lukegb/depot
1
0
Fork 0
Code Issues 1 Pull requests Projects Packages Activity Actions

nixbuild-distributed: create

Browse source
This commit is contained in:
Luke Granger-Brown 2023-03-09 21:33:42 +00:00
parent 230725fca9
commit 4daa3a593a
4 changed files with 64 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
ops/nixos/cofractal-ams01/default.nix
View file

@ -7,6 +7,7 @@
imports = [
../lib/zfs.nix
../lib/bgp.nix
../lib/nixbuild-distributed.nix
];
# Otherwise _this_ machine won't enumerate things properly.

57
ops/nixos/lib/nixbuild-distributed.nix Normal file
View file

@ -0,0 +1,57 @@
# SPDX-FileCopyrightText: 2023 Luke Granger-Brown <depot@lukegb.com>
#
# SPDX-License-Identifier: Apache-2.0
{ config, lib, ... }:
{
imports = [ ./vault-agent-secrets.nix ];
# Distributed builds!
nix.buildMachines = lib.mkAfter [{
hostName = "eu.nixbuild.net";
system = "aarch64-linux";
maxJobs = 100;
speedFactor = 1;
supportedFeatures = [ "benchmark" "big-parallel" ];
mandatoryFeatures = [ ];
} {
hostName = "eu.nixbuild.net";
system = "x86_64-linux";
maxJobs = 100;
speedFactor = 1;
supportedFeatures = [ "benchmark" "big-parallel" ];
mandatoryFeatures = [ ];
}];
nix.distributedBuilds = true;
nix.extraOptions = ''
builders-use-substitutes = true
'';
my.vault.secrets.id_ed25519_nixbuild = {
group = "users";
template = ''
{{ with secret "kv/apps/nixbuild" }}
{{ .Data.data.id_ed25519_nixbuild }}
{{ end }}
'';
};
my.vault.secrets."id_ed25519_nixbuild.pub" = {
group = "users";
template = ''
{{ with secret "kv/apps/nixbuild" }}
{{ .Data.data.id_ed25519_nixbuild_pub }}
{{ end }}
'';
};
programs.ssh.extraConfig = ''
Host eu.nixbuild.net
PubkeyAcceptedKeyTypes ssh-ed25519
IdentityFile ${config.my.vault.secrets.id_ed25519_nixbuild.path}
'';
programs.ssh.knownHosts = {
nixbuild = {
hostNames = [ "eu.nixbuild.net" ];
publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPIQCZc54poJ8vqawd8TraNryQeJnvH1eLpIDgbiqymM";
};
};
}

1
ops/nixos/totoro/default.nix
View file

@ -10,6 +10,7 @@ in {
../../../third_party/nixpkgs/nixos/modules/installer/scan/not-detected.nix
../lib/client.nix
../lib/whitby-distributed.nix
../lib/nixbuild-distributed.nix
../lib/twitternuke.nix
../lib/quotes.bfob.gg.nix
../lib/baserow.nix

8
ops/vault/cfg/config.nix
View file

@ -69,13 +69,15 @@
my.apps.gitlab-runner = {};
my.apps.plex-pass = {};
my.apps.ads-b = {};
my.apps.nixbuild = {};
my.servers.etheroute-lon01.apps = [ "pomerium" ];
my.servers.porcorosso.apps = [ "quotesdb" ];
my.servers.totoro.apps = [ "sslrenew-raritan" "deluge" "quotesdb" "authentik" "ads-b" ];
my.servers.howl.apps = [ "nixbuild" ];
my.servers.porcorosso.apps = [ "quotesdb" "nixbuild" ];
my.servers.totoro.apps = [ "sslrenew-raritan" "deluge" "quotesdb" "authentik" "ads-b" "nixbuild" ];
my.servers.clouvider-fra01.apps = [ "deluge" ];
my.servers.clouvider-lon01.apps = [ "quotesdb" "gitlab-runner" ];
my.servers.cofractal-ams01.apps = [ "deluge" "gitlab-runner" ];
my.servers.cofractal-ams01.apps = [ "deluge" "gitlab-runner" "nixbuild" ];
my.servers.bvm-twitterchiver.apps = [ "twitterchiver" ];
my.servers.bvm-matrix.apps = [ "turn" "matrix-synapse" ];
my.servers.bvm-prosody.apps = [ "turn" ];