summaryrefslogtreecommitdiffstats
path: root/lass
diff options
context:
space:
mode:
authormakefu <github@syntax-fehler.de>2017-07-28 22:00:25 +0200
committermakefu <github@syntax-fehler.de>2017-07-28 22:00:25 +0200
commitdfd1b5f6bc278be615975dc619e1f9490e05ef7a (patch)
tree2991cddc8933d494a8b13124bf59540fe0124c9c /lass
parent6919ec53cc640e0b813989012eecc58665887e19 (diff)
parent32d8c202b0ec037dcf78ebf6ecad730cfb9c5272 (diff)
Merge remote-tracking branch 'lass/master'
Diffstat (limited to 'lass')
-rw-r--r--lass/1systems/prism/config.nix1
-rw-r--r--lass/2configs/baseX.nix1
-rw-r--r--lass/2configs/buildbot-standalone.nix157
-rw-r--r--lass/2configs/exim-smarthost.nix1
4 files changed, 2 insertions, 158 deletions
diff --git a/lass/1systems/prism/config.nix b/lass/1systems/prism/config.nix
index e8beed605..5d05ae399 100644
--- a/lass/1systems/prism/config.nix
+++ b/lass/1systems/prism/config.nix
@@ -30,7 +30,6 @@ in {
<stockholm/lass/2configs/weechat.nix>
<stockholm/lass/2configs/privoxy-retiolum.nix>
<stockholm/lass/2configs/radio.nix>
- <stockholm/lass/2configs/buildbot-standalone.nix>
<stockholm/lass/2configs/repo-sync.nix>
<stockholm/lass/2configs/binary-cache/server.nix>
<stockholm/lass/2configs/iodined.nix>
diff --git a/lass/2configs/baseX.nix b/lass/2configs/baseX.nix
index 2357d6d26..86d0ac7c1 100644
--- a/lass/2configs/baseX.nix
+++ b/lass/2configs/baseX.nix
@@ -53,6 +53,7 @@ in {
haskellPackages.hledger
much
ncdu
+ nix-repl
nmap
pavucontrol
powertop
diff --git a/lass/2configs/buildbot-standalone.nix b/lass/2configs/buildbot-standalone.nix
deleted file mode 100644
index 18fd9bb92..000000000
--- a/lass/2configs/buildbot-standalone.nix
+++ /dev/null
@@ -1,157 +0,0 @@
-{ lib, config, pkgs, ... }:
-
-with import <stockholm/lib>;
-
-let
- sshHostConfig = pkgs.writeText "ssh-config" ''
- ControlMaster auto
- ControlPath /tmp/%u_sshmux_%r@%h:%p
- ControlPersist 4h
- '';
-
- hostname = config.networking.hostName;
-
-in {
- config.services.nginx.virtualHosts.build = {
- serverAliases = [ "build.${hostname}.r" ];
- locations."/".extraConfig = ''
- proxy_set_header Upgrade $http_upgrade;
- proxy_set_header Connection "upgrade";
- proxy_pass http://localhost:${toString config.krebs.buildbot.master.web.port};
- '';
- };
-
- config.krebs.buildbot.master = let
- stockholm-mirror-url = "http://cgit.${hostname}.r/stockholm";
- in {
- slaves = {
- testslave = "lasspass";
- };
- change_source.stockholm = ''
- stockholm_repo = '${stockholm-mirror-url}'
- cs.append(
- changes.GitPoller(
- stockholm_repo,
- workdir='stockholm-poller', branches=True,
- project='stockholm',
- pollinterval=10
- )
- )
- '';
- scheduler = {
- build-scheduler = ''
- # build all hosts
- sched.append(
- schedulers.SingleBranchScheduler(
- change_filter=util.ChangeFilter(branch_re=".*"),
- treeStableTimer=10,
- name="build-all-branches",
- builderNames=["build-hosts"]
- )
- )
- '';
- };
- builder_pre = ''
- # prepare grab_repo step for stockholm
- grab_repo = steps.Git(
- repourl=stockholm_repo,
- mode='full'
- )
-
- # prepare addShell function
- def addShell(factory,**kwargs):
