4bfcd09682
For the moment I've opted to not import all of the other things we'd usually provide to things imports via readTree, because I think it's a bit dangerous to accidentally overwrite things like NixOS' notion of "lib" with our own version. So for the moment, baseModule provides only "depot". Change-Id: I3db9132a3d9227055d4c1b00f02effcb84edcc53 Reviewed-on: https://cl.tvl.fyi/c/depot/+/2760 Tested-by: BuildkiteCI Reviewed-by: tazjin <mail@tazj.in>
66 lines
1.8 KiB
Nix
66 lines
1.8 KiB
Nix
# Most of the Nix expressions in this folder are NixOS modules, which
|
|
# are not readTree compatible.
|
|
#
|
|
# Some things (such as system configurations) are, and we import them
|
|
# here manually.
|
|
#
|
|
# TODO(tazjin): Find a more elegant solution for the whole module
|
|
# situation.
|
|
{ lib, pkgs, depot, ... }@args:
|
|
|
|
let
|
|
inherit (lib) findFirst isAttrs;
|
|
in
|
|
|
|
rec {
|
|
whitby = import ./whitby/default.nix args;
|
|
|
|
# System installation
|
|
|
|
allSystems = import ./all-systems.nix args;
|
|
|
|
# This provides our standard set of arguments to all NixOS modules.
|
|
baseModule = { ... }: {
|
|
_module.args = {
|
|
inherit (args) depot;
|
|
};
|
|
};
|
|
|
|
nixosFor = configuration: (depot.third_party.nixos {
|
|
configuration = { ... }: {
|
|
imports = [
|
|
baseModule
|
|
"${depot.depotPath}/ops/nixos/depot.nix" # TODO(lukegb): remove this once config.depot is no longer referenced.
|
|
configuration
|
|
];
|
|
config.depot = depot;
|
|
};
|
|
});
|
|
|
|
findSystem = hostname:
|
|
(findFirst
|
|
(system: system.config.networking.hostName == hostname)
|
|
(throw "${hostname} is not a known NixOS host")
|
|
(map nixosFor allSystems));
|
|
|
|
rebuild-system = pkgs.writeShellScriptBin "rebuild-system" ''
|
|
set -ue
|
|
if [[ $EUID -ne 0 ]]; then
|
|
echo "Oh no! Only root is allowed to rebuild the system!" >&2
|
|
exit 1
|
|
fi
|
|
|
|
echo "Rebuilding NixOS for $HOSTNAME"
|
|
system=$(nix-build -E "((import ${toString depot.depotPath} {}).ops.nixos.findSystem \"$HOSTNAME\").system" --no-out-link --show-trace)
|
|
|
|
nix-env -p /nix/var/nix/profiles/system --set $system
|
|
$system/bin/switch-to-configuration switch
|
|
'';
|
|
|
|
# Systems that should be built in CI
|
|
#
|
|
# TODO(tazjin): Refactor the whole systems setup, it's a bit
|
|
# inconsistent at the moment.
|
|
whitbySystem = (nixosFor whitby).system;
|
|
meta.targets = [ "whitbySystem" ];
|
|
}
|