Commit Graph

1437 Commits

Author SHA1 Message Date
Leo Famulari 3142c0886f
.guix-authorizations: Remove Mark Weaver due to inactivity.
* .guix-authorizations: Remove mhw.
2022-01-03 23:11:23 -05:00
Leo Famulari da2502c8d5
.guix-authorizations: Remove Chris Marusich due to inactivity.
* .guix-authorizations: Remove marusich.
2022-01-03 23:10:21 -05:00
Leo Famulari fb6712781d
.guix-authorizations: Remove Jelle Licht.
* .guix-authorizations: Remove jlicht.
2022-01-03 23:02:20 -05:00
Leo Famulari 56d2546665
.guix-authorizations: Remove Jan (janneke) Nieuwenhuizen due to inactivity.
* .guix-authorizations: Remove janneke.
2022-01-03 22:58:44 -05:00
Leo Famulari cb79cd33a9
.guix-authorizations: Remove Danny Milosavljevic due to inactivity.
* .guix-authorizations: Remove dannym.
2022-01-03 22:57:03 -05:00
Leo Famulari 58957b565b
.guix-authorizations: Remove Gábor Boskovits due to inactivity.
* .guix-authorizations: Remove boskovits.
2022-01-03 22:45:51 -05:00
Mathieu Othacehe 1bd6f5c272
hydra: berlin: Increase postgresql max_connections.
* hydra/berlin.scm: Increase it to 300.
2021-12-26 21:36:52 +01:00
Ludovic Courtès 601691e7ea
hydra: web: Provide all-in-one 'guix-web-site-service-type'.
* hydra/modules/sysadmin/web.scm (guix-static-web-sites)
(guix-web-site-service-type): New variables.
* hydra/nginx/berlin.scm (%berlin-servers): Remove
GUIX.GNU.ORG-NGINX-SERVER.
* hydra/website.scm (website-services): Remove
'static-web-site-service-type' instance for guix.gnu.org and use
'guix-web-site-service-type' instead.
* hydra/bayfront.scm <services>: Extend STATIC-WEB-SITE-SERVICE-TYPE for
hpc.guix.info.
2021-12-22 12:50:01 +01:00
Ludovic Courtès 25be6ec34d
hydra: web: 'static-web-site-service-type' is extensible.
* hydra/modules/sysadmin/web.scm (static-web-site-service-type)[compose,
extend, default-value]: New fields
2021-12-22 12:50:01 +01:00
Ludovic Courtès 7b1b28271c
hydra: web: 'static-web-site-service-type' handles lists of sites.
* hydra/modules/sysadmin/web.scm (static-web-site-mcron-jobs): Expect a
list of <static-web-site-configuration> records.
(static-web-site-activation): Likewise.
(static-web-site-accounts): Define using 'const'.
* hydra/website.scm (website-services): Adjust accordingly, using one
'static-web-site-service-type' instance for all of guix.gnu.org.
* hydra/bayfront.scm <services>: Adjust hpc.guix.info instance
accordingly.
2021-12-22 12:50:00 +01:00
Ludovic Courtès 4cf3743e0d
hydra: Add (sysadmin nginx) module.
This factorizes the guix.gnu.org web site configuration.
The nginx.conf derivation for berlin.scm is left unchanged.

* hydra/nginx/berlin.scm (le, redirect, %tls-settings)
(guix.gnu.org-redirect-locations, languages-to-accept)
(guix.gnu.org-redirects-for-each-language)
(guix.gnu.org-other-locations, accept-languages): Move to...
* hydra/modules/sysadmin/nginx.scm: ... here.
* hydra/nginx/berlin.scm (%berlin-servers): Use
GUIX.GNU.ORG-NGINX-SERVER instead of the inline copy.
2021-12-22 12:50:00 +01:00
Ludovic Courtès 79819b87b0
Revert "bayfront: Use substitutes from berlin."
This reverts commit 6a0348a52e.
The two build farms are intended to be independent.
2021-12-22 12:50:00 +01:00
Ludovic Courtès 881de2c7e1
hydra: bayfront: Remove 'disarchive-service-type' instance.
This technique wouldn't work as long as ci.guix.gnu.org substitutes
aren't authorized:

  https://lists.gnu.org/archive/html/guix-devel/2021-10/msg00167.html

It's also unnecessary now that 498a532c31
periodically rsyncs the Disarchive database from berlin.

