475 Commits
Author SHA1 Message Date
zowoq d8a7a713eb Revert "nixos/hydra: fix args for createdb"
This reverts commit feba265275.
2026-07-09 10:03:25 +10:00
esahin90 b69b9deb9c nixos/gitlab-runner: add options for privileged services
The dockerServicesPrivileged and dockerAllowedPrivilegedServices limit
which containers are allowed to run in privileged mode in the GitLab CI.
2026-05-29 22:52:04 +02:00
Yuriy Taraday 505e8321d8 github-runner: Disable node20 runtime by default
Node.js 20 is now EOL, see https://github.com/NixOS/nixpkgs/issues/515284
Remove it from the default list of runtimes, but keep the support around
as long as upstream supports it.
2026-05-27 19:58:02 +02:00
Defelo 252b796ce1 radicle-node: 1.8.0 -> 1.9.0
Changelog: https://radicle.network/nodes/seed.radicle.dev/rad:z3gqcJUoA1n9HaHKufZs5FCSGazv5/tree/CHANGELOG.md
2026-05-18 21:56:55 +02:00
superherointj 800de38ba7 nixos/gitea-actions-runner: set module maintainers to match package 2026-05-13 11:37:31 -03:00
superherointj 1ee4929585 nixos/gitea-actions-runner: use dynamic binary reference
Replace hardcoded act_runner binary path with getExe which
dynamically resolves the binary via meta.mainProgram. This
future-proofs the module against further binary name changes.
Also update URLs from act_runner to runner.
2026-05-13 10:17:13 -03:00
Ulrik StridandGitHub e412230026 nixos/gitea-actions-runner: re-register on token change (#516679) 2026-05-11 16:00:56 +00:00
Martin Weinelt e0803930e5 nixos/gitea-actions-runner: remove me as maintainer
I'm not interested in maintaining this module any longer.
2026-05-05 02:11:42 +02:00
superherointj cc55ed09af nixos/gitea-actions-runner: re-register on token change
The ExecStartPre script already re-registers when labels change
(.labels fingerprint) but ignores token changes. A token change
(e.g. switching from user-level to instance-level scope) has no
effect until the .runner file is manually deleted.
2026-05-04 21:09:17 -03:00
Michael Daniels 2e87c2f8f4 nixos/*: remove unused let bindings
Generated using deadnix (with some manual work); split from #514611.
2026-05-01 20:39:14 -04:00
Felix BargfeldtandGitHub edf6cc662e treewide: update radicle domains (#512757) 2026-04-24 12:36:03 +00:00
Defelo cbea5bb610 treewide: update radicle domains
https://radicle.dev/2026/04/23/domain-move

generated using the following nushell script:

```nu
rg -l radicle | lines | do {
  sd -F seed.radicle.xyz seed.radicle.dev ...$in

  sd -F iris.radicle.xyz iris.radicle.network ...$in
  sd -F seed.radicle.garden iris.radicle.network ...$in

  sd -F rosa.radicle.xyz rosa.radicle.network ...$in
  sd -F ash.radicle.garden rosa.radicle.network ...$in

  sd -F app.radicle.xyz radicle.network ...$in

  sd -F docs.radicle.xyz radicle.dev ...$in
  sd -F radicle.xyz radicle.dev ...$in
}
```
2026-04-24 11:21:02 +02:00
zowoq feba265275 nixos/hydra: fix args for createdb
> createdb: error: too many command-line arguments (first is "hydra")
2026-04-23 13:28:33 +10:00
Defelo 03b0dea5b0 nixos/radicle-native-ci: add radicle team as maintainer 2026-03-30 12:57:35 +02:00
Defelo a03e3a391b nixos/radicle-ci-broker: add radicle team as maintainer 2026-03-30 12:57:35 +02:00
Defelo a76fb62b56 nixos/radicle-ci-broker: load private key from radicle-node service 2026-03-24 10:32:33 +01:00
Felix Singer 4273fc60d7 nixos/jenkins: Drop default packages from package option
Not every Jenkins installation needs any package included in PATH. Drop
the packages from `services.jenkins.packages` and leave the decision up
to the user instead.

Add a release note to 26.05 in order to notify users.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2026-03-22 14:40:55 +01:00
Felix Singer fdcd8b4f04 jenkins: 2.541.2 -> 2.541.3
jenkins-cli requires the -http parameter now, otherwise it fails to
connect to Jenkins and the tests fail.

https://www.jenkins.io/changelog-stable/#v2.541.3

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2026-03-20 13:15:29 +01:00
Paul HaerleandGitHub fdf74752b4 nixos/jenkins: Set ProtectSystem to strict (#472066) 2026-03-16 09:44:48 +00:00
Silvan Mosberger b513ab8192 Reapply "ci: module maintainer review requests; nixos/modules: init meta.teams"
This reverts commit 2cc2e0225f.
2026-03-13 16:53:28 +01:00
Silvan MosbergerandGitHub 2cc2e0225f Revert "ci: module maintainer review requests; nixos/modules: init meta.teams" 2026-03-06 08:41:24 +01:00
Silvan Mosberger dbb164c759 nixos/modules: Use meta.teams over meta.maintainers = lib.teams.*.members
This allows getting the team itself requested for a review instead of
the individual members
2026-03-02 10:59:09 +01:00
Felix Singer 1a44dc7cf8 nixos/jenkins: Switch from JDK21 to JDK25
JDK 25, released in September 2025, is the recent LTS release and
received support from Jenkins 2.541. So use that by default from now on.
2026-02-25 15:54:11 +01:00
Wolfgang WaltherandGitHub fea5e1f7c1 various: add {file} tags for nixos option descriptions (#455811) 2026-02-10 10:01:28 +00:00
Felix Singer 81e2494e18 nixos/jenkins: Set ProtectSystem to strict
Protect most files and directories from being read or written by setting
ProtectSystem to strict. Exclude the Jenkins state directory from that
protection.

