Commit graph

3074 commits

Author SHA1 Message Date
Tom Foster
8668412a88 Tweak 2024-04-23 21:31:37 +01:00
Tom Foster
5f3da4af68 Rename and reorganise builds 2024-04-23 21:27:47 +01:00
Tom Foster
fd6f7cd937 Locations 2024-04-23 20:01:30 +01:00
Tom Foster
45bddf1fe0 Extra permissions required to move statics 2024-04-23 19:08:50 +01:00
Tom Foster
1cf4debd3c Reposition caches 2024-04-23 17:24:22 +01:00
Tom Foster
52997e3dac Install Cachix correctly 2024-04-23 17:04:43 +01:00
Tom Foster
98788c753d Grammatical correctness 2024-04-23 16:57:21 +01:00
Tom Foster
c8ff36ea68 Combine extra nix config lines 2024-04-23 16:50:07 +01:00
Tom Foster
0d17ab2ac8 Sudo tee to write config changes 2024-04-23 16:32:14 +01:00
Tom Foster
b1a9f2a652 Superuser required to update nix.conf 2024-04-23 16:27:33 +01:00
Tom Foster
d70085d2a5 Magic Nix Cache 2024-04-23 16:25:41 +01:00
Tom Foster
ae39a9f80d Test caching 2024-04-23 15:34:26 +01:00
Tom Foster
7f5fb25627 Test magic cache 2024-04-23 15:13:45 +01:00
Tom Foster
ce05d955c3 Implement caching for /nix/store 2024-04-23 14:17:34 +01:00
Tom Foster
3de3aead23
Refactor direnv and nix launch 2024-04-23 13:50:35 +01:00
Tom Foster
2a71457203
Improved labelling/outputs 2024-04-23 13:24:00 +01:00
Tom Foster
4d2053d250
Single multi-threaded pipeline 2024-04-23 13:20:37 +01:00
Tom Foster
2b05845095
Split deb to separate task 2024-04-23 12:41:38 +01:00
Tom Foster
2d94da50dd
Delete build environment artifact after builds complete 2024-04-23 11:28:25 +01:00
Tom Foster
52442ba1ca
Ensure .direnvrc exists every time 2024-04-23 11:02:22 +01:00
Tom Foster
c7c7615676
Move direnv to build stage 2024-04-23 10:40:54 +01:00
Tom Foster
d439e37ddf
Ensure .direnvrc exists 2024-04-23 10:12:28 +01:00
Tom Foster
d4e24892b2
Sudo to extract build environment to root 2024-04-23 09:48:20 +01:00
Tom Foster
baa47f9c6d
Correct name for restored build artifact 2024-04-23 09:27:20 +01:00
Tom Foster
4827be7007
.direnvrc is not used 2024-04-23 09:04:52 +01:00
Tom Foster
b649ed3727
Tar entire build environment 2024-04-22 23:06:31 +01:00
Tom Foster
f90136c9a3
Move artifact files to root 2024-04-22 22:07:36 +01:00
Tom Foster
a969163f79
Compress nix store to artifact filenames with special characters 2024-04-22 21:10:33 +01:00
Tom Foster
268d668107
Move secrets usage to env definition 2024-04-22 20:15:39 +01:00
Tom Foster
893566378c
Use artifact for build environment 2024-04-22 19:56:17 +01:00
Tom Foster
0a5af7c571
Fix login for container registries 2024-04-22 19:42:03 +01:00
Tom Foster
83d8b8bf29 direnv fix 2024-04-22 18:05:19 +01:00
Tom Foster
ccbf2e3870 Test less parallel CI 2024-04-22 18:00:57 +01:00
Tom Foster
5a8921558e Separate CI job for publishing docker manifest 2024-04-22 11:49:35 -04:00
strawberry
af6ed05b6a dont allow admin room to be made world readable
Signed-off-by: strawberry <strawberry@puppygock.gay>
2024-04-22 02:54:06 -04:00
Charles Hall
f59e47065c update flake.lock
Flake lock file updates:

