about summary refs log tree commit diff
AgeCommit message (Collapse)Author
2025-11-02channels.scm: Update guix channel HEAD masterCollin J. Doering
2025-09-11docs/administration.org: Add build stepCollin J. Doering
On occasion, things will not build locally, so its sometimes useful to build to see what fails before reconfigure-ing the system.
2025-09-11balg02: Add shepherd timers for guix gc, btrfs balance & scrubCollin J. Doering
2025-09-11balg02: Add and setup fail2ban serviceCollin J. Doering
2025-09-11balg02: Adjust guix-daemon to use /tmp (tmpfs) vs /var/tmp (btrfs)Collin J. Doering
2025-09-11channels.scm: Update guix channelCollin J. Doering
2025-09-07balg02: Add grub menuentry for easy access to 'Debian Rescue' systemCollin J. Doering
2025-09-07balg02: Increase file limits for guix-build usersCollin J. Doering
2025-09-07balg02: Do not use ourselves as a substitute serverCollin J. Doering
2025-09-07balg02: Add curl to system profileCollin J. Doering
2025-09-07balg02: Add memtest86+ grub menuentryCollin J. Doering
2025-09-07balg02: noop change; rename %anonip-log-files to %anonip-nginx-log-filesCollin J. Doering
2025-09-07docs: Correct typosCollin J. Doering
2025-09-07balg02: Move ssh keys; add new keys for collinCollin J. Doering
2025-07-24channels.scm: Update guix channelCollin J. Doering
2025-02-14channels.scm: Update guix channelCollin J. Doering
2025-01-24balg02: Removed unused variablesCollin J. Doering
2025-01-01channels.scm: Update guix channel; explicitly specify postgres versionCollin J. Doering
2024-12-19balg02: Move guix-publish cache onto raid1 storageCollin J. Doering
* .guix/guix-na/config/balg02.scm: Adjust balg02 function to use #:key for arguments (to improve human readability at call sites). (balg02): Add mapped-devices field and additional file-system to returned operating system to enable support for the mdadm raid1 that has been setup manually. Adjust guix-publish cache to use /var/data/.
2024-12-09balg02: Correct typo/sCollin J. Doering
* .guix/guix-na/config/balg02.scm: In my tired state, ttl was set on cuirass instead of the guix-publish service! * docs/administration.org: Correct copy/paste error
2024-12-06balg02: Temporarily remove cache-bypass-threshold until guix has been updatedCollin J. Doering
2024-12-06docs/administration.org: Correct typo, and use guix-shell for curlCollin J. Doering
2024-12-06balg02: Correct missing MiB reference in previous commit - a24f14cCollin J. Doering
2024-12-06balg02: Set guix-publish ttl and cache-bypass-thresholdCollin J. Doering
* .guix/guix-na/config/balg02.scm: Prior to this change, the guix-publish cache has been filling up without having items removed. The reason being that the ttl was not set! Additionally, avoid caching items that are less then 150MiB.
2024-11-09channels.scm: Update guix channelCollin J. Doering
2024-11-08channels.scm: Update guix channelCollin J. Doering
2024-11-07balg02: Bypass failing tests in coreutils on btrfsCollin J. Doering
* .guix/guix-na/config/balg02.scm: Add tmpfs based /tmp file-system. This bypasses the issue seen on cuiass.genenetwork.org, where the 'tests/cp/reflink-auto.sh' coreutils test was failing, but not on other build farms or on my personal systems. Further root cause analysis needs to take place, however btrfs' concept of subvolumes may be interfering with the test. A partition outside of where the build is happening is located and selected by coreutils ('coreutils/tests/other-fs-tmpdir'); which ends up selecting '/tmp'. guix-daemon builds occur in /tmp. Because of this, the 'cp --reflink=auto ..' in the failing coreutils test doesn't behave as expected, which in this case would be failing to create the reflink because the files are expected to be on separate partitions. By using a tmpfs /tmp, coreutils will select it during tests, and we can ensure guix-daemon uses a build location other then /tmp (necessitating the following change). (guix-daemon-config): Use /var/tmp for guix-daemon builds (so they are not built on tmpfs)
2024-11-07Adjust git.rekahsoft.ca references to new home: git.genenetwork.orgCollin J. Doering
2024-09-27channels.scm: Update guix channelCollin J. Doering
2024-09-27Update documentationCollin J. Doering
* README.org: Add new README that details how to use cuirass.genenetwork.org, and provides links to other reference documents. * docs/administration.org: Add a new, initially sparse, reference document detailing administration and maintenance of cuirass.genenetwork.org. * docs/initial-setup.org: Adjust abstract phrasing.
