about summary refs log tree commit diff
path: root/ops
AgeCommit message (Collapse)AuthorFilesLines
2021-04-11 r/2480 fix(pipelines/depot): Buildkite refers to branches by full refVincent Ambo1-1/+1
This change is required to run the :anchor: step on canon builds. Change-Id: Ib3cebac67c9f5337b27a948f120b0a9ba834ef2a Reviewed-on: https://cl.tvl.fyi/c/depot/+/2932 Tested-by: BuildkiteCI Reviewed-by: sterni <sternenseemann@systemli.org> Reviewed-by: glittershark <grfn@gws.fyi>
2021-04-11 r/2477 feat(ops/pipelines): Add gcroots for depot builds on canonVincent Ambo1-2/+22
Adds a conditional build step that only runs on the canon branch, and only if :duck: (the status reporting step) succeeds, which creates a new Nix GC root for all depot targets named `depot-canon`. In practice this might be a bit racey, as canon builds are not guaranteed to succeed in order (though it is likely). This shouldn't matter much in practice: We only want to prevent rebuilds of the whole world. This fixes b/102 Change-Id: Id3d0bf4158bffcb1ed6929888a29d31609b6ece1 Reviewed-on: https://cl.tvl.fyi/c/depot/+/2904 Tested-by: BuildkiteCI Reviewed-by: glittershark <grfn@gws.fyi>
2021-04-11 r/2476 fix(tvl-buildkite): Set agents' primary group to buildkite-agentsVincent Ambo1-2/+5
This ensures files created by the Buildkite agents are always owned by the same group, without having to manually chgrp afterwards. Change-Id: Idbaedec43c16b2ee137d1a95719a05d46db8f900 Reviewed-on: https://cl.tvl.fyi/c/depot/+/2929 Reviewed-by: flokli <flokli@flokli.de> Tested-by: BuildkiteCI
2021-04-10 r/2470 refactor: Move nixpkgs attribute to `third_party.nixpkgs`Vincent Ambo2-13/+9
Please read b/108 to make sense of this. This gets rid of the explicit list of exposed packages from nixpkgs, and instead makes the entire package set available at `third_party.nixpkgs`. To accommodate this, a LOT of things have to be very slightly shuffled around. Some of this was done in already submitted CLs, but this change is unfortunately still quite noisy. Pay extra attention to: * overlay-like functionality that was partially moved to actual overlays (partially as in, the minimum required to get a green build) * modified uses of the package set path, esp. in NixOS systems Special notes: * xanthous has been disabled in CI because of issues with the Haskell overlay * //third_party/nix has been disabled because of other unclear dependency issues Both of these will be tackled in a followup CL. Change-Id: I2f9c60a4d275fdb5209264be0addfd7e06c53118 Reviewed-on: https://cl.tvl.fyi/c/depot/+/2910 Reviewed-by: glittershark <grfn@gws.fyi> Reviewed-by: sterni <sternenseemann@systemli.org> Tested-by: BuildkiteCI
2021-04-10 r/2468 feat(ops/nixos/www): Enable short links for b/ and cl/Vincent Ambo2-0/+15
This configures accepting requests for b/ and cl/ on plain HTTP ports, and redirecting to b.tvl.fyi & cl.tvl.fyi appropriately. Additionally, Panettone request URIs that only contain decimals are redirected to `/issues/$request_uri` to enable issue short-links. This fixes b/32. Change-Id: I56954d8d69a3624267778b467520c509f4daa6c5 Reviewed-on: https://cl.tvl.fyi/c/depot/+/2908 Tested-by: BuildkiteCI Reviewed-by: lukegb <lukegb@tvl.fyi> Reviewed-by: sterni <sternenseemann@systemli.org>
2021-04-10 r/2467 feat(gerrit): Auto link 'cl/123'-style shortlinksVincent Ambo1-0/+6
