aboutsummaryrefslogtreecommitdiffstats
path: root/pkgs
Commit message (Collapse)AuthorAgeFilesLines
* populate: stop the ssh master only if there is onetv2 days1-1/+4
| | | | | | | Populate ends by stopping the ssh master, which fails if no source started one, e.g. for local targets, which populate doesn't reach via ssh. Populate then exits with ssh's exit status, though all sources got delivered. Populate now checks for a master first.
* populate flake-input: support subdirectories named in URLstv2 days1-7/+41
| | | | | | | | Depending on the version of Nix, flake references and lock entries name the subdirectory containing a flake either as attribute dir or as query parameter dir of their URL. fetchTree supports neither, so populate looks for both: it takes the subdirectory from either, from the locked or the original reference, and removes both before fetching.
* populate flake: support fetchOnTargettv2 days1-22/+183
| | | | | | | | | | | | | | | | | | With fetchOnTarget, the target fetches the flake's inputs using the arguments recorded in the lock file, like it does for flake-input sources. The flake itself has no lock entry, so the target fetches it by its locked reference, unless that refers to the deploying machine, e.g. a path or a Git work tree. Then the flake's tree gets transferred using rsync and added to the target's store using nix-store --add-fixed, which yields the same store path as on the deploying machine, because flake store paths are content-addressed by their NAR hash. Adding paths like this needs neither signatures nor a trusted user, so this works for targets using sudo. The transfer gets skipped if the target's store has the flake already, and populate fails if the added path differs from the expected one. rsync' gets a filterFiles option, so the flake's tree gets transferred without applying .rsync-filter files, which would change it.
* populate: add flake-input source typetv2 days1-9/+11
| | | | | | | The flake-input source type delivers an input of a flake, as recorded in the flake's lock file, and the flake source type delivers the flake itself. fetchOnTarget belongs to flake-input, because only a locked input can be fetched on the target.
* krops writeDeploy: deploy generated flakestv2 days1-1/+12
| | | | | The flake parameter names a source. If the source draws inputs from other sources, its generated flake gets deployed.
* krops writeDeploy: add flake parametertv2 days1-2/+8
| | | | | | With flake set, nixos-rebuild deploys that flake from the build target's source directory, with flakes enabled for the command. The deployment fails with an error message unless Nix on the build target supports flakes.
* populate: generate flakes for inputs drawn from sourcestv2 days1-5/+131
| | | | | | | | | | | | | | For each source that draws inputs from other sources, populate generates a flake in .populate/flakes/<name>, which re-exports the outputs of the source's flake with those inputs drawn from the other sources. The source itself stays as it is, so NIX_PATH still refers to it. Generated flakes refer to each other's generated flakes, so a source's own declarations apply wherever it gets drawn from, and get generated in dependency order. Evaluation fails for sources drawing inputs from missing sources, from themselves, or from each other. Generated flakes get locked on every run, and get removed once their sources no longer draw inputs from other sources.
* populate flake: add fetchOnTargettv2 days1-18/+80
| | | | | | | | | | With fetchOnTarget, the target fetches the input and its own inputs itself, using fetchTree with the arguments recorded in the flake's lock file. Only nix flake metadata runs on the deploying machine, so the inputs get downloaded once, by the target. This needs Nix with flake support on the target, which populate checks before fetching. Because nothing gets copied, this also works for targets using sudo.
* populate: add flake source typetv2 days1-1/+97
| | | | | | | | | | | | Deliver a flake, or one of its locked inputs, to the target: archive the flake locally, copy the selected input together with its own inputs into the target's store, and link it at the target path, registered as garbage collector root. The result can be used in NIX_PATH as well as by flakes evaluated on the target, without network access. nix copy runs with a separate ssh wrapper without the control socket, because Nix waits for its LocalCommand, which may not run over a multiplexed connection.
* populate: export TMPDIRtv2 days1-0/+1
| | | | | | | Each job and the ssh wrapper run as separate scripts, which only see TMPDIR if it's exported. Without TMPDIR in the caller's environment, jobs fail, and the ssh wrapper's control socket ends up at the root directory.
* populate backup: fix error messagetv2 days1-1/+1
|
* populate: derive socket name from target hosttv2026-01-011-2/+2
|
* populate: use ssh control socket1.30.0tv2025-12-091-6/+12
|
* populate use singular tmpdirtv2025-12-091-24/+22
| | | | | | | | Set TMPDIR to a fresh, private top-level temporary directory, and run each job in a separate subdirectory beneath it. TMPDIR remains shared across all jobs, allowing reuse of resources like ssh control sockets.
