about summary refs log tree commit diff
AgeCommit message (Collapse)AuthorFilesLines
2020-07-03 r/1192 feat(gs/system): Add public keys for whitbyGriffin Smith1-1/+2
Change-Id: I138ccbd7da9849025f1f59dfe948cfb7a5684b6d Reviewed-on: https://cl.tvl.fyi/c/depot/+/896 Reviewed-by: BuildkiteCI Reviewed-by: glittershark <grfn@gws.fyi> Tested-by: BuildkiteCI
2020-07-03 r/1191 feat(gs/emacs): Update hie invocation for depotGriffin Smith1-12/+15
Update the invocation of the hie.sh script as part of +grfn/haskell-mode-setup to be compatible with the new depot-integrated xanthous. Change-Id: Ia3ef50fb08464a533efdfed4da66e2be00446ea6 Reviewed-on: https://cl.tvl.fyi/c/depot/+/891 Tested-by: BuildkiteCI Reviewed-by: glittershark <grfn@gws.fyi> Reviewed-by: BuildkiteCI
2020-07-03 r/1190 feat(ci-builds): re-add xanthousGriffin Smith1-0/+1
This reverts commit 2249be39ed4d869ca602b353372f8d9066f0be28. Build should pass now that it's all been properly integrated into the nix tree. Change-Id: If2bfa642302368ac24d06ff7d853c0eda76811a7 Reviewed-on: https://cl.tvl.fyi/c/depot/+/742 Reviewed-by: lukegb <lukegb@tvl.fyi> Reviewed-by: BuildkiteCI Reviewed-by: Profpatsch <mail@profpatsch.de> Reviewed-by: Kane York <rikingcoding@gmail.com> Tested-by: BuildkiteCI
2020-07-03 r/1189 refactor(xan): Simplify build infrastructureGriffin Smith5-71/+42
Simplify the build infrastructure for creating shells etc. for xanthous, including relying more heavily on stuff exposed in Depot anyway, using shellFor in the shell.nix, and using the haskell.nix branch of all-hies for a significantly simpler build. At some point the all-hies stuff will likely want to be promoted up to //third_party, but for now it's experimental enough that I don't want to bother other people with it. Change-Id: I43830de73830fdc07d48af9b87d7930f59599532 Reviewed-on: https://cl.tvl.fyi/c/depot/+/890 Tested-by: BuildkiteCI Reviewed-by: glittershark <grfn@gws.fyi> Reviewed-by: BuildkiteCI
2020-07-03 r/1188 fix(xan): Remove unused importsGriffin Smith4-12/+2
GHC 8.8 is better at detecting unused imports, it seems - all of these are new warnings that fail under -Werror Change-Id: I1357094d715483612deb0db4a75b3e4f8f27d2e3 Reviewed-on: https://cl.tvl.fyi/c/depot/+/889 Reviewed-by: glittershark <grfn@gws.fyi> Reviewed-by: BuildkiteCI Tested-by: BuildkiteCI
2020-07-03 r/1187 fix(xan): fix compat with new base+ghcGriffin Smith6-4/+6
A couple of changes necessary to get things working with both ghc 8.8.3 and the new base: - Explicitly import fail from Control.Monad.Fail in the prelude, since it's there instead of the base prelude now - GHC no longer allows type family equality constraints in quantified constraints - which is a bummer - but is avoidable in the one case where it was happening - Explicitly import a constructor from Data.List.NonEmpty Change-Id: Ia06fc724ddc2d6a3f9024c047ed55eea40bcf408 Reviewed-on: https://cl.tvl.fyi/c/depot/+/744 Tested-by: BuildkiteCI Reviewed-by: BuildkiteCI Reviewed-by: Profpatsch <mail@profpatsch.de>
2020-07-03 r/1186 fix(xanthous): re-add comonad-extras depGriffin Smith1-0/+1
Change-Id: Ie148acf179e3aae304410a588c87ee83e04aafa7 Reviewed-on: https://cl.tvl.fyi/c/depot/+/741 Reviewed-by: BuildkiteCI Reviewed-by: Kane York <rikingcoding@gmail.com> Tested-by: BuildkiteCI
2020-07-03 r/1185 feat(whitby): Enable nix.sshServeVincent Ambo1-3/+9
This exposes a binary cache over SSH. Change-Id: Ib934a118cd7315ef76f3dfe795c76a570fbbc47a Reviewed-on: https://cl.tvl.fyi/c/depot/+/895 Reviewed-by: glittershark <grfn@gws.fyi> Reviewed-by: BuildkiteCI Tested-by: BuildkiteCI
2020-07-03 r/1184 chore(xan): Gitignore data directoryGriffin Smith1-0/+1
I'm using this dir to store save files that are particularly interesting, eg bug reproductions etc. Change-Id: Id6a805d85b3ea2e1171ea3af96303f05c2468070 Reviewed-on: https://cl.tvl.fyi/c/depot/+/893 Reviewed-by: glittershark <grfn@gws.fyi>
2020-07-03 r/1183 fix(gs/emacs): Fix jsonnet-mode map invocationGriffin Smith1-2/+4
Only want to map in normal mode Change-Id: I5034af2a4828c61cd46f68451485a8a90cba7085 Reviewed-on: https://cl.tvl.fyi/c/depot/+/892 Reviewed-by: glittershark <grfn@gws.fyi>
2020-07-03 r/1182 feat(gs/system): Add whitby as a binary cacheGriffin Smith1-8/+12
This appears to be working! which is nice. Change-Id: I06f8d2ff4e9b313073cb76c77a8a9bed0cb52516 Reviewed-on: https://cl.tvl.fyi/c/depot/+/887 Reviewed-by: glittershark <grfn@gws.fyi> Reviewed-by: BuildkiteCI Tested-by: BuildkiteCI
2020-07-03 r/1181 feat(gs:system): steal tazjin's rebuilder scriptGriffin Smith2-1/+37
gonna use this instead of nixos-rebuild switch, in part to get away from global nixpkgs pins. Change-Id: I46e2951660465790adfdf75e6e3413b5c2dfd7c7 Reviewed-on: https://cl.tvl.fyi/c/depot/+/886 Reviewed-by: glittershark <grfn@gws.fyi> Reviewed-by: BuildkiteCI Tested-by: BuildkiteCI
2020-07-02 r/1180 feat(ci-builds): add chupacabraGriffin Smith2-0/+11
My laptop, so I can recompile linux-ck not on my machine Change-Id: Ib42e0440628be6a4d03999220ab2c69b19d6e391 Reviewed-on: https://cl.tvl.fyi/c/depot/+/884 Reviewed-by: BuildkiteCI Reviewed-by: lukegb <lukegb@tvl.fyi> Tested-by: BuildkiteCI
2020-07-02 r/1179 refactor(gs/chupacabra): Vendor urbint configGriffin Smith3-4/+32
If I want to build this on TVL's CI I can't reference ~/code/urb/urbos, obviously, so I'll just vendor it here which is fine Change-Id: I40feb4b29fafae1d3bb0119b7cca1613a4582fdc Reviewed-on: https://cl.tvl.fyi/c/depot/+/885 Tested-by: BuildkiteCI Reviewed-by: glittershark <grfn@gws.fyi> Reviewed-by: BuildkiteCI
2020-07-02 r/1178 feat(gs/system): Configure whitby as a remote builderGriffin Smith1-0/+19
This isn't working, but someday it might Change-Id: Iac20c05b033df3484a7c6908473601bb17c9fcfe Reviewed-on: https://cl.tvl.fyi/c/depot/+/883 Tested-by: BuildkiteCI Reviewed-by: lukegb <lukegb@tvl.fyi> Reviewed-by: BuildkiteCI
2020-07-02 r/1177 refactor: Inline nixos-hardware stuffGriffin Smith1-3/+15
As tazjin pointed out, this is little enough code that pulling it from a global channel is a little silly, so I've just inlined everything. Change-Id: I8750f139a3124135a72737c381215a6e812ce0c3 Reviewed-on: https://cl.tvl.fyi/c/depot/+/882 Tested-by: BuildkiteCI Reviewed-by: lukegb <lukegb@tvl.fyi> Reviewed-by: BuildkiteCI