Same as linking to bugs (e.g. b/108). Change-Id: I447020bc07059c98c53322d745f961d8d471d9a4 Reviewed-on: https://cl.tvl.fyi/c/depot/+/2919 Reviewed-by: sterni <sternenseemann@systemli.org> Tested-by: BuildkiteCI
2021-04-10 r/2464 refactor(ops): Consistent use of depot.third_party vs. pkgsVincent Ambo4-16/+13
In preparation for the solution of b/108, we need to consistently use `depot.third_party` for packages that are only packed in the TVL depot and `pkgs` for things that come from nixpkgs. This commit cleans up a huge chunk of these uses in //ops Change-Id: I00faeb969eaa70760a26256274925b07998c2351 Reviewed-on: https://cl.tvl.fyi/c/depot/+/2915 Tested-by: BuildkiteCI Reviewed-by: sterni <sternenseemann@systemli.org>
2021-04-09 r/2457 feat(tvl-buildkite): Add all buildkite agent users to a local groupVincent Ambo1-0/+9
This lets us grant permissions to them, e.g. on local folders. Change-Id: I823ac414be1cb7d6baa4f17d95003709e5911b04 Reviewed-on: https://cl.tvl.fyi/c/depot/+/2905 Tested-by: BuildkiteCI Reviewed-by: sterni <sternenseemann@systemli.org>
2021-04-09 r/2456 refactor(whitby): Extract Buildkite agents into a moduleVincent Ambo2-16/+41
There will be more Buildkite-agent specific configuration, and it's already more than just the module setup, so extracting this makes sense. Change-Id: I56ce205c0cb4365317ed7ed5f2d525a0b425b861 Reviewed-on: https://cl.tvl.fyi/c/depot/+/2906 Tested-by: BuildkiteCI Reviewed-by: lukegb <lukegb@tvl.fyi> Reviewed-by: sterni <sternenseemann@systemli.org>
2021-04-07 r/2453 feat(gerrit-tvl): add Buildkite-backed Checks plugin implementationLuke Granger-Brown1-0/+131
This small(*) pile of JavaScript queries the Buildkite API for the latest builds for the depot and displays the results in the rebooted Check UI. Change-Id: I7025a1c6d0d0afa000a9df4682133e03824ea10d Reviewed-on: https://cl.tvl.fyi/c/depot/+/2881 Tested-by: BuildkiteCI Reviewed-by: tazjin <mail@tazj.in>
2021-04-06 r/2452 feat(ops/gerrit-tvl): init TVL Gerrit pluginLuke Granger-Brown6-1/+59
This is just going to be a grab bag of things which do TVL-specific things to Gerrit, whether that be exposing new Prolog predicates or, as I intend to do as the first thing, expose Buildkite builds as checks. Change-Id: Iaeab987a1fdbd078b85e274691c986489903bf3a Reviewed-on: https://cl.tvl.fyi/c/depot/+/2872 Tested-by: BuildkiteCI Reviewed-by: tazjin <mail@tazj.in>
2021-04-04 r/2436 feat(whitby): Configure nix-serve on cache.tvl.suVincent Ambo2-0/+34
Having a slow cache is better than having no cache. Change-Id: Ie3cfcd4a2937d90b0e2ad899816bc31ae806631f Reviewed-on: https://cl.tvl.fyi/c/depot/+/2847 Tested-by: BuildkiteCI Reviewed-by: lukegb <lukegb@tvl.fyi> Reviewed-by: sterni <sternenseemann@systemli.org>
2021-04-03 r/2416 feat(monorepo-gerrit): use CAS for authenticationLuke Granger-Brown1-13/+12
This drops the old LDAP configuration and uses CAS instead. All hail the hypnotoad. Change-Id: I515a213f09073bb52bfb75afe2988b935a076087 Reviewed-on: https://cl.tvl.fyi/c/depot/+/2783 Tested-by: BuildkiteCI Reviewed-by: tazjin <mail@tazj.in>
2021-04-03 r/2411 feat(www/tazj.in): Add a temporary route for serving static blobsVincent Ambo1-0/+5
Until I come up with a better idea. Change-Id: Ie44cae4c2df264cbe1a70f5ebcca814262dd2800 Reviewed-on: https://cl.tvl.fyi/c/depot/+/2771 Reviewed-by: tazjin <mail@tazj.in> Tested-by: BuildkiteCI
2021-04-02 r/2409 chore(ops/nixos): finish removal of depot.nixLuke Granger-Brown2-18/+0
