!UKDpaKNNsBpOPfLWfX:zhaofeng.li

Colmena

330 Members
A simple, stateless NixOS deployment tool - https://github.com/zhaofengli/colmena117 Servers

Load older messages


SenderMessageTime
24 Jun 2022
@hexa:lossy.networkhexahow do I tie that into networkd while making sure that networkd does in fact setup the WAN networking so I can provide those keys10:46:48
@hexa:lossy.networkhexawith morph I had an action to restart networkd post upload10:49:35
@hexa:lossy.networkhexaand let networkd fail on bootup10:49:45
@hexa:lossy.networkhexawith a networkd-restart.service that waits for wireguard-privatekeys-keys.service? 😄11:04:39
@linus:schreibt.jetztLinux Hackerman hexa: set postStart on the key unit, to run networkctl reconfigure $if? 11:04:52
@linus:schreibt.jetztLinux HackermanNot sure a restart is even needed?11:04:59
@hexa:lossy.networkhexaoh yeah, that sounds neat11:05:11
@linus:schreibt.jetztLinux HackermanOr yeah a separate service could be cleaner.11:05:18
@hexa:lossy.networkhexaI can't really be arsed to enumerate the repositories11:05:22
@hexa:lossy.networkhexa * I can't really be arsed to enumerate the interfaces11:05:30
@linus:schreibt.jetztLinux HackermanJust reconfigure then :D11:05:44
@hexa:lossy.networkhexawell, now it feels obvious 😄11:08:14
@hexa:lossy.networkhexaI think I was stuck in my head somewhere11:08:21
@linus:schreibt.jetztLinux HackermanHappens :D11:09:32
@hexa:lossy.networkhexa
❯ colmena build
[INFO ] Using configuration: /home/hexa/git/hexa/nixos-servers/config/hive.nix
[INFO ] Enumerating nodes...
error: attribute 'type' missing

       at /nix/store/agbalx3d9vi1sd132w5qs4p6i3brya1f-nixos-22.05-src/lib/modules.nix:615:26:

          614|           else if optionDecls != [] then
          615|               if all (x: x.options.type.name == "submodule") optionDecls
             |                          ^
          616|               # Raw options can only be merged into submodules. Merging into
       Did you mean _type?
(use '--show-trace' to show detailed location information)
[ERROR] -----
[ERROR] Operation failed with error: Child process exited with error code: 1
11:28:23
@hexa:lossy.networkhexathis is a fun one.11:28:34
@hexa:lossy.networkhexabecause nowhere in the trace there is a reference to the module in question11:28:54
@hexa:lossy.networkhexa

do people tend to write scripts around colmena for:

  • apply boot
  • reboot
  • unlock
  • upload secrets
13:15:17
@hexa:lossy.networkhexa with morph I could do morph deploy default.nix boot --reboot --upload-secrets 13:15:32
@hexa:lossy.networkhexaand colmena seems to upload secrets uploadAt=post-activation on applies with goal=boot directly after uploading the closure13:16:39
@hexa:lossy.networkhexawhich is quite pointless when the secrets are volatile13:16:49
@hexa:lossy.networkhexa * and colmena seems to upload secrets with uploadAt=post-activation on applies with goal=boot directly after uploading the closure 13:17:07
@hexa:lossy.networkhexaah, reboot handling is part of 0.4.013:22:30
@hexa:lossy.networkhexa
In reply to @linus:schreibt.jetzt
Just reconfigure then :D
lol nope. can't reconfigure interfaces that don't exist, because of missing prerequisites
15:10:01
@hexa:lossy.networkhexaso restarting networkd it is15:10:05
@zhaofeng:zhaofeng.liZhaofeng Li
In reply to @hexa:lossy.network
and colmena seems to upload secrets with uploadAt=post-activation on applies with goal=boot directly after uploading the closure
Yeah, the behavior of uploadAt=post-activation should probably be special-cased for --reboot
18:06:02
@hexa:lossy.networkhexastrictly speaking: activation happens at boot time for goal=boot19:18:46
@hexa:lossy.networkhexaso don't upload secrets in that case unless --reboot is given19:19:14
@hexa:lossy.networkhexa * so don't upload post-activiation secrets in that case unless --reboot is given19:19:22
@hexa:lossy.networkhexa * so don't upload post-activiation secrets in that case unless --reboot is given and then post-reboot 😄19:19:26

Show newer messages


Back to Room ListRoom Version: 6