2020-07-02 r/1176 refactor(gs/chupacabra): Centralize all configGriffin Smith1-0/+31
I previously had some stuff jammed into a hardware-configuration.nix not committed anywhere, which is silly but also prevented building this config as a top-level derivation, so this vendors them all in there Change-Id: Ia76f1d75dcd44aa3e9d86a66c45176afc0946d12 Reviewed-on: https://cl.tvl.fyi/c/depot/+/881 Reviewed-by: BuildkiteCI Reviewed-by: glittershark <grfn@gws.fyi> Tested-by: BuildkiteCI
2020-07-02 r/1175 feat(tazjin): Add SSH key from vauxhallVincent Ambo1-1/+3
Change-Id: Ie897d9e2309f971154ba43e7dce73bb29f4ca9df Reviewed-on: https://cl.tvl.fyi/c/depot/+/858 Reviewed-by: BuildkiteCI Reviewed-by: lukegb <lukegb@tvl.fyi> Tested-by: BuildkiteCI
2020-07-02 r/1174 feat(whitby): Allow wheel users to sudo without a passwordGriffin Smith1-0/+7
This *should* translate to the required invocation to make sudo allow nopasswd for users in the wheel group. Change-Id: I3713862b8df9087cfbaa72d7e824bc43469f7c1c Reviewed-on: https://cl.tvl.fyi/c/depot/+/857 Reviewed-by: BuildkiteCI Reviewed-by: tazjin <mail@tazj.in> Reviewed-by: lukegb <lukegb@tvl.fyi> Tested-by: BuildkiteCI
2020-07-02 r/1173 feat(tvldb): prohibit infinite recursioneta1-2/+19
Change-Id: I63b54e937f4c4fdb823f2e2e91a5a5d8af071a42 Reviewed-on: https://cl.tvl.fyi/c/depot/+/855 Tested-by: BuildkiteCI Reviewed-by: eta <eta@theta.eu.org> Reviewed-by: isomer <isomer@tvl.fyi> Reviewed-by: BuildkiteCI
2020-07-02 r/1172 feat(whitby): Add grfn as a trusted userGriffin Smith1-0/+4
So I can remote builder Change-Id: I8106244d3d197c010b618e4337a9ccfc13a116f8 Reviewed-on: https://cl.tvl.fyi/c/depot/+/856 Reviewed-by: BuildkiteCI Reviewed-by: tazjin <mail@tazj.in> Tested-by: BuildkiteCI
2020-07-02 r/1171 feat(whitby): Run a handful of Buildkite agentsVincent Ambo1-0/+21
This is the point of the machine, afterall. Change-Id: I15c11600c1c18fa8962d57f75f99a72e1553f9c2 Reviewed-on: https://cl.tvl.fyi/c/depot/+/853 Reviewed-by: glittershark <grfn@gws.fyi> Reviewed-by: BuildkiteCI Tested-by: BuildkiteCI
2020-07-02 r/1170 feat(whitby): Enable Nix signing for the binary cacheVincent Ambo1-0/+3
Change-Id: I9047667cc1a40668c0c7da72c070044b91b53014 Reviewed-on: https://cl.tvl.fyi/c/depot/+/852 Reviewed-by: BuildkiteCI Reviewed-by: glittershark <grfn@gws.fyi> Tested-by: BuildkiteCI
2020-07-02 r/1169 fix(whitby): Explicitly set an interface for the v6 default gwVincent Ambo1-1/+5
systemd gets sad otherwise and it is very difficult to console it Change-Id: Ic6405489532c407273e5634474185f2947420b37 Reviewed-on: https://cl.tvl.fyi/c/depot/+/851 Reviewed-by: glittershark <grfn@gws.fyi> Reviewed-by: BuildkiteCI Tested-by: BuildkiteCI
2020-07-02 r/1168 feat(whitby): Add grfnGriffin Smith1-0/+8
it's not glittershark because grfn is the username I have on my laptop and I want to be able to ssh without an `@`. Change-Id: Ie1fb6f5e12f3ac52a44680704179bd27a00a7768 Reviewed-on: https://cl.tvl.fyi/c/depot/+/850 Reviewed-by: BuildkiteCI Reviewed-by: tazjin <mail@tazj.in> Tested-by: BuildkiteCI