All user configs and modules have been migrated to using the depot module parameter. All hail the hypnotoad. Change-Id: Ic05c61fccba3ac505a339283b6ef3105a2d0711c Reviewed-on: https://cl.tvl.fyi/c/depot/+/2765 Tested-by: BuildkiteCI Reviewed-by: tazjin <mail@tazj.in>
2021-04-02 r/2407 refactor(ops/nixos): migrate to depot module argLuke Granger-Brown15-35/+30
Previously the depot argument was provided as config.depot, but the "new way" of doing things (which is more like the args list provided in the rest of the depot) is to provide this as the "depot" NixOS module argument instead. Change-Id: Ib48b1c7c1bdff9c1eb0618c6cbacc22b651f5f98 Reviewed-on: https://cl.tvl.fyi/c/depot/+/2763 Tested-by: BuildkiteCI Reviewed-by: tazjin <mail@tazj.in> Reviewed-by: glittershark <grfn@gws.fyi>
2021-04-02 r/2404 refactor(ops/nixos): add "depot" argument to NixOS modulesLuke Granger-Brown1-5/+13
For the moment I've opted to not import all of the other things we'd usually provide to things imports via readTree, because I think it's a bit dangerous to accidentally overwrite things like NixOS' notion of "lib" with our own version. So for the moment, baseModule provides only "depot". Change-Id: I3db9132a3d9227055d4c1b00f02effcb84edcc53 Reviewed-on: https://cl.tvl.fyi/c/depot/+/2760 Tested-by: BuildkiteCI Reviewed-by: tazjin <mail@tazj.in>
2021-04-02 r/2401 feat(ops/nixos/www): Enable tvl.su aliases for dev toolsVincent Ambo5-0/+5
This is not for the domain root though, as that's going to be something else eventually. The canonical URLs are the .fyi ones (at least for now), and some of these tools will eventually generate links that make user sessions started from *.tvl.su converge on *.tvl.fyi. Relates to b/98 Change-Id: I1c3bcf72a3063059002e4b0bdd57c269a410a8bc Reviewed-on: https://cl.tvl.fyi/c/depot/+/2758 Reviewed-by: sterni <sternenseemann@systemli.org> Tested-by: BuildkiteCI
2021-04-02 r/2399 feat(ops/users): add milan to userssterni1-0/+5
Change-Id: I77e5e9a0ae1bf2ee59ac4967c5481b9044f97934 Reviewed-on: https://cl.tvl.fyi/c/depot/+/2757 Tested-by: BuildkiteCI Reviewed-by: tazjin <mail@tazj.in>
2021-04-02 r/2398 feat(ops/whitby): add sterni to trusted userssterni1-1/+4
I am somewhat trustworthy… maybe? Also I tend to gc depot stuff so ssh serve would be neat. Change-Id: I4672f20a32a756692dd156b5e40e5a7f37ba5ad0 Reviewed-on: https://cl.tvl.fyi/c/depot/+/2660 Tested-by: BuildkiteCI Reviewed-by: tazjin <mail@tazj.in> Reviewed-by: glittershark <grfn@gws.fyi>
2021-03-31 r/2381 feat(ops/nixos/www): Serve rendered Tvix component SVG (hack!)Vincent Ambo1-0/+7
This is a quick hack to make it possible to view the rendered SVG on https://code.tvl.fyi/about/tvix/docs/components.md We want to be able to do this sort of thing dynamically in the future, but we can't yet, so ... well. Deal with it. Change-Id: Id2b819679d748b6f517018a9c6e72d5c1d806c4c Reviewed-on: https://cl.tvl.fyi/c/depot/+/2743 Reviewed-by: flokli <flokli@flokli.de> Tested-by: BuildkiteCI
2021-03-31 r/2370 revert(monorepo-gerrit): Revert to using cgit for Gerrittazjin1-10/+10
This reverts commit 3b05be2fd0c0035977dbac731c26651b9ff3e373. Reason for revert: Sourcegraph still does not support fetching arbitrary refs, so we'll have to wait until its Gerrit integration lands before this will work correctly. Change-Id: Icee82c50f92c34ba1741b608449aed16538ccbaa Reviewed-on: https://cl.tvl.fyi/c/depot/+/2721 Tested-by: BuildkiteCI Reviewed-by: lukegb <lukegb@tvl.fyi>
