tvl-depot/ci/scripts/build-briefcase.sh

set -euo pipefail

nix-build . \
  -I briefcase="$(pwd)" \
  -I nixpkgs=/var/lib/buildkite-agent-socrates/nixpkgs-channels \
  --show-trace
Support build-briefcase.sh For now, I'm supporting two CI pipelines: - build-socrates - build-briefcase Conceptually, build-briefcase should cover what build-socrates does now, but eventually I would like build-socrates to call `switch-to-configuration` so that all of my websites, etc. stay fresh. 2020-08-17 11:44:55 +02:00			`set -euo pipefail`

			`nix-build . \`
			`-I briefcase="$(pwd)" \`
Move /home/wpcarro/nixpkgs-channels to /var/lib My builds are still failing. This time with... ``` error: getting status of /home/wpcarro/nixpkgs-channels: Permission denied ``` ...what confused me was the following: ```shell $ sudo -u buildkite-agent-socrates stat /home/wpcarro/nixpkgs-channels permission denied ``` But `ls -al /home/wpcarro \| grep nixpkgs-channels` showed `r-w` for all users... Thankfully @riking on ##tvl told me that I should check the permissions for /home/wpcarro and /home... After running `ls -al /home`, I saw `---` for all user... I then reproduced the error by running: ```shell $ sudo -u buildkite-agent-socrates stat /home permission denied ``` Great! So then I moved nixpkgs-channels to /var/lib/buildkite-agent-socrates. @edef recommended that I read more about DynamicUser= setting for systemd, which looks relevant after I took a cursory glance. I'll also want a more declarative way to manager this, but I'm making small improvements every day. 2020-08-17 22:22:15 +02:00			`-I nixpkgs=/var/lib/buildkite-agent-socrates/nixpkgs-channels \`
Support build-briefcase.sh For now, I'm supporting two CI pipelines: - build-socrates - build-briefcase Conceptually, build-briefcase should cover what build-socrates does now, but eventually I would like build-socrates to call `switch-to-configuration` so that all of my websites, etc. stay fresh. 2020-08-17 11:44:55 +02:00			`--show-trace`