2020-07-02 r/1167 feat(users/riking/keys): Add expression with my SSH public keysKane York1-0/+20
Change-Id: I018a5e869e5502fd62f8b8b98b2a61e8fee358ab Reviewed-on: https://cl.tvl.fyi/c/depot/+/854 Reviewed-by: BuildkiteCI Reviewed-by: Kane York <rikingcoding@gmail.com> Tested-by: BuildkiteCI
2020-07-02 r/1166 feat(whitby): add lukegbLuke Granger-Brown2-0/+7
Change-Id: I26356632b86a64519128bc673178f1cd1b55b99b Reviewed-on: https://cl.tvl.fyi/c/depot/+/848 Tested-by: BuildkiteCI Reviewed-by: tazjin <mail@tazj.in> Reviewed-by: BuildkiteCI
2020-07-02 r/1165 chore(users/gs): Add SSH public keyGriffin Smith1-0/+4
I generated a new one for whitby, so it's called whitby because that's the only thing I'm going to be using it for. Change-Id: Ie8ebdb1e58c76e447ee3a3ea0b1b244fe000e3e4 Reviewed-on: https://cl.tvl.fyi/c/depot/+/849 Reviewed-by: BuildkiteCI Reviewed-by: tazjin <mail@tazj.in> Tested-by: BuildkiteCI
2020-07-02 r/1164 chore(lukegb): add SSH pubkeysLuke Granger-Brown1-0/+9
Change-Id: Ie9fdf3e174ac2e051ec5db6f2bd225804920d3ff Reviewed-on: https://cl.tvl.fyi/c/depot/+/847 Reviewed-by: lukegb <lukegb@tvl.fyi> Reviewed-by: BuildkiteCI Tested-by: BuildkiteCI
2020-07-02 r/1163 fix(whitby): Set correct IPv6 default gateway for Hetzner envVincent Ambo1-0/+1
Change-Id: Ic3d4c6ebf7c40e27a453e08295bb0f2f999c0d88 Reviewed-on: https://cl.tvl.fyi/c/depot/+/845 Reviewed-by: lukegb <lukegb@tvl.fyi> Reviewed-by: BuildkiteCI Tested-by: BuildkiteCI
2020-07-02 r/1162 feat(gs/emacs): Set compile-command in nix buffersGriffin Smith2-0/+31
When visiting buffers that represent home-manager or nixos modules, set compile-command to the relevant switch command. Change-Id: I565e092d1e6b97eb7fee9d88211c0ee6ebb30b53 Reviewed-on: https://cl.tvl.fyi/c/depot/+/846 Reviewed-by: glittershark <grfn@gws.fyi>
2020-07-02 r/1161 fix(clbot): s/submitted/applied/isomer1-1/+1
By vote of the IRC channel. Change-Id: I5ea965d45a7d73b0bdcae817d16eaa17e47adcbc Reviewed-on: https://cl.tvl.fyi/c/depot/+/861 Reviewed-by: isomer <isomer@tvl.fyi> Reviewed-by: glittershark <grfn@gws.fyi> Reviewed-by: lukegb <lukegb@tvl.fyi> Reviewed-by: BuildkiteCI Tested-by: BuildkiteCI
2020-07-02 r/1160 feat(nixos/whitby): Hello, World!Vincent Ambo3-0/+162
This adds NixOS configuration for the machine whitby.tvl.fyi. No interesting services are configured yet, so this configuration is quite plain. Change-Id: I67b7c75ebd6e298719b52e6b3bd83cc3be3c45d8 Reviewed-on: https://cl.tvl.fyi/c/depot/+/843 Tested-by: BuildkiteCI Reviewed-by: BuildkiteCI Reviewed-by: isomer <isomer@tvl.fyi> Reviewed-by: lukegb <lukegb@tvl.fyi>
2020-07-02 r/1159 feat(tazjin/keys): Add an expression with my SSH public keysVincent Ambo1-0/+7
Change-Id: I624ce085ff18360bbd390bc570b6be2a416b9a42 Reviewed-on: https://cl.tvl.fyi/c/depot/+/842 Reviewed-by: BuildkiteCI Reviewed-by: isomer <isomer@tvl.fyi> Reviewed-by: glittershark <grfn@gws.fyi> Tested-by: BuildkiteCI
2020-07-02 r/1158 chore(nixos/whitby): Bootstrap //ops/nixos/whitby folderVincent Ambo2-0/+10