https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#ProtectSystem=

Signed-off-by: Felix Singer <felixsinger@posteo.net>
2026-01-27 13:23:22 +01:00
Dyego Aurélio 28096cc5e3 treewide: apply nixfmt 1.2.0 2026-01-22 18:37:56 -03:00
h7x4 b36f8e0b79 various: add {file} tags for nixos option descriptions 2026-01-18 21:49:31 +09:00
NAHO a2ed7e8d88 nixos: remove optional builtins prefixes from prelude functions
Remove optional builtins prefixes from prelude functions by running:

    builtins=(
      abort
      baseNameOf
      break
      derivation
      derivationStrict
      dirOf
      false
      fetchGit
      fetchMercurial
      fetchTarball
      fetchTree
      fromTOML
      import
      isNull
      map
      null
      placeholder
      removeAttrs
      scopedImport
      throw
      toString
      true
    )

    fd \
      --exclude doc/manual/release-notes \
      --type file \
      . \
      nixos \
      --exec-batch sed --in-place --regexp-extended "
        s/\<builtins\.($(
          printf '%s\n' "${builtins[@]}" |
            paste --delimiter '|' --serial -
        ))\>/\1/g
      "

    nix fmt
2026-01-15 16:07:55 +01:00
Joshua Peek 30470e1f31 nixos/services.github-runners: add tokenType option 2026-01-06 10:39:26 -08:00
Joshua Peek be1811edb1 nixos/services.github-runners: handle github oauth access tokens 2026-01-06 10:39:26 -08:00
Gabriel Nützi eea3af80ba nixosTests.gitlab.runner: add gitlab runner tests & docs (with IFD) 2025-12-21 10:04:31 +01:00
Gabriel Nützi 02167967fa Revert "docs: gitlab-runner with example & VM test (shell-runner & podman-runner) (#441161)"
This reverts commit 43070fab2b, reversing
changes made to ada3058e8f.
2025-12-20 18:04:23 +01:00
Pol DellaieraandGitHub 43070fab2b docs: gitlab-runner with example & VM test (shell-runner & podman-runner) (#441161) 2025-12-18 21:11:22 +00:00
Gabriel Nützi 6e36fe8d5e fix: remove redundant file 2025-12-15 21:20:33 +01:00
Gabriel Nützi 9b7256deb3 sync: with master 2025-12-15 20:51:36 +01:00
6543 4107998706 nixos/woodpecker: use lib.getExe for server service 2025-12-15 16:04:33 +01:00
Felix Singer 5964ba5d9f nixos/jenkins: Add Felix Singer as a maintainer
Signed-off-by: Felix Singer <felixsinger@posteo.net>
2025-12-12 05:08:08 +01:00
Gabriel Nützi 9369697ded fix: only run podman-runner test on x86_64-linux 2025-11-29 21:11:20 +01:00
Gabriel Nützi 20bbb9af3b fix: update documentation 2025-11-21 17:55:35 +01:00
Gabriel NütziandGabriel Nützi 2122a44a7b fix: add VM test for serivces.gitlab-runner
- Put all tests into `gitlab` folder.
- Add test for `gitlab-runner` service:
  - Add runner `shell-executor`.
2025-11-21 17:55:33 +01:00
Gabriel Nützi 0d876f62c4 docs: gitlab-runner with example 2025-11-21 17:55:32 +01:00
Brian McKennaandGitHub bd1cbf9e09 nixos/gocd-agent: fix jar path in service 2025-11-20 11:15:56 +11:00
Tom Herbers c9dc62eda1 treewide: switch to channels.nixos.org
This is a follow-up for #460057 to completely remove all mentions of nixos.org/channels/.

The following command was used to generate this change:

```
find . -type f -exec sed -i 's|nixos.org/channels/|channels.nixos.org/|g' {} +
```
2025-11-17 23:41:39 +01:00
Spencer Janssen 82bd28b068 nixos/github-runner: fix nodeRuntimes option
Fixes #434830.

Drops backwards compatibility workaround introduced in #286063.
2025-10-20 23:40:39 -05:00
Pol Dellaiera 985ab75c84 nixos/gitlab-runner: fix broken link 2025-10-15 20:38:56 +02:00
Pol Dellaiera 38b1c19ecd nixos/gitlab-runner: clarify the use of extraPackages 2025-10-15 20:38:56 +02:00
SandroandGitHub 15fee7ddd0 nixos/jenkins: Apply more hardening settings (#449222) 2025-10-13 13:09:20 +00:00
Bruno BELANYIandGitHub 1ddff489f4 woodpecker: add marcusramberg to maintainers (#451490) 2025-10-13 07:30:25 +00:00
Marcus Ramberg 5269799dae nixos/woodpecker: add marcusramberg to maintainers 2025-10-13 00:52:13 +02:00
SandroandGitHub abe2eb7252 radicle-ci-broker: init at 0.21.0, radicle-native-ci: init at 0.11.1 (#436583) 2025-10-11 18:43:55 +00:00