* hydra/bayfront.scm <services>: Remove DISARCHIVE-SERVICE-TYPE
instance.
2021-12-22 12:50:00 +01:00
Ricardo Wurmus e19f6d92b0
hydra: build-machines: Use TARGETS instead of TARGET.
* hydra/modules/sysadmin/build-machines.scm (berlin-new-build-machine-os):
Use TARGETS in BOOTLOADER-CONFIGURATION.
2021-12-21 22:14:08 +01:00
Ricardo Wurmus 9ca009815f
hydra: berlin-nodes: Enable node 125.
* hydra/berlin-nodes.scm (nodes): Update node 125 and uncomment.
2021-12-21 22:09:07 +01:00
Ludovic Courtès e117d1374c
hydra: bayfront: hpcguix-web refers to https://data.guix.gnu.org.
* hydra/bayfront.scm <service>: hpcguix-web refers to
"https://data.guix.gnu.org".
2021-12-21 20:40:28 +01:00
Ludovic Courtès 68337ccd9d
hydra: bayfront: Use the new 'bootloader-configuration' interface.
* hydra/bayfront.scm <bootloader>: Change 'target' to 'targets'.
2021-12-21 20:39:33 +01:00
Ludovic Courtès 498a532c31
hydra: bayfront: Periodically rsync bits from berlin.
* hydra/bayfront.scm (backup-mcron-jobs, backup-activation)
(backup-service-type): New variables.
<services>: Use it.
2021-12-21 20:38:37 +01:00
Mathieu Othacehe fa5b02c5b7
hydra: berlin: Increase ngingx proxy narinfo timeouts.
* hydra/nginx/berlin.scm (publish-locations): Increase the timeouts to 10s.
2021-12-21 16:53:47 +01:00
Mathieu Othacehe 710135e1b0
hydra: services: Increase the publish bypass threshold.
* hydra/modules/sysadmin/services.scm (frontend-services): Increase it to 100MiB.
2021-12-21 16:52:27 +01:00
Ludovic Courtès 8ed8a5c32f
hydra: berlin: Run rsync in daemon mode.
* hydra/berlin.scm (%rsync-modules-for-backup): New variable.
<services>: Add 'rsync-service-type' instance.
* hydra/website.scm (website-services): Add comment about the Cuirass
and GWL web sites.
2021-12-21 16:38:14 +01:00
Ludovic Courtès 275a2ac393
hydra: Factorize berlin's 'wireguard-peer' record.
* hydra/dover.scm (berlin-peer): Remove.  Use BERLIN-WIREGUARD-PEER
instead.
* hydra/modules/sysadmin/honeycomb.scm (berlin-peer): Likewise.
* hydra/modules/sysadmin/overdrive.scm (berlin-peer): Likewise.
* hydra/bayfront.scm: Use BERLIN-WIREGUARD-PEER instead of the inline
definition.
* hydra/modules/sysadmin/services.scm (berlin-wireguard-peer): New
variable.
2021-12-21 16:37:35 +01:00
Mathieu Othacehe 6a0348a52e
bayfront: Use substitutes from berlin.
* hydra/bayfront.scm: Use them.
2021-12-21 16:27:22 +01:00
Mathieu Othacehe fe3d18fc2e
berlin: Add bayfront to Wireguard peers.
* hydra/berlin.scm: Add bayfront to Wireguard peers.
2021-12-21 16:14:52 +01:00
Mathieu Othacehe 969c0b5594
hydra: bayfront: Add Wireguard service.
* hydra/bayfront.scm: Add Wireguard service.
* doc/cuirass.org (External machines): Update it.
2021-12-21 15:55:40 +01:00
Christopher Baines 8a7e2006fe
hydra: dns: Add IPv6 entries for bayfront.
* hydra/modules/sysadmin/dns.scm (guix.gnu.org.zone): Add IPv6 entries
for bayfront.
2021-12-21 14:40:22 +00:00
Christopher Baines 0c863b4457
hydra: bayfront: Have NGinx listen via IPv6 as well as IPv4.
This means that when the relevant AAAA records are added, these sites
will be available over IPv6.

