about summary refs log tree commit diff
path: root/users/grfn/system/system (follow)
AgeCommit message (Collapse)AuthorFilesLines
2022-05-31 r/4195 feat(grfn/system): Resuscitate roswellGriffin Smith4-10/+21
Resuscitate the configuration for roswell, the semi-portable configuration I use for ec2 development boxes. Lots of the changes here are trying to get Tramp working. Change-Id: I2dc2fd1d9aa76e145fa3f3f847af761cb652ab47 Reviewed-on: https://cl.tvl.fyi/c/depot/+/5798 Reviewed-by: grfn <grfn@gws.fyi> Autosubmit: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2022-05-26 r/4140 refactor(grfn): Prepare for restricted-evalVincent Ambo2-6/+6
Change-Id: I672ad0898b2ef6a11f8bc9233da0ded4a296fe0e Reviewed-on: https://cl.tvl.fyi/c/depot/+/5686 Autosubmit: tazjin <tazjin@tvl.su> Tested-by: BuildkiteCI Reviewed-by: grfn <grfn@gws.fyi>
2022-05-25 r/4112 feat(3p/agenix): update to 2022-05-16 and add to nivsterni1-4/+4
The new version brings the new secretsDir setting which means we no longer have to hardcode /run/agenix everywhere. Change-Id: I4b579d7233d315a780d7671869d5d06722d769fa Reviewed-on: https://cl.tvl.fyi/c/depot/+/5646 Tested-by: BuildkiteCI Reviewed-by: tazjin <tazjin@tvl.su> Reviewed-by: grfn <grfn@gws.fyi> Autosubmit: sterni <sternenseemann@systemli.org>
2022-04-06 r/3937 refactor(grfn/mugwump): Disable auto-deployGriffin Smith1-5/+0
This tends to step on my toes way more often than I actually want it to work Change-Id: Ifd5e38ca307d7882392b2399194aca1231b68db6 Reviewed-on: https://cl.tvl.fyi/c/depot/+/5440 Reviewed-by: grfn <grfn@gws.fyi> Autosubmit: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2022-04-06 r/3931 fix(grfn/mugwump): Set nginx.recommendedProxySettingsGriffin Smith1-0/+1
Apparently grafana needs this now Change-Id: I197837d831bd7bfde17cbb5dd253e9758578ff6d Reviewed-on: https://cl.tvl.fyi/c/depot/+/5434 Reviewed-by: grfn <grfn@gws.fyi> Autosubmit: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2022-04-06 r/3930 fix(grfn/mugwump): Use correct path to buildkite-tokenGriffin Smith1-1/+1
Change-Id: Ie1d30363887f7ed999116f11ea30bb53ea5ef24c Reviewed-on: https://cl.tvl.fyi/c/depot/+/5433 Reviewed-by: grfn <grfn@gws.fyi> Autosubmit: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2022-02-07 r/3787 chore(grfn): move meta.targets definitions to meta.ci.targetsVincent Ambo1-1/+1
Change-Id: I1b77319a7218157818b4e48fadb98d00790b7f67 Reviewed-on: https://cl.tvl.fyi/c/depot/+/5253 Autosubmit: tazjin <tazjin@tvl.su> Reviewed-by: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2022-02-01 r/3737 chore(grfn/system): Rename deprecated nixos optionsGriffin Smith2-13/+15
Change-Id: I2c519ac4a0e92312bbb90b2ecba063b7c06605ab Reviewed-on: https://cl.tvl.fyi/c/depot/+/5157 Tested-by: BuildkiteCI Reviewed-by: grfn <grfn@gws.fyi> Autosubmit: grfn <grfn@gws.fyi>
2022-02-01 r/3736 feat(grfn/yeren): enable services.earlyoomGriffin Smith1-0/+5
Let's see if this'll prevent my system from locking up when I try to do too much compilation at once Change-Id: Ie1ecb973801a6ea51f57ed5f25a1964647f54e77 Reviewed-on: https://cl.tvl.fyi/c/depot/+/5156 Reviewed-by: grfn <grfn@gws.fyi> Autosubmit: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2022-01-31 r/3725 style(grfn/mugwump): Work around a nixpkgs-fmt bugVincent Ambo1-8/+10
Change-Id: I5dd328a955446a4417b7ceb015c924ca2ebae654 Reviewed-on: https://cl.tvl.fyi/c/depot/+/5145 Autosubmit: tazjin <tazjin@tvl.su> Tested-by: BuildkiteCI Reviewed-by: grfn <grfn@gws.fyi>
