2
0
Fork 0
mirror of git://git.savannah.gnu.org/guix/maintenance.git synced 2023-12-14 03:33:04 +01:00
Commit graph

259 commits

Author SHA1 Message Date
Maxim Cournoyer 0ba36942a2
hydra: overdrive: Enable Btrfs compression.
* hydra/modules/sysadmin/overdrive.scm (%common-btrfs-options): New
variable.
(overdrive-system) [file-systems] </dev/sda3>: Use it for mount options.
2022-09-25 22:28:58 -04:00
Maxim Cournoyer 88ba60b97e
hydra: Adjust Btrfs balance jobs.
Balancing metadata is not recommended, so do not do it.  Reduce
balance usage filter threshold to 5%, which is more reasonable for a
balance running often and require less free blocks.

* hydra/modules/sysadmin/overdrive.scm (btrfs-job): Rename to:
(btrfs-balance-job).  Use the same snippet as used in
'deploy-node-129.scm'.
(overdrive-system) [services] <mcron-service-type>: Adjust for job rename.
* hydra/milano-guix-1.scm: Likewise.
* hydra/monokuma.scm: Likewise.
2022-09-25 22:28:58 -04:00
Andreas Enge 45bff0e548
hydra: Unify dover configuration with generic overdrive approach.
* hydra/modules/sysadmin/overdrive.scm (%accounts): Add Andreas.
(overdrive-system): Add Andreas's ssh key.
* hydra/dover.scm: Replace content by a call to overdrive-system.
2022-09-13 15:53:05 +02:00
Ludovic Courtès 7124f93868
hydra: overdrive: Use 'swap-space'.
* hydra/modules/sysadmin/overdrive.scm (overdrive-system): Change
'swap-devices' to use 'swap-space'.
2022-09-11 12:06:36 +02:00
Ludovic Courtès de740b9a07
hydra: overdrive: Use 'targets' in 'bootloader-configuration'.
* hydra/modules/sysadmin/overdrive.scm (overdrive-system): Use 'targets'
instead of 'target' in 'bootloader-configuration', the latter being
deprecated.
2022-09-11 12:04:23 +02:00
Ludovic Courtès 7b383c70b2
hydra: overdrive: Make substitute URL explicit.
Previously guix-daemon would run with --substitute-urls="https://ci.guix
https://bordeaux.guix"; this didn't break build farm isolation though
since the key of bordeaux.guix wasn't in /etc/guix/acl.

* hydra/modules/sysadmin/overdrive.scm (overdrive-system): Add
'substitute-urls' to <guix-configuration> record.
2022-09-11 12:01:46 +02:00
Ludovic Courtès ddc1439977
hydra: dns: Add video.guix for live streaming server.
* hydra/modules/sysadmin/dns.scm (video-streaming-ip4): New variable.
(guix.gnu.org.zone): Add "video" A record.
2022-09-10 12:19:17 +02:00
Mathieu Othacehe af0d279f40
hydra: Add offloading service to Berlin.
Add a service registering the /etc/guix/machines.scm file to enable the
offload mechanism.

* hydra/modules/sysadmin/services.scm (%offload-service): New variable.
(frontend-services): Use it.
2022-09-07 08:05:58 +02:00
Christopher Baines 85d8e93821
hydra: dns: Add entry for 'qa'.
* hydra/modules/sysadmin/dns.scm (guix.gnu.org.zone): Add "qa".
(guix.gnu.org-zone): Bump 'serial'.
2022-09-06 09:44:53 +01:00
Maxim Cournoyer fede010299
hydra: build-machines: Add Tobias as sysadmin.
* hydra/modules/sysadmin/build-machines.scm
(berlin-new-build-machine-os): Add Tobias as sysadmin.
2022-07-29 10:19:26 -04:00
Ludovic Courtès d436b8fa9a
hydra: services: Really run "certbot renew" twice per week.
* hydra/modules/sysadmin/services.scm (%certbot-job): Use Vixie cron
syntax and really run twice per week.
2022-07-11 17:52:28 +02:00
Ludovic Courtès 30c1930dd7
hydra: cuirass: Add "time-travel" jobset.
* hydra/modules/sysadmin/services.scm (cuirass-specs): Add 'time-travel' jobset.
2022-07-11 17:52:28 +02:00
Tobias Geerinckx-Rice ead77feb81
hydra: Fix ‘…/manual’-style URLs without a trailing ‘/’.
These are used in, e.g., Guix System's /etc/os-release and were
embarrassingly broken.

