kiaragrouwstra/infra
0
0
Fork 0
forked from the-distro/infra
Code Pull requests Activity

builders: direct buildbot to /mnt store via ForceCommand

Browse source
This commit is contained in:
Yureka 2024-08-06 13:26:35 +02:00
parent b1c28cfc7c
commit dfd48f2179
1 changed files with 11 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
services/baremetal-builder/default.nix
View file

@ -44,10 +44,20 @@ in
]; ];
}; };
nix.settings = { nix.settings = {
trusted-users = [ "builder" "buildbot" ];
inherit ((import ./assignments.nix).${config.networking.hostName}) max-jobs cores; inherit ((import ./assignments.nix).${config.networking.hostName}) max-jobs cores;
}; };
services.openssh.extraConfig = ''
Match User buildbot
AllowAgentForwarding no
AllowTcpForwarding no
PermitTTY no
PermitTunnel no
X11Forwarding no
ForceCommand ${config.nix.package.out}/bin/nix-daemon --store /mnt --stdio
Match All
'';
nixpkgs.hostPlatform = "x86_64-linux"; nixpkgs.hostPlatform = "x86_64-linux";
hardware.cpu.intel.updateMicrocode = true; hardware.cpu.intel.updateMicrocode = true;