2022-01-31 r/3723 style: format entire depot with nixpkgs-fmtVincent Ambo7-87/+104
This CL can be used to compare the style of nixpkgs-fmt against other formatters (nixpkgs, alejandra). Change-Id: I87c6abff6bcb546b02ead15ad0405f81e01b6d9e Reviewed-on: https://cl.tvl.fyi/c/depot/+/4397 Tested-by: BuildkiteCI Reviewed-by: sterni <sternenseemann@systemli.org> Reviewed-by: lukegb <lukegb@tvl.fyi> Reviewed-by: wpcarro <wpcarro@gmail.com> Reviewed-by: Profpatsch <mail@profpatsch.de> Reviewed-by: kanepyork <rikingcoding@gmail.com> Reviewed-by: tazjin <tazjin@tvl.su> Reviewed-by: cynthia <cynthia@tvl.fyi> Reviewed-by: edef <edef@edef.eu> Reviewed-by: eta <tvl@eta.st> Reviewed-by: grfn <grfn@gws.fyi>
2022-01-20 r/3648 feat(grfn/system): Always add teensy udev rulesGriffin Smith1-0/+8
Basically any system I have is going to want to be able to flash an ergodox, so it makes sense to have these always present Change-Id: I88f556d4484e282e712062a488321bf80baa87ac Reviewed-on: https://cl.tvl.fyi/c/depot/+/5028 Reviewed-by: grfn <grfn@gws.fyi> Autosubmit: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2022-01-20 r/3647 refactor(grfn/mugwump): Move buildkite secrets into ageGriffin Smith1-2/+16
Use agenix for the buildkite ssh key and agent token on mugwump, instead of storing stuff in /etc/secrets Change-Id: I56951587b949fc0854e56f5c4e33b601e9cd964e Reviewed-on: https://cl.tvl.fyi/c/depot/+/5027 Reviewed-by: grfn <grfn@gws.fyi> Autosubmit: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2022-01-20 r/3645 fix(grfn/mugwump): Update for new ddclient config formatGriffin Smith1-16/+2
There's a passwordFile option now! Change-Id: I7aa21891c3502ceddcb0bb08a83a5a3a8a6bcdc9 Reviewed-on: https://cl.tvl.fyi/c/depot/+/5025 Reviewed-by: grfn <grfn@gws.fyi> Autosubmit: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2022-01-04 r/3514 fix: address warnings for renamed security.acme.email optionsterni1-1/+1
Can no longer be null and has been renamed to security.acme.defaults.email: https://github.com/nixos/nixpkgs/commit/377c6bcefce8e8ccd471892a1b24621d5a909457 Change-Id: Icac9506185da176365369ed3c7db3c71ffc90b1b Reviewed-on: https://cl.tvl.fyi/c/depot/+/4784 Tested-by: BuildkiteCI Reviewed-by: grfn <grfn@gws.fyi> Autosubmit: sterni <sternenseemann@systemli.org>
2021-12-27 r/3460 refactor(grfn/system): Don't set autoOptimiseStoreGriffin Smith1-1/+0
I have a (unconfirmed) suspicion that this is paying more in CPU time than it's saving in disk space - regardless, I have a bounty of the latter and a deficit of the former. Change-Id: I3375b8d904e0878fd47c1845e3c3b9b6c6359189 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4700 Reviewed-by: grfn <grfn@gws.fyi> Autosubmit: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2021-12-27 r/3455 feat(grfn/bbbg): Add NixOS module, deploy to mugwumpGriffin Smith1-0/+7
Change-Id: I0299242982c183fa9fc1f26b1bacb14f8fc14b28 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4684 Reviewed-by: grfn <grfn@gws.fyi> Reviewed-by: zseri <zseri.devel@ytrizja.de> Autosubmit: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2021-12-27 r/3454 feat(grfn/mugwump): Set up agenixGriffin Smith1-2/+9
Start setting up agenix with secrets in //users/grfn/secrets for mugwump, starting with my cloudflare API key which I use for the ddns from my home apartment Change-Id: Ida66cb91da3415357a512039d6c23402f0ae9388 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4683 Reviewed-by: grfn <grfn@gws.fyi> Autosubmit: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2021-12-26 r/3421 feat(grfn/mugwump): Enable auto-deployGriffin Smith1-0/+5
