes';
mkNode = node: {
deployment.systemType = system node;
};
2023-05-22 15:08:33 +02:00
nixpkgs' = import ./meta/nixpkgs.nix;
# All supported nixpkgs versions × systems, instanciated
nixpkgs = mapSingleFuse (s: mapSingleFuse (mkSystemNixpkgs s) nixpkgs'.versions) nixpkgs'.systems;
# Get the configured nixos version for the node,
# defaulting to the one defined in meta/nixpkgs
version = node: nodes'.${node}.nixpkgs.version;
system = node: nodes'.${node}.nixpkgs.system;
category = node: nixpkgs'.categories.${system node};
nodePkgs = node: nixpkgs.${system node}.${version node};
# Builds a patched version of nixpkgs, only as the source
mkNixpkgs' =
v:
2024-10-08 18:37:17 +02:00
patch.mkNixpkgsSrc rec {
src = sources'.${name};
name = "nixos-${v}";
};
# Build up the nixpkgs configuration for Liminix embedded systems
mkLiminixConfig =
system: _:
(import "${sources.liminix}/devices/${system}").system
// {
overlays = [ (import "${sources.liminix}/overlay.nix") ];
config = {
allowUnsupportedSystem = true; # mipsel
permittedInsecurePackages = [
"python-2.7.18.8" # Python < 3.x is needed for kernel backports.
];
};
};
# Build up the arguments to instantiate a nixpkgs given a system and a version.
mkNixpkgsConfig =
system:
{
nixos = _: { };
zyxel-nwa50ax = mkLiminixConfig system;
}
.${system} or (throw "Unknown system: ${system} for nixpkgs configuration instantiation");
# Instanciates the required nixpkgs version
mkSystemNixpkgs = system: version: import (mkNixpkgs' version) (mkNixpkgsConfig system version);
2023-05-22 15:08:33 +02:00
###
# Function to create arguments based on the node
#
2024-02-23 10:50:50 +01:00
mkArgs = node: rec {
lib = sourcePkgs.lib // {
extra = nix-lib;
};
2023-05-22 15:08:33 +02:00
sourcePkgs = nodePkgs node;
2024-02-23 13:14:49 +01:00
meta = (import ./meta) lib;
2024-04-18 15:53:20 +02:00
nodeMeta = meta.nodes.${node};
nodePath = "machines/${category node}/${node}";
2024-02-23 10:50:50 +01:00
};
in
{
2023-05-16 23:50:06 +02:00
meta = {
nixpkgs = import nixpkgs.nixos.unstable.path;
nodeNixpkgs = mapSingleFuse nodePkgs nodes;
2023-05-22 15:08:33 +02:00
specialArgs = {
inherit nixpkgs sources;
dgn-keys = import ./keys;
};
2023-05-16 23:50:06 +02:00
nodeSpecialArgs = mapSingleFuse mkArgs nodes;
2023-05-16 23:50:06 +02:00
};
registry = {
zyxel-nwa50ax = {
evalConfig =
args:
(import "${sources.liminix}/lib/eval-config.nix" {
nixpkgs = args.specialArgs.sourcePkgs.path;
})
args;
2024-12-08 15:41:24 +01:00
defaults =
{ name, nodePath, ... }:
{
# Import the default modules
imports = [
# Import the base configuration for each node
./${nodePath}/_configuration.nix
./modules/generic
./modules/${category name}
];
# It's impure, but who cares?
# Can Flakes even do that? :)
nixpkgs.buildPlatform = builtins.currentSystem;
};
};
nixos = {
evalConfig = args: import "${args.specialArgs.sourcePkgs.path}/nixos/lib/eval-config.nix" args;
defaults =
{
name,
nodeMeta,
nodePath,
sourcePkgs,
...
}:
{
# Import the default modules
imports = [
# Import the base configuration for each node
./${nodePath}/_configuration.nix
./modules/generic
(import "${sources.lix-module}/module.nix" { inherit (sources) lix; })
./modules/${category name}
];
# Include default secrets
age-secrets.sources = [ ./${nodePath}/secrets ];
# Deployment config is specified in meta.nodes.${node}.deployment
inherit (nodeMeta) deployment;
nix = {
# Set NIX_PATH to the patched version of nixpkgs
nixPath = [ "nixpkgs=${sourcePkgs.path}" ];
optimise.automatic = true;
gc = {
automatic = true;
dates = "weekly";
options = "--delete-older-than 7d";
};
};
# Allow unfree packages
nixpkgs.config.allowUnfree = true;
# Use the stateVersion declared in the metadata
system = {
inherit (nodeMeta) stateVersion;
};
2024-04-15 11:36:14 +02:00
};
2024-02-23 10:50:50 +01:00
};
};
}
// (mapSingleFuse mkNode nodes)