chore(ops/modules): drop unused NixOS modules
Change-Id: I043fea952df5498cd3e831b479220b1025a295fa Reviewed-on: https://cl.snix.dev/c/snix/+/30338 Tested-by: besadii Autosubmit: Florian Klink <flokli@flokli.de> Reviewed-by: Ilan Joselevich <personal@ilanjoselevich.com>
This commit is contained in:
Florian Klink
clbot
parent
71d7185dcd
commit
11b1f8b304
5 changed files with 0 additions and 292 deletions
|
|
@ -1,104 +0,0 @@
|
|||
# Defines a service for automatically and periodically calling depot's
|
||||
# rebuild-system on a NixOS machine.
|
||||
#
|
||||
# Deploys can be stopped in emergency situations by creating an empty
|
||||
# file called `stop` in the state directory of the auto-deploy service
|
||||
# (typically /var/lib/auto-deploy).
|
||||
{ depot, config, lib, pkgs, ... }:
|
||||
|
||||
let
|
||||
cfg = config.services.depot.auto-deploy;
|
||||
description = "to automatically rebuild the current system's NixOS config from the latest checkout of depot";
|
||||
|
||||
rebuild-system = depot.ops.nixos.rebuildSystemWith "$STATE_DIRECTORY/deploy";
|
||||
deployScript = pkgs.writeShellScript "auto-deploy" ''
|
||||
set -ueo pipefail
|
||||
|
||||
if [[ $EUID -ne 0 ]]; then
|
||||
echo "Oh no! Only root is allowed to run auto-deploy!" >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if [[ -f $STATE_DIRECTORY/stop ]]; then
|
||||
echo "stop file exists in $STATE_DIRECTORY, not deploying!" >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
readonly depot=$STATE_DIRECTORY/depot.git
|
||||
readonly deploy=$STATE_DIRECTORY/deploy
|
||||
readonly git="git -C $depot"
|
||||
|
||||
# find-or-create depot
|
||||
if [ ! -d $depot ]; then
|
||||
# cannot use $git here because $depot doesn't exist
|
||||
git clone --bare ${cfg.git-remote} $depot
|
||||
fi
|
||||
|
||||
function cleanup() {
|
||||
$git worktree remove $deploy
|
||||
}
|
||||
trap cleanup EXIT
|
||||
|
||||
$git fetch origin
|
||||
$git worktree add --force $deploy FETCH_HEAD
|
||||
# unsure why, but without this switch-to-configuration attempts to install
|
||||
# NixOS in $STATE_DIRECTORY
|
||||
(cd / && ${rebuild-system}/bin/rebuild-system)
|
||||
'';
|
||||
in
|
||||
{
|
||||
options.services.depot.auto-deploy = {
|
||||
enable = lib.mkEnableOption description;
|
||||
|
||||
git-remote = lib.mkOption {
|
||||
type = lib.types.str;
|
||||
default = "https://cl.tvl.fyi/depot.git";
|
||||
description = ''
|
||||
The (possibly remote) repository from which to clone as specified by the
|
||||
GIT URLS section of `man git-clone`.
|
||||
'';
|
||||
};
|
||||
|
||||
interval = lib.mkOption {
|
||||
type = lib.types.str;
|
||||
example = "1h";
|
||||
description = ''
|
||||
Interval between Nix builds, specified in systemd.time(7) format.
|
||||
'';
|
||||
};
|
||||
};
|
||||
|
||||
config = lib.mkIf cfg.enable {
|
||||
systemd.services.auto-deploy = {
|
||||
inherit description;
|
||||
script = "${deployScript}";
|
||||
path = with pkgs; [
|
||||
bash
|
||||
git
|
||||
gnutar
|
||||
gzip
|
||||
];
|
||||
after = [ "network-online.target" ];
|
||||
wants = [ "network-online.target" ];