Change-Id: I46132dd4439339365f2950de763815e548893b1f Reviewed-on: https://cl.tvl.fyi/c/depot/+/4663 Reviewed-by: grfn <grfn@gws.fyi> Autosubmit: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2021-12-15 r/3259 chore(grfn/system): Drop kernel.nix module, -ck patchesGriffin Smith1-39/+0
Per http://ck-hack.blogspot.com/2021/08/514-and-future-of-muqss-and-ck-once.html, linux-ck is no longer being maintained, so there's no point in keeping this around anymore. Change-Id: I514505c21e272080653ff81725dcfcadb2eab2b7 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4343 Reviewed-by: grfn <grfn@gws.fyi> Autosubmit: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2021-12-15 r/3252 chore(3p): bump NixOS channels to 2021-12-15sterni1-1/+1
* Switch from (unused) NixOS 21.05 to newly released NixOS 21.11 channel. * grfn/machines/yeren: Linux 5.14.x -> 5.15.x * 3p/gerrit, 3p/gerrit_plugin/oauth: update dependency bundle output hashes to what whitby comes up with now. Change-Id: Id3bfe3d07b9223f77ec628954783a6b0a48f4086 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4310 Tested-by: BuildkiteCI Autosubmit: sterni <sternenseemann@systemli.org> Reviewed-by: grfn <grfn@gws.fyi> Reviewed-by: tazjin <mail@tazj.in>
2021-11-29 r/3113 feat(gs/system): Install dev man pagesGriffin Smith1-0/+5
I wanna be able to man libc stuff Change-Id: Ie38e6751af24ffcffa912621dc217dcef5c84dda
2021-11-09 r/3030 fix(gs/yeren): Pin to linux 5.14Griffin Smith1-1/+1
5.15 seems to break my external USB hub Change-Id: I357c8187d5281c0b363d1343dfec659ff94869c9 Reviewed-on: https://cl.tvl.fyi/c/depot/+/3821 Reviewed-by: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2021-11-07 r/3021 feat(gs/mugwump): Run xanthous serverGriffin Smith1-0/+9
Add a nixos module for running the xanthous server in a docker container, and install it on mugwump including a prometheus scrape config. Change-Id: Ifeb315845b7eef2ee33af98fa3f71acdd3d9fe6b Reviewed-on: https://cl.tvl.fyi/c/depot/+/3812 Reviewed-by: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2021-09-27 r/2923 feat(gs/yeren): Don't encrypt swap partitionGriffin Smith1-2/+3
This is really just not worth the performance hit Change-Id: I6f603aa154c562da2803bd8f73b1135faad243be Reviewed-on: https://cl.tvl.fyi/c/depot/+/3642 Tested-by: BuildkiteCI Reviewed-by: grfn <grfn@gws.fyi>
2021-09-21 r/2904 chore(3p/nixpkgs): Bump channels to 2021-09-20Vincent Ambo1-4/+0
Included fixes: * grfn/mugwump: removed superfluous Buildkite agent user * tazjin/camden: Disabled bitlbee (user config is broken) * grfn/home/vim: vimUtils expects a `pname` * 3p/nixpkgs: Pick awscli2 from stable channel Change-Id: I64ed726b3350f75c7a8a0e6552bcf1d8d9ba7d46
2021-08-26 r/2791 refactor(gs/system): Remove chupacabraGriffin Smith2-150/+0
This machine no longer exists Change-Id: I8e549b8397777a01404bd84c10c195e80f281744 Reviewed-on: https://cl.tvl.fyi/c/depot/+/3431 Tested-by: BuildkiteCI Reviewed-by: grfn <grfn@gws.fyi> Reviewed-by: tazjin <mail@tazj.in>
2021-08-26 r/2790 refactor(gs/system): Remove rebuilder scriptGriffin Smith2-30/+0
I no longer use this, I just use the rebuild-system that all nixos systems get now. Change-Id: I2272ff13b21b3194c06b51dbc340c19b8bb336a9 Reviewed-on: https://cl.tvl.fyi/c/depot/+/3430 Tested-by: BuildkiteCI Reviewed-by: grfn <grfn@gws.fyi>
2021-08-24 r/2754 chore(3p): bump NixOS channels to 2020-08-18sterni1-2/+2
Wanted to port my emacs config to depot, but missing a dependency from the channel. Adjustments: * Downgrade grfn's Kernel to 5.10: The ck1 patch is not yet available for 5.13 unfortunately and the 5.12 set has been removed upstream. Change-Id: Ifaf315427bda2af590549ca0abec02a79f19a3ec Reviewed-on: https://cl.tvl.fyi/c/depot/+/3375 Tested-by: BuildkiteCI Reviewed-by: tazjin <mail@tazj.in> Reviewed-by: grfn <grfn@gws.fyi>
2021-08-08 r/2710 chore(3p/nixpkgs): Bump nixpkgs channels to 2021-08-04Vincent Ambo1-4/+5
I used //tools/depot-nixpkgs-update for this - thanks again, sterni! Included fixes: * temporary workaround for building notmuch python package, fixed in upstream already (but channel hasn't advanced there) * Disable fprintd in grfn.system.yeren, as the fprintd-tod package currently has a version mismatch in nixpkgs Co-authored-by: Griffin Smith <grfn@gws.fyi> Change-Id: If6d71b08ace9db57daadfe3b69b9cd4aec6a5a4e Reviewed-on: https://cl.tvl.fyi/c/depot/+/3274 Reviewed-by: grfn <grfn@gws.fyi> Reviewed-by: tazjin <mail@tazj.in> Reviewed-by: sterni <sternenseemann@systemli.org> Tested-by: BuildkiteCI
2021-06-14 r/2665 chore(3p/nixpkgs): Bump unstable channel to 2021-06-14Vincent Ambo1-2/+2
Included fixes: * 3p/apereo-cas: Don't use stdenv.lib * grfn/system: Bump Linux to 5.12 (5.11 is gone) Change-Id: Ie32d476e659ba482418d4035333c2797a7dbd106 Reviewed-on: https://cl.tvl.fyi/c/depot/+/3211 Reviewed-by: sterni <sternenseemann@systemli.org> Reviewed-by: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2021-06-12 r/2651 refactor(ops): Break out prometheus-fail2ban-exporter moduleGriffin Smith2-35/+3
Break out the configuration for the prometheus fail2ban exporter, which is a simple python script that exports stats from fail2ban as a prometheus-scrapable textfile, from Mugwump into a reusable nixos module in //ops/nixos/modules. Change-Id: I5451c9c5de6c7bc4431150ae596a9c758bf1b693 Reviewed-on: https://cl.tvl.fyi/c/depot/+/3136 Tested-by: BuildkiteCI Reviewed-by: tazjin <mail@tazj.in>
2021-06-05 r/2648 chore(3p/nixpkgs): Bump channels to 2021-06-05Vincent Ambo1-1/+1
Includes the following depot changes & fixes: * stable moves to NixOS 21.05 * stable isn't used anymore (but we'll keep the mechanism) * haskell overlay's `random` override is removed (YAY!) * grfn/iso: Switch to regular kernel rather than latest kernel, as latest kernel is currently marked as broken due to zfs * grfn/home: Use julia_16-bin temporarily julia 1.5 (current julia-stable, source built release in nixpkgs) doesn't pass its own test suite. Julia 1.6 doesn't have a source built package in nixpkgs yet, so julia_16-bin appears to be the only working julia derivation currently. * tazjin/tverskoy: Use zfs unstable, as stable zfs doesn't work with the latest kernel Co-Authored-By: Griffin Smith <grfn@gws.fyi> Co-Authored-By: sterni <sternenseemann@systemli.org> Change-Id: I6f2e3d9f75077e4755de6bde9104d44b584cbe4c Reviewed-on: https://cl.tvl.fyi/c/depot/+/3174 Tested-by: BuildkiteCI Reviewed-by: sterni <sternenseemann@systemli.org> Reviewed-by: tazjin <mail@tazj.in> Reviewed-by: grfn <grfn@gws.fyi>
2021-05-31 r/2635 revert(grfn/yeren): "Set timezone to Africa/Cairo"Griffin Smith1-2/+0
This reverts commit e1c45be3f58f5ae139439994b8d72f7d58c5c895. I'm back in NY now T.T Change-Id: Iaae2bf778195b9a99ac1a46068703a58e6b69053 Reviewed-on: https://cl.tvl.fyi/c/depot/+/3166 Reviewed-by: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2021-05-25 r/2630 chore(nixpkgs): Bump channels to 2021-05-25Vincent Ambo1-2/+8
