summary refs log tree commit diff
path: root/nixos/modules/services/continuous-integration
Commit message (Collapse)AuthorAge
* utillinux: rename to util-linuxGraham Christensen2020-11-24
|
* nixos/modules: fix systemd start rate-limitslf-2020-10-31
| | | | | | | | | | | | | | | | These were broken since 2016: https://github.com/systemd/systemd/commit/f0367da7d1a61ad698a55d17b5c28ddce0dc265a since StartLimitIntervalSec got moved into [Unit] from [Service]. StartLimitBurst has also been moved accordingly, so let's fix that one too. NixOS systems have been producing logs such as: /nix/store/wf98r55aszi1bkmln1lvdbp7znsfr70i-unit-caddy.service/caddy.service:31: Unknown key name 'StartLimitIntervalSec' in section 'Service', ignoring. I have also removed some unnecessary duplication in units disabling rate limiting since setting either interval or burst to zero disables it (https://github.com/systemd/systemd/blob/ad16158c10dfc3258831a9ff2f1a988214f51653/src/basic/ratelimit.c#L16)
* nixos/hydra: remove hydra-migration upgrade pathMaximilian Bosch2020-10-21
| | | | | | | | | This should NOT be backported to 20.09! When 21.03 is released, the DB changes are about a year old and operators had two release cycles for the upgrade. At this point it should be fair to remove the compat layer to reduce the complexity of the module itself.
* nixos/jenkins: switch to openjdk11 as openjdk14 is not supportedAugustin Borsu2020-10-04
|
* nixos/hercules-ci-agent: initRobert Hensing2020-08-23
|
* nixos/gitlab-runner: add clone-url option (#93894)Milan2020-07-30
|
* nixos/buildbot: enable configurable keepalive for buildbot workerRoman Sharapov2020-07-13
| | | | | | | | | | | | | | In the current implementation, there's no possibility to modify the default parameter for keepalive. This is a number that indicates how frequently keepalive messages should be sent from the worker to the buildmaster, expressed in seconds. The default (600) causes a message to be sent to the buildmaster at least once every 10 minutes. If the worker is behind a NAT box or stateful firewall, these messages may help to keep the connection alive: some NAT boxes tend to forget about a connection if it has not been used in a while. When this happens, the buildmaster will think that the worker has disappeared, and builds will time out. Meanwhile the worker will not realize than anything is wrong.
* nixos/gitlab-runner: add more global options (#86946)misuzu2020-06-29
|
* nixos/buildbot-master: support reporters, migrate away from statusFlorian Klink2020-06-18
| | | | | | | | | | | Since Buildbot 0.9.0, status targets were deprecated and ignored. There's a very small line on startup explaining that, and status simply isn't reported. Avoid others the same headaches, and do it right in the NixOS module. As there might have been changes in the way reporters are organized, and configuration might need to be migrated remove the old option, and not just provide an alias.
* nixos/buildbot-master: fix typo in services.buildbot-master.bpPortFlorian Klink2020-06-05
| | | | | | It's pbPort, and it's also a connection string, meaning listen-on-localhost is also possible. Provide an alias for the old option name, so old configs still work.
* nixos/gitlab-runner: support multiple servicesmisuzu2020-05-02
|
* nixos/*: use $out instead of $bin with buildGoPackagezowoq2020-04-28
|
* hydra: wrap executables with hydra env varsFrederik Rietdijk2020-04-11
| | | | | | We already set the relevant env vars in the systemd services. That does not help one when executing any of the executables outside a service, e.g. when creating a new user.
* hydra: 2020-03-24 -> 2020-04-07Maximilian Bosch2020-04-07
| | | | | | | | | | Also removed `pkgs.hydra-flakes` since flake-support has been merged into master[1]. Because of that, `pkgs.hydra-unstable` is now compiled against `pkgs.nixFlakes` and currently requires a patch since Hydra's master doesn't compile[2] atm. [1] https://github.com/NixOS/hydra/pull/730 [2] https://github.com/NixOS/hydra/pull/732
* Merge pull request #81298 from Mic92/buildkiteJörg Thalheim2020-04-02
|\ | | | | nixos/buildkite-agents: don't run as nogroup
| * nixos/buildkite-agents: don't run as nogroupJörg Thalheim2020-02-28
| |
* | Merge pull request #74379 from bachp/gitlab-runner-reloadFlorian Klink2020-03-31
|\ \ | | | | | | nixos/gitlab-runner: reload on config change
| * | nixos/gitlab-runner: reload on config changeBen Gamari2019-11-27
| | | | | | | | | | | | | | | With this change it is no longer required to restart the runner on every change. Instead it can just reload it's config while running.