Change-Id: I7d77c3ea48b181d7b9f754ac4807ed44735a8925 Reviewed-on: https://cl.tvl.fyi/c/depot/+/841 Reviewed-by: BuildkiteCI Reviewed-by: isomer <isomer@tvl.fyi> Reviewed-by: lukegb <lukegb@tvl.fyi> Reviewed-by: glittershark <grfn@gws.fyi> Tested-by: BuildkiteCI
2020-07-02 r/1157 chore(tvl-slapd): rotate password for rikingKane York1-1/+1
Change-Id: I3ec53d5223a4ff0871eed7615f11f534ed74653b Reviewed-on: https://cl.tvl.fyi/c/depot/+/839 Reviewed-by: tazjin <mail@tazj.in> Reviewed-by: BuildkiteCI Tested-by: BuildkiteCI
2020-07-02 r/1156 chore(users/riking/dotfiles): add .mybashrcKane York1-0/+53
Change-Id: Ib33a0a6819b7a3285fe1130657a7b1644a84f493 Reviewed-on: https://cl.tvl.fyi/c/depot/+/837 Reviewed-by: BuildkiteCI Reviewed-by: Kane York <rikingcoding@gmail.com> Tested-by: BuildkiteCI
2020-07-01 r/1155 chore(bin): fix shellcheck SC2086Kane York1-2/+2
Change-Id: I441c03e033289da3dcec18daf9a565ec75b7ef75 Reviewed-on: https://cl.tvl.fyi/c/depot/+/835 Reviewed-by: BuildkiteCI Reviewed-by: tazjin <mail@tazj.in> Tested-by: BuildkiteCI
2020-07-01 r/1154 fix(gs/emacs): Sometimes GH returns PRs without an authorGriffin Smith1-2/+3
I don't know why-- but I don't want it breaking this command. Change-Id: I90c28cd21f3a5bc9f0155a88b50b13434fda4c5d Reviewed-on: https://cl.tvl.fyi/c/depot/+/838 Reviewed-by: glittershark <grfn@gws.fyi>
2020-07-01 r/1153 docs(REVIEWS): Update registration instructions for password hashesVincent Ambo1-4/+12
Change-Id: Idb8e5259f7b2a7105219fd3a21dc4b5774c44460 Reviewed-on: https://cl.tvl.fyi/c/depot/+/836 Reviewed-by: BuildkiteCI Reviewed-by: glittershark <grfn@gws.fyi> Tested-by: BuildkiteCI
2020-07-01 r/1152 chore(tvl-slapd): Remove old password generation scriptVincent Ambo1-5/+0
This does not work for ARGON2 hashes. Change-Id: I1e070fa0ff17ef21632e94e6777da637deb6f54f Reviewed-on: https://cl.tvl.fyi/c/depot/+/834 Reviewed-by: Kane York <rikingcoding@gmail.com> Reviewed-by: BuildkiteCI Tested-by: BuildkiteCI
2020-07-01 r/1151 feat(tools/hash-password): Add a wrapper script for slappasswdVincent Ambo3-0/+11
This wrapper script correctly invokes slappasswd for generating ARGON2 hashes. People without Nix will need to figure this out on their own. Change-Id: I264715ba4932855b868bef70cc9102515b3d129e Reviewed-on: https://cl.tvl.fyi/c/depot/+/833 Tested-by: BuildkiteCI Reviewed-by: BuildkiteCI Reviewed-by: Kane York <rikingcoding@gmail.com>
2020-07-01 r/1150 chore(tvl-slapd): Rotate my LDAP passwords and use ARGON2 hashesVincent Ambo1-2/+2
Change-Id: Id1a60121e4254e7ccff77ac17fd39d0955aedc8f Reviewed-on: https://cl.tvl.fyi/c/depot/+/832 Reviewed-by: BuildkiteCI Reviewed-by: tazjin <mail@tazj.in> Reviewed-by: isomer <isomer@tvl.fyi> Tested-by: BuildkiteCI
2020-07-01 r/1149 feat(tvl-slapd): Load Argon2 password module in OpenLDAPVincent Ambo1-0/+15
