Hendrik Sokolowski
be19dd7477
rename host-001 to pioneer
2023-04-26 21:38:36 +02:00
Akshay Mankar
96df48c33a
Merge pull request '001_momo_koeln: Install caddy and keycloak' ( #214 ) from momo/keycloak into momo/main
...
Reviewed-on: pub-solar/os#214
Reviewed-by: teutat3s <teutates@mailbox.org>
2023-04-25 18:02:43 +02:00
Akshay Mankar
5c894c5265
Rekey agenix secrets
2023-04-25 12:10:02 +02:00
teutat3s
a5061b8947
secrets: add host keys for hensoko
2023-04-25 10:18:54 +02:00
teutat3s
41939956c5
secrets: add host keys for b12f + teutat3s
2023-04-25 10:14:46 +02:00
teutat3s
b55dace1ea
Merge branch 'momo/main' into momo/keycloak
2023-04-25 09:49:13 +02:00
teutat3s
9efce1619a
Merge pull request 'host_001_momo_koeln: fix swap UUID and initrd boot modules' ( #223 ) from momo/fix-swap-uuid into momo/main
...
Reviewed-on: pub-solar/os#223
Reviewed-by: hensoko <hensoko@gssws.de>
2023-04-24 18:02:29 +02:00
teutat3s
db53f9f1be
host_001_momo_koeln: fix initrd kernelModules
...
boot.initrd.kernelModules overrides boot.initrd.availableKernelModules
and forces the initrd to load only those modules. This leads to the host
being unbootable in this case because of missing required modules.
availableKernelModules is the correct place for desired modules.
This got fixed during a debugging session of hensoko and teutat3s, but
not implemented in nix code until now.
2023-04-24 13:13:12 +02:00
teutat3s
2692b2dc20
host_001_momo_koeln: fix swap UUID
...
This got changed while debugging boot failures on this host, by
re-creating swap.
2023-04-24 13:05:05 +02:00
b12f
211f1d16d0
Merge pull request 'momo/main: merge main branch' ( #219 ) from momo-merge-main into momo/main
...
Reviewed-on: pub-solar/os#219
Reviewed-by: b12f <hello@benjaminbaedorf.eu>
2023-04-24 12:50:47 +02:00
teutat3s
4faf4267a3
Merge branch 'main' into momo-merge-main
2023-04-18 10:45:27 +02:00
teutat3s
ed532fa271
Merge pull request 'modules/networking: Use mkDefault for caddy config' ( #220 ) from networking-mkDefault into main
...
Reviewed-on: pub-solar/os#220
Reviewed-by: teutat3s <teutates@mailbox.org>
2023-04-17 20:16:48 +02:00
Akshay Mankar
91353938af
modules/networking: Use mkDefault for caddy config
2023-04-17 20:05:42 +02:00
Akshay Mankar
4c4c4cab0b
secrets: Add keycloak-database-password
2023-04-17 18:41:44 +02:00
Akshay Mankar
8b8280d07e
secrets: Add keys for axeman and host_001_momo_koeln
2023-04-17 18:41:44 +02:00
Akshay Mankar
a0a92d27c9
001_momo_koeln: Add caddy
2023-04-17 18:41:42 +02:00
Akshay Mankar
6e6e5857fd
001_momo_koeln: Add keycloak
2023-04-17 18:41:26 +02:00
teutat3s
029be00eab
Merge pull request 'cachix: remove unused binary caches' ( #209 ) from cachix/remove-unused-caches into main
...
Reviewed-on: pub-solar/os#209
Reviewed-by: hensoko <hensoko@gssws.de>
2023-04-15 19:03:51 +02:00
teutat3s
76d8af7c3a
Merge pull request 'audio: disable useless bluetooth sap plugin' ( #208 ) from audio/disable-bluetooth-sap-plugin into main
...
Reviewed-on: pub-solar/os#208
Reviewed-by: hensoko <hensoko@gssws.de>
2023-04-15 19:01:55 +02:00
teutat3s
9f7d209392
Merge pull request 'flake: pull in changes from digga upstream' ( #207 ) from upstream/digga-changes into main
...
Reviewed-on: pub-solar/os#207
Reviewed-by: hensoko <hensoko@gssws.de>
2023-04-15 18:59:02 +02:00
teutat3s
366d3b1278
Merge pull request '001_momo_koeln: Add @axeman 's key to barkeeper's authorized_keys' ( #213 ) from momo/add-axeman-key into momo/main
...
Reviewed-on: pub-solar/os#213
Reviewed-by: teutat3s <teutates@mailbox.org>
2023-03-31 16:44:25 +02:00
Akshay Mankar
48d55417bd
001_momo_koeln: Add @axeman 's key to barkeeper's authorized_keys
2023-03-31 16:40:13 +02:00
teutat3s
ea18402f21
Merge pull request 'main-to-momo-main' ( #212 ) from main-to-momo-main into momo/main
...
Reviewed-on: pub-solar/os#212
Reviewed-by: teutat3s <teutates@mailbox.org>
2023-03-31 16:19:07 +02:00
Akshay Mankar
3992ca0d5f
Merge branch 'main' into main-to-momo-main
2023-03-31 16:15:10 +02:00
teutat3s
3ea141d445
cachix: remove unused binary caches from drone
...
runner
2023-03-28 14:03:41 +02:00
teutat3s
3bdc4b1f39
ci: cleanup unused directories
2023-03-28 14:00:07 +02:00
teutat3s
52c2ca9f13
nix.conf: add back required experimental features
2023-03-27 18:54:29 +02:00
teutat3s
972e3f1569
cachix: default binary cache is nixos.org, no need
...
to specify it explicitly (results in double entry in nix.conf)
Also force our nix.extraOptions because digga tries real hard to put
their binary caches there:
0595ae70cd/modules/nix-config.nix (L19-L23)
2023-03-27 18:09:46 +02:00
teutat3s
b1ad71cd35
cachix: remove unused binary caches
2023-03-27 13:52:40 +02:00
teutat3s
b01c5f9fce
audio: disable useless bluetooth sap plugin
2023-03-27 13:51:12 +02:00
teutat3s
d0470d5aaf
flake: pull in changes from digga upstream
...
