Commit Graph

210 Commits

Author SHA1 Message Date
a48df5b993 Add package function-schema and module-schema. Add check for module jsonschema.
All checks were successful
checks / checks (pull_request) Successful in 49s
checks / checks-impure (pull_request) Successful in 2m4s
2024-05-01 23:16:17 +02:00
c681cc0998 clanCore: remove repl-flake as it is now stable
All checks were successful
checks / checks (pull_request) Successful in 6m10s
checks / checks-impure (pull_request) Successful in 1m57s
2024-04-27 16:28:23 +02:00
3c02453705 installer: fix qr code again
All checks were successful
checks / checks-impure (pull_request) Successful in 2m5s
checks / checks (pull_request) Successful in 4m38s
2024-04-22 21:04:41 +02:00
4ae5b24d24 installer: make qrcode compatible with nixos-images
All checks were successful
checks / checks (pull_request) Successful in 1m41s
checks / checks-impure (pull_request) Successful in 1m47s
2024-04-22 20:49:35 +02:00
4964415d34 facts password-store: take path from variable
All checks were successful
checks / checks (pull_request) Successful in 4m22s
checks / checks-impure (pull_request) Successful in 1m47s
2024-04-21 19:09:46 +02:00
8658e1694a rework multicast support
All checks were successful
checks / checks-impure (pull_request) Successful in 2m3s
checks / checks (pull_request) Successful in 5m39s
2024-04-17 10:57:17 +02:00
26c71d9720 installer: add zstd compression 2024-04-12 14:00:25 +00:00
088e0d3eee fix installer 2024-04-12 14:00:25 +00:00
6958da2d57 sops/compat: fix name reference
All checks were successful
checks / check-links (pull_request) Successful in 14s
checks / checks-impure (pull_request) Successful in 1m51s
checks / checks (pull_request) Successful in 3m42s
2024-04-12 13:23:52 +02:00
58446db110 sops: fix secret path generation
All checks were successful
checks / check-links (pull_request) Successful in 14s
checks / checks-impure (pull_request) Successful in 1m53s
checks / checks (pull_request) Successful in 3m46s
2024-04-12 13:12:31 +02:00
82aafc287e also enable LLMNR 2024-04-10 15:14:30 +00:00
0d4e1f870b factstore: secret backends now can return the path to a secret dynamically
try to move path function out
2024-04-10 15:14:30 +00:00
faaf6649c5 fix multicast dns for ethernet 2024-04-10 15:14:30 +00:00
a8718b92d4 enable multicast fore default dhcp network 2024-04-09 13:35:51 +00:00
19a62817f2 sops: strip out clanCore.machineName instead of networking.hostName
All checks were successful
checks / check-links (pull_request) Successful in 14s
checks / checks-impure (pull_request) Successful in 1m54s
checks / checks (pull_request) Successful in 3m50s
2024-04-09 15:10:27 +02:00
e8ebfb2e2a drop custom systemd-networkd unit
All checks were successful
checks / check-links (pull_request) Successful in 14s
checks / checks-impure (pull_request) Successful in 1m49s
checks / checks (pull_request) Successful in 5m21s
We no longer use multicast dns. This one doesn't
conflict with nixos-generate-config.
2024-04-09 12:31:57 +02:00
1e0d73e8a9 Improve documentation
All checks were successful
checks / check-links (pull_request) Successful in 14s
checks / checks-impure (pull_request) Successful in 1m53s
checks / checks (pull_request) Successful in 4m34s
2024-04-07 21:07:02 +02:00
4faba7c8e1 template: Reverted systemd-boot in installer. EF02 partition on wrong second place
Some checks failed
checks / check-links (pull_request) Successful in 14s
checks / checks-impure (pull_request) Successful in 1m53s
checks / checks (pull_request) Failing after 4m36s
2024-04-07 17:09:44 +02:00
5b838c0d9c sops: fix decrypte path on machine 2024-04-02 13:50:24 +02:00
e0bdf1ce39 docs: render module options docs
All checks were successful
checks / check-links (pull_request) Successful in 14s
checks / checks (pull_request) Successful in 3m46s
checks / checks-impure (pull_request) Successful in 1m49s
fix errors while rendering some modules
2024-03-31 00:26:08 +07:00
72cc85cd2f secrets: improve description of generator script
All checks were successful
checks / checks (pull_request) Successful in 3m33s
checks / check-links (pull_request) Successful in 14s
checks / checks-impure (pull_request) Successful in 1m45s
2024-03-30 17:16:26 +07:00
65d116ec28 migrate secrets to new api
All checks were successful
checks / check-links (pull_request) Successful in 14s
checks / checks-impure (pull_request) Successful in 1m48s
checks / checks (pull_request) Successful in 3m35s
2024-03-28 11:02:14 +01:00
a8d35d37e7 refactor clanCore.secrets -> clanCore.facts
All checks were successful
checks / check-links (pull_request) Successful in 14s
checks / checks-impure (pull_request) Successful in 1m49s
checks / checks (pull_request) Successful in 3m33s
2024-03-27 16:03:16 +01:00
3771be2110 checks: add check for rendering docs
All checks were successful
checks / check-links (pull_request) Successful in 15s
checks / checks-impure (pull_request) Successful in 1m52s
checks / checks (pull_request) Successful in 3m32s
2024-03-27 16:59:42 +07:00
4b8b1107ba clanCore/packages.nix: add gitMinimal
All checks were successful
checks / check-links (pull_request) Successful in 13s
checks / checks-impure (pull_request) Successful in 1m56s
checks / checks (pull_request) Successful in 4m53s
WIthout this, deployment via `clan machines update` will fail on the remote machine if the flake.nix has a git input
2024-03-25 11:47:32 +07:00
f16667e25a refactor secrets & facts -> secret_facts & public_facts
All checks were successful
checks / check-links (pull_request) Successful in 14s
checks / checks (pull_request) Successful in 33s
checks / checks-impure (pull_request) Successful in 1m49s
2024-03-23 05:46:54 +01:00
539df08706 backups: skip preRestore and postRestore if not specified by a service 2024-03-20 09:32:01 +01:00
92ac151292 rework backup interface to no longer need to list backups to restore them 2024-03-20 09:32:01 +01:00
e296a3019d re-format with nixfmt
All checks were successful
checks / check-links (pull_request) Successful in 21s
checks / checks-impure (pull_request) Successful in 1m50s
checks / checks (pull_request) Successful in 4m23s
2024-03-17 19:48:49 +01:00
77c0e6b31a make installer nixos module stand-alone
All checks were successful
checks / check-links (pull_request) Successful in 21s
checks / checks-impure (pull_request) Successful in 1m49s
checks / checks (pull_request) Successful in 3m37s
2024-03-17 19:38:50 +01:00
2dcdcd98e9 installer: also match qemu and serial consoles for prompting qrcode
All checks were successful
checks / check-links (pull_request) Successful in 21s
checks / checks-impure (pull_request) Successful in 1m54s
checks / checks (pull_request) Successful in 4m24s
2024-03-17 19:14:24 +01:00
a6c3e15aca don't use impure builtins.storePath 2024-03-17 18:10:23 +01:00
377302ff6c change facts path to be reachable as a store path 2024-03-17 18:10:23 +01:00
a6d52a669d fix openssh secrets
All checks were successful
checks / check-links (pull_request) Successful in 20s
checks / checks-impure (pull_request) Successful in 1m52s
checks / checks (pull_request) Successful in 3m55s
change facts path to be the full path