* | | hydra: 2020-02-06 -> 2020-03-{24,27}Maximilian Bosch2020-03-28
| |/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Upgrades Hydra to the latest master/flake branch. To perform this upgrade, it's needed to do a non-trivial db-migration which provides a massive performance-improvement[1]. The basic ideas behind multi-step upgrades of services between NixOS versions have been gathered already[2]. For further context it's recommended to read this first. Basically, the following steps are needed: * Upgrade to a non-breaking version of Hydra with the db-changes (columns are still nullable here). If `system.stateVersion` is set to something older than 20.03, the package will be selected automatically, otherwise `pkgs.hydra-migration` needs to be used. * Run `hydra-backfill-ids` on the server. * Deploy either `pkgs.hydra-unstable` (for Hydra master) or `pkgs.hydra-flakes` (for flakes-support) to activate the optimization. The steps are also documented in the release-notes and in the module using `warnings`. `pkgs.hydra` has been removed as latest Hydra doesn't compile with `pkgs.nixStable` and to ensure a graceful migration using the newly introduced packages. To verify the approach, a simple vm-test has been added which verifies the migration steps. [1] https://github.com/NixOS/hydra/pull/711 [2] https://github.com/NixOS/nixpkgs/pull/82353#issuecomment-598269471
* | nixos/buildkite-agents: fix hooksDir assertionYorick van Pelt2020-02-19
| |
* | nixos/buildkite-agents: update release notesYorick van Pelt2020-02-10
| |
* | nixos/buildkite-agents: support multiple buildkite agentsYorick van Pelt2020-02-10
| |
* | nixos/buildkite: drop user option (#78160)Florian Klink2020-01-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * nixos/buildkite: drop user option This reverts 8c6b1c3eaaa8b555bddaced3ab6f02695bef1541. Turns out, buildkite-agent has logic to write .ssh/known_hosts files and only really works when $HOME and the user homedir are in sync. On top of that, we provision ssh keys in /var/lib/buildkite-agent, which doesn't work if that other users' homedir points elsewhere (we can cheat by setting $HOME, but then getent and $HOME provide conflicting results). So after all, it's better to only run the system-wide buildkite agent as the "buildkite-agent" user only - if one wants to run buildkite as different users, systemd user services might be a better fit. * nixosTests.buildkite-agent: add node with separate user and no ssh key
* | nixos/buildkite: make privateSshKeyPath optionalFlorian Klink2020-01-20
| | | | | | | | | | When only cloning public repos, or when the ssh key is provided by different means, we don't need to manage it here.
* | nixos/buildkite-agent: add gnutar, gzip and git to runtimePackagesFlorian Klink2020-01-20
| | | | | | | | | | These are required for nix to do builtins.fetchTarball and builtins.fetchGit, so most likely we want them to be around.
* | nixos/buildkite: stop using deprecated optionFlorian Klink2020-01-20
| |
* | nixos/buildkite-agent: add "user" optionFlorian Klink2020-01-19
| | | | | | | | | | | | | | This allows buildkite-agent to run as another user. It'll still run builds from /var/lib/buildkite-agent and setup things in there.
* | nixos/buildkite-agent: change option meta-data into tags attrsetFlorian Klink2020-01-17
| | | | | | | | This is called tags in the buildkite 3.
* | nixos/buildkite-agent: add a shell attribute to specify the shell being usedYorick van Pelt2020-01-17
| | | | | | | | | | | | | | | | This gets passed to BUILDKITE_SHELL, which will specify the shell being used to executes script in. Defaults to `${pkgs.bash}/bin/bash -e -c`, matching how buildkite behaves on other distros.
* | nixos/buildkite-agent: tweak TimeoutStopSec and KillModeFlorian Klink2020-01-17
| | | | | | | | This improves behaviour when the service is being stopped.