* populate pass{,age}: use $pass_outtv2025-12-091-9/+9
|
* populate pipe: use rsynctv2025-12-091-2/+10
| | | | Generate a reproducible output to transmit it only if it has changed.
* populate passage: rename loop variablestv2025-04-091-6/+7
|
* populate rsync': reduce verbositytv2025-04-091-1/+2
|
* populate: add passage source type1.29.0tv2024-01-111-1/+32
|
* populate pass: calculate hash for each symlink1.28.2lassulus2023-03-131-1/+9
| | | | | this fixes folders with symlinks not getting updated if the symlinked file is in another subfolder of the pass repo
* rebuild: set NIX_PATH like everywhere else1.28.1tv2022-09-071-3/+2
|
* withNixOutputMonitor: run shell with know Nix pathtv2022-09-071-2/+3
|
* runShell: admit non-posix-compatible shellstv2022-09-071-1/+4
|
* krops writeDeploy: add useNixOutputMonitor parameter1.28.0tv2022-08-231-7/+48
|
* Merge remote-tracking branch 'prism/master'1.27.0tv2022-07-261-2/+3
|\
| * krops writeTest: make trace optionallassulus2022-07-261-2/+3
| |
* | krops writeDeploy: add operation parametertv2022-07-161-1/+2
|/
* populate git: remove trailing spaces1.26.3tv2022-02-121-1/+1
|
* populate git: remove non-worktree targettv2022-02-121-0/+5
|
* target: use default port from SSH configErik Arvstedt2021-11-202-4/+2
| | | | | This is the expected behavior. The SSH config is also implicitly used for other SSH-related settings.
* populate file: isDerivation -> isStorePath1.26.1tv2021-10-261-2/+2
|
* populate file: admit derivations1.26.0tv2021-10-261-4/+15
|
* populate: add rsyncDefaultConfigtv2021-10-261-7/+14
|
* runShell/writeCommand: add allocateTTY argumentlassulus2021-10-261-4/+7
|
* krops writeDeploy: deprecate fast parameterlassulus2021-10-261-29/+19
|
* populate pass: don't decrypt .gpg-idlassulus2021-02-161-1/+1
|
* populate pass: make git optional againlassulus2021-01-171-2/+6
|
* Make pass source follow symlinksv1.24.0Simon Bruder2020-12-151-1/+1
|
* Add flag to nixos-rebuildMartin Potier2020-11-201-0/+2
| | | | | | | In the case we need sudo for the remote target, the flag `--use-remote-sudo` must be passed if the target's ssh user is not root. If target's ssh user is root, it doesn't hurt to use sudo.
* add `shallow` option to git source typeEnno Lohmeier2020-07-021-3/+15
|
* fix local deployment with sudoJörg Thalheim2020-06-221-3/+6
|
* treewide: harmonize ssh callsv1.22.0tv2020-06-082-17/+16
|
* krops runCommand: derive script name from commandtv2020-06-081-1/+1
|
* krops remoteCommand: don't ssh if target is localtv2020-06-081-9/+12
|
* add target.extraOptionsErik Arvstedt2020-04-182-0/+2
|
* Merge pull request #15 from nyantec/feature/filtersv1.20.0tv2020-02-181-2/+5
|\ | | | | support for include filters
| * support for include filtersMilan Pässler2020-02-031-2/+5
| | | | | | | | | | | | | | - Added a new option for `file` sources, which allows to specify a list of `include` and `exclude` filters - Added a new option for `file` sources, which allows to disable the `--delete-excluded` behaviour.
* | use writers from nixpkgsJörg Thalheim2020-02-173-23/+11
|/ | | | | This makes the evaluation of krops pure (no import from derivation) and makes it faster since the fetchGit result might be garbage collected.
* writeDeploy: add crossDeploy argumentJörg Thalheim2019-12-301-0/+3
|
* writeDeploy: add support for build hostsJörg Thalheim2019-12-301-3/+15
| | | | | This allows to evaluate & build the system on the dedicated build host, from which the build artifacts are uploaded onto the target machine.
generated by cgit v1.3.1 (git 2.54.0) at 2026-11-13 23:27:34 +0000