| Age | Commit message (Collapse) | Author |
|---|
|
* .guix/guix-na/config/balg02.scm: Extended %cuirass-specs, adding this channel itself as a
cuirass specification. This allows for change to this configuration
channel (guix-north-america) to be validated before deployment. Further, it could be extended
to build operating-system images for balg02 and any other machines, and even running tests on
them to ensure they will deploy and function as expected.
|
|
* .guix/guix-na/config/balg02.scm: In response to feedback from
Ludo (https://lists.gnu.org/archive/html/guix-devel/2024-07/msg00073.html), adjust
guix-daemon configuration to use only local substitutes. This is at a cost of extra build
time on balg02, but will allow for more build diversity among guix substitute servers.
|
|
|
|
* .guix/guix-na/config/balg02.scm (guix-daemon-config): New function.
(balg02): Modify guix-daemon service to enable build parallelism, and using substitutes from
the local build server if available.
|
|
- https was initially disabled as nginx failed to start due to a missing certificate
- Worth noting that dhparam's were manually generated on balg02
|
|
|
|
|
|
|
|
* .guix/guix-na/config/balg02.scm (%automation-user): Removed variable (only used in one place).
(%cuirass-specs): New variable. (Initial) Cuirass specifications that are run by the guix-na build farm.
(publish-robots.txt): New variable. Used in nginx configuration.
(publish-locations): New function. Defines nginx publish locations (used for http and https servers).
(balg02-locations): New function. Defines nginx publish locations used for guix-na.
(%publish-url): New variable. String representing local publish URL.
(%tls-settings): New variable. Captures nginx tls settings used in nginx configuration.
(le): New function. Generates lets encrypt path given a host and optionally a private key.
(languages-to-accept): New variable. Languages for i8ln.
(accept-languages): New function.
(%balg02-servers): New variable. balg02 nginx servers.
(%extra-content): New variable. Extra nginx configuration content.
(%nginx-configuration): New variable. Capture nginx configuration given all previous helper
functions and variables.
(%nginx-cache-activation): New variable. Service the ensures /var/cache/nginx exists on the
first run.
(%nginx-deploy-hook): New variable. Hook used upon cerbot certificate updates.
(balg02 (packages)): Add btrfs-progs.
(balg02): Remove root ssh key (not necessary as ssh root login is disabled).
(balg02 (services)): Add cuirass, certbot, nginx, and guix-publish services.
|
|
* .guix/guix-na/config/balg02.scm: New ssh key for arun
* .pubkeys/arun-ed25519.pub: New file: Arun's ssh public key
|
|
|
|
|
|
|
|
* .guix/guix-na/config/balg02.scm: This is in response to feedback provided by Pjotr and
Arun.
|
|
* .guix/guix-na/config/balg02.scm: New function: balg02; this is necessary as the efi
partition UUID changes between testing and the deployed system. Additionally, mount the efi
partition.
Its useful to note that when testing, I found a bug in guix that resulting in a partial
system upgrade! Namely, grub/kernel stuff appears to have been updated, but the `guix system
reconfigure ...` never completed. This was because the efi system partition was not mounted.
However the odd part was that even if I manually mounted the efi partition and retried `guix
system reconfigure ..` the command update would still hang. I suspect this is because for
some reason the efi system partition must be explicitly specified in the operating-system configuration.
|
|
* .guix/guix-na/config/balg02.scm: Remove export of temporary balg02 function
|
|
* .guix/guix-na/config/balg02.scm: Correct the above mistake.
|
|
* .guix/guix-na/config/balg02.scm (guix-na): Add function balg02 which parameterized the disk
that the bootloader (grub) is installed to. This enables testing in a vm where the disk may
not match what is used on the physical server.
|
|
* .guix/guix-na/config/balg02.scm: Move swap-devices to be after file-systems (file-systems
is referenced from within swap-devices). Other changes are just noop reformatting.
|
|
* .gitignore: Ignore files used by 'guix deploy'
* .guix/guix-na/config/balg02.scm: Initial balg02 guix configuration (sans cuirass)
* .pubkeys/collin.pub: Public key of Collin Doering
* .pubkeys/deploy-key.pub: Public key used for 'guix deploy' usage
* README.org: Various updates to how balg02 (guix-north-america) is setup
|
