darkkirb/nixos-config
1
0
Fork 0
Code Issues 1 Pull requests 2 Projects Releases Packages Wiki Activity Actions

add remote-build as trusted user
All checks were successful
Hydra nixosConfigurations.container-default-x86_64-linux Hydra build #23616 of nixos-config:pr618:nixosConfigurations.container-default-x86_64-linux
Details
Hydra nixosConfigurations.container-default-aarch64-linux Hydra build #23614 of nixos-config:pr618:nixosConfigurations.container-default-aarch64-linux
Details
Hydra devShells.x86_64-linux.default Hydra build #23613 of nixos-config:pr618:devShells.x86_64-linux.default
Details
Hydra checks.x86_64-linux.containers-default Hydra build #23612 of nixos-config:pr618:checks.x86_64-linux.containers-default
Details
Hydra nixosConfigurations.container-default-riscv64-linux Hydra build #23615 of nixos-config:pr618:nixosConfigurations.container-default-riscv64-linux
Details
Hydra nixosConfigurations.not522 Hydra build #23617 of nixos-config:pr618:nixosConfigurations.not522
Details
Hydra nixosConfigurations.not522-installer Hydra build #23618 of nixos-config:pr618:nixosConfigurations.not522-installer
Details

Browse source
This commit is contained in:
Charlotte 🦝 Delenk 2024-11-04 13:37:51 +01:00
parent 8ff5390104
commit 9440ee12f8
1 changed files with 17 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

27
modules/hydra/build-server.nix
View file

@ -5,15 +5,22 @@
}:
with lib; {
options.hydra.buildServer.enable = mkEnableOption "Make this device a build server";
config.hydra.buildServer.enable = let
buildServers = import ./build-server-list.nix;
in
mkDefault (any (t: t == config.networking.hostName) buildServers);
config.users.users.remote-build = mkIf config.hydra.buildServer.enable {
description = "Remote builder";
isNormalUser = true;
openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINN5Q/L2FyB3DIgdJRYnTGHW3naw5VQ9coOdwHYmv0aZ darkkirb@thinkrac"
];
imports = [
{
config.hydra.buildServer.enable = let
buildServers = import ./build-server-list.nix;
in
mkDefault (any (t: t == config.networking.hostName) buildServers);
}
];
config = mkIf config.hydra.buildServer.enable {
users.users.remote-build = {
description = "Remote builder";
isNormalUser = true;
openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINN5Q/L2FyB3DIgdJRYnTGHW3naw5VQ9coOdwHYmv0aZ darkkirb@thinkrac"
];
};
nix.settings.trusted-users = ["remote-build"];
};
}