Compare commits
10 Commits
d3d3987f86
...
dc74538cfe
| Author | SHA1 | Date | |
|---|---|---|---|
| dc74538cfe | |||
| 28d8eb7ca9 | |||
| 42b1578efa | |||
| 4f105c81c2 | |||
| 0abd3121fb | |||
| d88ee49aaf | |||
| 647b20b934 | |||
| 6f0f586fb6 | |||
| be4a060e94 | |||
| 1ba3bdf8d6 |
@@ -76,13 +76,9 @@
|
|||||||
{ self, nixpkgs, ... }@inputs:
|
{ self, nixpkgs, ... }@inputs:
|
||||||
let
|
let
|
||||||
inherit (nixpkgs) lib;
|
inherit (nixpkgs) lib;
|
||||||
flake = import ./flake { inherit lib inputs self; };
|
|
||||||
in
|
in
|
||||||
{
|
{
|
||||||
# Every host under hosts/ is discovered and built.
|
inherit (import ./flake { inherit lib inputs self; }) nixosConfigurations;
|
||||||
nixosConfigurations = flake.mkHosts {
|
|
||||||
root = self + "/hosts";
|
|
||||||
};
|
|
||||||
|
|
||||||
# A project shell for agent-local resources that should travel with this
|
# A project shell for agent-local resources that should travel with this
|
||||||
# checkout rather than the operator's global profile.
|
# checkout rather than the operator's global profile.
|
||||||
|
|||||||
@@ -4,55 +4,50 @@
|
|||||||
self,
|
self,
|
||||||
}:
|
}:
|
||||||
let
|
let
|
||||||
# TODO: refactor the registry code
|
|
||||||
registryAssembly = import ./registry.nix { inherit lib self; };
|
|
||||||
|
|
||||||
util = import ../lib { inherit lib; };
|
util = import ../lib { inherit lib; };
|
||||||
mkModules = import ./module.nix { inherit util; };
|
|
||||||
|
|
||||||
modules = mkModules {
|
registry = import ./registry.nix {
|
||||||
|
inherit lib;
|
||||||
|
hosts = self.nixosConfigurations;
|
||||||
|
root = self + "/registry";
|
||||||
|
};
|
||||||
|
|
||||||
|
modules = import ./module.nix {
|
||||||
|
inherit util;
|
||||||
root = self + "/modules";
|
root = self + "/modules";
|
||||||
};
|
};
|
||||||
|
|
||||||
guestModules = guests.mkGuests {
|
guestModules = import ./guest.nix {
|
||||||
|
inherit
|
||||||
|
inputs
|
||||||
|
lib
|
||||||
|
registry
|
||||||
|
specialArgs
|
||||||
|
util
|
||||||
|
;
|
||||||
|
repositoryModules = modules;
|
||||||
root = self + "/guests";
|
root = self + "/guests";
|
||||||
};
|
};
|
||||||
|
|
||||||
#----------------------------------------------------------
|
|
||||||
|
|
||||||
collectedRegistry = registryAssembly.collect { hosts = self.nixosConfigurations; };
|
|
||||||
|
|
||||||
specialArgs = {
|
specialArgs = {
|
||||||
inherit
|
inherit
|
||||||
inputs
|
inputs
|
||||||
self
|
self
|
||||||
util
|
util
|
||||||
;
|
;
|
||||||
registry = collectedRegistry;
|
registry = registry.collected;
|
||||||
};
|
};
|
||||||
|
in
|
||||||
guests = import ./guest.nix {
|
{
|
||||||
inherit
|
nixosConfigurations = import ./host.nix {
|
||||||
inputs
|
|
||||||
lib
|
|
||||||
specialArgs
|
|
||||||
registryAssembly
|
|
||||||
util
|
|
||||||
;
|
|
||||||
repositoryModules = modules;
|
|
||||||
};
|
|
||||||
|
|
||||||
hosts = import ./host.nix {
|
|
||||||
inherit
|
inherit
|
||||||
inputs
|
inputs
|
||||||
lib
|
lib
|
||||||
specialArgs
|
specialArgs
|
||||||
guestModules
|
guestModules
|
||||||
registryAssembly
|
|
||||||
;
|
;
|
||||||
|
registryModule = registry.module;
|
||||||
repositoryModules = modules;
|
repositoryModules = modules;
|
||||||
|
root = self + "/hosts";
|
||||||
};
|
};
|
||||||
in
|
|
||||||
{
|
|
||||||
inherit (hosts) mkHosts;
|
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -1,9 +1,10 @@
|
|||||||
{
|
{
|
||||||
inputs,
|
inputs,
|
||||||
lib,
|
lib,
|
||||||
|
root,
|
||||||
specialArgs,
|
specialArgs,
|
||||||
repositoryModules,
|
repositoryModules,
|
||||||
registryAssembly,
|
registry,
|
||||||
util,
|
util,
|
||||||
}:
|
}:
|
||||||
let
|
let
|
||||||
@@ -65,7 +66,7 @@ let
|
|||||||
enable = lib.mkEnableOption "a reverse-proxy route for this guest";
|
enable = lib.mkEnableOption "a reverse-proxy route for this guest";
|
||||||
|
|
||||||
route = lib.mkOption {
|
route = lib.mkOption {
|
||||||
type = registryAssembly.definitions.route.type;
|
type = registry.types.route;
|
||||||
description = "Route registry entry published for this guest.";
|
description = "Route registry entry published for this guest.";
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
@@ -247,7 +248,7 @@ let
|
|||||||
inputs.stylix.nixosModules.stylix
|
inputs.stylix.nixosModules.stylix
|
||||||
|
|
||||||
repositoryModules
|
repositoryModules
|
||||||
registryAssembly.module
|
registry.module
|
||||||
cfg.interior
|
cfg.interior
|
||||||
|
|
||||||
{
|
{
|
||||||
@@ -268,15 +269,11 @@ let
|
|||||||
};
|
};
|
||||||
};
|
};
|
||||||
in
|
in
|
||||||
{
|
let
|
||||||
mkGuests =
|
|
||||||
{ root }:
|
|
||||||
let
|
|
||||||
files = util.collectNixFiles root;
|
files = util.collectNixFiles root;
|
||||||
guestFiles = lib.filterAttrs (file: type: type == "regular" && lib.hasSuffix ".nix" file) (builtins.readDir root);
|
guestFiles = lib.filterAttrs (file: type: type == "regular" && lib.hasSuffix ".nix" file) (builtins.readDir root);
|
||||||
names = map (file: lib.removeSuffix ".nix" file) (lib.attrNames guestFiles);
|
names = map (file: lib.removeSuffix ".nix" file) (lib.attrNames guestFiles);
|
||||||
in
|
in
|
||||||
{
|
{
|
||||||
imports = files ++ map mkGuest names;
|
imports = files ++ map mkGuest names;
|
||||||
};
|
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -1,12 +1,12 @@
|
|||||||
{
|
{
|
||||||
inputs,
|
inputs,
|
||||||
lib,
|
lib,
|
||||||
|
root,
|
||||||
specialArgs,
|
specialArgs,
|
||||||
repositoryModules,
|
repositoryModules,
|
||||||
|
|
||||||
guestModules,
|
guestModules,
|
||||||
# TODO refactor registry
|
registryModule,
|
||||||
registryAssembly,
|
|
||||||
}:
|
}:
|
||||||
let
|
let
|
||||||
mkHost =
|
mkHost =
|
||||||
@@ -26,7 +26,7 @@ let
|
|||||||
guestModules
|
guestModules
|
||||||
|
|
||||||
# TODO: refactor
|
# TODO: refactor
|
||||||
registryAssembly.module (root + "/${name}")
|
registryModule (root + "/${name}")
|
||||||
|
|
||||||
{
|
{
|
||||||
networking.hostName = name;
|
networking.hostName = name;
|
||||||
@@ -35,15 +35,11 @@ let
|
|||||||
];
|
];
|
||||||
};
|
};
|
||||||
in
|
in
|
||||||
{
|
let
|
||||||
mkHosts =
|
|
||||||
{ root }:
|
|
||||||
let
|
|
||||||
directories = lib.filterAttrs (_name: type: type == "directory") (builtins.readDir root);
|
directories = lib.filterAttrs (_name: type: type == "directory") (builtins.readDir root);
|
||||||
names = lib.attrNames directories;
|
names = lib.attrNames directories;
|
||||||
in
|
in
|
||||||
lib.genAttrs names (
|
lib.genAttrs names (
|
||||||
name:
|
name:
|
||||||
mkHost { inherit root name; }
|
mkHost { inherit root name; }
|
||||||
);
|
)
|
||||||
}
|
|
||||||
|
|||||||
@@ -1,5 +1,7 @@
|
|||||||
{ util }:
|
{
|
||||||
{ root }:
|
root,
|
||||||
|
util,
|
||||||
|
}:
|
||||||
{
|
{
|
||||||
imports = util.collectNixFiles root;
|
imports = util.collectNixFiles root;
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -1,35 +1,16 @@
|
|||||||
{ lib, self }:
|
{ hosts, lib, root }:
|
||||||
let
|
let
|
||||||
inherit (lib)
|
checkType = lib.types.submodule {
|
||||||
all
|
|
||||||
concatLists
|
|
||||||
concatMapStringsSep
|
|
||||||
filter
|
|
||||||
filterAttrs
|
|
||||||
foldl'
|
|
||||||
hasAttr
|
|
||||||
hasSuffix
|
|
||||||
mapAttrs
|
|
||||||
mapAttrs'
|
|
||||||
mapAttrsToList
|
|
||||||
mkOption
|
|
||||||
nameValuePair
|
|
||||||
removeSuffix
|
|
||||||
types
|
|
||||||
unique
|
|
||||||
;
|
|
||||||
|
|
||||||
checkType = types.submodule {
|
|
||||||
options = {
|
options = {
|
||||||
assertion = mkOption {
|
assertion = lib.mkOption {
|
||||||
type = types.functionTo types.bool;
|
type = lib.types.functionTo lib.types.bool;
|
||||||
description = ''
|
description = ''
|
||||||
Predicate run against this registry's flattened collected entries.
|
Predicate run against this registry's flattened collected entries.
|
||||||
'';
|
'';
|
||||||
};
|
};
|
||||||
|
|
||||||
message = mkOption {
|
message = lib.mkOption {
|
||||||
type = types.str;
|
type = lib.types.str;
|
||||||
description = ''
|
description = ''
|
||||||
Error message shown when this registry validation check fails.
|
Error message shown when this registry validation check fails.
|
||||||
'';
|
'';
|
||||||
@@ -38,7 +19,7 @@ let
|
|||||||
};
|
};
|
||||||
|
|
||||||
predicates = {
|
predicates = {
|
||||||
uniqueValue = value: entries: builtins.length (unique (map value entries)) == builtins.length entries;
|
uniqueValue = value: entries: builtins.length (lib.unique (map value entries)) == builtins.length entries;
|
||||||
};
|
};
|
||||||
|
|
||||||
registryLib = lib // {
|
registryLib = lib // {
|
||||||
@@ -49,23 +30,23 @@ let
|
|||||||
|
|
||||||
registryDefinitionModule = {
|
registryDefinitionModule = {
|
||||||
options = {
|
options = {
|
||||||
type = mkOption {
|
type = lib.mkOption {
|
||||||
type = types.raw;
|
type = lib.types.raw;
|
||||||
description = ''
|
description = ''
|
||||||
NixOS option type for one registry entry.
|
NixOS option type for one registry entry.
|
||||||
'';
|
'';
|
||||||
};
|
};
|
||||||
|
|
||||||
replicate = mkOption {
|
replicate = lib.mkOption {
|
||||||
type = types.bool;
|
type = lib.types.bool;
|
||||||
default = false;
|
default = false;
|
||||||
description = ''
|
description = ''
|
||||||
Whether collected entries are merged and published under every host key.
|
Whether collected entries are merged and published under every host key.
|
||||||
'';
|
'';
|
||||||
};
|
};
|
||||||
|
|
||||||
checks = mkOption {
|
checks = lib.mkOption {
|
||||||
type = types.listOf checkType;
|
type = lib.types.listOf checkType;
|
||||||
default = [ ];
|
default = [ ];
|
||||||
description = ''
|
description = ''
|
||||||
Validation checks for this registry's flattened collected entries.
|
Validation checks for this registry's flattened collected entries.
|
||||||
@@ -74,10 +55,10 @@ let
|
|||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
registryName = fileName: removeSuffix ".nix" fileName;
|
registryName = fileName: lib.removeSuffix ".nix" fileName;
|
||||||
|
|
||||||
registryOption = registry: mkOption {
|
registryOption = registry: lib.mkOption {
|
||||||
type = types.attrsOf (types.attrsOf registry.type);
|
type = lib.types.attrsOf (lib.types.attrsOf registry.type);
|
||||||
default = { };
|
default = { };
|
||||||
description = ''
|
description = ''
|
||||||
Lazily collected fleet-visible registry entries, nested by host and entry name.
|
Lazily collected fleet-visible registry entries, nested by host and entry name.
|
||||||
@@ -98,19 +79,19 @@ let
|
|||||||
inherit (evaluated.config) type replicate checks;
|
inherit (evaluated.config) type replicate checks;
|
||||||
};
|
};
|
||||||
|
|
||||||
definitions = mapAttrs' (
|
definitions = lib.mapAttrs' (
|
||||||
name: type:
|
name: type:
|
||||||
let
|
let
|
||||||
path = self + "/registry/${name}";
|
path = root + "/${name}";
|
||||||
in
|
in
|
||||||
nameValuePair (registryName name) (mkRegistry path)
|
lib.nameValuePair (registryName name) (mkRegistry path)
|
||||||
) (filterAttrs (name: type: type == "regular" && hasSuffix ".nix" name) (builtins.readDir (self + "/registry")));
|
) (lib.filterAttrs (name: type: type == "regular" && lib.hasSuffix ".nix" name) (builtins.readDir root));
|
||||||
|
|
||||||
flattenRegistryEntries = registryName: data:
|
flattenRegistryEntries = registryName: data:
|
||||||
concatLists (
|
lib.concatLists (
|
||||||
mapAttrsToList (
|
lib.mapAttrsToList (
|
||||||
host: entries:
|
host: entries:
|
||||||
mapAttrsToList (entry: value: {
|
lib.mapAttrsToList (entry: value: {
|
||||||
path = "registry.${registryName}.${host}.${entry}";
|
path = "registry.${registryName}.${host}.${entry}";
|
||||||
inherit host entry value;
|
inherit host entry value;
|
||||||
}) entries
|
}) entries
|
||||||
@@ -118,17 +99,17 @@ let
|
|||||||
);
|
);
|
||||||
|
|
||||||
rawDeclarations = registryName: hosts:
|
rawDeclarations = registryName: hosts:
|
||||||
mapAttrs (_hostName: host: host.config.registry.${registryName} or { }) hosts;
|
lib.mapAttrs (_hostName: host: host.config.registry.${registryName} or { }) hosts;
|
||||||
|
|
||||||
replicatedEntries = registryName: raw:
|
replicatedEntries = registryName: raw:
|
||||||
let
|
let
|
||||||
entries = concatLists (
|
entries = lib.concatLists (
|
||||||
concatLists (
|
lib.concatLists (
|
||||||
mapAttrsToList (
|
lib.mapAttrsToList (
|
||||||
_evalHost: hostDeclarations:
|
_evalHost: hostDeclarations:
|
||||||
mapAttrsToList (
|
lib.mapAttrsToList (
|
||||||
hostName: declarations:
|
hostName: declarations:
|
||||||
mapAttrsToList (entryName: value: {
|
lib.mapAttrsToList (entryName: value: {
|
||||||
path = "registry.${registryName}.${hostName}.${entryName}";
|
path = "registry.${registryName}.${hostName}.${entryName}";
|
||||||
inherit entryName value;
|
inherit entryName value;
|
||||||
}) declarations
|
}) declarations
|
||||||
@@ -137,9 +118,9 @@ let
|
|||||||
)
|
)
|
||||||
);
|
);
|
||||||
in
|
in
|
||||||
foldl' (
|
lib.foldl' (
|
||||||
acc: entry:
|
acc: entry:
|
||||||
if hasAttr entry.entryName acc then
|
if lib.hasAttr entry.entryName acc then
|
||||||
if acc.${entry.entryName}.value == entry.value then
|
if acc.${entry.entryName}.value == entry.value then
|
||||||
acc
|
acc
|
||||||
else
|
else
|
||||||
@@ -152,13 +133,13 @@ let
|
|||||||
|
|
||||||