See:
54ede8e591...0595ae70cd
?diff=unified
2023-03-27 13:48:39 +02:00
teutat3s
fd7f326376
Merge pull request 'flake: Remove nur' ( #206 ) from cleanup-nur into main
...
Reviewed-on: pub-solar/os#206
Reviewed-by: teutat3s <teutates@mailbox.org>
2023-03-26 16:18:36 +02:00
Akshay Mankar
1f5b2b9d10
flake: Remove nur
...
It was perhaps added manually, not sure if the overlay was actually useful to
anyone.
2023-03-26 15:14:33 +02:00
teutat3s
cffffbd440
Merge pull request 'ci: upload ISO images to bigger /data disk' ( #179 ) from fix/move-iso-store-to-bigger-disk into main
...
Reviewed-on: pub-solar/os#179
Reviewed-by: hensoko <hensoko@gssws.de>
2023-03-08 20:00:25 +01:00
teutat3s
43bd742150
Merge pull request 'ci: fix Host key verification failed' ( #205 ) from momo/ci-deployment-known-hosts into momo/main
...
Reviewed-on: pub-solar/os#205
2023-03-08 14:13:03 +01:00
teutat3s
b21b98dadd
ci: fix Host key verification failed
...
- Fix missing SSH known_hosts in deploy pipeline
- SSH tries to use Trust-On-First-Use (TOFU) interactively to add a new
host key
- Verbose SSH logs show:
debug1: Server host key: ssh-ed25519 SHA256:1bbksDNYBWSh/rIFP7MMfs557kWn1dM64bpXdnfBE5E
debug1: read_passphrase: can't open /dev/tty: No such device or address
- deploy-rs uses nix, which uses SSH which doesn't use the environment variable
HOME, but rather /etc/passwd to find a user's HOME
- To solve this, we override SSH options using UserKnownHostsFile and
the -i flag
2023-03-08 14:10:19 +01:00
teutat3s
f5239c042b
Merge pull request 'ci: debug Host key verification failed error' ( #204 ) from momo/ci-deployment-known-hosts into momo/main
...
Reviewed-on: pub-solar/os#204
2023-03-08 14:05:19 +01:00
teutat3s
51e84e9418
ci: debug Host key verification failed error
2023-03-08 14:04:06 +01:00
teutat3s
f6708d252e
Merge pull request 'ci: debug Host key verification failed error' ( #203 ) from momo/ci-deployment-known-hosts into momo/main
...
Reviewed-on: pub-solar/os#203
2023-03-08 13:55:32 +01:00
teutat3s
0bd30c33d5
ci: debug Host key verification failed error
2023-03-08 13:54:50 +01:00
teutat3s
3f9b0f9a3b
Merge pull request 'ci: debug Host key verification failed error' ( #202 ) from momo/ci-deployment-known-hosts into momo/main
...
Reviewed-on: pub-solar/os#202
2023-03-08 13:49:58 +01:00
teutat3s
09cdf6c390
ci: debug Host key verification failed error
2023-03-08 13:49:27 +01:00
teutat3s
30652571cf
Merge pull request 'ci: debug Host key verification failed error' ( #201 ) from momo/ci-deployment-known-hosts into momo/main
...
Reviewed-on: pub-solar/os#201
2023-03-08 13:43:13 +01:00
teutat3s
9812687fb1
ci: debug Host key verification failed error
2023-03-08 13:42:29 +01:00
teutat3s
86ca4f6f54
Merge pull request 'ci: debug Host key verification failed error' ( #200 ) from momo/ci-deployment-known-hosts into momo/main
...
Reviewed-on: pub-solar/os#200
2023-03-08 13:35:46 +01:00
teutat3s
1a16083510
ci: debug Host key verification failed error
2023-03-08 13:35:02 +01:00
teutat3s
8c4cc68bd6
Merge pull request 'ci: fix Host key verification failed' ( #199 ) from momo/ci-deployment-known-hosts into momo/main
...
Reviewed-on: pub-solar/os#199
2023-03-08 13:30:24 +01:00
teutat3s
9dc77abfc8
ci: fix Host key verification failed
...
- missing SSH known_hosts in deploy pipeline
- SSH tries to use Trust-On-First-Use (TOFU) interactively to add a new
host key
- verbose SSH logs:
debug1: Server host key: ssh-ed25519 SHA256:1bbksDNYBWSh/rIFP7MMfs557kWn1dM64bpXdnfBE5E
debug1: read_passphrase: can't open /dev/tty: No such device or address
- deploy-rs uses nix, which uses SSH which doesn't use the environment variable
HOME, but rather /etc/passwd to find a user's HOME
2023-03-08 13:25:49 +01:00
teutat3s
6192881ac1
Merge pull request 'ci: debug Host key verification failed error' ( #198 ) from momo/ci-deployment-known-hosts into momo/main
...
Reviewed-on: pub-solar/os#198
2023-03-08 12:54:37 +01:00
teutat3s
3890494935
ci: debug Host key verification failed error
2023-03-08 12:53:56 +01:00