git.delta.rocks / jrsonnet / refs/commits / b6dd2cb462e8

1{2  description = "NixOS cluster configuration management";34  inputs = {5    nixpkgs.url = "github:nixos/nixpkgs/release-25.05";6    rust-overlay = {7      url = "github:oxalica/rust-overlay";8      inputs.nixpkgs.follows = "nixpkgs";9    };10    flake-parts = {11      url = "github:hercules-ci/flake-parts";12      inputs.nixpkgs-lib.follows = "nixpkgs";13    };14    crane.url = "github:ipetkov/crane";15    shelly.url = "github:CertainLach/shelly";16    treefmt-nix = {17      url = "github:numtide/treefmt-nix";18      inputs.nixpkgs.follows = "nixpkgs";19    };20    # DeterminateSystem's nix fork is controversial, but I don't mind it,21    # and it has lazy-trees support which is useful for fleet.22    nix.url = "github:deltarocks/nix/fleet";23  };24  outputs =25    inputs:26    inputs.flake-parts.lib.mkFlake27      {28        inherit inputs;29      }30      {31        imports = [ inputs.shelly.flakeModule ];32        flake = rec {33          lib =34            (import ./lib {35              inherit (inputs.nixpkgs) lib;36            })37            // {38              fleetConfiguration = throw "function-based interface is deprecated, use flake-parts syntax instead";39            };40          flakeModules.default = import ./lib/flakePart.nix {41            inherit (inputs) crane;42          };43          flakeModule = flakeModules.default;4445          fleetModules.tf = ./modules/extras/tf.nix;4647          # Used to test nix-eval bindings48          testData = {49            testObj = {50              v = "Hello";51            };52            testString = "hello";53          };5455          # To be used with https://github.com/NixOS/nix/pull/889256          schemas =57            let58              inherit (inputs.nixpkgs.lib) mapAttrs;59            in60            {61              fleetConfigurations = {62                version = 1;63                doc = ''64                  The `fleetConfigurations` flake output defines fleet cluster configurations.65                '';66                inventory = output: {67                  children = mapAttrs (configName: cluster: {68                    what = "fleet cluster configuration";6970                    children = mapAttrs (hostName: host: {71                      what = "host [${host.system}]";72                    }) cluster.config.hosts;73                    # It is possible to implement this inventory right now, but I want to74                    # get rid of `fleet.nix` file in the future.75                    # children.secrets = { };76                  }) output;77                };78              };79            };80        };81        # Supported and tested list of deployment targets.82        systems = [83          "x86_64-linux"84          "aarch64-linux"85          "armv7l-linux"86          "armv6l-linux"87        ];88        perSystem =89          {90            config,91            system,92            pkgs,93            self,94            inputs',95            ...96          }:97          let98            inherit (lib.attrsets) mapAttrs';99            inherit (lib.lists) elem;100            # Can also be built for darwin, through it is not usual to deploy nixos systems from macos machines.101            # I have no hardware for such testing, thus only adding machines I actually have and use.102            #103            # It is not possible to deploy any host from armv6/armv7 hardware, and I don't think it even makes sense.104            deployerSystems = [105              "aarch64-linux"106              "x86_64-linux"107            ];108            deployerSystem = elem system deployerSystems;109            lib = pkgs.lib;110            rust = pkgs.rust-bin.fromRustupToolchainFile ./rust-toolchain.toml;111            craneLib = (inputs.crane.mkLib pkgs).overrideToolchain rust;112            treefmt = (inputs.treefmt-nix.lib.evalModule pkgs ./treefmt.nix).config.build;113          in114          {115            _module.args.pkgs = import inputs.nixpkgs {116              inherit system;117              overlays = [ (inputs.rust-overlay.overlays.default) (final: prev: {118                boehmgc = prev.boehmgc.overrideAttrs (prevAttrs: {119                  configureFlags = prevAttrs.configureFlags ++ [120                    "--enable-gc-assertions"121                  ];122                });123              }) ];124            };125            # Reference fleet package should be built with nightly rust, specified in rust-toolchain.toml.126            packages = lib.mkIf deployerSystem (127              let128                packages = pkgs.callPackages ./pkgs {129                  inherit craneLib inputs';130                };131              in132              packages // { default = packages.fleet; }133            );134            # fleet-install-secrets will not be built normally, because they are not ran directly by user most of the time.135            # checks there build packages for default nixpkgs rustPlatform packages.136            checks =137              let138                nixpkgsCraneLib = inputs.crane.mkLib pkgs;139                packages = pkgs.callPackages ./pkgs {140                  craneLib = nixpkgsCraneLib;141                  inherit inputs;142                };143                prefixAttrs =144                  prefix: attrs:145                  mapAttrs' (name: value: {146                    name = "${prefix}${name}";147                    value = value.overrideAttrs (prev: {148                      pname = "${prefix}${prev.pname}";149                    });150                  }) attrs;151              in152              # fleet-install-secrets is installed to remote systems, thus needs to work153              # with rust in nixpkgs.154              (prefixAttrs "nixpkgs-" {155                inherit (packages) fleet-install-secrets;156              })157              // {158                formatting = treefmt.check self;159              };160            # TODO: It should be possible to move lib.mkIf to default attribute, instead of disabling the whole161            # devShells block, yet nix flake check fails here, due to no default shell found. It is nix or flake-parts bug?162            shelly.shells.default = lib.mkIf deployerSystem {163              factory = craneLib.devShell;164              packages = with pkgs; [165                rust166                cargo-edit167                cargo-udeps168                cargo-fuzz169                cargo-watch170                cargo-outdated171172                pkg-config173                openssl174                rustPlatform.bindgenHook175                inputs'.nix.packages.nix-expr-c176                inputs'.nix.packages.nix-flake-c177                inputs'.nix.packages.nix-fetchers-c178              ];179              environment.PROTOC = "${pkgs.protobuf}/bin/protoc";180            };181            formatter = treefmt.wrapper;182          };183      };184}