* hydra/bayfront.scm (%hpc.guix.info-nginx-servers,
%guix-hpc.bordeaux.inria.fr-nginx-servers,
%coordinator.bayfront.guix.gnu.org-nginx-servers,
%bayfront.guix.gnu.org-nginx-servers,
%bordeaux.guix.gnu.org-nginx-servers): Listen on IPv6 as well as IPv4.
2021-12-21 14:40:21 +00:00
Christopher Baines df9649a56f
hydra: bayfront: Update static networking configuration.
* hydra/bayfront.scm (services): Update the static networking
configuration to the new style, and add the IPv6 config.
2021-12-21 13:56:43 +00:00
Christopher Baines fcb31b2cd9
hydra: bayfront: Use the Nar Herder for bordeaux.guix.gnu.org.
This changes were made last week.

This commit switches from serving narinfo files directly from the
disk, and instead has NGinx forward those requests to the
nar-herder. For nar requests, NGinx will check the local storage, and
if the nar isn't there, it'll forward the requests to
lakefront.cbaines.net. Additionally, the nars are now cached by
NGinx. The Guix Build Coordinator configuration is changed to call the
nar-herder to import new nars.

* hydra/bayfront.scm: Adapt the NGinx and Guix Build Coordinator
configuration for the introduction of the Nar Herder.
2021-12-21 11:45:18 +00:00
Christopher Baines 4a88734229
hydra: bayfront: Use 8 worker processes for NGinx.
This increases the number of concurrent requests it can handle.

* hydra/bayfront.scm (services): Alter the nginx-configuration to run
8 worker processes.
2021-12-21 11:42:21 +00:00
Mathieu Othacehe 8250a46b2f
hydra: bayfront: Build Guix websites.
* hydra/bayfront.scm: Build Guix websites.
2021-12-21 12:26:09 +01:00
Mathieu Othacehe 85524046b5
hydra: Create a website module.
Factorize website services in a single (website) module so that they can be
hosted by multiple nodes for redundancy.

* hydra/website.scm: New file.
* hydra/berlin.scm: Use it.
2021-12-21 12:05:00 +01:00
Christopher Baines 6fa9a3ff00
hydra: bayfront: Stop serving nars through bayfront.guix.gnu.org.
This is partially duplicating the behaviour of the NGinx configuration
for bordeaux.guix.gnu.org. For maintainability, I think it's worth now
switching to just having bordeaux.guix.gnu.org serve nars. This also
enables getting guix publish back running on bayfront.guix.gnu.org if
that's something that's wanted.

* hydra/bayfront.scm (%bayfront.guix.gnu.org-nginx-servers): Remove
substitute serving related configuration.
2021-12-21 10:43:43 +00:00
Christopher Baines 15644d4a7d
hydra: bayfront: Fix the Guix Build Coordinator agent configuration.
Use bordeaux.guix.gnu.org rather than bayfront.guix.gnu.org for non
derivation substiutes, as this is the proper domain to use.

* hydra/bayfront.scm (services): Change non-derivation-substitute-urls
within the guix-build-coordinator-agent-configuration to
https://bordeaux.guix.gnu.org.
2021-12-21 10:40:33 +00:00
Christopher Baines fc8b8cb0ec
hydra: bayfront: Tweak guix-daemon configuration.
Drop --max-jobs to 1, but increase --cores to 16. Since the
guix-build-coordinator-agent is only running 1 build at a time, this
might make things a little faster.