2021-03-27 r/2350 feat(ops/dns): Add GSuite site aliases for tvl.suVincent Ambo1-1/+6
Change-Id: Ib18b5bef23a198e7ca031f48290cf0ff0655d8dd Reviewed-on: https://cl.tvl.fyi/c/depot/+/2687 Tested-by: BuildkiteCI Reviewed-by: flokli <flokli@flokli.de>
2021-03-26 r/2347 feat(ops/nixos/whitby): add flokli userFlorian Klink1-0/+6
Change-Id: Ibdb5b498f8bbc837fffdb38cdf95499b279773aa Reviewed-on: https://cl.tvl.fyi/c/depot/+/2683 Reviewed-by: lukegb <lukegb@tvl.fyi> Tested-by: BuildkiteCI
2021-03-26 r/2345 chore(ops/users): Purge some inactive users from LDAPVincent Ambo1-15/+0
Change-Id: Iab2d2d6b7096ef302ea2fd8b051041426c6c8ca6 Reviewed-on: https://cl.tvl.fyi/c/depot/+/2670 Tested-by: BuildkiteCI Reviewed-by: glittershark <grfn@gws.fyi>
2021-03-26 r/2343 feat(ops/users): Add flokli to usersFlorian Klink1-0/+5
Change-Id: I87ca0f20663ff858237f641ef2245778601e0416 Reviewed-on: https://cl.tvl.fyi/c/depot/+/2671 Reviewed-by: tazjin <mail@tazj.in> Tested-by: BuildkiteCI
2021-03-26 r/2342 feat(ops/dns): Configure email settings for tvl.su.Vincent Ambo1-1/+10
Change-Id: Ida5beca7b4efd39fad15ba220dc1fc887ed79b4c Reviewed-on: https://cl.tvl.fyi/c/depot/+/2669 Tested-by: BuildkiteCI Reviewed-by: adisbladis <adisbladis@gmail.com>
2021-03-26 r/2341 feat(ops/dns): Add Google Workspace verification for tvl.su.Vincent Ambo1-1/+4
Change-Id: I44db2bca7aa5814bbefd8943d727cc66ab800fd5 Reviewed-on: https://cl.tvl.fyi/c/depot/+/2668 Tested-by: BuildkiteCI Reviewed-by: tazjin <mail@tazj.in>
2021-03-26 r/2332 fix(ops/whitby): Set tcp congestion control to bbrGriffin Smith1-0/+4
Some quick testing shows that this improves my data transfer speed to whitby by roughly 200%. Change-Id: Id94de975b1ae0930f8d0fe038582dbac0037676c Reviewed-on: https://cl.tvl.fyi/c/depot/+/2659 Tested-by: BuildkiteCI Reviewed-by: tazjin <mail@tazj.in> Reviewed-by: lukegb <lukegb@tvl.fyi> Reviewed-by: ben <tvl@benjojo.co.uk>
2021-03-25 r/2329 refactor: Replace some uses of builtins.toFile with pkgs.writeTextVincent Ambo1-3/+1
I'm looking at removing some of these because they can cause unnecessary build steps during CI pipeline generation. Change-Id: I84742968918090c050d2eedab8a1b42692632a42 Reviewed-on: https://cl.tvl.fyi/c/depot/+/2655 Reviewed-by: sterni <sternenseemann@systemli.org> Tested-by: BuildkiteCI
2021-03-22 r/2318 chore(ops/nixos): Update Sourcegraph to 3.26.0Vincent Ambo1-1/+1
Reading through the changelogs, this includes the following two changes that may require us to do something: * For users of single-image Sourcegraph instance, please delete the secret key file /var/lib/sourcegraph/token inside the container before attempting to upgrade to 3.21.x. * A campaigns.restrictToAdmins site configuration option has been added to prevent non site-admin users from using campaigns. Change-Id: Ieacf85a9059ad5222800f8d7d4a43435f489a39f Reviewed-on: https://cl.tvl.fyi/c/depot/+/2638 Tested-by: BuildkiteCI Reviewed-by: tazjin <mail@tazj.in>
2021-03-22 r/2316 feat(ops/dns): Add status subdomainVincent Ambo2-16/+18
I want to host something like Vigil[0] on this to show the status of Gerrit, SourceGraph and maybe other components. (Yes, the status page will be on the same infrastructure ... but this is mostly for service failure cases). [0]: https://github.com/valeriansaliou/vigil Change-Id: If71496300b94035976a685d9bf166d525d89fc5e Reviewed-on: https://cl.tvl.fyi/c/depot/+/2637 Tested-by: BuildkiteCI Reviewed-by: lukegb <lukegb@tvl.fyi> Reviewed-by: sterni <sternenseemann@systemli.org>
