In order to run this the secrets needs to be sourced, e.g.: eval $(age --decrypt -i ~/.ssh/id_ed25519 $(git rev-parse --show-toplevel)/ops/secrets/tf-buildkite.age) Change-Id: I9f6a02c0dac22f584181635861ddbb06cf849f14 Reviewed-on: https://cl.tvl.fyi/c/depot/+/5838 Tested-by: BuildkiteCI Reviewed-by: sterni <sternenseemann@systemli.org> Reviewed-by: tazjin <tazjin@tvl.su>
		
			
				
	
	
		
			32 lines
		
	
	
	
		
			855 B
		
	
	
	
		
			Nix
		
	
	
	
	
	
			
		
		
	
	
			32 lines
		
	
	
	
		
			855 B
		
	
	
	
		
			Nix
		
	
	
	
	
	
| # Shell derivation to invoke //nix/lazy-deps with the dependencies
 | |
| # that should be lazily made available in depot.
 | |
| { pkgs, depot, ... }:
 | |
| 
 | |
| depot.nix.lazy-deps {
 | |
|   age-keygen.attr = "third_party.nixpkgs.age";
 | |
|   age.attr = "third_party.nixpkgs.age";
 | |
|   depotfmt.attr = "tools.depotfmt";
 | |
|   gerrit-update.attr = "tools.gerrit-update";
 | |
|   gerrit.attr = "tools.gerrit-cli";
 | |
|   hash-password.attr = "tools.hash-password";
 | |
|   mg.attr = "tools.magrathea";
 | |
|   nint.attr = "nix.nint";
 | |
|   niv.attr = "third_party.nixpkgs.niv";
 | |
|   rebuild-system.attr = "ops.nixos.rebuild-system";
 | |
|   rink.attr = "third_party.nixpkgs.rink";
 | |
| 
 | |
|   tf-buildkite = {
 | |
|     attr = "ops.buildkite.terraform";
 | |
|     cmd = "terraform";
 | |
|   };
 | |
| 
 | |
|   tf-glesys = {
 | |
|     attr = "ops.glesys.terraform";
 | |
|     cmd = "terraform";
 | |
|   };
 | |
| 
 | |
|   tf-keycloak = {
 | |
|     attr = "ops.keycloak.terraform";
 | |
|     cmd = "terraform";
 | |
|   };
 | |
| }
 |