* users/grfn/system/home/yeren: remove obsolete awscli2 overrides * ops: make new isSystemUser || isNormalUser assertion happy * users/grfn/system/system/mugwump: make buildkite agents system users * users/tazjin/nixos/camden: set isSystemUser = true for git * users/tazjin/emacs: Remove missing & broken packages * third_party/openldap: remove, as the argon2 module is now enabled upstream * third_party/gerrit_plugins: Pinned new unstable hashes * third_party/nix, third_party/grpc: Disabled CI as these are broken * third_party/overlays/emacs: Bumped version to stay in sync with channel * third_party/buzz: Update LIBCLANG_PATH to reference libclang.lib, since libclang's default output no longer contains libclang.so * users/grfn/system/home: Install julia-stable instead of julia (which aliases to julia-lts), as the latter depends on an insecure version of libgit Change-Id: Iff33b0ecb0ef07a82d1de35e23c40d2f4bf0f8ed Reviewed-on: https://cl.tvl.fyi/c/depot/+/3001 Tested-by: BuildkiteCI Reviewed-by: sterni <sternenseemann@systemli.org> Reviewed-by: grfn <grfn@gws.fyi>
2021-05-13 r/2593 feat(grfn/modules/laptop): Enable TLP serviceVincent Ambo1-0/+2
This service performes automatic power tuning and has effectively replaced powertop's tuning functionality in modern systems. Change-Id: I63c6999beed64d96c77b8b9287ed0d5fa6ddd9fa Reviewed-on: https://cl.tvl.fyi/c/depot/+/3121 Tested-by: BuildkiteCI Reviewed-by: grfn <grfn@gws.fyi>
2021-05-13 r/2592 fix(yeren): Force enable ASPM in kernel parametersVincent Ambo1-0/+1
This might help with the issue of devices being stuck in a slow power-saving mode after hibernation. Dell enables this on laptops shipping with Linux by default according to some forum posts. Change-Id: I3d7fdb5c2ed5e24289a6c20f21d027e11b7826e5 Reviewed-on: https://cl.tvl.fyi/c/depot/+/3120 Tested-by: BuildkiteCI Reviewed-by: grfn <grfn@gws.fyi>
2021-04-20 r/2528 refactor(grfn): Stop importing nixpkgs a bunch of timesVincent Ambo3-6/+4
Once is enough! <grfn> https://tazj.in/blobs/touch-garbage.jpg Change-Id: I68f66669e82d35a71752638450fa4b820e137172 Signed-Off-By: Florian Klink <flokli@flokli.de> Reviewed-on: https://cl.tvl.fyi/c/depot/+/3048 Tested-by: BuildkiteCI Reviewed-by: grfn <grfn@gws.fyi>
2021-04-17 r/2521 feat(grfn/yeren): Set timezone to Africa/CairoGriffin Smith2-1/+3
\o/ Change-Id: Ia456e044c48eee095408efc9f6b802b4337ea09f Reviewed-on: https://cl.tvl.fyi/c/depot/+/3026 Reviewed-by: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2021-04-16 r/2516 feat(grfn/yeren): Install rrGriffin Smith1-0/+4
This... mostly works! I had to install it from the latest master branch to get it functioning on my CPU, hopefully once they release a new version I can remove the override. Change-Id: I863d2e822b149838c58aa1c1e7dc73a127a0aeb8 Reviewed-on: https://cl.tvl.fyi/c/depot/+/3022 Reviewed-by: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2021-04-12 r/2485 refactor(users/glittershark): Rename to grfnGriffin Smith24-0/+1037
Rename my //users directory and all places that refer to glittershark to grfn, including nix references and documentation. This may require some extra attention inside of gerrit's database after it lands to allow me to actually push things. Change-Id: I4728b7ec2c60024392c1c1fa6e0d4a59b3e266fa Reviewed-on: https://cl.tvl.fyi/c/depot/+/2933 Tested-by: BuildkiteCI Reviewed-by: tazjin <mail@tazj.in> Reviewed-by: lukegb <lukegb@tvl.fyi> Reviewed-by: glittershark <grfn@gws.fyi>