This makes it possible to use {ARGON2} hashes instead of the current salted SHA hashes, which is a much better idea. Unfortunately the nixpkgs module does not have an option for overridding the package used, so it is overlaid into the system package set - this causes widespread rebuilds. This is fine for us for now, but I have opened a PR upstream to add a package option: https://github.com/NixOS/nixpkgs/pull/91963 Change-Id: Ib4be931d88e74b91566639f8656742cf096f6cc3 Reviewed-on: https://cl.tvl.fyi/c/depot/+/831 Reviewed-by: BuildkiteCI Reviewed-by: isomer <isomer@tvl.fyi> Tested-by: BuildkiteCI
2020-07-01 r/1148 feat(3p/openldap): Enable slapd-passwd-argon2 moduleVincent Ambo3-1/+29
This enables support for the Argon2 password hashing mechanism in OpenLDAP. Note that we also need to configure the LDAP module to load this, so this change is not yet sufficient for actually using Argon2 hashes. Change-Id: I151b854b777daa924b22224a43851432a88a2760 Reviewed-on: https://cl.tvl.fyi/c/depot/+/830 Reviewed-by: BuildkiteCI Reviewed-by: isomer <isomer@tvl.fyi> Tested-by: BuildkiteCI
2020-07-01 r/1147 chore(ci-builds): Move third_party builds to their own package groupVincent Ambo2-10/+8
... and remove a package that doesn't exist anymore (at this location) from the nixpkgs allowlist. Change-Id: I663c84c387fb04bb3b47448132ad768ed5352474 Reviewed-on: https://cl.tvl.fyi/c/depot/+/829 Reviewed-by: BuildkiteCI Reviewed-by: isomer <isomer@tvl.fyi> Tested-by: BuildkiteCI
2020-07-01 r/1146 feat(ci-builds): Include //fun/tvlbot and //fun/clbot in CI buildsVincent Ambo1-0/+2
Change-Id: I95daac993808ac9c3de06d20890cca108d8fa961 Reviewed-on: https://cl.tvl.fyi/c/depot/+/828 Reviewed-by: BuildkiteCI Reviewed-by: eta <eta@theta.eu.org> Tested-by: BuildkiteCI
2020-07-01 r/1145 style(tvldb): Add blank lines between itemsVincent Ambo3-0/+23
This makes the code slightly more readable. For users that use editors without semantic navigation, this also makes it easier to jump around between items in the files. I looked into whether a rustfmt setting exists for this, but unfortunately the answer is currently no. Change-Id: I37b19fa6ab038c71b924c45dbc12b298e660e8cf Reviewed-on: https://cl.tvl.fyi/c/depot/+/827 Reviewed-by: BuildkiteCI Reviewed-by: eta <eta@theta.eu.org> Tested-by: BuildkiteCI
2020-07-01 r/1144 fix(besadii): Do not pass on update values for meta refsVincent Ambo1-2/+2
Before this change, besadii would skip further processing of meta refs (which happen for every CL metadata change), but it would still schedule a build by returning an update - which would then inevitably fail. This change makes besadii skip meta refs the same way it skips non-depot builds, i.e. completely. Move *on* from meta refs, do *not* collect $100. Change-Id: I269d2299f4d3cb1f9c041da8c92fa00ae7794b38 Reviewed-on: https://cl.tvl.fyi/c/depot/+/825 Reviewed-by: eta <eta@theta.eu.org> Reviewed-by: BuildkiteCI Tested-by: BuildkiteCI
2020-07-01 r/1143 chore(tazjin): Remove nugget system definitionVincent Ambo3-283/+1
This host is deprecated. Change-Id: Ibbf1e300ae8b136bb3ce3669864045e6ea7eff23 Reviewed-on: https://cl.tvl.fyi/c/depot/+/826 Reviewed-by: BuildkiteCI Reviewed-by: tazjin <mail@tazj.in> Tested-by: BuildkiteCI
generated by cgit-pink 1.4.1 (git 2.44.2) at 2024-11-12T11·46+0000