61d2d2d503
Create the pipeline by outputting a file that contains nix-build invocations for each target's *derivation path*. Each invocation has a generated Nix expression passed to it with `-E` which fetches the correct target from the tree while correctly handling targets with strange characters (such as in Go-packages). This makes it possible to run target-level granular pipelines. We're getting somewhere! Change-Id: Ia6946e389dafd1d4926130bb8891446d6e17133b Reviewed-on: https://cl.tvl.fyi/c/depot/+/1855 Tested-by: BuildkiteCI Reviewed-by: glittershark <grfn@gws.fyi> Reviewed-by: lukegb <lukegb@tvl.fyi>
51 lines
1.4 KiB
Nix
51 lines
1.4 KiB
Nix
# Most of the Nix expressions in this folder are NixOS modules, which
|
|
# are not readTree compatible.
|
|
#
|
|
# Some things (such as system configurations) are, and we import them
|
|
# here manually.
|
|
#
|
|
# TODO(tazjin): Find a more elegant solution for the whole module
|
|
# situation.
|
|
{ lib, pkgs, depot, ... }@args:
|
|
|
|
let
|
|
inherit (lib) findFirst isAttrs;
|
|
in
|
|
|
|
rec {
|
|
whitby = import ./whitby/default.nix args;
|
|
|
|
# System installation
|
|
|
|
allSystems = import ./all-systems.nix args;
|
|
|
|
nixosFor = configuration: depot.third_party.nixos {
|
|
inherit configuration;
|
|
};
|
|
|
|
findSystem = hostname:
|
|
(findFirst
|
|
(system: system.config.networking.hostName == hostname)
|
|
(throw "${hostname} is not a known NixOS host")
|
|
(map nixosFor allSystems));
|
|
|
|
rebuild-system = pkgs.writeShellScriptBin "rebuild-system" ''
|
|
set -ue
|
|
if [[ $EUID -ne 0 ]]; then
|
|
echo "Oh no! Only root is allowed to rebuild the system!" >&2
|
|
exit 1
|
|
fi
|
|
|
|
echo "Rebuilding NixOS for $HOSTNAME"
|
|
system=$(nix-build -E "((import ${toString depot.depotPath} {}).ops.nixos.findSystem \"$HOSTNAME\").system" --no-out-link --show-trace)
|
|
|
|
nix-env -p /nix/var/nix/profiles/system --set $system
|
|
$system/bin/switch-to-configuration switch
|
|
'';
|
|
|
|
# Systems that should be built in CI
|
|
#
|
|
# TODO(tazjin): Refactor the whole systems setup, it's a bit
|
|
# inconsistent at the moment.
|
|
whitbySystem = (nixosFor whitby).system;
|
|
}
|