qo.is/infrastructure
3
0
Fork 0
Code Issues 12 Pull requests 1 Projects 1 Activity Actions

Compare commits

base: qo.is:aac9de0ae002fbd1a7e932fd4692045f48bcbe00
Branches Tags
qo.is:main
qo.is:auto-deploy-physical-hosts
qo.is:18-caral
..
compare: qo.is:90026d27346d4699d710f412a8aafa89d6eea079
Branches Tags
qo.is:main
qo.is:auto-deploy-physical-hosts
qo.is:18-caral

4 commits
aac9de0ae0 ... 90026d2734

Author SHA1 Message Date
Fabian Hauser
90026d2734 Add deployment ssh key to all VMs
Some checks failed
CI / build (push) Failing after 1m14s
Details
CI / deploy (docs-ops.qo.is) (push) Has been skipped
Details
CI / deploy (system-vm) (push) Has been skipped
Details
2025-04-19 18:42:48 +03:00
Fabian Hauser
4f79f48b99 TMP: Deploy from deploy-vms-branch 2025-04-19 18:42:48 +03:00
Fabian Hauser
54c4cf23ff Update CI pipleline for auto deployment 2025-04-19 18:42:48 +03:00
Fabian Hauser
1d3201d8e5 Add SSH_DEPLOY_KEY handling to auto-deploy script 2025-04-19 18:42:48 +03:00
2 changed files with 5 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
nixos-modules/system/virtual-machine.nix
View file

@ -13,6 +13,10 @@ with lib;
config = lib.mkIf cfg.enable { config = lib.mkIf cfg.enable {
users.users.root.openssh.authorizedKeys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBS65v7n5ozOUjYGuO/dgLC9C5MUGL5kTnQnvWAYP5B3 ci@git.qo.is"
]; # TODO: Move this key to allow CI deployment for all machines.
boot.loader.grub.enable = true; boot.loader.grub.enable = true;
system.autoUpgrade.allowReboot = true; system.autoUpgrade.allowReboot = true;

2
packages/auto-deploy/script.bash
View file

@ -60,6 +60,6 @@ retry() {
for HOST in $HOSTS; do for HOST in $HOSTS; do
retry 3 deploy \ retry 3 deploy \
--skip-checks \ --skip-checks \
--ssh-opts "-o UserKnownHostsFile=${KNOWN_HOSTS_FILE} ${SSH_KEY_FILE_ARG:-''}" \ --ssh-opts "-o UserKnownHostsFile=${KNOWN_HOSTS_FILE} ${SSH_KEY_FILE_ARG:-}" \
--targets "${FLAKE_ROOT}#\"${HOST}\".\"${PROFILE}\"" --targets "${FLAKE_ROOT}#\"${HOST}\".\"${PROFILE}\""
done done