Skip to content

staging-hydra: switch to nixos-infra branch#1010

Draft
Mic92 wants to merge 2 commits intomainfrom
staging-hydra
Draft

staging-hydra: switch to nixos-infra branch#1010
Mic92 wants to merge 2 commits intomainfrom
staging-hydra

Conversation

@Mic92
Copy link
Copy Markdown
Member

@Mic92 Mic92 commented Apr 13, 2026

@Mic92 Mic92 force-pushed the staging-hydra branch 2 times, most recently from 64208c6 to 8140196 Compare April 13, 2026 08:04
@Mic92
Copy link
Copy Markdown
Member Author

Mic92 commented Apr 13, 2026

Depends on #1009

Mic92 added 2 commits April 13, 2026 10:18
The ofborg machines were maintained in a separate NixOS/ofborg-infrastructure
repo that already consumed this one as a flake input for shared modules and
ssh-keys. Keeping two repos in lockstep created drift and double-locking, so
fold the ofborg NixOS hosts (core01, eval01-04, build01-05) into
non-critical-infra and the five MacStadium darwin builders into macs/.

References to inputs.infra are rewritten to local relative paths now that the
indirection is gone. The ofborg and ofborg-viewer flakes become direct inputs
so the ofborg builders and core services keep evaluating unchanged. The ofborg
hosts are registered in colmena alongside the existing non-critical machines so
a single hive covers everything.

The hydra builders on these hosts now use inputs.hydra-staging (NixOS/hydra)
instead of the helsinki-systems/hydra-queue-runner fork (incorporating
NixOS/ofborg-infrastructure#18), so client and server are built from the same
tree. The duplicated per-host services.queue-builder-dev / sops blocks are
factored into non-critical-infra/modules/hydra/builder.nix.

Secrets are copied verbatim with their sops creation rules and host age keys
merged into the existing .sops.yaml files; cole-h's ssh and age keys are
dropped while at it.

CI gains per-architecture ofborg jobs that build all hosts of one arch in a
single nix-fast-build run via a new ciSystems flake output, since the fleet
shares almost its entire closure and splitting per host would rebuild it
repeatedly.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant