From 85ee07457c5fe404f38b26e01712831a6c1e4f1e Mon Sep 17 00:00:00 2001
From: Vincent Ambo <Vincent Ambo>
Date: Sat, 4 Jan 2020 22:48:52 +0000
Subject: feat(ops/nixos): Add 'rebuilder' helper script

This script rebuilds & activates system configuration based on the
hostname.

Currently since there is only one host this isn't particularly
interesting.
---
 bin/__dispatch.sh     |  3 +++
 bin/rebuilder         |  1 +
 ops/nixos/README.md   |  6 +++---
 ops/nixos/default.nix | 28 ++++++++++++++++++++++++++--
 4 files changed, 33 insertions(+), 5 deletions(-)
 create mode 120000 bin/rebuilder

diff --git a/bin/__dispatch.sh b/bin/__dispatch.sh
index d9c2e7ee35c3..af56750872b1 100755
--- a/bin/__dispatch.sh
+++ b/bin/__dispatch.sh
@@ -38,6 +38,9 @@ case "${TARGET_TOOL}" in
   age-keygen)
     attr="third_party.age"
     ;;
+  rebuilder)
+    attr="ops.nixos.rebuilder"
+    ;;
   *)
     echo "The tool '${TARGET_TOOL}' is currently not installed in this repository."
     exit 1
diff --git a/bin/rebuilder b/bin/rebuilder
new file mode 120000
index 000000000000..8390ec9c9652
--- /dev/null
+++ b/bin/rebuilder
@@ -0,0 +1 @@
+__dispatch.sh
\ No newline at end of file
diff --git a/ops/nixos/README.md b/ops/nixos/README.md
index 9950a113ef47..9e88193dad7e 100644
--- a/ops/nixos/README.md
+++ b/ops/nixos/README.md
@@ -9,9 +9,9 @@ System configuration lives in folders for each machine and a custom
 fixed point evaluation (similar to standard NixOS module
 configuration) is used to combine configuration together.
 
-Building `ops.nixos.depot-switcher` yields a script that will
-automatically build and activate the newest configuration based on the
-current hostname.
+Building `ops.nixos.rebuilder` yields a script that will automatically
+build and activate the newest configuration based on the current
+hostname.
 
 ## Configured hosts:
 
diff --git a/ops/nixos/default.nix b/ops/nixos/default.nix
index 02a42425fdc6..d4aa9705d6a7 100644
--- a/ops/nixos/default.nix
+++ b/ops/nixos/default.nix
@@ -1,3 +1,4 @@
+# TODO(tazjin): rename 'pkgs' -> 'depot'?
 { pkgs, ... }:
 
 let
@@ -9,7 +10,30 @@ let
       foldl' lib.recursiveUpdate {} (map (c: c config) configs)
     );
   }).system;
-in {
-  # TODO(tazjin): rename 'pkgs' -> 'depot'?
+
   nuggetSystem = systemFor [ pkgs.ops.nixos.nugget ];
+
+  rebuilder = pkgs.third_party.writeShellScriptBin "rebuilder" ''
+    set -ue
+    if [[ $EUID -ne 0 ]]; then
+      echo "Oh no! Only root is allowed to rebuild the system!" >&2
+      exit 1
+    fi
+
+    case $HOSTNAME in
+    nugget)
+      echo "Rebuilding NixOS for //ops/nixos/nugget"
+      system=$(nix-build -E '(import <depot> {}).ops.nixos.nuggetSystem' --no-out-link)
+      ;;
+    *)
+      echo "$HOSTNAME is not a known NixOS host!" >&2
+      exit 1
+      ;;
+    esac
+
+    nix-env -p /nix/var/nix/profiles/system --set $system
+    $system/bin/switch-to-configuration switch
+  '';
+in {
+  inherit nuggetSystem rebuilder;
 }
-- 
cgit 1.4.1