replicatedData = registryName: hosts: raw:
|
replicatedData = registryName: hosts: raw:
|
||||||
let
|
let
|
||||||
entries = mapAttrs (_entryName: entry: entry.value) (replicatedEntries registryName raw);
|
entries = lib.mapAttrs (_entryName: entry: entry.value) (replicatedEntries registryName raw);
|
||||||
in
|
in
|
||||||
mapAttrs (_hostName: _host: entries) hosts;
|
lib.mapAttrs (_hostName: _host: entries) hosts;
|
||||||
|
|
||||||
validationAssertions = data:
|
validationAssertions = data:
|
||||||
concatLists (
|
lib.concatLists (
|
||||||
mapAttrsToList (
|
lib.mapAttrsToList (
|
||||||
registryName: registry:
|
registryName: registry:
|
||||||
let
|
let
|
||||||
entries = flattenRegistryEntries registryName data.${registryName};
|
entries = flattenRegistryEntries registryName data.${registryName};
|
||||||
@@ -173,28 +154,28 @@ let
|
|||||||
assertValid = data:
|
assertValid = data:
|
||||||
let
|
let
|
||||||
assertions = validationAssertions data;
|
assertions = validationAssertions data;
|
||||||
failures = filter (assertion: !assertion.assertion) assertions;
|
failures = lib.filter (assertion: !assertion.assertion) assertions;
|
||||||
in
|
in
|
||||||
assert lib.assertMsg (all (assertion: assertion.assertion) assertions) (
|
assert lib.assertMsg (lib.all (assertion: assertion.assertion) assertions) (
|
||||||
concatMapStringsSep "\n" (assertion: assertion.message) failures
|
lib.concatMapStringsSep "\n" (assertion: assertion.message) failures
|
||||||
);
|
);
|
||||||
data;
|
data;
|
||||||
|
|
||||||
join = registry: host: entry:
|
join = registry: host: entry:
|
||||||
filterAttrs (_name: value: value != null) (
|
lib.filterAttrs (_name: value: value != null) (
|
||||||
mapAttrs (registryName: _registry: (registry.${registryName}.${host} or { }).${entry} or null) definitions
|
lib.mapAttrs (registryName: _registry: (registry.${registryName}.${host} or { }).${entry} or null) definitions
|
||||||
);
|
);
|
||||||
|
|
||||||
collectData =
|
collectData =
|
||||||
{ hosts }:
|
{ hosts }:
|
||||||
let
|
let
|
||||||
raw = mapAttrs (registryName: _registry: rawDeclarations registryName hosts) definitions;
|
raw = lib.mapAttrs (registryName: _registry: rawDeclarations registryName hosts) definitions;
|
||||||
data = mapAttrs (
|
data = lib.mapAttrs (
|
||||||
registryName: registry:
|
registryName: registry:
|
||||||
if registry.replicate or false then
|
if registry.replicate or false then
|
||||||
replicatedData registryName hosts raw.${registryName}
|
replicatedData registryName hosts raw.${registryName}
|
||||||
else
|
else
|
||||||
mapAttrs (hostName: host: host.config.registry.${registryName}.${hostName} or { }) hosts
|
lib.mapAttrs (hostName: host: host.config.registry.${registryName}.${hostName} or { }) hosts
|
||||||
) definitions;
|
) definitions;
|
||||||
in
|
in
|
||||||
assertValid data;
|
assertValid data;
|
||||||
@@ -206,11 +187,11 @@ let
|
|||||||
};
|
};
|
||||||
in
|
in
|
||||||
{
|
{
|
||||||
inherit definitions predicates;
|
types = lib.mapAttrs (_name: definition: definition.type) definitions;
|
||||||
|
|
||||||
module = {
|
module = {
|
||||||
options.registry = mapAttrs (_name: registry: registryOption registry) definitions;
|
options.registry = lib.mapAttrs (_name: registry: registryOption registry) definitions;
|
||||||
};
|
};
|
||||||
|
|
||||||
collect = args: withOperations (collectData args);
|
collected = withOperations (collectData { inherit hosts; });
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user