format
This commit is contained in:
683
flake.nix
683
flake.nix
@@ -1,333 +1,364 @@
|
|||||||
{
|
{
|
||||||
description = "Workshop VM with Participant Containers + USB ISO";
|
description = "Workshop VM with Participant Containers + USB ISO";
|
||||||
|
|
||||||
inputs = {
|
inputs = {
|
||||||
nixpkgs.url = "github:NixOS/nixpkgs/nixos-25.05";
|
nixpkgs.url = "github:NixOS/nixpkgs/nixos-25.05";
|
||||||
nixos-generators = {
|
nixos-generators = {
|
||||||
url = "github:nix-community/nixos-generators";
|
url = "github:nix-community/nixos-generators";
|
||||||
inputs.nixpkgs.follows = "nixpkgs";
|
inputs.nixpkgs.follows = "nixpkgs";
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
outputs = { self, nixpkgs, nixos-generators }:
|
outputs = { self, nixpkgs, nixos-generators }:
|
||||||
let
|
let
|
||||||
system = "x86_64-linux";
|
system = "x86_64-linux";
|
||||||
pkgs = nixpkgs.legacyPackages.${system};
|
pkgs = nixpkgs.legacyPackages.${system};
|
||||||
participantNames = [ "hopper" "curie" ];
|
participantNames = [ "hopper" "curie" ];
|
||||||
fullParticipantNames = [
|
fullParticipantNames = [
|
||||||
"hopper" "curie" "lovelace" "noether" "hamilton"
|
"hopper"
|
||||||
"franklin" "johnson" "clarke" "goldberg" "liskov"
|
"curie"
|
||||||
"wing" "rosen" "shaw" "karp" "rich"
|
"lovelace"
|
||||||
];
|
"noether"
|
||||||
in
|
"hamilton"
|
||||||
{
|
"franklin"
|
||||||
packages.${system} = {
|
"johnson"
|
||||||
local-vm = self.nixosConfigurations.workshop-vm.config.system.build.vm;
|
"clarke"
|
||||||
|
"goldberg"
|
||||||
live-iso = nixos-generators.nixosGenerate {
|
"liskov"
|
||||||
inherit system;
|
"wing"
|
||||||
format = "iso";
|
"rosen"
|
||||||
|
"shaw"
|
||||||
modules = [
|
"karp"
|
||||||
({ pkgs, ... }: {
|
"rich"
|
||||||
system.stateVersion = "25.05";
|
];
|
||||||
|
in
|
||||||
isoImage.makeEfiBootable = true;
|
{
|
||||||
isoImage.makeUsbBootable = true;
|
packages.${system} = {
|
||||||
|
local-vm = self.nixosConfigurations.workshop-vm.config.system.build.vm;
|
||||||
networking.wireless.enable = true;
|
|
||||||
networking.networkmanager.enable = true;
|
|
||||||
networking.hostName = "workshop-live";
|
|
||||||
|
|
||||||
services.getty.autologinUser = "workshop";
|
|
||||||
users.users.workshop = {
|
|
||||||
isNormalUser = true;
|
|
||||||
shell = pkgs.zsh;
|
|
||||||
extraGroups = [ "networkmanager" "wheel" ];
|
|
||||||
password = "";
|
|
||||||
};
|
|
||||||
|
|
||||||
security.sudo.wheelNeedsPassword = false;
|
|
||||||
|
|
||||||
environment.systemPackages = with pkgs; [
|
|
||||||
openssh curl git networkmanager firefox xterm
|
|
||||||
];
|
|
||||||
|
|
||||||
programs.zsh = {
|
|
||||||
enable = true;
|
|
||||||
interactiveShellInit = ''
|
|
||||||
echo "CODE CRISPIES Workshop Environment"
|
|
||||||
echo "Available servers:"
|
|
||||||
${builtins.concatStringsSep "\n" (map (name:
|
|
||||||
"echo \" - ${name}.codecrispi.es\""
|
|
||||||
) fullParticipantNames)}
|
|
||||||
echo ""
|
|
||||||
echo "Commands: connect <name> | recipes | help"
|
|
||||||
|
|
||||||
connect() {
|
|
||||||
[ -z "$1" ] && { echo "Usage: connect <name>"; return 1; }
|
|
||||||
echo "Connecting to $1.codecrispi.es..."