* hydra/modules/sysadmin/nginx.scm (guix.gnu.org-other-locations):
Handle the absence of a trailing ‘/’ in manual & cookbook URLs.
2022-06-12 02:00:00 +02:00
Maxim Cournoyer 5febef1727
hydra: berlin-new-build-machine-os: Add sudoers config.
* hydra/modules/sysadmin/build-machines.scm
(berlin-new-build-machine-os) [sudoers-file]: New field.
2022-06-16 12:07:07 -04:00
Maxim Cournoyer c597655101
hydra: Add myself as sysadmin to 'berlin-new-build-machine-os'.
* hydra/modules/sysadmin/build-machines.scm
(berlin-new-build-machine-os): Register myself as sysadmin.
2022-06-16 12:07:07 -04:00
Ludovic Courtès eb7bcd38ad
hydra: honeycomb: Add 'hosts-file' with entry for ci.guix.gnu.org.
Since these machines are hosted in the MDC data center, this ensures
they access ci.guix.gnu.org via the LAN.

* hydra/modules/sysadmin/honeycomb.scm (honeycomb-system): Add
'hosts-file' field.
2022-06-15 14:33:55 +02:00
Ludovic Courtès b0661cc7d6
hydra: honeycomb: Allow root logins from 10.0.0.1.
* hydra/modules/sysadmin/honeycomb.scm (honeycomb-system): Add 'Match'
block in 'openssh-configuration'.
2022-06-11 23:17:23 +02:00
Ludovic Courtès 80413ee558
hydra: honeycomb: Fetch substitutes from berlin only.
Partly fixes <https://issues.guix.gnu.org/55848>.

* hydra/modules/sysadmin/honeycomb.scm (honeycomb-system): Add
'substitute-urls' to 'guix-configuration' record.
2022-06-11 23:15:30 +02:00
Ludovic Courtès 99bd9dc900
hydra: honeycomb: Fetch substitutes from http://10.0.0.1.
Partly fixes <https://issues.guix.gnu.org/55848>.
Reported by Tom Fitzhenry <tom@tom-fitzhenry.me.uk>.

* hydra/modules/sysadmin/honeycomb.scm (honeycomb-system): Add
'substitute-urls' to 'cuirass-remote-worker-configuration'.
* doc/cuirass.org (Connect an external machine): Likewise.
2022-06-11 22:48:07 +02:00
Ludovic Courtès b09cfc2075
hydra: dns: Add entry for '10years'.
* hydra/modules/sysadmin/dns.scm (guix.gnu.org.zone): Add "10years".
(guix.gnu.org-zone): Bump 'serial'.
2022-06-06 11:48:36 +02:00
Ludovic Courtès 6c969b482e
hydra: Drop TLSv1 and enable TLSv1.3.
* hydra/bayfront.scm (%hpc.guix.info-nginx-servers)
(%guix-hpc.bordeaux.inria.fr-nginx-servers)
(%logs.guix.gnu.org-nginx-servers)
(%coordinator.bayfront.guix.gnu.org-nginx-servers)
(%bayfront.guix.gnu.org-nginx-servers)
(%bordeaux.guix.gnu.org-nginx-servers): Change 'ssl_protocols' nginx
setting to "TLSv1.1 TLSv1.2 TLSv1.3".
* hydra/lakeside.scm (%nginx-server-blocks): Likewise.
* hydra/modules/sysadmin/nginx.scm (%tls-settings): Likewise.
* hydra/nginx/hydra.gnu.org.conf: Likewise.
* hydra/nginx/mirror.conf: Likewise.
2022-06-06 11:48:35 +02:00
Ludovic Courtès 4a9a90c587
hydra: web: Make mcron job derivations deterministic.
The result of (hash config period) varies between runs.  Thus, starting
from bdb914a124, each run of "guix system
build -d ..." would produce a different derivation.

This commit fixes that.

* hydra/modules/sysadmin/web.scm (static-web-site-mcron-jobs)[record->list]:
New procedure.
Use it.
2022-06-06 11:48:35 +02:00
Ludovic Courtès 07f587cb26
hydra: Add missing service type 'description' field.
* hydra/modules/sysadmin/people.scm (sysadmin-service-type)[description]:
New field.
2022-05-24 14:57:36 +02:00
Christopher Baines bf51ddc06c
hydra: dns: Add entry for bishan.
This is a new machine, intended to replace lakeside as storage for
bordeaux.guix.gnu.org nars as lakeside has disk issues.

