axeman/pub-solar-os
1
0
Fork 0
forked from pub-solar/os
Code Issues Pull requests Packages Projects Releases Wiki Activity

Fix CI runner, get secrets from file

Browse source
This commit is contained in:
Benjamin Bädorf 2022-08-13 22:03:08 +02:00
parent f4eb615954
commit 7542014d33
No known key found for this signature in database
GPG key ID: 4406E80E13CD656C
1 changed files with 13 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
modules/ci-runner/default.nix
View file

@ -1,4 +1,4 @@
{ lib, config, pkgs, ... }: { lib, config, pkgs, self, ... }:
with lib; with lib;
let let
psCfg = config.pub-solar; psCfg = config.pub-solar;
@ -10,18 +10,26 @@ in
}; };
config = mkIf cfg.enable { config = mkIf cfg.enable {
systemd.user.services.ci-runner = { systemd.services.ci-runner = {
enable = true; enable = true;
description = "CI runner for the PubSolarOS repository that can run test VM instances with KVM."; description = "CI runner for the PubSolarOS repository that can run test VM instances with KVM.";
serviceConfig = { serviceConfig = {
Type = "oneshot"; Type = "simple";
RemainAfterExit = "yes";
Restart = "always"; Restart = "always";
}; };
script = ''${pkgs.drone-runner-exec}''; wantedBy = [ "multi-user.target" ];
after = [ "network.target" "libvirtd.service" ];
script = ''${pkgs.drone-runner-exec}/bin/drone-runner-exec daemon /run/agenix/drone-runner-exec-config'';
};
age.secrets."drone-runner-exec-config" = {
file = "${self}/secrets/drone-runner-exec-config";
mode = "700";
owner = "root";
}; };
}; };
} }