Commit graph

Select branches

Hide pull requests

acls

alertmanager

buildbot

builder

cache-ipv4

cadvisor-containers

ckie/moarr-v4

email-groups

feature-service-uptime-kuma

fodwatch

format

gerrit-gc

gerrit-http-clones

gerrit-metrics

hexchen/colmena-checker

hexy/credentials

hydra-wire-up

lorri

main

meta01

moar-builders

unplug-epyc

Mono Color

• 80c4757571 gerrit01: add a one-way-sync service raito 2024-07-04 15:18:21 +0200
• 99649eeb6c hotfix(buildbot): fix local machine parametrization raito 2024-07-19 16:05:13 +0200
• d1e64b6610 Fix eval warning here too Ilya K 2024-07-19 12:06:03 +0300
• 766dc4c383 Mimir also wants network-online.target Ilya K 2024-07-19 12:03:55 +0300
• 65b07a936b Make sure Mimir starts after network is up Ilya K 2024-07-19 12:00:52 +0300
• cfa6d79b75
  infra: fix warnings Janik Haag 2024-07-19 00:49:17 +0200
• cd846260e4 flake: add buildbot jobs entrypoints raito 2024-07-18 12:18:12 +0200
• 8afcf249d6 buildbot: upgrade to local machine specifications raito 2024-07-18 12:18:02 +0200
• 25feb3c9f1 bagel-box: add a proper FQDN raito 2024-07-18 11:43:05 +0200
• 56a04a6faf buildbot: init raito 2024-07-18 08:57:56 +0000
• 4473717e9f gerrit: introduce buildbot checks plugin buildbot raito 2024-07-17 18:42:54 +0200
• da7175303c buildbot: add support for remote builders via baremetal machines raito 2024-07-17 18:18:59 +0200
• e00d0331ec common/known-ssh-keys: init raito 2024-07-17 17:32:34 +0200
• a56426e6c9 secrets: rekey for new machine (buildbot) raito 2024-07-17 16:41:32 +0200
• c3394264ba hosts/buildbot: init raito 2024-07-17 14:47:52 +0200
• 7789e9ce75 services/buildbot: init raito 2024-07-17 15:43:29 +0200
• fda59ee6c0 gerrit: factor more configuration in the NixOS module for external consumption raito 2024-07-17 15:43:22 +0200
• cc1e3f2e14
  
  systems/git: make sshd startup less racy and flaky emily 2024-07-17 15:39:50 +0200
• 68d956f1ba flake: add buildbot-nix on the refactor branch raito 2024-07-17 14:47:38 +0200
• 81fc914d79 feat: change the default shell to zsh raito 2024-07-17 12:56:45 +0000
• 87bd42cf1d tf/dns: pre-add buildbot.forkos.org raito 2024-07-17 14:44:18 +0200
• 34e8b4b98a tf/dns: rework the forgejo DNS for the 2 servers raito 2024-07-17 14:41:38 +0200
• 5a05e44a95
  
  tf/hydra: add a project for our hydra fork Pierre Bourdon 2024-07-17 13:34:10 +0200
• 234522cc3b
  
  flake.lock: Update Pierre Bourdon 2024-07-17 13:10:53 +0200
• c296d0d46d Merge pull request 'forgejo: init, admins: add emilylange' (#62) from forgejo into main Luke Granger-Brown 2024-07-16 23:11:55 +0000
• 95b58de737
  
  forgejo: use redis as cache and session provider emily 2024-07-16 20:09:15 +0200
• 8b9d33d70c
  
  forgejo: disable registrations, enable auto-registration for SSO emily 2024-07-16 17:14:23 +0200
• ab9caaf520
  
  systems: add git.forkos.org emily 2024-07-16 15:42:10 +0200
• dd069c40d7
  
  forgejo: init service emily 2024-07-12 22:07:25 +0200
• 9899b083ad
  
  forgejo: init custom Forgejo patchset emily 2024-07-12 22:06:26 +0200
• d4caf7b71a
  
