Compare commits

...

4 Commits

Author SHA1 Message Date
d2ecee0cc0
prom0: Remove unnecessary whitespace 2024-09-26 23:57:15 -04:00
a17e56e771
proxmox-vm-lvm-minimal: Use guix substitute signing keys on all vms
Previously, only guix-ci0.home.rekahsoft.ca was configured to use substitutes from custom
substitute servers, notably non-guix. This however is not favorable for other vms, as some
package substitutes are only available on custom substitute servers (eg. my own internal one,
non-guix, etc..).

This commit adjusts this, as well as reorganizes public key files.
2024-09-26 23:56:48 -04:00
af23a6502b
channels.scm: Update rekahsoft-guix channel
Notably this fixes cloud0, where the prior update in
404ba02704, ceph was used from upstream, which is currently not
building.
2024-09-26 23:30:40 -04:00
12b0038bd3
cloud0: Remove dockerd and containerd services (no longer used) 2024-09-26 22:36:52 -04:00
14 changed files with 35 additions and 25 deletions

View File

@ -23,14 +23,18 @@
(define %automation-user "auto")
(define %guix-signing-keys
(list
(local-file "../../../.pubkeys/guix-signing-key_lenovo-t480s.pub")
(local-file "../../../.pubkeys/guix-signing-key_dell-precision.pub")))
(local-file "../../../.pubkeys/guix/lenovo-t480s.pub")
(local-file "../../../.pubkeys/guix/dell-precision.pub")
(local-file "../../../.pubkeys/guix/cuirass-genenetwork-org.pub")
(local-file "../../../.pubkeys/guix/cuirass-nonguix-org.pub")
(local-file "../../../.pubkeys/guix/guix-ci-home-rekahsoft-ca.pub")))
;; Keys used for ssh access
(define %deploy-key (local-file "../../../.pubkeys/deploy-key.pub"))
(define %collin-ed25519-key (local-file "../../../.pubkeys/ed25519-861CD08E.pub"))
(define %collin-rsa4096-key (local-file "../../../.pubkeys/rsa4096-6765FB18.pub"))
(define %collin-rsa-key (local-file "../../../.pubkeys/rsa2048-ED51AB07.pub"))
(define %deploy-key (local-file "../../../.pubkeys/ssh/deploy-key.pub"))
(define %collin-ed25519-key (local-file "../../../.pubkeys/ssh/ed25519-861CD08E.pub"))
(define %collin-rsa4096-key (local-file "../../../.pubkeys/ssh/rsa4096-6765FB18.pub"))
(define %collin-rsa-key (local-file "../../../.pubkeys/ssh/rsa2048-ED51AB07.pub"))
(define syslog-configuration
(plain-file "syslog.conf"
@ -119,7 +123,10 @@ mail.* -/var/log/maillog
config => (guix-configuration
(inherit config)
(authorized-keys (append %guix-signing-keys %default-authorized-guix-keys))
(substitute-urls %default-substitute-urls))))))
(substitute-urls (append (list "https://cuirass.genenetwork.org"
"https://substitutes.nonguix.org"
"https://guix-ci.home.rekahsoft.ca")
%default-substitute-urls)))))))
(define (proxmox-vm-lvm-minimal host-name)
(operating-system

View File

@ -29,9 +29,7 @@
(services
(append
(list (service containerd-service-type)
(service docker-service-type)
(service radicale-service-type
(list (service radicale-service-type
(radicale-configuration
(auth (radicale-auth-configuration
(type 'htpasswd)

View File

@ -331,16 +331,4 @@ PUBLISH-URL."
(guix-service-type config =>
(guix-configuration
(inherit config)
(extra-options '("--max-jobs=4"))
(substitute-urls
(append (list "https://substitutes.nonguix.org")
(guix-configuration-substitute-urls config)))
(authorized-keys
(append (list (plain-file "non-guix.pub"
"(public-key
(ecc
(curve Ed25519)
(q #C1FD53E5D4CE971933EC50C9F307AE2171A2D3B52C804642A7A35F84F3A4EA98#)
)
)"))
(guix-configuration-authorized-keys config))))))))))
(extra-options '("--max-jobs=4")))))))))

View File

@ -35,4 +35,3 @@
"/var/lib/prometheus/data:/prometheus"))
(respawn? #t)))))
%proxmox-vm-legacy-services))))

View File

@ -0,0 +1,6 @@
(public-key
(ecc
(curve Ed25519)
(q #9578AD6CDB23BA51F9C4185D5D5A32A7EEB47ACDD55F1CCB8CEE4E0570FBF961#)
)
)

View File

@ -0,0 +1,6 @@
(public-key
(ecc
(curve Ed25519)
(q #C1FD53E5D4CE971933EC50C9F307AE2171A2D3B52C804642A7A35F84F3A4EA98#)
)
)

View File

@ -0,0 +1,6 @@
(public-key
(ecc
(curve Ed25519)
(q #13EBA5788C96A57B32273782E8CB24834338B7DC00D7C0F103CA2C5576409A78#)
)
)

View File

@ -25,7 +25,7 @@
(url "https://git.rekahsoft.ca/rekahsoft/rekahsoft-guix.git")
(branch "master")
(commit
"a8d6dfe7088e605acae725f59c1e663a1e897189")
"7e1b7c9eede1c3e7be546fbde904fa718cf7a371")
(introduction
(make-channel-introduction
"d910ac4ca1e1a115934b10921bc23f50bd481043"