- factory.addStep(steps.ShellCommand(**kwargs))
- '';
- builder = {
- build-hosts = ''
- f = util.BuildFactory()
- f.addStep(grab_repo)
-
- def build_host(user, host):
- addShell(f,
- name="{}".format(i),
- env={
- "LOGNAME": user,
- "NIX_PATH": "secrets=/var/src/stockholm/null:/var/src",
- "NIX_REMOTE": "daemon",
- "dummy_secrets": "true",
- },
- command=[
- "nix-shell", "--run",
- "test --system={} --target=buildbotSlave@${config.krebs.build.host.name}$HOME/$LOGNAME".format(host)
- ]
- )
-
- for i in [ "hotdog", "puyak", "test-all-krebs-modules", "test-centos7", "test-minimal-deploy", "wolf" ]:
- build_host("krebs", i)
-
- for i in [ "mors", "uriel", "shodan", "icarus", "cloudkrebs", "echelon", "dishfire", "prism" ]:
- build_host("lass", i)
-
- for i in [ "x", "wry", "vbob", "wbob", "shoney" ]:
- build_host("makefu", i)
-
- for i in [ "hiawatha", "onondaga" ]:
- build_host("nin", i)
-
- for i in [ "alnus", "mu", "nomic", "wu", "xu", "zu" ]:
- build_host("tv", i)
-
- bu.append(
- util.BuilderConfig(
- name="build-hosts",
- slavenames=slavenames,
- factory=f
- )
- )
-
- '';
- };
- enable = true;
- web.enable = true;
- irc = {
- enable = true;
- nick = "build|${hostname}";
- server = "ni.r";
- channels = [ "retiolum" "noise" ];
- allowForce = true;
- };
- extraConfig = ''
- c['buildbotURL'] = "http://build.${hostname}.r/"
- '';
- };
-
- config.krebs.buildbot.slave = {
- enable = true;
- masterhost = "localhost";
- username = "testslave";
- password = "lasspass";
- packages = with pkgs; [ gnumake jq nix populate ];
- };
- config.krebs.iptables = {
- tables = {
- filter.INPUT.rules = [
- { predicate = "-p tcp --dport 9989"; target = "ACCEPT"; }
- ];
- };
- };
-
- #ssh workaround for make test
- options.lass.build-ssh-privkey = mkOption {
- type = types.secret-file;
- default = {
- path = "${config.users.users.buildbotSlave.home}/.ssh/id_rsa";
- owner = { inherit (config.users.users.buildbotSlave ) name uid;};
- source-path = toString <secrets> + "/build.ssh.key";
- };
- };
- config.krebs.secret.files = {
- build-ssh-privkey = config.lass.build-ssh-privkey;
- };
- config.users.users.buildbotSlave = {
- useDefaultShell = true;
- openssh.authorizedKeys.keys = [
- "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDiV0Xn60aVLHC/jGJknlrcxSvKd/MVeh2tjBpxSBT3II9XQGZhID2Gdh84eAtoWyxGVFQx96zCHSuc7tfE2YP2LhXnwaxHTeDc8nlMsdww53lRkxihZIEV7QHc/3LRcFMkFyxdszeUfhWz8PbJGL2GYT+s6CqoPwwa68zF33U1wrMOAPsf/NdpSN4alsqmjFc2STBjnOd9dXNQn1VEJQqGLG3kR3WkCuwMcTLS5eu0KLwG4i89Twjy+TGp2QsF5K6pNE+ZepwaycRgfYzGcPTn5d6YQXBgcKgHMoSJsK8wqpr0+eFPCDiEA3HDnf76E4mX4t6/9QkMXCLmvs0IO/WP"
- ];
- };
-}
diff --git a/lass/2configs/exim-smarthost.nix b/lass/2configs/exim-smarthost.nix
index 942653bab..fe3aa20bf 100644
--- a/lass/2configs/exim-smarthost.nix
+++ b/lass/2configs/exim-smarthost.nix
@@ -35,6 +35,7 @@ with import <stockholm/lib>;
{ from = "polo@lassul.us"; to = lass.mail; }
{ from = "shack@lassul.us"; to = lass.mail; }
{ from = "nix@lassul.us"; to = lass.mail; }
+ { from = "c-base@lassul.us"; to = lass.mail; }
];
system-aliases = [
{ from = "mailer-daemon"; to = "postmaster"; }