  admins: add emilylange emily 2024-07-12 20:49:31 +0200
• 37ec674984 dns: pre-add git.forkos.org raito 2024-07-16 11:54:09 +0200
• e3e60a5e72 services/monitoring: add scraping of Gerrit's internal metrics Luke Granger-Brown 2024-07-13 19:11:43 +0100
• 2e86babc8a services/gerrit: add metrics-prometheus-exporter Luke Granger-Brown 2024-07-13 19:10:45 +0100
• 2b8f42dcda secrets: add gerrit-prometheus-bearer-token Luke Granger-Brown 2024-07-13 19:10:29 +0100
• f14bba14a3 gitignore: add secrets (but not encrypted secrets) to gitignore Luke Granger-Brown 2024-07-13 18:24:05 +0100
• 0723b7de42 Merge pull request 'terraform/gandi: more sniproxying for bagel-box,meta-01' (#67) from ckie/moarr-v4 into main raito 2024-07-14 18:44:21 +0000
• 3c2691d9e2
  
  terraform/gandi: introduce proxyRecords and proxy web services ckie/moarr-v4 mei (ckie) 2024-07-14 20:46:38 +0300
• 309d54e7b0 services/monitoring: add scraping of Gerrit's internal metrics gerrit-metrics Luke Granger-Brown 2024-07-13 19:11:43 +0100
• 48e17163c8 services/gerrit: add metrics-prometheus-exporter Luke Granger-Brown 2024-07-13 19:10:45 +0100
• 5f033a5818 secrets: add gerrit-prometheus-bearer-token Luke Granger-Brown 2024-07-13 19:10:29 +0100
• 4f647de4c5 gitignore: add secrets (but not encrypted secrets) to gitignore Luke Granger-Brown 2024-07-13 18:24:05 +0100
• a44196fc3c flake: update nix-gerrit Luke Granger-Brown 2024-07-13 18:23:41 +0100
• 7a937e837a Unlimit Mimir max series Ilya K 2024-07-13 15:52:46 +0300
• ecfe0ec886
  
  flake.lock: Update Pierre Bourdon 2024-07-13 06:13:22 +0200
• 7d9461808c
  
  builders: configure a swapfile + zswap Pierre Bourdon 2024-07-13 04:40:51 +0200
• 293bc52ace
  
  hydra: reduce number of parallel builds per builder to limit RAM consumption Pierre Bourdon 2024-07-13 04:38:24 +0200
• 64079be3c0
  
  flake.lock: Update Pierre Bourdon 2024-07-13 03:12:13 +0200
• 9189b73a5f devShell: change colmena to the nixpkgs version Janik Haag 2024-07-12 19:00:55 +0200
• af515792cc admins: add janik Janik Haag 2024-07-12 19:34:08 +0200
• b4deee29af editorconfig: init Janik Haag 2024-07-12 19:37:52 +0200
• 756341ea4c
  
  builders: tune sshd MaxStartups to avoid rate limiting Hydra Pierre Bourdon 2024-07-12 21:57:04 +0200
• bed5ef022f
  change the default user shell to zsh Janik Haag 2024-07-12 19:20:41 +0200
• e6ead602f0 builders get a special treatment for dns64 Yureka 2024-07-11 02:05:58 +0200
• 329f267b02 enable nftables on all hosts Yureka 2024-07-11 02:05:35 +0200
• b14f155d55 add ipmitool on vpn-gw and builders Yureka 2024-07-10 16:36:09 +0200
• c8208f42ef
  
  flake: attempt to fix the hydraJobs definition Pierre Bourdon 2024-07-10 19:03:18 +0200
• 087d17c681
  
  tf/hydra: add a project/jobset for infra machine configurations Pierre Bourdon 2024-07-10 18:52:43 +0200
• d2336262fb
  
  hydra: set allowed URIs in restricted mode for flake inputs Pierre Bourdon 2024-07-10 18:52:22 +0200
• f35cfbd567
  
  flake: configure some hydra jobs (all machine configurations) Pierre Bourdon 2024-07-10 18:40:59 +0200
• 58325e30dd
  
  common/nix: use bagel-cache by default Pierre Bourdon 2024-07-10 18:17:30 +0200
• 411d514ab9
  
  hydra: user hydra-www needs nix-daemon access too Pierre Bourdon 2024-07-10 17:36:39 +0200
• f74d1ca0f6
  