2024-07-22Rename/move README.org to docs folder (docs/initial-setup.org)Collin J. Doering
2024-07-22balg02: Add guix-north-america as a cuirass channel specCollin J. Doering
* .guix/guix-na/config/balg02.scm: Extended %cuirass-specs, adding this channel itself as a cuirass specification. This allows for change to this configuration channel (guix-north-america) to be validated before deployment. Further, it could be extended to build operating-system images for balg02 and any other machines, and even running tests on them to ensure they will deploy and function as expected.
2024-07-22balg02: Adjust guix-daemon configuration; only use local substitutesCollin J. Doering
* .guix/guix-na/config/balg02.scm: In response to feedback from Ludo (https://lists.gnu.org/archive/html/guix-devel/2024-07/msg00073.html), adjust guix-daemon configuration to use only local substitutes. This is at a cost of extra build time on balg02, but will allow for more build diversity among guix substitute servers.
2024-07-22Add rekahsoft-ed25519 keyCollin J. Doering
2024-06-30balg02: Use AnonIP service for nginx access log filesCollin J. Doering
2024-06-04cuirass.genenetwork.org.pub: Add guix-daemon signing keyCollin J. Doering
2024-06-04balg02: Configure guix-deamon to build in parallelCollin J. Doering
* .guix/guix-na/config/balg02.scm (guix-daemon-config): New function. (balg02): Modify guix-daemon service to enable build parallelism, and using substitutes from the local build server if available.
2024-05-31balg02: Re-enable https (that was disabled in 4230616)Collin J. Doering
- https was initially disabled as nginx failed to start due to a missing certificate - Worth noting that dhparam's were manually generated on balg02
2024-05-31balg02: Send nginx logs to /var/run/nginx/...Collin J. Doering
2024-05-31balg02: Temporarily disable https until letsencrypt certs can be generatedCollin J. Doering
2024-05-31balg02: Correct typosCollin J. Doering
2024-05-31balg02: Initial implementation of Guix build farmCollin J. Doering
* .guix/guix-na/config/balg02.scm (%automation-user): Removed variable (only used in one place). (%cuirass-specs): New variable. (Initial) Cuirass specifications that are run by the guix-na build farm. (publish-robots.txt): New variable. Used in nginx configuration. (publish-locations): New function. Defines nginx publish locations (used for http and https servers). (balg02-locations): New function. Defines nginx publish locations used for guix-na. (%publish-url): New variable. String representing local publish URL. (%tls-settings): New variable. Captures nginx tls settings used in nginx configuration. (le): New function. Generates lets encrypt path given a host and optionally a private key. (languages-to-accept): New variable. Languages for i8ln. (accept-languages): New function. (%balg02-servers): New variable. balg02 nginx servers. (%extra-content): New variable. Extra nginx configuration content. (%nginx-configuration): New variable. Capture nginx configuration given all previous helper functions and variables. (%nginx-cache-activation): New variable. Service the ensures /var/cache/nginx exists on the first run. (%nginx-deploy-hook): New variable. Hook used upon cerbot certificate updates. (balg02 (packages)): Add btrfs-progs. (balg02): Remove root ssh key (not necessary as ssh root login is disabled). (balg02 (services)): Add cuirass, certbot, nginx, and guix-publish services.
2024-05-27balg02: Add additional ssh key for user arunCollin J. Doering
* .guix/guix-na/config/balg02.scm: New ssh key for arun * .pubkeys/arun-ed25519.pub: New file: Arun's ssh public key
2024-05-27balg02: Add new users, and ssh keys for Arun and PjotrCollin J. Doering
2024-05-25channels.scm: Update guix channelCollin J. Doering
2024-05-25README.org: Adjust how swapfile should be provisionedCollin J. Doering
2024-05-25balg02: Add megaraid_sas to initrd-modulesCollin J. Doering
2024-04-12README.org: Correct typo (refer to the correct installation disk)Collin J. Doering
* README.org: It was discovered that the wrong disk was referenced in the README! Its worth noting that this documentation error does not impact the configuration of balg02, as it doesn't directly reference the disk its being installed to, but instead references where /boot/efi is located (which is setup as part preparing for the guix installation by mounting guix's esp partition to /mnt/boot/efi) as well as references to partitions by label. Also noteworthy is that this documentation error does not impact the Manual Testing of bootstrapping Guix from a Debian VM, which still quiet closely mimics balg02.
2024-04-10balg02: Disable root logins over sshCollin J. Doering
2024-04-10channels.scm: Update guix channelCollin J. Doering