* hydra/modules/sysadmin/dns.scm (guix.gnu.org.zone): Add entry for bishan.
2022-05-07 11:59:59 +01:00
Julien Lepiller bf537f9cb0
hydra: berlin: Support `ja' language.
* hydra/modules/sysadmin/nginx.scm (languages-to-accept): Add ja.
2022-04-09 11:55:47 +02:00
Ludovic Courtès fc21ab3e2b
hydra: build-machine: Remove "--cpu base" from <hurd-vm-configuration>.
This would lead ext2fs to hang during startup, for unknown reasons.

* hydra/modules/sysadmin/build-machines.scm (berlin-new-build-machine-os):
Remove 'options'.
2022-03-18 22:55:28 +01:00
Maxim Cournoyer ea3817d9c8
hydra: build-machines: Update swap-devices field definition.
* hydra/modules/sysadmin/build-machines.scm
(berlin-new-build-machine-os)[swap-devices]: Use a swap-space record
for the device.
2022-03-17 16:32:56 -04:00
Maxim Cournoyer f49b15274e
berlin: Disable gzip compression for substitutes.
* hydra/modules/sysadmin/services.scm (frontend-services): Remove gzip
from the list of supported compression types.
2022-03-03 13:19:07 -05:00
Christopher Baines ad73d164ad
hydra: dns: Fix entry for data.qa.
* hydra/modules/sysadmin/dns.scm (guix.gnu.org.zone): Remove the v.
2022-03-02 18:45:07 +00:00
Christopher Baines 6b4f0dcf19
hydra: dns: Add entry for data.qa.
Pointing at the machine where I'm running a Guix Data Service instance
for processing non-master branches and patches.

This is intended to be a stable domain that can be used to serve
derivations to the bordeaux build coordinator agents, enabling builds
of derivations from non-master branches and patch series.

* hydra/modules/sysadmin/dns.scm (data.qa-ip4): New variable.
(guix.gnu.org.zone): Add entries for data.qa, bump serial.
2022-03-02 09:16:35 +00:00
Ricardo Wurmus 027f0e7a58
hydra: build-machines: Remove aarch64 emulation.
* hydra/modules/sysadmin/build-machines.scm (berlin-new-build-machine-os):
Remove aarch64-linux from default systems.
2022-02-18 20:18:46 +01:00
Ricardo Wurmus 7657d05981
hydra: honeycomb: Customize bootloader.
* hydra/modules/sysadmin/honeycomb.scm (honeycomb-extlinux-configuration-file):
New procedure.
(honeycomb-bootloader): New variable.
(honeycomb-system)[bootloader]: Use it.
2022-02-16 20:21:22 +01:00
Mathieu Othacehe cffcedb57e
Add a crash-dump service. 2022-02-02 17:06:12 +01:00
Christopher Baines 18f11364eb
hydra: dns: Add entries for lakeside.
This is a machine hosted by Hetzner, responsible for storing and
serving nars for bordeaux.guix.gnu.org.

* hydra/modules/sysadmin/dns.scm (lakeside-ip4, lakeside-ip6): New
variables.
(guix.gnu.org.zone): Add entries for lakeside, bump serial.
2022-02-01 19:13:53 +00:00
Ricardo Wurmus 36f83499e4
hydra: honeycomb: Remove custom Linux libre sources.
* hydra/modules/sysadmin/honeycomb.scm (linux-libre-5.15-version,
linux-libre-5.15-gnu-revision, deblob-scripts-5.15,
linux-libre-5.15-pristine-source, linux-libre-5.15-source): Remove.
(linux-libre-arm64-honeycomb): Use linux-libre-5.15-version.
2022-01-29 21:52:59 +01:00
Ricardo Wurmus e63f6ecd64
hydra: web: Fix typo.
* hydra/modules/sysadmin/web.scm: Fix typo.
2022-01-29 21:46:59 +01:00
Ludovic Courtès 601691e7ea
hydra: web: Provide all-in-one 'guix-web-site-service-type'.
* hydra/modules/sysadmin/web.scm (guix-static-web-sites)
(guix-web-site-service-type): New variables.
* hydra/nginx/berlin.scm (%berlin-servers): Remove
GUIX.GNU.ORG-NGINX-SERVER.
* hydra/website.scm (website-services): Remove
'static-web-site-service-type' instance for guix.gnu.org and use
'guix-web-site-service-type' instead.
* hydra/bayfront.scm <services>: Extend STATIC-WEB-SITE-SERVICE-TYPE for
hpc.guix.info.
2021-12-22 12:50:01 +01:00
Ludovic Courtès 25be6ec34d
hydra: web: 'static-web-site-service-type' is extensible.
* hydra/modules/sysadmin/web.scm (static-web-site-service-type)[compose,
extend, default-value]: New fields
2021-12-22 12:50:01 +01:00
Ludovic Courtès 7b1b28271c
hydra: web: 'static-web-site-service-type' handles lists of sites.
* hydra/modules/sysadmin/web.scm (static-web-site-mcron-jobs): Expect a
list of <static-web-site-configuration> records.
(static-web-site-activation): Likewise.
(static-web-site-accounts): Define using 'const'.
* hydra/website.scm (website-services): Adjust accordingly, using one
'static-web-site-service-type' instance for all of guix.gnu.org.
* hydra/bayfront.scm <services>: Adjust hpc.guix.info instance
accordingly.
2021-12-22 12:50:00 +01:00
Ludovic Courtès 4cf3743e0d
hydra: Add (sysadmin nginx) module.
This factorizes the guix.gnu.org web site configuration.
The nginx.conf derivation for berlin.scm is left unchanged.