  hydra: start signing paths Pierre Bourdon 2024-07-10 17:34:57 +0200
• 70e608a8f7
  
  common: provide a pinned nixpkgs on all infra machines Pierre Bourdon 2024-07-10 17:17:18 +0200
• 4e869a9f43 fix bmc dhcp Yureka 2024-07-10 15:45:16 +0200
• 3cbdbc45f7 more quality of life improvements... Yureka 2024-07-10 15:45:10 +0200
• 7ba42d99d1 reduce hydra builders to 4 Yureka 2024-07-10 15:08:28 +0200
• 254e161c07 Give wob-vpn-gw a proper hostname Ilya K 2024-07-10 15:34:05 +0300
• a9f45daac8 Rename machine folders, clean up flake Ilya K 2024-07-10 15:24:47 +0300
• 787b3af638 Add wob-vpn-gw key, rekey metrics push password for it Ilya K 2024-07-10 15:13:05 +0300
• e608b92e4f Add htop and btop to default machine config Ilya K 2024-07-10 15:01:09 +0300
• e84b362b7a Allow 12 hour of backfill for metrics Ilya K 2024-07-10 14:59:09 +0300
• 9e7e6d42ab Make nginx/loki/mimir go fast Ilya K 2024-07-10 14:55:28 +0300
• f2c2bc5ab6
  
  hydra: output machine host key as base64 in the generated machines.conf Pierre Bourdon 2024-07-10 02:16:45 +0200
• f214da9228
  
  hydra: add hydra to nix trusted-users Pierre Bourdon 2024-07-10 02:03:33 +0200
• 0e24c18815
  
  tf/hydra: add a test staging-small nixpkgs jobset Pierre Bourdon 2024-07-10 01:57:12 +0200
• 2ac0a599fb
  
  bagel-box: fix missing toString Pierre Bourdon 2024-07-10 01:51:31 +0200
• 0ccf0b023e Merge pull request 'hydra: moar power' (#51) from moar-builders into main raito 2024-07-09 23:32:38 +0000
• 82db8f7f1e gerrit01: some more tuning Luke Granger-Brown 2024-07-09 23:21:10 +0100
• 7b7a645cfc hydra: moar power moar-builders raito 2024-07-10 01:27:23 +0200
• 39d2352bbc general quality of life improvements Yureka 2024-07-10 00:52:41 +0200
• a7d21e96a0 add global hardening options Yureka 2024-07-10 00:46:20 +0200
• c51676a560 Merge pull request 'hydra: unplug the EPYC' (#49) from unplug-epyc into main raito 2024-07-09 23:26:08 +0000
• 9988811be5 hydra: unplug the EPYC unplug-epyc raito 2024-07-10 01:13:10 +0200
• afaf49eb97
  
  secrets: rekey Pierre Bourdon 2024-07-10 01:05:05 +0200
• bc8ef7b5fc
  
  ssh-keys: remove raito's key which is too NSA'd for agenix Pierre Bourdon 2024-07-10 01:04:48 +0200
• 61e8048445
  
  sysadmin: remove pwru, does not build on latest nixpkgs Pierre Bourdon 2024-07-09 00:44:52 +0200
• 2ebb0e82e8
  
  flake.lock: Update Pierre Bourdon 2024-07-09 00:35:13 +0200
• 664fa033aa Merge pull request 'hydra: wire up new builders' (#47) from hydra-wire-up into main raito 2024-07-09 23:00:27 +0000
• 2308870aa5 builders: add a nice tag to deploy all of them at once hydra-wire-up raito 2024-07-10 00:59:31 +0200
• f9f955214f ssh-keys: add raito to secrets set raito 2024-07-10 00:59:17 +0200
• 90e54d7292 terraform: add DNS records for VPN-GW & builders raito 2024-07-10 00:55:42 +0200
• 645ad7d062 builders: add builder user raito 2024-07-10 00:55:25 +0200
• a30c1f7d78 hydra: wire up new builders raito 2024-07-10 00:43:03 +0200
• eb21cb6916 add baremetal builders Yureka 2024-07-09 23:42:43 +0200
• 62af42fc97 init wob-vpn-gw host Yureka 2024-07-09 11:26:10 +0200
• 7396107bf4 add a shim to provide nixosConfigurations from colmena hive Yureka 2024-07-09 10:49:29 +0200
• c0e1d05b3c admins: add yuka Yureka 2024-07-09 10:34:30 +0200
• 3828721e4f services/netbox: enable OIDC via Lix SSO raito 2024-07-09 02:28:42 +0200
• 8a9ff8c40d services/gerrit: migrate to Gerrit from the-distro/nix-gerrit flake Luke Granger-Brown 2024-07-08 21:30:08 +0100