diff options
Diffstat (limited to 'krebs')
| -rw-r--r-- | krebs/2configs/gitlab-runner-shackspace.nix | 27 | ||||
| -rw-r--r-- | krebs/2configs/ircd.nix | 1 | ||||
| -rw-r--r-- | krebs/2configs/shack/muell_caller.nix | 2 | ||||
| -rw-r--r-- | krebs/2configs/shack/radioactive.nix | 2 | ||||
| -rw-r--r-- | krebs/2configs/shack/worlddomination.nix | 2 | ||||
| -rw-r--r-- | krebs/3modules/bepasty-server.nix | 2 | ||||
| -rw-r--r-- | krebs/3modules/buildbot/slave.nix | 2 | ||||
| -rw-r--r-- | krebs/3modules/lass/default.nix | 14 | ||||
| -rw-r--r-- | krebs/3modules/lass/ssh/android.rsa | 2 | ||||
| -rw-r--r-- | krebs/3modules/tinc.nix | 6 | ||||
| -rw-r--r-- | krebs/5pkgs/simple/Reaktor/default.nix | 2 | ||||
| -rw-r--r-- | krebs/5pkgs/simple/bepasty-client-cli/default.nix | 2 | ||||
| -rw-r--r-- | krebs/5pkgs/simple/cac-panel/default.nix | 2 | ||||
| -rw-r--r-- | krebs/5pkgs/simple/treq/default.nix | 2 | ||||
| -rw-r--r-- | krebs/5pkgs/simple/urlwatch/default.nix | 2 | ||||
| -rw-r--r-- | krebs/source.nix | 2 | 
16 files changed, 42 insertions, 30 deletions
| diff --git a/krebs/2configs/gitlab-runner-shackspace.nix b/krebs/2configs/gitlab-runner-shackspace.nix index d9b4cd589..f4247b6da 100644 --- a/krebs/2configs/gitlab-runner-shackspace.nix +++ b/krebs/2configs/gitlab-runner-shackspace.nix @@ -1,4 +1,4 @@ -{ config, ... }: +{ config, pkgs, ... }:  let    url = "https://git.shackspace.de/";    # generate token from CI-token via: @@ -6,7 +6,7 @@ let    ## cat /etc/gitlab-runner/config.toml    token = import <secrets/shackspace-gitlab-ci-token.nix> ;  in { -  systemd.services.gitlab-runner.path = [  +  systemd.services.gitlab-runner.path = [      "/run/wrappers" # /run/wrappers/bin/su      "/" # /bin/sh    ]; @@ -16,19 +16,18 @@ in {      enable = true;      # configFile, configOptions and gracefulTimeout not yet in stable      # gracefulTimeout = "120min"; -    configText = '' -    concurrent = 1 -    check_interval = 0 - -    [[runners]] -      name = "krebs-shell" -      url = "${url}" -      token = "${token}" -      executor = "shell" -      shell = "sh" -      environment = ["PATH=/bin:/run/wrappers/bin:/etc/per-user/gitlab-runner/bin:/etc/per-user-pkgs/gitlab-runner/bin:/nix/var/nix/profiles/default/bin:/run/current-system/sw/bin"] -      [runners.cache] +    configFile = pkgs.writeText "gitlab-runner.cfg" '' +      concurrent = 1 +      check_interval = 0 +      [[runners]] +        name = "krebs-shell" +        url = "${url}" +        token = "${token}" +        executor = "shell" +        shell = "sh" +        environment = ["PATH=/bin:/run/wrappers/bin:/etc/per-user/gitlab-runner/bin:/etc/per-user-pkgs/gitlab-runner/bin:/nix/var/nix/profiles/default/bin:/run/current-system/sw/bin"] +        [runners.cache]      '';    };  } diff --git a/krebs/2configs/ircd.nix b/krebs/2configs/ircd.nix index 116337733..38f58952e 100644 --- a/krebs/2configs/ircd.nix +++ b/krebs/2configs/ircd.nix @@ -92,6 +92,7 @@        };        general {          #maybe we want ident someday? +        default_floodcount = 1000;          disable_auth = yes;          throttle_duration = 1;          throttle_count = 1000; diff --git a/krebs/2configs/shack/muell_caller.nix b/krebs/2configs/shack/muell_caller.nix index 7e8d278f6..19768cb2e 100644 --- a/krebs/2configs/shack/muell_caller.nix +++ b/krebs/2configs/shack/muell_caller.nix @@ -12,7 +12,7 @@ let      buildInputs = [        (pkgs.python3.withPackages (pythonPackages: with pythonPackages; [          docopt -        requests2 +        requests          paramiko          python        ])) diff --git a/krebs/2configs/shack/radioactive.nix b/krebs/2configs/shack/radioactive.nix index 378b54056..566146d6e 100644 --- a/krebs/2configs/shack/radioactive.nix +++ b/krebs/2configs/shack/radioactive.nix @@ -12,7 +12,7 @@ let      buildInputs = [        (pkgs.python3.withPackages (pythonPackages: with pythonPackages; [          docopt -        requests2 +        requests          python        ]))      ]; diff --git a/krebs/2configs/shack/worlddomination.nix b/krebs/2configs/shack/worlddomination.nix index d0f9f5fa6..828b6cd70 100644 --- a/krebs/2configs/shack/worlddomination.nix +++ b/krebs/2configs/shack/worlddomination.nix @@ -37,7 +37,7 @@ let          docopt          LinkHeader          aiocoap -        requests2 +        requests          paramiko          python        ])) diff --git a/krebs/3modules/bepasty-server.nix b/krebs/3modules/bepasty-server.nix index 0ca13366b..dd29a4e17 100644 --- a/krebs/3modules/bepasty-server.nix +++ b/krebs/3modules/bepasty-server.nix @@ -3,7 +3,7 @@  with import <stockholm/lib>;  let    gunicorn = pkgs.pythonPackages.gunicorn; -  bepasty = pkgs.pythonPackages.bepasty-server; +  bepasty = pkgs.bepasty;    gevent = pkgs.pythonPackages.gevent;    python = pkgs.pythonPackages.python;    cfg = config.krebs.bepasty; diff --git a/krebs/3modules/buildbot/slave.nix b/krebs/3modules/buildbot/slave.nix index 544f9c4e0..0af553c5d 100644 --- a/krebs/3modules/buildbot/slave.nix +++ b/krebs/3modules/buildbot/slave.nix @@ -160,6 +160,8 @@ let          # TODO: maybe also prepare buildbot.tac?          ExecStartPre = pkgs.writeDash "buildbot-master-init" ''            set -efux +          #remove garbage from old versions +          rm -r ${workdir}            mkdir -p ${workdir}/info            cp ${buildbot-slave-init} ${workdir}/buildbot.tac            echo ${contact} > ${workdir}/info/admin diff --git a/krebs/3modules/lass/default.nix b/krebs/3modules/lass/default.nix index 4b553fac2..534eac716 100644 --- a/krebs/3modules/lass/default.nix +++ b/krebs/3modules/lass/default.nix @@ -432,8 +432,13 @@ with import <stockholm/lib>;      eddie = {        ci = false;        external = true; -      nets = { +      nets = rec { +        internet = { +          ip4.addr = "129.215.90.4"; +          aliases = [ "eddie.i" ]; +        };          retiolum = { +          via = internet;            ip4.addr = "10.243.29.170";            