diff options
| author | Franck Cuny <franck@fcuny.net> | 2025-12-13 12:50:59 -0800 |
|---|---|---|
| committer | Franck Cuny <franck@fcuny.net> | 2025-12-13 12:50:59 -0800 |
| commit | 114f79d3aaa7707223300a30209df9208366fad0 (patch) | |
| tree | 0060deb00c88307e45f01ad33e0360e81b5dd72d | |
| parent | install MakeMKV and some tools (diff) | |
| download | infra-114f79d3aaa7707223300a30209df9208366fad0.tar.gz | |
update builders configuration
| -rw-r--r-- | README.org | 7 | ||||
| -rw-r--r-- | profiles/remote-builder.nix | 2 |
2 files changed, 8 insertions, 1 deletions
@@ -111,3 +111,10 @@ networking.firewall.allowedUDPPorts = [ 51871 ]; #+end_src * Backups Backups are done with =restic= and are stored on the local machine, and they are then synchronized to the NAS. +* Runbooks +** Remote builders +*** Clients +On the clients, you can run =nix config show builders= to see the list of the remote builders. +If a client is failing to run builds remotely due to some ssh errors, you can run the following command: =sudo ssh -o 'IdentityAgent none' -i PRIVATE_KEY USER@HOST true=. We need to use =sudo= since the nix daemon runs as root. +*** Builders +On the builders, you can run =nix config show allowed-users= to see the list of users who can trigger nix builds. diff --git a/profiles/remote-builder.nix b/profiles/remote-builder.nix index dfa3bc0..5797c6b 100644 --- a/profiles/remote-builder.nix +++ b/profiles/remote-builder.nix @@ -28,7 +28,7 @@ programs.ssh.extraConfig = '' Host builder User builder - HostName rivendell + HostName 192.168.1.114 IdentityFile ${config.age.secrets.ssh-remote-builder.path} ''; } |