sshd: fixup store path
2024-03-13 14:59:46 +01:00
c2e43a4e65 allow fact-only secrets 2024-03-13 11:08:36 +01:00
5d5f504013 enable: spice-vdagent if xserver is enable 2024-03-12 16:00:54 +00:00
dd73406a92 installer: switch to systemd-boot
grub is not able to boot from the disks that we flash for weird reasons.
Since BIOS-boot is on life-support, we may as well just use systemd-boot.
2024-03-07 14:13:11 +01:00
0481746198 drop meshnamed from repository
All checks were successful
checks / check-links (pull_request) Successful in 21s
checks / checks-impure (pull_request) Successful in 1m55s
checks / checks (pull_request) Successful in 2m47s
It's not super useful and we can always add it back later if we need it.
2024-03-06 10:02:21 +01:00
603893872e secrets: fix typo
All checks were successful
checks / check-links (pull_request) Successful in 22s
checks / checks-impure (pull_request) Successful in 1m52s
checks / checks (pull_request) Successful in 2m22s
2024-03-05 11:59:55 +01:00
a1dcddf9b4 clan-cli: add interactive secrets/fact generation 2024-03-03 04:06:18 +01:00
f500aee786 clanCore secrets: rename toplevel secret to service 2024-03-02 11:43:20 +01:00
4cfd580447 outputs: pass secretsData directly 2024-03-02 11:43:20 +01:00
57e9b27ff8 add option to set defaultGroups for secrets 2024-02-16 17:26:20 +01:00
6871b29d15 vms: use vm fact/secret-store
All checks were successful
checks-impure / test (pull_request) Successful in 1m56s
checks / test (pull_request) Successful in 2m17s
2024-02-15 10:41:25 +01:00
98139ac48d add factsStore modules 2024-02-15 10:41:25 +01:00
7cab50c088 optimize filesystem mount flags
All checks were successful
checks-impure / test (pull_request) Successful in 2m8s
checks / test (pull_request) Successful in 2m41s
perf!
2024-02-14 13:01:47 +01:00
7a3fcd3deb vms: enable sysusers
All checks were successful
checks-impure / test (pull_request) Successful in 1m49s
checks / test (pull_request) Successful in 2m17s
2024-02-13 14:14:54 +01:00
952f976ea7 fix virtiofsd in CIs
All checks were successful
checks-impure / test (pull_request) Successful in 1m41s
checks / test (pull_request) Successful in 2m40s
2024-02-13 13:57:52 +01:00
11ac50c17b format rootfs in vm itself 2024-02-13 11:45:42 +01:00
07caab537f drop unused mounts 2024-02-13 11:45:42 +01:00