• Updated input 'attic':
    'github:zhaofengli/attic/6eabc3f02fae3683bffab483e614bebfcd476b21?narHash=sha256-wSZjK%2BrOXn%2BUQiP1NbdNn5/UW6UcBxjvlqr2wh%2B%2BMbM%3D' (2024-02-14)
  → 'github:zhaofengli/attic/4dbdbee45728d8ce5788db6461aaaa89d98081f0?narHash=sha256-0O4v6e4a1toxXZ2gf5INhg4WPE5C5T%2BSVvsBt%2B45Mcc%3D' (2024-03-29)
• Updated input 'attic/nixpkgs':
    'github:NixOS/nixpkgs/aa9d4729cbc99dabacb50e3994dcefb3ea0f7447?narHash=sha256-KnIRG5NMdLIpEkZTnN5zovNYc0hhXjAgv6pfd5Z4c7U%3D' (2023-12-14)
  → 'github:NixOS/nixpkgs/07262b18b97000d16a4bdb003418bd2fb067a932?narHash=sha256-QoQqXoj8ClGo0sqD/qWKFWezgEwUL0SUh37/vY2jNhc%3D' (2024-03-25)
• Updated input 'attic/nixpkgs-stable':
    'github:NixOS/nixpkgs/1e2e384c5b7c50dbf8e9c441a9e58d85f408b01f?narHash=sha256-blbrBBXjjZt6OKTcYX1jpe9SRof2P9ZYWPzq22tzXAA%3D' (2023-12-17)
  → 'github:NixOS/nixpkgs/44733514b72e732bd49f5511bd0203dea9b9a434?narHash=sha256-akSgjDZL6pVHEfSE6sz1DNSXuYX6hq%2BP/1Z5IoYWs7E%3D' (2024-03-26)
• Updated input 'crane':
    'github:ipetkov/crane/55f4939ac59ff8f89c6a4029730a2d49ea09105f?narHash=sha256-Vz1KRVTzU3ClBfyhOj8gOehZk21q58T1YsXC30V23PU%3D' (2024-04-21)
  → 'github:ipetkov/crane/f6c6a2fb1b8bd9b65d65ca9342dd0eb180a63f11?narHash=sha256-qd/MuLm7OfKQKyd4FAMqV4H6zYyOfef5lLzRrmXwKJM%3D' (2024-04-21)
• Updated input 'fenix':
    'github:nix-community/fenix/aa45c3e901ea42d6633af083c0c555efaf948b17?narHash=sha256-nTaO7ZDL4D02dVC5ktqnXNiNuODBUHyE4qEcFjAUCQY%3D' (2024-03-28)
  → 'github:nix-community/fenix/19aaa94a73cc670a4d87e84f0909966cd8f8cd79?narHash=sha256-3pbv7UgAgetwz9YdjzIT/lZ6Rgj6wj6MR4mphBLyDjU%3D' (2024-04-21)
• Updated input 'fenix/rust-analyzer-src':
    'github:rust-lang/rust-analyzer/ad51a17c627b4ca57f83f0dc1f3bb5f3f17e6d0b?narHash=sha256-s/YOyBM0vumhkqCFi8CnV5imFlC5JJrGia8CmEXyQkM%3D' (2024-03-27)
  → 'github:rust-lang/rust-analyzer/55d9a533b309119c8acd13061581b43ae8840823?narHash=sha256-iN5QUlUq527lswmBC%2BRopfXdu6Xx7mmTaBSH2l59FtM%3D' (2024-04-20)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/2726f127c15a4cc9810843b96cad73c7eb39e443?narHash=sha256-UKcYiHWHQynzj6CN/vTcix4yd1eCu1uFdsuarupdCQQ%3D' (2024-03-27)
  → 'github:NixOS/nixpkgs/5c24cf2f0a12ad855f444c30b2421d044120c66f?narHash=sha256-XtTSSIB2DA6tOv%2Bl0FhvfDMiyCmhoRbNB%2B0SeInZkbk%3D' (2024-04-19)
2024-04-22 02:49:36 -04:00
Charles Hall
60756b16d5 add cargo-audit to the devshell
Apparently github actions VMs ship with it and that's how it was working
before? Cursed. We should control our own supply chain and also ensure
that local development uses the same version as CI.
2024-04-22 02:49:36 -04:00
Charles Hall
8a7e8271ad use lib.makeScope and files to organize packages
Some of the improvements here include:

* rocksdb can actually use jemalloc now instead of just pulling in a
  second rocksdb for no reason
* "complement-runtime" factored back out into shell file
* complement image no longer uses `mkDerivation` for `copyToRoot`
  because that's what `buildEnv` is for
* complement image no longer sets `SERVER_NAME`, complement already does
  that
* all packages were factored out into `callPackage`-able files for use
  with a custom `lib.makeScope pkgs.newScope`
* new version of `mkPackage` has options that are easier to use and
  override such as `features`
2024-04-22 02:49:36 -04:00
Charles Hall
e678af7601 always go through inputs 2024-04-22 02:49:36 -04:00
Charles Hall
d77aa94c66 remove dead code 2024-04-22 02:49:36 -04:00
Charles Hall
55dbca2aa9 get complement via flake inputs
Flake lock file updates:

• Added input 'complement':
    'github:matrix-org/complement/d73c81a091604b0fc5b6b0617dcac58c25763f57?narHash=sha256-hom/Lt0gZzLWqFhUJG0X2i88CAMIILInO5w0tPj6G3s%3D' (2024-04-18)
2024-04-22 02:49:36 -04:00
Charles Hall
61cd28f66a get rocksdb via flake inputs
Flake lock file updates:

• Added input 'rocksdb':
    'github:facebook/rocksdb/bcf88d48ce8aa8b536aee4dd305533b3b83cf435?narHash=sha256-vRPyrXkXVVhP56n5FVYef8zbIsnnanQSpElmQLZ7mh8%3D' (2024-04-16)
2024-04-22 02:49:36 -04:00
Charles Hall
0bd80a53f8 flatten and sort all flake inputs 2024-04-22 02:49:36 -04:00
strawberry
8fde1e6239 use global valid_cidr_range everywhere else
Signed-off-by: strawberry <strawberry@puppygock.gay>
2024-04-22 01:52:48 -04:00
Jason Volk
12dc99d283 various logging improvements.
Signed-off-by: Jason Volk <jason@zemos.net>
2024-04-22 01:48:11 -04:00
Jason Volk
17f493ec4d precompute cidr range denylist; move validator.
Signed-off-by: Jason Volk <jason@zemos.net>
2024-04-22 01:48:07 -04:00
strawberry
923b7a5264 forgor is_err check too
Signed-off-by: strawberry <strawberry@puppygock.gay>
2024-04-22 01:44:22 -04:00
strawberry
9107a8854a some more room alias helper logging
Signed-off-by: strawberry <strawberry@puppygock.gay>
2024-04-22 01:25:28 -04:00
strawberry
fd8bbe6c93 remove unnecessary continue
Signed-off-by: strawberry <strawberry@puppygock.gay>
2024-04-22 00:47:04 -04:00
strawberry
5a08e52282 try finding more servers for federation hierarchy instead of room ID server name
just the room ID server name is terrible

Signed-off-by: strawberry <strawberry@puppygock.gay>
2024-04-22 00:44:35 -04:00