Jean-Paul Calderone
91866154d3
expose our cache to anyone who wants it
2023-07-21 11:29:06 -04:00
Jean-Paul Calderone
b4a6a90e9f
more clarifying comments
2023-07-21 11:19:33 -04:00
Jean-Paul Calderone
c350d8b736
slightly reduce repetition by pulling out a mergeAttrs definition
2023-07-21 11:18:37 -04:00
Jean-Paul Calderone
d61029c8bb
a few more words about the nixpkgs inputs
2023-07-21 09:54:59 -04:00
Jean-Paul Calderone
10941a02f8
Go with the successfully-built release branch
...
release-XX.YY is the source branch for NixOS Hydra (CI) runs
nixos-XX.YY is updated after a successful release-XX.YY build
2023-07-21 09:42:00 -04:00
Jean-Paul Calderone
2c40185ef6
slight simplification
2023-07-20 14:00:55 -04:00
Jean-Paul Calderone
d82ade538c
Use the working tree as the source of allmydata package
2023-07-20 12:42:26 -04:00
Jean-Paul Calderone
3e18301f86
Try to get the version right
2023-07-20 11:54:19 -04:00
Jean-Paul Calderone
9585925627
abandon user-switching effort
...
su fails with "su: pam_start: error 26"
2023-07-20 11:21:08 -04:00
Jean-Paul Calderone
baadf1fad4
try su to get rid of root
...
sudo fails because it isn't setuid root... I don't know why su would be, but
maybe it is.
2023-07-20 11:12:10 -04:00
Jean-Paul Calderone
90e08314c2
try to shed root privileges
...
We have root on CircleCI in the docker container. We can't currently shed
them before we get inside the flake app because we can't run `nix build` as
non-root inside the nix container. :/
https://github.com/nix-community/docker-nixpkgs/issues/62
2023-07-20 10:58:10 -04:00
Jean-Paul Calderone
a3f50aa481
bump to the newer nixpkgs branch
2023-07-19 17:29:50 -04:00
Jean-Paul Calderone
d85f8d7caf
some more comments on the flake parts
2023-07-19 14:27:28 -04:00
Jean-Paul Calderone
b0397d3d08
Replace default.nix with a compatibility shim
...
This also means we drop our niv dependency
2023-07-19 13:57:55 -04:00
Jean-Paul Calderone
0eb160f42c
switch to the working version of nixpkgs by default
2023-07-07 14:49:36 -04:00
Jean-Paul Calderone
94e608f136
more python package tweaks
...
also point nixpkgs-unstable at HEAD of a PR with a cryptography upgrade
I tried just overriding the upgrade into place but it results in infinite
recursion, I suppose because cryptography is a dependency of some of the build
tools and needs extra handling that I don't feel like figuring out for this
short-term hack. someday the upgrade will land in nixpkgs master and we can
switch back.
2023-07-07 10:02:52 -04:00
Jean-Paul Calderone
72539ddfc7
refactor the env builders a bit
2023-07-04 14:39:26 -04:00
Jean-Paul Calderone
9788e4c12f
fix the test app definition
2023-07-04 14:36:46 -04:00
Jean-Paul Calderone
9247437535
Add a flake with some packages and apps and an overlay
2023-07-04 12:43:23 -04:00