2021-03-21 r/2314 chore(whitby): Remove SSH key from rootVincent Ambo1-4/+0
This was a leftover from the time we were installing. Change-Id: Id875b907d7f76081a45e7f8f2666b7fba6aefc86 Reviewed-on: https://cl.tvl.fyi/c/depot/+/2632 Tested-by: BuildkiteCI Reviewed-by: glittershark <grfn@gws.fyi>
2021-03-21 r/2299 feat(tazjin/nixos): Initial check in of new host (tverskoy)Vincent Ambo1-0/+1
This is my new X13 AMD Thinkpad, on which many fun things will be done. Change-Id: I4de114a8c5ebb37d2f4844f407d2dc0e7cc9557e Reviewed-on: https://cl.tvl.fyi/c/depot/+/2620 Tested-by: BuildkiteCI Reviewed-by: tazjin <mail@tazj.in>
2021-03-15 r/2283 refactor(ops/dns): use drvTargets for meta.targets populationsterni1-7/+8
Since we have a dedicated util for this, we may as well use it to reduce code duplication. Change-Id: Ie52647be8c786d0b6a4dceb2fa6778b94625fafc Reviewed-on: https://cl.tvl.fyi/c/depot/+/2604 Tested-by: BuildkiteCI Reviewed-by: tazjin <mail@tazj.in>
2021-03-15 r/2281 feat(ops/dns): Configure tvl.su zoneVincent Ambo2-0/+30
Change-Id: I6016d92e9c231a257e06644dfcf44a4aaa12ac4d Reviewed-on: https://cl.tvl.fyi/c/depot/+/2601 Tested-by: BuildkiteCI Reviewed-by: sterni <sternenseemann@systemli.org> Reviewed-by: lukegb <lukegb@tvl.fyi>
2021-03-15 r/2280 feat(ops/dns): Import tvl.fyi DNS zone into depotVincent Ambo3-0/+58
Imports the current state of the tvl.fyi zone and configures simple CI checks on the file format. No deployment automation exists for this (yet?). Change-Id: Ia7d72e02b9f6d3adef994c5dc1898cc0df9dfcfb Reviewed-on: https://cl.tvl.fyi/c/depot/+/2600 Tested-by: BuildkiteCI Reviewed-by: glittershark <grfn@gws.fyi> Reviewed-by: sterni <sternenseemann@systemli.org>
2021-03-13 r/2278 feat(users/adisbladis): Add to usersAdam H1-0/+5
Change-Id: I2a3532605c602dd6ba44a6c723333db219a55907 Reviewed-on: https://cl.tvl.fyi/c/depot/+/2599 Tested-by: BuildkiteCI Reviewed-by: tazjin <mail@tazj.in>
2021-02-24 r/2226 chore(ops/journaldriver): Expand wildcard importsVincent Ambo2-3/+5
... to appease Profpatsch. Change-Id: Id8576645a6920312c2304ea7880524d9cda8e21b Reviewed-on: https://cl.tvl.fyi/c/depot/+/2544 Tested-by: BuildkiteCI Reviewed-by: Profpatsch <mail@profpatsch.de>
2021-02-10 r/2201 fix(ops/www/tazj.in): Force SSL for git.tazj.in redirectVincent Ambo1-0/+1
Change-Id: If5b8096cb693d96936f9b954e2ebe3dc9b63af66 Reviewed-on: https://cl.tvl.fyi/c/depot/+/2521 Tested-by: BuildkiteCI Reviewed-by: tazjin <mail@tazj.in>
2021-02-10 r/2200 fix(ops/www/tazj.in): Redirect git.tazj.in to our cgitVincent Ambo1-0/+5
Change-Id: Ia0be95e2618aeb4f8d394a8e3602c73faec0d72f Reviewed-on: https://cl.tvl.fyi/c/depot/+/2508 Tested-by: BuildkiteCI Reviewed-by: tazjin <mail@tazj.in>
2021-02-06 r/2182 fix(config): remove ciBuilds inheritsterni1-1/+1
The ciBuilds attribute seems to no longer exist and it breaks the evaluation of the config attribute. It's only appearance was in besadii which doesn't actually use the attribute. Removing the ciBuilds inherit fixes these issues. Change-Id: Ibbf3413ba6efe10ad868cf57cf0711d574860f97 Reviewed-on: https://cl.tvl.fyi/c/depot/+/2487 Tested-by: BuildkiteCI Reviewed-by: tazjin <mail@tazj.in>