* | nixos/buildkite-agent: actually use services.buildkite-agent.packageFlorian Klink2020-01-17
| | | | | | | | | | We were currently just using pkgs.buildkite-agent, no matter what was configured in services.buildkite-agent.package
* | nixos/buildkite-agent: stop deploying public keys, make ssh private key ↵Florian Klink2020-01-17
| | | | | | | | | | | | | | | | optional. SSH public keys aren't needed to clone private repos, and if we only need to configure a single attribute, there's no need for the "openssh" attrset anymore.
* | Make buildkite agent service compatible with buildkite-agent3Mark Karpov2020-01-15
| |
* | Merge pull request #77669 from ↵Bas van Dijk2020-01-15
|\ \ | | | | | | | | | | | | basvandijk/hydra-sync-buildMachinesFiles-with-upstream hydra: only set buildMachinesFiles when nix.buildMachines is defined
| * | hydra: only set buildMachinesFiles when nix.buildMachines is definedBas van Dijk2020-01-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This applies [hydra PR #432](https://github.com/NixOS/hydra/pull/432) to the NixOS module in nixpkgs: ``` commit 4efd078977e5ea20e1104783efc324cba11690bc Author: Bas van Dijk <v.dijk.bas@gmail.com> Date: Sun Dec 11 15:35:38 2016 +0100 Only set buildMachinesFiles when nix.buildMachines is defined ```
* | | hydra: remove the build-use-substitutes optionBas van Dijk2020-01-14
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The following commit from 2016 in hydra removed the `--option build-use-substitutes` from the hydra-queue-runner service: ``` commit ee2e9f5335c8c0288c102975b506f6b275793cfe Author: Eelco Dolstra <edolstra@gmail.com> Date: Fri Oct 7 20:23:05 2016 +0200 Update to reflect BinaryCacheStore changes BinaryCacheStore no longer implements buildPaths() and ensurePath(), so we need to use copyPath() / copyClosure(). ``` It would be better if the hydra module in NixOS matches the upstream module.
* | nixos/jenkins/slave: fix evalworldofpeace2020-01-12
| |
* | nixos/buildbot: fix evalworldofpeace2020-01-08
| | | | | | | | Fixes https://github.com/NixOS/nixpkgs/issues/77309
* | treewide: use attrs instead of list for types.loaOf optionsrnhmjoj2020-01-06
|/
* treewide: Switch to system users (#71055)Silvan Mosberger2019-11-01
|\ | | | | treewide: Switch to system users
| * treewide: Switch to system usersJanne Heß2019-10-12
| |
* | nixos/nix-daemon: don't refer to deprecated option aliasesedef2019-10-18
|/ | | | | | The `gc-` prefixed versions of these options have been deprecated since Nix 2.0.
* nixos/jenkins: Copy plugins as .jpi to fix initialization errorsAlex Whitt2019-09-17
|
* nixos/hydra: incorporate upstream changes and update testMaximilian Bosch2019-09-14
| | | | | | | | | | | | | During the last update, `hydra-notify` was rewritten as a daemon which listens to postgresql notifications for each build[1]. The module uses the `hydra-notify.service` unit from upstream's Hydra module and the VM test ensures that email notifications are sent properly. Also updated `hydra-init.service` to install `pg_trgm` on a local database if needed[2]. [1] https://github.com/NixOS/hydra/commit/c7861b85c4c3cc974b27147bbf3cc258b9fe9cc3 [2] https://github.com/NixOS/hydra/commit/8a0a5ec3a3200d4f4d4d38f87d0afdb49f092b39
* Merge staging-next into stagingFrederik Rietdijk2019-08-31
|\
| * nixos/gitlab-runner: add missing HOME to environment (#67450)Pascal Bach2019-08-28
| | | | | | Gitlab runner fails to start if HOME is not set.
* | treewide: remove redundant recvolth2019-08-28
|/
* treewide: Remove usage of isNullDaniel Schaefer2019-04-29
| | | | isNull "is deprecated; just write e == null instead" says the Nix manual
* buildbot: 1.8.1 -> 2.1.0Ben Wolsieffer2019-03-22
|
* nixos: add preferLocalBuild=true; on derivations for config filesSymphorien Gibol2019-02-22
|