|
||||
|
||||
# We need to prevent NixOS from interrupting us while it attempts to
|
||||
# restart systemd units.
|
||||
restartIfChanged = false;
|
||||
|
||||
serviceConfig = {
|
||||
Type = "oneshot";
|
||||
StateDirectory = "auto-deploy";
|
||||
};
|
||||
};
|
||||
|
||||
systemd.timers.auto-deploy = {
|
||||
inherit description;
|
||||
wantedBy = [ "multi-user.target" ];
|
||||
|
||||
timerConfig = {
|
||||
OnActiveSec = "1";
|
||||
OnUnitActiveSec = cfg.interval;
|
||||
};
|
||||
};
|
||||
};
|
||||
}
|
||||
|
|
@ -1,97 +0,0 @@
|
|||
# Defines a service for automatically collecting Nix garbage
|
||||
# periodically, without relying on the (ostensibly broken) Nix options
|
||||
# for min/max space available.
|
||||
{ config, lib, pkgs, ... }:
|
||||
|
||||
let
|
||||
cfg = config.services.depot.automatic-gc;
|
||||
description = "Automatically collect Nix garbage";
|
||||
|
||||
GiBtoKiB = n: n * 1024 * 1024;
|
||||
GiBtoBytes = n: n * 1024 * 1024 * 1024;
|
||||
|
||||
gcScript = pkgs.writeShellScript "automatic-nix-gc" ''
|
||||
set -ueo pipefail
|
||||
|
||||
if [ -e /run/stop-automatic-gc ]; then
|
||||
echo "GC is disabled through /run/stop-automatic-gc"
|
||||
exit 0
|
||||
fi
|
||||
|
||||
readonly MIN_THRESHOLD_KIB="${toString (GiBtoKiB cfg.diskThreshold)}"
|
||||
readonly MAX_FREED_BYTES="${toString (GiBtoBytes cfg.maxFreed)}"
|
||||
readonly GEN_THRESHOLD="${cfg.preserveGenerations}"
|
||||
readonly AVAILABLE_KIB=$(df --sync /nix --output=avail | tail -n1)
|
||||
|
||||
if [ "''${AVAILABLE_KIB}" -lt "''${MIN_THRESHOLD_KIB}" ]; then
|
||||
echo "Have ''${AVAILABLE_KIB} KiB, but want ''${MIN_THRESHOLD_KIB} KiB."
|
||||
echo "Triggering Nix garbage collection up to ''${MAX_FREED_BYTES} bytes."
|
||||
set -x
|
||||
${config.nix.package}/bin/nix-collect-garbage \
|
||||
--delete-older-than "''${GEN_THRESHOLD}" \
|
||||
--max-freed "''${MAX_FREED_BYTES}"
|
||||
else
|
||||
echo "Skipping GC, enough space available"
|
||||
fi
|
||||
'';
|
||||
in
|
||||
{
|
||||
options.services.depot.automatic-gc = {
|
||||
enable = lib.mkEnableOption description;
|
||||
|
||||
interval = lib.mkOption {
|
||||
type = lib.types.str;
|
||||
example = "1h";
|
||||
description = ''
|
||||
Interval between garbage collection runs, specified in
|
||||
systemd.time(7) format.
|
||||
'';
|
||||
};
|
||||
|
||||
diskThreshold = lib.mkOption {
|
||||
type = lib.types.int;
|
||||
example = "100";
|
||||
description = ''
|
||||
Minimum amount of space that needs to be available (in GiB) on
|
||||
the partition holding /nix. Garbage collection is triggered if
|
||||
it falls below this.
|
||||
'';
|
||||
};
|
||||
|
||||
maxFreed = lib.mkOption {
|
||||
type = lib.types.int;
|
||||
example = "420";
|
||||
description = ''
|
||||
Maximum amount of space to free in a single GC run, in GiB.
|
||||
'';
|
||||
};
|
||||
|
||||
preserveGenerations = lib.mkOption {
|
||||
type = lib.types.str;
|
||||
default = "90d";
|
||||
description = ''
|
||||
Preserve NixOS generations younger than the specified value,
|
||||
in the format expected by nix-collect-garbage(1).
