feat(ops/modules): Add module for running Nixery

This sets up a very simple Nixery instance with some things lacking:

* no support for garbage-collecting image fragments (yet)
* no popularity setup

The plan is to use this to get the ball rolling on a separate
domain (e.g. images.tvl.fyi), iron things out and then look into
flipping over nixery.dev

Change-Id: Ic594809f9d487fec7a0f632d608752a3f9c61315
Reviewed-on: https://cl.tvl.fyi/c/depot/+/3280
Tested-by: BuildkiteCI
Reviewed-by: flokli <flokli@flokli.de>
Reviewed-by: sterni <sternenseemann@systemli.org>
This commit is contained in:
Vincent Ambo 2021-08-06 14:53:41 +03:00 committed by tazjin
parent fc94800227
commit 47409b9610
3 changed files with 47 additions and 1 deletions

View file

@ -1,5 +1,5 @@
# See README.md # See README.md
{ depot ? import ../. {} }: { depot ? import ../. {}, ... }:
depot.third_party.nixpkgs.extend(_: _: { depot.third_party.nixpkgs.extend(_: _: {
tvl = depot; tvl = depot;

View file

@ -11,6 +11,7 @@ in {
"${depot.path}/ops/modules/clbot.nix" "${depot.path}/ops/modules/clbot.nix"
"${depot.path}/ops/modules/irccat.nix" "${depot.path}/ops/modules/irccat.nix"
"${depot.path}/ops/modules/monorepo-gerrit.nix" "${depot.path}/ops/modules/monorepo-gerrit.nix"
"${depot.path}/ops/modules/nixery.nix"
"${depot.path}/ops/modules/owothia.nix" "${depot.path}/ops/modules/owothia.nix"
"${depot.path}/ops/modules/panettone.nix" "${depot.path}/ops/modules/panettone.nix"
"${depot.path}/ops/modules/paroxysm.nix" "${depot.path}/ops/modules/paroxysm.nix"
@ -313,6 +314,9 @@ in {
# Run atward, the search engine redirection thing. # Run atward, the search engine redirection thing.
atward.enable = true; atward.enable = true;
# Run a Nixery instance
nixery.enable = true;
}; };
services.postgresql = { services.postgresql = {

42
ops/modules/nixery.nix Normal file
View file

@ -0,0 +1,42 @@
# NixOS module to run Nixery, currently with local-storage as the
# backend for storing/serving image layers.
{ depot, config, lib, pkgs, ... }:
let
cfg = config.services.depot.nixery;
description = "Nixery - container images on-demand";
storagePath = "/var/lib/nixery/${pkgs.nixpkgsCommits.unstable}";
in {
options.services.depot.nixery = {
enable = lib.mkEnableOption description;
port = lib.mkOption {
type = lib.types.int;
default = 45243; # "image"
description = "Port on which Nixery should listen";
};
};
config = lib.mkIf cfg.enable {
systemd.services.nixery = {
inherit description;
wantedBy = [ "multi-user.target" ];
serviceConfig = {
DynamicUser = true;
StateDirectory = "nixery";
Restart = "always";
ExecStartPre = "${pkgs.coreutils}/bin/mkdir -p ${storagePath}";
ExecStart = "${depot.third_party.nixery.nixery-bin}/bin/nixery";
};
environment = {
PORT = toString cfg.port;
NIXERY_PKGS_PATH = "${depot.path}/.nixery";
NIXERY_STORAGE_BACKEND = "filesystem";
NIX_TIMEOUT = "60"; # seconds
STORAGE_PATH = storagePath;
};
};
};
}