* hydra/bayfront.scm (services)[guix-configuration]: Change --max-jobs
to 1 and --cores to 16.
2021-12-21 10:37:35 +00:00
Ricardo Wurmus f798beb242
hydra: Add berlin node 130.
* hydra/berlin-nodes.scm (nodes): Add record for node 130.
2021-12-20 23:51:01 +01:00
Ludovic Courtès b4697b9499
hydra: bayfront: Update comment about IPv6 connectivity.
* hydra/bayfront.scm: Update comment about IPv6 connectivity.
2021-12-20 15:56:23 +01:00
Ricardo Wurmus af72899a3a
sysadmin: Disable SSH password authentication.
* hydra/modules/sysadmin/services.scm (frontend-services): Disable
password authentication for openssh-service-type.
2021-12-19 14:29:06 +01:00
Ricardo Wurmus 9a60c45f86
hydra: honeycomb: Permit root login from head node.
* hydra/modules/sysadmin/honeycomb.scm
<services>[openssh-service-type]: Permit root login from .131.
2021-12-19 10:11:49 +01:00
Ricardo Wurmus 45cdd0abdf
hydra: Do not emulate ARM on x86_64 berlin nodes.
* hydra/berlin-nodes.scm: Remove "arm" and "aarch64" from emulated
architectures.
2021-12-18 23:00:48 +01:00
Mathieu Othacehe b6f0103c0a
doc: cuirass: Update machine list.
* doc/cuirass.org (External Machines): Update it.
2021-12-18 18:07:39 +01:00
Mathieu Othacehe ffb5e62784
hydra: berlin: Fix static networking service.
Fix the following error:

service networking provided more that once

by using a single static-networking record for both interfaces.

* hydra/berlin.scm: Fix the static networking service.
2021-12-15 14:55:41 +01:00
Ludovic Courtès bb94f29188
talks: jcad-2021: Add PDF.
* talks/jcad-2021/talk.20211214.pdf,
talks/jcad-2021/talk.20211214.pdf.asc: New files.
2021-12-14 17:29:02 +01:00
Ludovic Courtès 2a2b475781
talks: Add JCAD 2021 talk.
* talks/jcad-2021: New directory.
2021-12-14 17:27:39 +01:00
Christopher Baines ea39220eb7
hydra: bayfront: Update the substitute-urls.
bordeaux.guix.gnu.org is the canonical name now.

* hydra/bayfront.scm (services): Update the guix-service-type
substitute-urls.
2021-12-13 10:12:48 +00:00
Tobias Geerinckx-Rice 4117d547d8
Revert unstaged parts from berlin.
This reverts parts of commit 2ec0a03774.
2021-12-10 18:37:34 +01:00
Tobias Geerinckx-Rice 2ec0a03774
hydra: berlin: Serve a restrictive robots.txt.
* hydra/nginx/berlin.scm (publish-robots.txt): New variable.
(publish-locations): Add a new nginx location to serve it to crawlers.
2021-12-10 18:20:52 +01:00
Efraim Flashner 474f2aa124
talks: packaging-con: Add efraims talk 2021-12-07 16:43:05 +02:00
Mathieu Othacehe 287f1707a3
hydra: Move grunewald and kreuzberg to the berlin key directory.
Only the keys from the berlin directory are authorized in the %build-node-keys
procedure.

* hydra/keys/guix/grunewald.rekado.pub: Move it to the berlin directory.
* hydra/keys/guix/kreuzberg.rekado.pub: Move it to the berlin directory.
2021-12-06 12:25:32 +01:00
Ludovic Courtès 5e06b5d8b5
sysadmin: web: Jobs run at most for the duration of their period.
* hydra/modules/sysadmin/web.scm (build-program): Add #:max-duration
parameter.
[build]: Add calls to 'sigaction' and 'alarm'.  Add some logging.
(static-web-site-mcron-jobs): Pass #:max-duration to 'build-program'.
2021-12-03 12:48:05 +01:00