public/malta-workshop
2
0
Fork 0
Code Pull Requests Activity

change vm to workshop user

Browse Source
This commit is contained in:
Michael Czechowski
2025-08-12 00:14:45 +02:00
parent 444ba238a6
commit 073c6a7a64
1 changed files with 33 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

47
flake.nix
View File

@@ -36,28 +36,20 @@
${pkgs.networkmanager}/bin/nmcli dev wifi connect "CODE_CRISPIES_GUEST" password "workshop2024" || true ${pkgs.networkmanager}/bin/nmcli dev wifi connect "CODE_CRISPIES_GUEST" password "workshop2024" || true
''; '';
}; };
services.getty.autologinUser = "workshop"; services.getty.autologinUser = "workshop";
users.users.workshop = { isNormalUser = true; shell = pkgs.zsh; }; users.users.workshop = { isNormalUser = true; shell = pkgs.zsh; };
programs.zsh = { programs.zsh = {
enable = true; enable = true;
interactiveShellInit = '' interactiveShellInit = ''
echo "🍪 CODE CRISPIES Workshop Environment" echo "🍪 CODE CRISPIES Workshop Environment"
echo "💡 Commands: connect <name> | recipes | help"
connect() { ssh -o StrictHostKeyChecking=no workshop@$1.codecrispi.es; } connect() { ssh -o StrictHostKeyChecking=no workshop@$1.codecrispi.es; }
recipes() { echo "Featured Recipes: wordpress, nextcloud, gitea..."; }
help() { echo "Commands: connect, recipes, help"; }
''; '';
}; };
environment.systemPackages = with pkgs; [ openssh curl git networkmanager ]; environment.systemPackages = with pkgs; [ openssh curl git networkmanager ];
services.xserver = { services.xserver = {
enable = true; enable = true;
displayManager.autoLogin.enable = true; displayManager.lightdm.enable = true;
displayManager.autoLogin.user = "workshop";
desktopManager.xfce.enable = true; desktopManager.xfce.enable = true;
displayManager.sessionCommands = "${pkgs.xfce.xfce4-terminal}/bin/xfce4-terminal &";
}; };
}) })
]; ];
@@ -68,20 +60,39 @@
}; };
# -------------------------------------------------------------------------------- # --------------------------------------------------------------------------------
# 2. LOCAL DEVELOPMENT VM CONFIGURATION # 2. STANDALONE LOCAL DEVELOPMENT VM CONFIGURATION
# -------------------------------------------------------------------------------- # --------------------------------------------------------------------------------
nixosConfigurations.workshop-local = nixpkgs.lib.nixosSystem { nixosConfigurations.workshop-local = nixpkgs.lib.nixosSystem {
inherit system; system = "x86_64-linux";
modules = [ modules = [
( let hostname = builtins.replaceStrings [ "\n" ] [ "" ] (builtins.readFile "/etc/hostname"); ({ config, pkgs, ... }: {
in "/etc/nixos/hosts/${hostname}/configuration.nix" )
({ config, ... }: {
system.stateVersion = "25.05"; system.stateVersion = "25.05";
boot.loader.grub.enable = false;
boot.loader.generic-extlinux-compatible.enable = true;
# Use `gnumake` instead of `make` # Create a simple 'workshop' user with no password
users.users.workshop = {
isNormalUser = true;
extraGroups = [ "wheel" ]; # for sudo
password = "";
};
services.getty.autologinUser = "workshop";
# Enable a lightweight desktop environment guaranteed to work in a VM
services.xserver = {
enable = true;
displayManager.lightdm.enable = true;
desktopManager.xfce.enable = true;
};
# Allow empty passwords for login and sudo
security.pam.services.login.allowNullPassword = true;
security.sudo.wheelNeedsPassword = false;
networking.hostName = "workshop-vm";
environment.systemPackages = with pkgs; [ gnumake nano nixos-container ]; environment.systemPackages = with pkgs; [ gnumake nano nixos-container ];
# Define all participant containers
containers = builtins.listToAttrs (map (i: containers = builtins.listToAttrs (map (i:
let participant = builtins.elemAt participantNames (i - 1); let participant = builtins.elemAt participantNames (i - 1);
in { in {
@@ -94,13 +105,14 @@
config = { config = {
system.stateVersion = "25.05"; system.stateVersion = "25.05";
services.openssh.enable = true; services.openssh.enable = true;
# networking.hostName = "${participant}.local"; # <-- REMOVED this conflicting line networking.hostName = participant;
virtualisation.docker.enable = true; virtualisation.docker.enable = true;
environment.systemPackages = with pkgs; [ docker git curl jq ]; environment.systemPackages = with pkgs; [ docker git curl jq ];
systemd.services.workshop-setup = { systemd.services.workshop-setup = {
wantedBy = [ "multi-user.target" ]; wantedBy = [ "multi-user.target" ];
after = [ "docker.service" ]; after = [ "docker.service" ];
script = '' script = ''
# Docker Swarm and Abra setup
${pkgs.docker}/bin/docker swarm init --advertise-addr 192.168.100.${toString (10 + i)} || true ${pkgs.docker}/bin/docker swarm init --advertise-addr 192.168.100.${toString (10 + i)} || true
${pkgs.docker}/bin/docker network create -d overlay proxy || true ${pkgs.docker}/bin/docker network create -d overlay proxy || true
export HOME=/root export HOME=/root
@@ -115,6 +127,7 @@
} }
) (nixpkgs.lib.range 1 2)); ) (nixpkgs.lib.range 1 2));
# DNS for containers
services.dnsmasq = { services.dnsmasq = {
enable = true; enable = true;
settings.address = builtins.concatMap (i: settings.address = builtins.concatMap (i: