forked from pub-solar/os
Benjamin Bädorf
0b229a771e
This adds a barebones CI-runner module with the following option: `pub-solar.ci-runner.enable` If enabled, this will start a systemd service on boot that runs `drone-runner-exec`. The configuration expects you to have a file called `secrets/drone-runner-exec-config` handled by agenix that gets put into `/run/agenix/drone-runner-exec-config` and is owned by root. This file should contain a configuration similar to the following: ``` CLIENT_DRONE_RPC_PROTO=https CLIENT_DRONE_RPC_HOST=drone.company.com CLIENT_DRONE_RPC_SECRET=super-duper-secret ```
36 lines
896 B
Nix
36 lines
896 B
Nix
{ lib, config, pkgs, self, ... }:
|
|
with lib;
|
|
let
|
|
psCfg = config.pub-solar;
|
|
cfg = config.pub-solar.ci-runner;
|
|
in
|
|
{
|
|
options.pub-solar.ci-runner = {
|
|
enable = mkEnableOption "Enables a systemd service that runs drone-ci-runner";
|
|
};
|
|
|
|
config = mkIf cfg.enable {
|
|
systemd.services.ci-runner = {
|
|
enable = true;
|
|
|
|
description = "CI runner for the PubSolarOS repository that can run test VM instances with KVM.";
|
|
|
|
serviceConfig = {
|
|
Type = "simple";
|
|
Restart = "always";
|
|
};
|
|
|
|
wantedBy = [ "multi-user.target" ];
|
|
after = [ "network.target" "libvirtd.service" ];
|
|
|
|
script = ''${pkgs.drone-runner-exec}/bin/drone-runner-exec daemon /run/agenix/drone-runner-exec-config'';
|
|
};
|
|
|
|
age.secrets."drone-runner-exec-config" = {
|
|
file = "${self}/secrets/drone-runner-exec-config";
|
|
mode = "700";
|
|
owner = "root";
|
|
};
|
|
};
|
|
}
|