|
||||
'';
|
||||
};
|
||||
};
|
||||
|
||||
config = lib.mkIf cfg.enable {
|
||||
systemd.services.automatic-gc = {
|
||||
inherit description;
|
||||
script = "${gcScript}";
|
||||
serviceConfig.Type = "oneshot";
|
||||
};
|
||||
|
||||
systemd.timers.automatic-gc = {
|
||||
inherit description;
|
||||
requisite = [ "nix-daemon.service" ];
|
||||
wantedBy = [ "multi-user.target" ];
|
||||
|
||||
timerConfig = {
|
||||
OnActiveSec = "1";
|
||||
OnUnitActiveSec = cfg.interval;
|
||||
};
|
||||
};
|
||||
};
|
||||
}
|
||||
|
|
@ -1,14 +0,0 @@
|
|||
{ depot, ... }:
|
||||
|
||||
# Default set of modules that are imported in all Depot nixos systems
|
||||
#
|
||||
# All modules here should be properly gated behind a `lib.mkEnableOption` with a
|
||||
# `lib.mkIf` for the config.
|
||||
|
||||
{
|
||||
imports = [
|
||||
./automatic-gc.nix
|
||||
./auto-deploy.nix
|
||||
./raito-vm.nix
|
||||
];
|
||||
}
|
||||
|
|
@ -1,76 +0,0 @@
|
|||
{ lib, config, ... }:
|
||||
let
|
||||
cfg = config.infra.hardware.raito-vm;
|
||||
inherit (lib) mkEnableOption mkIf mkOption types;
|
||||
in
|
||||
{
|
||||
options.infra.hardware.raito-vm = {
|
||||
enable = mkEnableOption "Raito's VM hardware defaults";
|
||||
|
||||
networking = {
|
||||
nat64.enable = mkEnableOption "the setup of NAT64 rules to the local NAT64 node";
|
||||
|
||||
wan = {
|
||||
address = mkOption {
|
||||
type = types.str;
|
||||
description = "IPv6 prefix for WAN. Ask Raito when in doubt.";
|
||||
};
|
||||
mac = mkOption {
|
||||
type = types.str;
|
||||
description = "MAC address for the WAN interface.";
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
config = mkIf cfg.enable {
|
||||
services.qemuGuest.enable = true;
|
||||
systemd.network.enable = true;
|
||||
networking.useDHCP = lib.mkDefault false;
|
||||
|
||||
systemd.network.networks."10-wan" = {
|
||||
matchConfig.Name = "wan";
|
||||
linkConfig.RequiredForOnline = true;
|
||||
networkConfig.Address = [ cfg.networking.wan.address ];
|
||||
|
||||
routes = mkIf cfg.networking.nat64.enable [
|
||||
{
|
||||
Destination = "64:ff9b::/96";
|
||||
Gateway = "2001:bc8:38ee:100::100";
|
||||
Scope = "site";
|
||||
}
|
||||
];
|
||||
|
||||
# Enable DNS64 resolvers from Google, I'm too lazy.
|
||||
dns = mkIf cfg.networking.nat64.enable [ "2001:4860:4860::6464" "2001:4860:4860::64" ];
|
||||
};
|
||||
|
||||
systemd.network.links."10-wan" = {
|
||||
matchConfig.MACAddress = cfg.networking.wan.mac;
|
||||
linkConfig.Name = "wan";
|
||||
};
|
||||
|
||||
boot.loader.systemd-boot.enable = true;
|
||||
|
||||
boot.initrd.kernelModules = [
|
||||
"virtio_balloon"
|
||||
"virtio_console"
|
||||
"virtio_rng"
|
||||
];
|
||||
|
||||
boot.initrd.availableKernelModules = [
|
||||
"9p"
|
||||
"9pnet_virtio"
|
||||
"ata_piix"
|
||||
"nvme"
|
||||
"sr_mod"
|
||||
"uhci_hcd"
|
||||
"virtio_blk"
|
||||
"virtio_mmio"
|
||||
"virtio_net"
|
||||
"virtio_pci"
|
||||
"virtio_scsi"
|
||||
"xhci_pci"
|
||||
];
|
||||
};
|
||||
}
|
||||
1
third_party/default.nix
vendored
1
third_party/default.nix
vendored
|
|
@ -35,7 +35,6 @@
|
|||
inherit specialArgs system;
|
||||
modules = [
|
||||
configuration
|
||||
(import (depot.path.origSrc + "/ops/modules/default-imports.nix"))
|
||||
];
|
||||
};
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue