Commit graph

1519 commits

Author SHA1 Message Date
Hendrik Sokolowski be19dd7477 rename host-001 to pioneer 2023-04-26 21:38:36 +02:00
Akshay Mankar 96df48c33a
Merge pull request '001_momo_koeln: Install caddy and keycloak' (#214) from momo/keycloak into momo/main
Reviewed-on: pub-solar/os#214
Reviewed-by: teutat3s <teutates@mailbox.org>
2023-04-25 18:02:43 +02:00
Akshay Mankar 5c894c5265
Rekey agenix secrets 2023-04-25 12:10:02 +02:00
teutat3s a5061b8947
secrets: add host keys for hensoko 2023-04-25 10:18:54 +02:00
teutat3s 41939956c5
secrets: add host keys for b12f + teutat3s 2023-04-25 10:14:46 +02:00
teutat3s b55dace1ea
Merge branch 'momo/main' into momo/keycloak 2023-04-25 09:49:13 +02:00
teutat3s 9efce1619a
Merge pull request 'host_001_momo_koeln: fix swap UUID and initrd boot modules' (#223) from momo/fix-swap-uuid into momo/main
Reviewed-on: pub-solar/os#223
Reviewed-by: hensoko <hensoko@gssws.de>
2023-04-24 18:02:29 +02:00
teutat3s db53f9f1be
host_001_momo_koeln: fix initrd kernelModules
boot.initrd.kernelModules overrides boot.initrd.availableKernelModules
and forces the initrd to load only those modules. This leads to the host
being unbootable in this case because of missing required modules.
availableKernelModules is the correct place for desired modules.

This got fixed during a debugging session of hensoko and teutat3s, but
not implemented in nix code until now.
2023-04-24 13:13:12 +02:00
teutat3s 2692b2dc20
host_001_momo_koeln: fix swap UUID
This got changed while debugging boot failures on this host, by

re-creating swap.
2023-04-24 13:05:05 +02:00
b12f 211f1d16d0
Merge pull request 'momo/main: merge main branch' (#219) from momo-merge-main into momo/main
Reviewed-on: pub-solar/os#219
Reviewed-by: b12f <hello@benjaminbaedorf.eu>
2023-04-24 12:50:47 +02:00
teutat3s 4faf4267a3
Merge branch 'main' into momo-merge-main 2023-04-18 10:45:27 +02:00
teutat3s ed532fa271
Merge pull request 'modules/networking: Use mkDefault for caddy config' (#220) from networking-mkDefault into main
Reviewed-on: pub-solar/os#220
Reviewed-by: teutat3s <teutates@mailbox.org>
2023-04-17 20:16:48 +02:00
Akshay Mankar 91353938af
modules/networking: Use mkDefault for caddy config 2023-04-17 20:05:42 +02:00
Akshay Mankar 4c4c4cab0b
secrets: Add keycloak-database-password 2023-04-17 18:41:44 +02:00
Akshay Mankar 8b8280d07e
secrets: Add keys for axeman and host_001_momo_koeln 2023-04-17 18:41:44 +02:00
Akshay Mankar a0a92d27c9
001_momo_koeln: Add caddy 2023-04-17 18:41:42 +02:00
Akshay Mankar 6e6e5857fd
001_momo_koeln: Add keycloak 2023-04-17 18:41:26 +02:00
teutat3s 029be00eab
Merge pull request 'cachix: remove unused binary caches' (#209) from cachix/remove-unused-caches into main
Reviewed-on: pub-solar/os#209
Reviewed-by: hensoko <hensoko@gssws.de>
2023-04-15 19:03:51 +02:00
teutat3s 76d8af7c3a
Merge pull request 'audio: disable useless bluetooth sap plugin' (#208) from audio/disable-bluetooth-sap-plugin into main
Reviewed-on: pub-solar/os#208
Reviewed-by: hensoko <hensoko@gssws.de>
2023-04-15 19:01:55 +02:00
teutat3s 9f7d209392
Merge pull request 'flake: pull in changes from digga upstream' (#207) from upstream/digga-changes into main
Reviewed-on: pub-solar/os#207
Reviewed-by: hensoko <hensoko@gssws.de>
2023-04-15 18:59:02 +02:00
teutat3s 366d3b1278
Merge pull request '001_momo_koeln: Add @axeman's key to barkeeper's authorized_keys' (#213) from momo/add-axeman-key into momo/main
Reviewed-on: pub-solar/os#213
Reviewed-by: teutat3s <teutates@mailbox.org>
2023-03-31 16:44:25 +02:00
Akshay Mankar 48d55417bd
001_momo_koeln: Add @axeman's key to barkeeper's authorized_keys 2023-03-31 16:40:13 +02:00
teutat3s ea18402f21
Merge pull request 'main-to-momo-main' (#212) from main-to-momo-main into momo/main
Reviewed-on: pub-solar/os#212
Reviewed-by: teutat3s <teutates@mailbox.org>
2023-03-31 16:19:07 +02:00
Akshay Mankar 3992ca0d5f
Merge branch 'main' into main-to-momo-main 2023-03-31 16:15:10 +02:00
teutat3s 3ea141d445
cachix: remove unused binary caches from drone
runner
2023-03-28 14:03:41 +02:00
teutat3s 3bdc4b1f39
ci: cleanup unused directories 2023-03-28 14:00:07 +02:00
teutat3s 52c2ca9f13
nix.conf: add back required experimental features 2023-03-27 18:54:29 +02:00
teutat3s 972e3f1569
cachix: default binary cache is nixos.org, no need
to specify it explicitly (results in double entry in nix.conf)