2021-01-30 r/2160 fix(ops/piplines/static-pipeline): add --show-trace to nix-buildProfpatsch1-1/+1
Change-Id: Ib0473f916b1436934844e620ce981f52d11e8512 Reviewed-on: https://cl.tvl.fyi/c/depot/+/2467 Tested-by: BuildkiteCI Reviewed-by: tazjin <mail@tazj.in>
2021-01-30 r/2159 chore(3p|nix): Remove typed GoVincent Ambo2-2/+2
Nobody has actually done any experimentation with typed Go, so we're getting rid of it for now - it's causing annoying IFD during build graph generation. Change-Id: Ibac3dea98ebed1b3ee08acda184d24c500cf695d Reviewed-on: https://cl.tvl.fyi/c/depot/+/2458 Tested-by: BuildkiteCI Reviewed-by: sterni <sternenseemann@systemli.org> Reviewed-by: lukegb <lukegb@tvl.fyi> Reviewed-by: Profpatsch <mail@profpatsch.de>
2021-01-23 r/2140 chore(users/multi): remove user from the depot.multi2-13/+1
This commit removes my user directory in the depot, my user account on whitby, my entry in the LDAP database, and my entry in the website graph. I've had my fun with TVL, but I want to move on to spending time on some other things. This additionally removes aranea from the website graph, which they have requested in private. Change-Id: I2d098c8fe239f20d9f6c6cbf66a3dfb4a955a4cf Reviewed-on: https://cl.tvl.fyi/c/depot/+/2436 Tested-by: BuildkiteCI Reviewed-by: multi <depot@in-addr.xyz> Reviewed-by: lukegb <lukegb@tvl.fyi>
2021-01-19 r/2133 chore: Remove banned userV2-12/+0
Change-Id: Icd61f7c567a327c74a4f381168e94737b2b30702 Reviewed-on: https://cl.tvl.fyi/c/depot/+/2422 Tested-by: BuildkiteCI Reviewed-by: edef <edef@edef.eu> Reviewed-by: tazjin <mail@tazj.in>
2021-01-18 r/2131 feat(todolist): use static slapd user data for knownUserssterni2-130/+134
Since the slapd data is static and generated using nix, we can simply move the user list into ops/users, so it's recognized by readTree and we can use it as ops.users both in ops/nixos/tvl-slapd and web/todolist as a general purpose user registry for depot. Update docs/REVIEWS.md as well. Change-Id: I35caaaab70a5578c47cedc7f33077dd513766290 Reviewed-on: https://cl.tvl.fyi/c/depot/+/2419 Tested-by: BuildkiteCI Reviewed-by: tazjin <mail@tazj.in>
2021-01-18 r/2130 chore(ops/whitby): Move ACME registrations to an @tvl.fyi addressVincent Ambo1-1/+1
Change-Id: I371550aa456c0fb64da4789feed494cc50497522 Reviewed-on: https://cl.tvl.fyi/c/depot/+/2410 Tested-by: BuildkiteCI Reviewed-by: lukegb <lukegb@tvl.fyi> Reviewed-by: glittershark <grfn@gws.fyi>
2021-01-17 r/2116 feat(ops/nixos): Serve tazj.in from whitby temporarilyVincent Ambo2-1/+32
camden.tazj.in (the host in my flat) is going down as my belongings are being moved into storage. Change-Id: Id66512fd2ec6dbdcb6dfc3862af49cfadb15cfa1 Reviewed-on: https://cl.tvl.fyi/c/depot/+/2405 Tested-by: BuildkiteCI Reviewed-by: lukegb <lukegb@tvl.fyi> Reviewed-by: glittershark <grfn@gws.fyi>
2021-01-15 r/2111 feat(ops/nixos/whitby): Enable remote use of whitby for my Thinkpad.multi1-2/+3
My main workstation is a Thinkpad without a great deal of compute power available, so enabling the use of whitby as both a substituter (services.sshServe) and a remote builder (openssh.authorizedKeys) will save me some time when working on nix things and depot things. Change-Id: I17bfcbb9860f42fb667603ad819e38e82e6052da Reviewed-on: https://cl.tvl.fyi/c/depot/+/2399 Reviewed-by: tazjin <mail@tazj.in> Reviewed-by: lukegb <lukegb@tvl.fyi> Tested-by: BuildkiteCI