78 lines
2.5 KiB
YAML
78 lines
2.5 KiB
YAML
# borrowed from https://gitlab.com/nix17/nixos-config/-/blob/main/.gitlab-ci.yml
|
|
|
|
stages:
|
|
- flake
|
|
- test
|
|
- deploy
|
|
|
|
# Passed in from upstream
|
|
# $PACKAGE_NAME = name of the flake that needs to be updated
|
|
# $UPDATE_FLAKE = flag to update the flake
|
|
|
|
update:
|
|
stage: flake
|
|
# from https://forum.gitlab.com/t/git-push-from-inside-a-gitlab-runner/30554/5
|
|
before_script:
|
|
#- 'which ssh-agent || ( apt-get update -qy && apt-get install openssh-client -qqy )'
|
|
- eval `ssh-agent -s`
|
|
# for the deploy
|
|
- echo "${CI_KEY}" | tr -d '\r' | ssh-add - > /dev/null
|
|
- mkdir -p ~/.ssh
|
|
- chmod 700 ~/.ssh
|
|
- echo "$CI_KEY" >> ~/.ssh/id_rsa.pub
|
|
- '[[ -f /.dockerenv ]] && echo -e "Host *\n\tStrictHostKeyChecking no\n\n" > ~/.ssh/config'
|
|
|
|
script:
|
|
- git config --global user.email "${CI_EMAIL}"
|
|
- git config --global user.name "${CI_USERNAME}"
|
|
# the part that updates the flake
|
|
- nix --experimental-features 'nix-command flakes' flake lock --update-input $PACKAGE_NAME
|
|
- git add flake.lock
|
|
- git commit -m "[skip ci] Updated flake for $PACKAGE_NAME" || echo "No changes, nothing to commit"
|
|
# we have a custom domain
|
|
- git remote rm origin && git remote add origin ssh://git@gitlab.skynet.ie:2222/compsoc/skynet/nixos.git
|
|
- git push origin HEAD:$CI_COMMIT_REF_NAME
|
|
|
|
only:
|
|
refs:
|
|
- main
|
|
variables:
|
|
- $UPDATE_FLAKE == "yes"
|
|
|
|
build:
|
|
# image: nixos/nix
|
|
stage: test
|
|
before_script:
|
|
- . "$HOME/.nix-profile/etc/profile.d/nix.sh"
|
|
script:
|
|
- nix --experimental-features 'nix-command flakes' run nixpkgs#colmena -- build
|
|
|
|
# use ctrl+/ on intellij to mass uncoment
|
|
# set up deployment later
|
|
deploy:
|
|
stage: deploy
|
|
# from https://forum.gitlab.com/t/git-push-from-inside-a-gitlab-runner/30554/5
|
|
before_script:
|
|
# Check for ssh-agent + rsync and install if not present
|
|
#- 'which ssh-agent || ( apt-get update -y && apt-get install openssh-client -y )'
|
|
- eval $(ssh-agent -s)
|
|
# Inject the remote's private key
|
|
- echo "$DEPLOY_KEY" | tr -d '\r' | ssh-add - > /dev/null
|
|
- mkdir -p ~/.ssh
|
|
- chmod 700 ~/.ssh
|
|
# Append keyscan output into known hosts
|
|
# - ssh-keyscan $SERVER_IP >> ~/.ssh/known_hosts
|
|
# - chmod 644 ~/.ssh/known_hosts
|
|
- . "$HOME/.nix-profile/etc/profile.d/nix.sh"
|
|
|
|
script:
|
|
# this will grab a fresh copy of teh repo
|
|
- nix --experimental-features 'nix-command flakes' run nixpkgs#colmena -- apply --on @active-dns
|
|
#
|
|
# only:
|
|
# refs:
|
|
# - main
|
|
|
|
|
|
# only run on $UPDATE_FLAKE
|
|
|