* hydra/nginx/berlin.scm (le, redirect, %tls-settings)
(guix.gnu.org-redirect-locations, languages-to-accept)
(guix.gnu.org-redirects-for-each-language)
(guix.gnu.org-other-locations, accept-languages): Move to...
* hydra/modules/sysadmin/nginx.scm: ... here.
* hydra/nginx/berlin.scm (%berlin-servers): Use
GUIX.GNU.ORG-NGINX-SERVER instead of the inline copy.
2021-12-22 12:50:00 +01:00
Ricardo Wurmus e19f6d92b0
hydra: build-machines: Use TARGETS instead of TARGET.
* hydra/modules/sysadmin/build-machines.scm (berlin-new-build-machine-os):
Use TARGETS in BOOTLOADER-CONFIGURATION.
2021-12-21 22:14:08 +01:00
Mathieu Othacehe 710135e1b0
hydra: services: Increase the publish bypass threshold.
* hydra/modules/sysadmin/services.scm (frontend-services): Increase it to 100MiB.
2021-12-21 16:52:27 +01:00
Ludovic Courtès 275a2ac393
hydra: Factorize berlin's 'wireguard-peer' record.
* hydra/dover.scm (berlin-peer): Remove.  Use BERLIN-WIREGUARD-PEER
instead.
* hydra/modules/sysadmin/honeycomb.scm (berlin-peer): Likewise.
* hydra/modules/sysadmin/overdrive.scm (berlin-peer): Likewise.
* hydra/bayfront.scm: Use BERLIN-WIREGUARD-PEER instead of the inline
definition.
* hydra/modules/sysadmin/services.scm (berlin-wireguard-peer): New
variable.
2021-12-21 16:37:35 +01:00
Christopher Baines 8a7e2006fe
hydra: dns: Add IPv6 entries for bayfront.
* hydra/modules/sysadmin/dns.scm (guix.gnu.org.zone): Add IPv6 entries
for bayfront.
2021-12-21 14:40:22 +00:00
Ricardo Wurmus af72899a3a
sysadmin: Disable SSH password authentication.
* hydra/modules/sysadmin/services.scm (frontend-services): Disable
password authentication for openssh-service-type.
2021-12-19 14:29:06 +01:00
Ricardo Wurmus 9a60c45f86
hydra: honeycomb: Permit root login from head node.
* hydra/modules/sysadmin/honeycomb.scm
<services>[openssh-service-type]: Permit root login from .131.
2021-12-19 10:11:49 +01:00
Ludovic Courtès 5e06b5d8b5
sysadmin: web: Jobs run at most for the duration of their period.
* hydra/modules/sysadmin/web.scm (build-program): Add #:max-duration
parameter.
[build]: Add calls to 'sigaction' and 'alarm'.  Add some logging.
(static-web-site-mcron-jobs): Pass #:max-duration to 'build-program'.
2021-12-03 12:48:05 +01:00
Ricardo Wurmus 6ba859f2fd
hydra: honeycomb: Increase number of build accounts to 50.
* hydra/modules/sysadmin/honeycomb.scm: Set build-accounts in
guix-configuration to 50.
2021-11-29 11:53:59 +01:00
Ricardo Wurmus 738f76c611
hydra: honeycomb: Increase cuirass remote workers to 4.
* hydra/modules/sysadmin/honeycomb.scm <services>: Increase workers in
cuirass-remote-worker-configuration to 4.
2021-11-26 15:43:22 +01:00
Ricardo Wurmus 55c32489cc
hydra: honeycomb: Add keep-alive value for berlin-peer.
* hydra/modules/sysadmin/honeycomb.scm (berlin-peer): Add keep-alive
field to wireguard-peer.
2021-11-26 15:06:06 +01:00