ops/nixos/default.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40

# TODO(tazjin): rename 'pkgs' -> 'depot'?
{ pkgs, ... }:

let
  inherit (pkgs) lib;
  inherit (builtins) foldl';

  systemFor = configs: (pkgs.third_party.nixos {
    configuration = lib.fix(config:
      foldl' lib.recursiveUpdate {} (map (c: c config) configs)
    );
  }).system;

  rebuilder = pkgs.third_party.writeShellScriptBin "rebuilder" ''
    set -ue
    if [[ $EUID -ne 0 ]]; then
      echo "Oh no! Only root is allowed to rebuild the system!" >&2
      exit 1
    fi

    case $HOSTNAME in
    nugget)
      echo "Rebuilding NixOS for //ops/nixos/nugget"
      system=$(nix-build -E '(import <depot> {}).ops.nixos.nuggetSystem' --no-out-link)
      ;;
    *)
      echo "$HOSTNAME is not a known NixOS host!" >&2
      exit 1
      ;;
    esac

    nix-env -p /nix/var/nix/profiles/system --set $system
    $system/bin/switch-to-configuration switch
  '';
in {
  inherit rebuilder;

  nuggetSystem = systemFor [ pkgs.ops.nixos.nugget ];
  camdenSystem = systemFor [ pkgs.ops.nixos.camden ];
}