!UKDpaKNNsBpOPfLWfX:zhaofeng.li

Colmena

310 Members
A simple, stateless NixOS deployment tool - https://github.com/zhaofengli/colmena110 Servers

Load older messages


SenderMessageTime
24 Jun 2022
@dantefromhell:matrix.orgdantefromhell
In reply to @schnecfk:ruhr-uni-bochum.de
I'm not really helpful here, but just for clarification: Are you referring to these Issues? https://github.com/zhaofengli/colmena/issues/42 and https://github.com/zhaofengli/colmena/issues/68
thx for clarification: Yes.
In particular #68 but #42 includes some hints towards bootstrapping/ first OS install.
02:10:10
@dantefromhell:matrix.orgdantefromhellI am not looking to automate provisioning of cloud resources (aka their creation) with colmena but the first OS installation (bootstrapping) of cloud and physical servers.02:11:17
@huyage:matrix.orglemmalammaRedacted or Malformed Event02:33:58
@huyage:matrix.orglemmalamma
In reply to @dantefromhell:matrix.org
thx for clarification: Yes.
In particular #68 but #42 includes some hints towards bootstrapping/ first OS install.
I had no idea people use Nix for this. I used to do PXE boot. But now most IaaS bundle those 2 things together. For example, you ask for (provision) an EC2 instance running an AMI image (bootstrap). Is your use case like a local bare metal setup?
02:38:38
@hexa:lossy.networkhexahm, when I set up wireguard tunnels through networkd and I store secrets in /run/keys, with colmena I have a wireguard-privatekey-key.service unit10:46:21
@hexa:lossy.networkhexahow do I tie that into networkd while making sure that networkd does in fact setup the WAN networking so I can provide those keys10:46:48
@hexa:lossy.networkhexawith morph I had an action to restart networkd post upload10:49:35
@hexa:lossy.networkhexaand let networkd fail on bootup10:49:45
@hexa:lossy.networkhexawith a networkd-restart.service that waits for wireguard-privatekeys-keys.service? 😄11:04:39
@linus:schreibt.jetztLinux Hackerman hexa: set postStart on the key unit, to run networkctl reconfigure $if? 11:04:52
@linus:schreibt.jetztLinux HackermanNot sure a restart is even needed?11:04:59
@hexa:lossy.networkhexaoh yeah, that sounds neat11:05:11
@linus:schreibt.jetztLinux HackermanOr yeah a separate service could be cleaner.11:05:18
@hexa:lossy.networkhexaI can't really be arsed to enumerate the repositories11:05:22
@hexa:lossy.networkhexa * I can't really be arsed to enumerate the interfaces11:05:30
@linus:schreibt.jetztLinux HackermanJust reconfigure then :D11:05:44
@hexa:lossy.networkhexawell, now it feels obvious 😄11:08:14
@hexa:lossy.networkhexaI think I was stuck in my head somewhere11:08:21
@linus:schreibt.jetztLinux HackermanHappens :D11:09:32
@hexa:lossy.networkhexa
❯ colmena build
[INFO ] Using configuration: /home/hexa/git/hexa/nixos-servers/config/hive.nix
[INFO ] Enumerating nodes...
error: attribute 'type' missing

       at /nix/store/agbalx3d9vi1sd132w5qs4p6i3brya1f-nixos-22.05-src/lib/modules.nix:615:26:

          614|           else if optionDecls != [] then
          615|               if all (x: x.options.type.name == "submodule") optionDecls
             |                          ^
          616|               # Raw options can only be merged into submodules. Merging into
       Did you mean _type?
(use '--show-trace' to show detailed location information)
[ERROR] -----
[ERROR] Operation failed with error: Child process exited with error code: 1
11:28:23
@hexa:lossy.networkhexathis is a fun one.11:28:34
@hexa:lossy.networkhexabecause nowhere in the trace there is a reference to the module in question11:28:54
@hexa:lossy.networkhexa

do people tend to write scripts around colmena for:

  • apply boot
  • reboot
  • unlock
  • upload secrets
13:15:17
@hexa:lossy.networkhexa with morph I could do morph deploy default.nix boot --reboot --upload-secrets 13:15:32
@hexa:lossy.networkhexaand colmena seems to upload secrets uploadAt=post-activation on applies with goal=boot directly after uploading the closure13:16:39
@hexa:lossy.networkhexawhich is quite pointless when the secrets are volatile13:16:49
@hexa:lossy.networkhexa * and colmena seems to upload secrets with uploadAt=post-activation on applies with goal=boot directly after uploading the closure 13:17:07
@hexa:lossy.networkhexaah, reboot handling is part of 0.4.013:22:30
@hexa:lossy.networkhexa
In reply to @linus:schreibt.jetzt
Just reconfigure then :D
lol nope. can't reconfigure interfaces that don't exist, because of missing prerequisites
15:10:01
@hexa:lossy.networkhexaso restarting networkd it is15:10:05

Show newer messages


Back to Room ListRoom Version: 6