ip6.addr = "42:4992:6a6d:700::1";            aliases = [ "eddie.r" ]; @@ -485,8 +490,13 @@ with import <stockholm/lib>;      inspector = {        ci = false;        external = true; -      nets = { +      nets = rec { +        internet = { +          ip4.addr = "141.76.44.154"; +          aliases = [ "inspector.i" ]; +        };          retiolum = { +          via = internet;            ip4.addr = "10.243.29.172";            ip6.addr = "42:4992:6a6d:800::1";            aliases = [ "inspector.r" ]; diff --git a/krebs/3modules/lass/ssh/android.rsa b/krebs/3modules/lass/ssh/android.rsa index b39f7ce1e..f5190f45c 100644 --- a/krebs/3modules/lass/ssh/android.rsa +++ b/krebs/3modules/lass/ssh/android.rsa @@ -1 +1 @@ -ssh-rsa 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 JuiceSSH +ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAEZgGgImN/9D4yJBjYlkAvT3X45kzt4n8hmgsqPcdcHWNC7fofWG4fZe8NNrTLdKsK+xYxTstj49l8Vb3YDvw4fAyyyhms/eFRlD2BRqAISwc39EIeTC4g3PXNeUtUGdczXKxsJf5iWf4kxUrUOuZ3FeKxeYXDMSqzzk1oKalhWNl4PmgRc5FzjeRJ2WziilwFq7ntLswoeTBW3c53fbcp3XuPza3M1/sN3NHJx9ZMpWVfJhZ/CXr+nqpc25ZIr5HZVZbgDTyJQimlTF5JCfU0NiiBIh7ep7x4o93tARmilit7+mWUkkxk6ba+zG6nr+s+zyd85AFAYRioOEczbC6mI44UZUB11KkEzOon5JWSA8pK+DPqsqhFkwWYMHLXZp8zemdp9kushRZ6nuI9MzBwacngro1vAvDL6jrS5MR7zf7rMAo6wexovWoEowvZz629mjC3OAt9iOm4VJdvEmq+rHLfjjznVEY6llF7DUu2QNEazaXhxZH9V9N1gyubIE97SQVqmwDrf8BGC0Hq+hC4OOweqfo4XP0etbqAfDozZbqcqyE1m9Bj8DpjrSXka1PuJf5fgEtoxPadd2qdiHMfIx9sM+4uu2nI5aFvWO3OlJmhF80QzNdFzZWjsyvJ24C1/a2FAyzoab1Sg9ljstQThseTtvlXcX8jfFn0U3RbgXgCgOWad3Oy9vA0OCdsHut0nzv3UO+T5+wv2+lvE3QSSKOlmVtdKMhCFb+Rg+FliKxyd820h9yR3wDYmkurVkAxaj8Kx5MaY/7aypOi8fRAV2FSDtCKkuMyPv4xEtdPi/4lj55pRBEO8lJkeb+WurCzZ7ZeaPdrW1YIQtToPpiz3dXeRhkts6jq8247xIplzHh9Iu18gOrnZ+ygn70g19x842vvcfLQNAghDPS93msJdSe+EtulMCwNTjUaF9LyzhW9ptLG9NmwgbT5kGsFiRw3BFdyfcQVWVzDhuP3hPPx+hjiZtFfpIKpxV9MjO1xQ830Ngk3JpSphMZTQ432yfvu9yEsUWmAa8ax1jxJ361AiIp0U2xioJmdVd3E2sxkpOUYqE89IR9X6hS3fH38Gc5IL5+BnhuZvRgXuA+nrqdU4pMB3TIoC5oXlOMRXpxaS91YiO4ERx2t6WkBRCoaDuRWnLpewV6lhjwi1+4Emlrs2q1R0K64emZTv7O1MKwWRHOlBJD3HLyCCS763OzYW4mEQcfBAQtbm6sTooJ+D/zbmYgbnZt0z/nP9R/n25pzlSPpZ49fCiRV7QN6D9mksISTz8qIiCzNBn1F7DUewXqkrdPopl4npeNVcOyyo7P1lFFGde+jq/7REdzD+vno1h9+17WZbyzQtlOyipQYzb6l4QuXq/zejJrELJAQdN4yRQq5NJzIh0HXaPnPC083T791moBflyqiwPEIWsSMfILqSqL1jVVNgvV4fHnMixgH2zK9f0EyE3fG9PnuRribPR2DlESqpHZTcBixgh660EPKh0gCLYoWKgU= lass-android@XperiaXCompact diff --git a/krebs/3modules/tinc.nix b/krebs/3modules/tinc.nix index 8af15c13b..b032f3148 100644 --- a/krebs/3modules/tinc.nix +++ b/krebs/3modules/tinc.nix @@ -1,5 +1,5 @@ -{ config, pkgs, lib, ... }:  with import <stockholm/lib>; +{ config, pkgs, ... }:  let    out = {      options.krebs.tinc = api; @@ -11,7 +11,7 @@ let      description = ''        define a tinc network      ''; -    type = with types; attrsOf (submodule (tinc: { +    type = types.attrsOf (types.submodule (tinc: {        options = let          netname = tinc.config._module.args.name;        in { @@ -116,7 +116,7 @@ let              phases = [ "installPhase" ];              installPhase = ''                mkdir $out -              ${concatStrings (lib.mapAttrsToList (_: host: '' +              ${concatStrings (mapAttrsToList (_: host: ''                  echo ${shell.escape host.nets."${tinc.config.netname}".tinc.config} \                    > $out/${shell.escape host.name}                '') tinc.config.hosts)} diff --git a/krebs/5pkgs/simple/Reaktor/default.nix b/krebs/5pkgs/simple/Reaktor/default.nix index fc3710820..6989bb02b 100644 --- a/krebs/5pkgs/simple/Reaktor/default.nix +++ b/krebs/5pkgs/simple/Reaktor/default.nix @@ -8,7 +8,7 @@ python3Packages.buildPythonPackage rec {    propagatedBuildInputs = with pkgs;[      python3Packages.docopt -    python3Packages.requests2 +    python3Packages.requests    ];    src = fetchurl {      url = "https://pypi.python.org/packages/source/R/Reaktor/Reaktor-${version}.tar.gz"; diff --git a/krebs/5pkgs/simple/bepasty-client-cli/default.nix b/krebs/5pkgs/simple/bepasty-client-cli/default.nix index c58e637b3..7811ef5fc 100644 --- a/krebs/5pkgs/simple/bepasty-client-cli/default.nix +++ b/krebs/5pkgs/simple/bepasty-client-cli/default.nix @@ -5,7 +5,7 @@ with pythonPackages; buildPythonPackage rec {    propagatedBuildInputs = [      python_magic      click -    requests2 +    requests    ];    src = fetchFromGitHub { diff --git a/krebs/5pkgs/simple/cac-panel/default.nix b/krebs/5pkgs/simple/cac-panel/default.nix index fd4799535..57f58f4de 100644 --- a/krebs/5pkgs/simple/cac-panel/default.nix +++ b/krebs/5pkgs/simple/cac-panel/default.nix @@ -11,7 +11,7 @@ python3Packages.buildPythonPackage rec {    propagatedBuildInputs = with python3Packages; [      docopt -    requests2 +    requests      beautifulsoup4    ];  } diff --git a/krebs/5pkgs/simple/treq/default.nix b/krebs/5pkgs/simple/treq/default.nix index 20387b9cb..7cb826a51 100644 --- a/krebs/5pkgs/simple/treq/default.nix +++ b/krebs/5pkgs/simple/treq/default.nix @@ -11,7 +11,7 @@ pythonPackages.buildPythonPackage rec {    propagatedBuildInputs = with pythonPackages; [      twisted      pyopenssl -    requests2 +    requests      service-identity    ];  } diff --git a/krebs/5pkgs/simple/urlwatch/default.nix b/krebs/5pkgs/simple/urlwatch/default.nix index 509555669..adaefbc4d 100644 --- a/krebs/5pkgs/simple/urlwatch/default.nix +++ b/krebs/5pkgs/simple/urlwatch/default.nix @@ -13,7 +13,7 @@ python3Packages.buildPythonPackage rec {      minidb      pycodestyle      pyyaml -    requests2 +    requests    ];    meta = { diff --git a/krebs/source.nix b/krebs/source.nix index 1aba3d7ff..09edc817b 100644 --- a/krebs/source.nix +++ b/krebs/source.nix @@ -14,6 +14,6 @@ in      stockholm.file = toString <stockholm>;      nixpkgs.git = {        url = https://github.com/NixOS/nixpkgs; -      ref = "8ed299faacbf8813fc47b4fca34f32b835d6481e"; # nixos-17.03 @ 2017-09-09 +      ref = "07ca7b64d2ff2fa7a79e4eab1aba70ff746fed8c"; # nixos-17.09 @ 2017-10-02      };    } | 