Also force our nix.extraOptions because digga tries real hard to put
their binary caches there:
0595ae70cd/modules/nix-config.nix (L19-L23)
2023-03-27 18:09:46 +02:00
teutat3s b1ad71cd35
cachix: remove unused binary caches 2023-03-27 13:52:40 +02:00
teutat3s b01c5f9fce
audio: disable useless bluetooth sap plugin 2023-03-27 13:51:12 +02:00
teutat3s d0470d5aaf
flake: pull in changes from digga upstream
See:
54ede8e591...0595ae70cd?diff=unified
2023-03-27 13:48:39 +02:00
teutat3s fd7f326376
Merge pull request 'flake: Remove nur' (#206) from cleanup-nur into main
Reviewed-on: pub-solar/os#206
Reviewed-by: teutat3s <teutates@mailbox.org>
2023-03-26 16:18:36 +02:00
Akshay Mankar 1f5b2b9d10
flake: Remove nur
It was perhaps added manually, not sure if the overlay was actually useful to
anyone.
2023-03-26 15:14:33 +02:00
teutat3s cffffbd440
Merge pull request 'ci: upload ISO images to bigger /data disk' (#179) from fix/move-iso-store-to-bigger-disk into main
Reviewed-on: pub-solar/os#179
Reviewed-by: hensoko <hensoko@gssws.de>
2023-03-08 20:00:25 +01:00
teutat3s 43bd742150
Merge pull request 'ci: fix Host key verification failed' (#205) from momo/ci-deployment-known-hosts into momo/main
Reviewed-on: pub-solar/os#205
2023-03-08 14:13:03 +01:00
teutat3s b21b98dadd
ci: fix Host key verification failed
- Fix missing SSH known_hosts in deploy pipeline
- SSH tries to use Trust-On-First-Use (TOFU) interactively to add a new
  host key
- Verbose SSH logs show:
debug1: Server host key: ssh-ed25519 SHA256:1bbksDNYBWSh/rIFP7MMfs557kWn1dM64bpXdnfBE5E
debug1: read_passphrase: can't open /dev/tty: No such device or address
- deploy-rs uses nix, which uses SSH which doesn't use the environment variable
HOME, but rather /etc/passwd to find a user's HOME
- To solve this, we override SSH options using UserKnownHostsFile and
  the -i flag
2023-03-08 14:10:19 +01:00
teutat3s f5239c042b
Merge pull request 'ci: debug Host key verification failed error' (#204) from momo/ci-deployment-known-hosts into momo/main
Reviewed-on: pub-solar/os#204
2023-03-08 14:05:19 +01:00
teutat3s 51e84e9418
ci: debug Host key verification failed error 2023-03-08 14:04:06 +01:00
teutat3s f6708d252e
Merge pull request 'ci: debug Host key verification failed error' (#203) from momo/ci-deployment-known-hosts into momo/main
Reviewed-on: pub-solar/os#203
2023-03-08 13:55:32 +01:00
teutat3s 0bd30c33d5
ci: debug Host key verification failed error 2023-03-08 13:54:50 +01:00
teutat3s 3f9b0f9a3b
Merge pull request 'ci: debug Host key verification failed error' (#202) from momo/ci-deployment-known-hosts into momo/main
Reviewed-on: pub-solar/os#202
2023-03-08 13:49:58 +01:00
teutat3s 09cdf6c390
ci: debug Host key verification failed error 2023-03-08 13:49:27 +01:00
teutat3s 30652571cf
Merge pull request 'ci: debug Host key verification failed error' (#201) from momo/ci-deployment-known-hosts into momo/main
Reviewed-on: pub-solar/os#201
2023-03-08 13:43:13 +01:00
teutat3s 9812687fb1
ci: debug Host key verification failed error 2023-03-08 13:42:29 +01:00
teutat3s 86ca4f6f54
Merge pull request 'ci: debug Host key verification failed error' (#200) from momo/ci-deployment-known-hosts into momo/main
Reviewed-on: pub-solar/os#200
2023-03-08 13:35:46 +01:00
teutat3s 1a16083510
ci: debug Host key verification failed error 2023-03-08 13:35:02 +01:00
teutat3s 8c4cc68bd6
Merge pull request 'ci: fix Host key verification failed' (#199) from momo/ci-deployment-known-hosts into momo/main
Reviewed-on: pub-solar/os#199
2023-03-08 13:30:24 +01:00
teutat3s 9dc77abfc8
ci: fix Host key verification failed
- missing SSH known_hosts in deploy pipeline
- SSH tries to use Trust-On-First-Use (TOFU) interactively to add a new
  host key
- verbose SSH logs:
debug1: Server host key: ssh-ed25519 SHA256:1bbksDNYBWSh/rIFP7MMfs557kWn1dM64bpXdnfBE5E
debug1: read_passphrase: can't open /dev/tty: No such device or address
- deploy-rs uses nix, which uses SSH which doesn't use the environment variable
HOME, but rather /etc/passwd to find a user's HOME
2023-03-08 13:25:49 +01:00
teutat3s 6192881ac1
Merge pull request 'ci: debug Host key verification failed error' (#198) from momo/ci-deployment-known-hosts into momo/main
Reviewed-on: pub-solar/os#198
2023-03-08 12:54:37 +01:00
teutat3s 3890494935
ci: debug Host key verification failed error 2023-03-08 12:53:56 +01:00