|
|
||||||
ssh -o StrictHostKeyChecking=no workshop@$1.codecrispi.es
|
|
||||||
}
|
|
||||||
|
|
||||||
recipes() {
|
|
||||||
echo "Available Co-op Cloud Recipes:"
|
|
||||||
echo ""
|
|
||||||
echo "Content Management:"
|
|
||||||
echo " wordpress ghost hedgedoc dokuwiki mediawiki"
|
|
||||||
echo ""
|
|
||||||
echo "File & Collaboration:"
|
|
||||||
echo " nextcloud seafile collabora onlyoffice"
|
|
||||||
echo ""
|
|
||||||
echo "Communication:"
|
|
||||||
echo " jitsi-meet matrix-synapse rocketchat mattermost"
|
|
||||||
echo ""
|
|
||||||
echo "E-commerce & Business:"
|
|
||||||
echo " prestashop invoiceninja kimai pretix"
|
|
||||||
echo ""
|
|
||||||
echo "Development & Tools:"
|
|
||||||
echo " gitea drone n8n gitlab jupyter-lab"
|
|
||||||
echo ""
|
|
||||||
echo "Analytics & Monitoring:"
|
|
||||||
echo " plausible matomo uptime-kuma grafana"
|
|
||||||
echo ""
|
|
||||||
echo "Media & Social:"
|
|
||||||
echo " peertube funkwhale mastodon pixelfed jellyfin"
|
|
||||||
echo ""
|
|
||||||
echo "Deploy: abra app new <recipe> -S --domain=myapp.<name>.codecrispi.es"
|
|
||||||
echo "Browse all: https://recipes.coopcloud.tech"
|
|
||||||
}
|
|
||||||
|
|
||||||
help() {
|
|
||||||
echo "CODE CRISPIES Workshop Commands:"
|
|
||||||
echo ""
|
|
||||||
echo "connect <name> - SSH to your assigned server"
|
|
||||||
echo "recipes - Show available app recipes"
|
|
||||||
echo "sudo nmcli dev wifi connect SSID password PASSWORD"
|
|
||||||
echo ""
|
|
||||||
echo "Examples:"
|
|
||||||
echo " connect hopper"
|
|
||||||
echo " sudo nmcli dev wifi connect CODE_CRISPIES_GUEST password workshop2024"
|
|
||||||
}
|
|
||||||
|
|
||||||
export -f connect recipes help
|
|
||||||
'';
|
|
||||||
};
|
|
||||||
|
|
||||||
services.xserver = {
|
|
||||||
enable = true;
|
|
||||||
desktopManager.xfce.enable = true;
|
|
||||||
displayManager = {
|
|
||||||
lightdm.enable = true;
|
|
||||||
autoLogin.enable = true;
|
|
||||||
autoLogin.user = "workshop";
|
|
||||||
};
|
|
||||||
};
|
|
||||||
|
|
||||||
systemd.user.services.workshop-welcome = {
|
|
||||||
wantedBy = [ "graphical-session.target" ];
|
|
||||||
after = [ "graphical-session.target" ];
|
|
||||||
script = "${pkgs.xterm}/bin/xterm -title 'CODE CRISPIES Workshop' -e 'zsh' &";
|
|
||||||
serviceConfig.Type = "forking";
|
|
||||||
};
|
|
||||||
})
|
|
||||||
];
|
|
||||||
};
|
|
||||||
};
|
|
||||||
|
|
||||||
devShells.${system}.default = pkgs.mkShell {
|
live-iso = nixos-generators.nixosGenerate {
|
||||||
packages = with pkgs; [
|
inherit system;
|
||||||
markdownlint-cli
|
format = "iso";
|
||||||
jq
|
|
||||||
nixpkgs-fmt
|
|
||||||
];
|
|
||||||
};
|
|
||||||
|
|
||||||
nixosConfigurations.workshop-vm = nixpkgs.lib.nixosSystem {
|
modules = [
|
||||||
inherit system;
|
({ pkgs, ... }: {
|
||||||
modules = [
|
system.stateVersion = "25.05";
|
||||||
({ config, pkgs, ... }: {
|
|
||||||
system.stateVersion = "25.05";
|
|
||||||
|
|
||||||
boot.loader.grub.enable = false;
|
|
||||||
boot.loader.generic-extlinux-compatible.enable = true;
|
|
||||||
boot.kernel.sysctl."net.ipv4.ip_forward" = 1;
|
|
||||||
|
|
||||||
users.users.workshop = {
|
|
||||||
isNormalUser = true;
|
|
||||||
extraGroups = [ "wheel" ];
|
|
||||||
password = "";
|
|
||||||
shell = pkgs.bash;
|
|
||||||
};
|
|
||||||
|
|
||||||
security.pam.services.login.allowNullPassword = true;
|
|
||||||
security.sudo.wheelNeedsPassword = false;
|
|
||||||
|
|
||||||
services.xserver = {
|
|
||||||
enable = true;
|
|
||||||
desktopManager.xfce.enable = true;
|
|
||||||
displayManager.lightdm.enable = true;
|
|
||||||
};
|
|
||||||
|
|
||||||
services.displayManager = {
|
|
||||||
autoLogin.enable = true;
|
|
||||||
autoLogin.user = "workshop";
|
|
||||||
};
|
|
||||||
|
|
||||||
services.xserver.displayManager.sessionCommands = ''
|
|
||||||
${pkgs.xfce.xfce4-terminal}/bin/xfce4-terminal --title="Workshop Terminal" \
|
|
||||||
--command="bash -c '
|
|
||||||
echo \"Workshop VM Ready!\";
|
|
||||||
echo \"\";
|
|
||||||
echo \"SSH into containers:\";
|
|
||||||
echo \" sudo connect hopper # Container login\";
|
|
||||||
echo \" sudo connect curie # Container login\";
|
|
||||||
echo \" ssh root@192.168.100.11 # Direct SSH to hopper\";
|
|
||||||
echo \" ssh root@192.168.100.12 # Direct SSH to curie\";
|
|
||||||
echo \"\";
|
|
||||||
echo \"Container management:\";
|
|
||||||
echo \" sudo containers # List all containers\";
|
|
||||||
echo \" sudo logs # Show setup logs\";
|
|
||||||
echo \"\";
|
|
||||||
echo \"Abra is pre-installed in containers!\";
|
|
||||||
echo \"\";
|
|
||||||
bash
|
|
||||||
'" &
|
|
||||||
'';
|
|
||||||
|
|
||||||
environment.systemPackages = with pkgs; [
|
|
||||||
firefox curl git jq nano tree nixos-container
|
|
||||||
(pkgs.writeScriptBin "connect" ''
|
|
||||||
#!/bin/bash
|
|
||||||
if [ -z "$1" ]; then
|
|
||||||
echo "Usage: connect <container-name>"
|
|
||||||
echo "Available: hopper curie"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
exec nixos-container root-login "$1"
|
|
||||||
'')
|
|
||||||
(pkgs.writeScriptBin "containers" ''
|
|
||||||
#!/bin/bash
|
|
||||||
exec nixos-container list
|
|
||||||
'')
|
|
||||||
(pkgs.writeScriptBin "logs" ''
|
|
||||||
#!/bin/bash
|
|
||||||
exec journalctl -u container@hopper -u container@curie -f
|
|
||||||
'')
|
|
||||||
];
|
|
||||||
|
|
||||||
networking = {
|
|
||||||
hostName = "workshop-vm";
|
|
||||||
firewall.enable = false;
|
|
||||||
nat = {
|
|
||||||
enable = true;
|
|
||||||
internalInterfaces = ["ve-+"];
|
|
||||||
externalInterface = "eth0";
|
|
||||||
};
|
|
||||||
};
|
|
||||||
|
|
||||||
containers = builtins.listToAttrs (builtins.genList (i:
|
isoImage.makeEfiBootable = true;
|
||||||
let
|
isoImage.makeUsbBootable = true;
|
||||||
name = builtins.elemAt participantNames i;
|
|
||||||
ip = "192.168.100.${toString (11 + i)}";
|
networking.wireless.enable = true;
|
||||||
in {
|
networking.networkmanager.enable = true;
|
||||||
inherit name;
|
networking.hostName = "workshop-live";
|
||||||
value = {
|
|
||||||
autoStart = true;
|
services.getty.autologinUser = "workshop";
|
||||||
privateNetwork = true;
|
users.users.workshop = {
|
||||||
hostAddress = "192.168.100.1";
|
isNormalUser = true;
|
||||||
localAddress = ip;
|
shell = pkgs.zsh;
|
||||||
|
extraGroups = [ "networkmanager" "wheel" ];
|
||||||
config = {
|
password = "";
|
||||||
system.stateVersion = "25.05";
|
};
|
||||||
|
|
||||||
users.users.root.password = "root";
|
security.sudo.wheelNeedsPassword = false;
|
||||||
users.users.workshop = {
|
|
||||||
isNormalUser = true;
|
environment.systemPackages = with pkgs; [
|
||||||
password = "workshop";
|
openssh
|
||||||
extraGroups = [ "wheel" "docker" ];
|
curl
|
||||||
};
|
git
|
||||||
|
networkmanager
|
||||||
services.openssh = {
|
firefox
|
||||||
enable = true;
|
xterm
|
||||||
settings = {
|
];
|
||||||
PasswordAuthentication = true;
|
|
||||||
PermitRootLogin = "yes";
|
programs.zsh = {
|
||||||
};
|
enable = true;
|
||||||
};
|
interactiveShellInit = ''
|
||||||
|
echo "CODE CRISPIES Workshop Environment"
|
||||||
networking = {
|
echo "Available servers:"
|
||||||
hostName = name;
|
${builtins.concatStringsSep "\n" (map (name:
|
||||||
nameservers = [ "8.8.8.8" ];
|
"echo \" - ${name}.codecrispi.es\""
|
||||||
firewall.enable = false;
|
) fullParticipantNames)}
|
||||||
};
|
echo ""
|
||||||
|
echo "Commands: connect <name> | recipes | help"
|
||||||
security.sudo.wheelNeedsPassword = false;
|
|
||||||
virtualisation.docker.enable = true;
|
connect() {
|
||||||
|
[ -z "$1" ] && { echo "Usage: connect <name>"; return 1; }
|
||||||
environment.systemPackages = with pkgs; [
|
echo "Connecting to $1.codecrispi.es..."
|
||||||
docker curl git wget jq bash
|
ssh -o StrictHostKeyChecking=no workshop@$1.codecrispi.es
|
||||||
];
|
}
|
||||||
|
|
||||||
systemd.services.workshop-setup = {
|
recipes() {
|
||||||
wantedBy = [ "multi-user.target" ];
|
echo "Available Co-op Cloud Recipes:"
|
||||||
after = [ "network-online.target" "docker.service" ];
|
echo ""
|
||||||
wants = [ "network-online.target" ];
|
echo "Content Management:"
|
||||||
script = ''
|
echo " wordpress ghost hedgedoc dokuwiki mediawiki"
|
||||||
echo "Setting up ${name} container..."
|
echo ""
|
||||||
|
echo "File & Collaboration:"
|
||||||
for i in {1..10}; do
|
echo " nextcloud seafile collabora onlyoffice"
|
||||||
if ${pkgs.curl}/bin/curl -s --max-time 5 google.com >/dev/null 2>&1; then
|
echo ""
|
||||||
echo "Network ready"
|
echo "Communication:"
|
||||||
break
|
echo " jitsi-meet matrix-synapse rocketchat mattermost"
|
||||||
fi
|
echo ""
|
||||||
echo "Waiting for network... ($i/10)"
|
echo "E-commerce & Business:"
|
||||||
sleep 2
|
echo " prestashop invoiceninja kimai pretix"
|
||||||
done
|
echo ""
|
||||||
|
echo "Development & Tools:"
|
||||||
${pkgs.docker}/bin/docker swarm init --advertise-addr ${ip} || true
|
echo " gitea drone n8n gitlab jupyter-lab"
|
||||||
|
echo ""
|
||||||
export HOME=/root
|
echo "Analytics & Monitoring:"
|
||||||
if [ ! -f /root/.local/bin/abra ]; then
|
echo " plausible matomo uptime-kuma grafana"
|
||||||
echo "Installing abra..."
|
echo ""
|
||||||
${pkgs.curl}/bin/curl -fsSL https://install.abra.coopcloud.tech | ${pkgs.bash}/bin/bash
|
echo "Media & Social:"
|
||||||
echo "Abra installed"
|
echo " peertube funkwhale mastodon pixelfed jellyfin"
|
||||||
fi
|
echo ""
|
||||||
|
echo "Deploy: abra app new <recipe> -S --domain=myapp.<name>.codecrispi.es"
|
||||||
if ! grep -q "/.local/bin" /root/.bashrc 2>/dev/null; then
|
echo "Browse all: https://recipes.coopcloud.tech"
|
||||||
echo 'export PATH="$HOME/.local/bin:$PATH"' >> /root/.bashrc
|
}
|
||||||
fi
|
|
||||||
|
help() {
|
||||||
if [ -f /root/.local/bin/abra ]; then
|
echo "CODE CRISPIES Workshop Commands:"
|
||||||
ln -sf /root/.local/bin/abra /usr/local/bin/abra 2>/dev/null || true
|
echo ""
|
||||||
fi
|
echo "connect <name> - SSH to your assigned server"
|
||||||
|
echo "recipes - Show available app recipes"
|
||||||
if [ -f /root/.local/bin/abra ]; then
|
echo "sudo nmcli dev wifi connect SSID password PASSWORD"
|
||||||
export PATH="/root/.local/bin:$PATH"
|
echo ""
|
||||||
/root/.local/bin/abra server add ${name}.local 2>/dev/null || true
|
echo "Examples:"
|
||||||
fi
|
echo " connect hopper"
|
||||||
|
echo " sudo nmcli dev wifi connect CODE_CRISPIES_GUEST password workshop2024"
|
||||||
echo "${name} container ready!"
|
}
|
||||||
echo "SSH: ssh root@${ip} (password: root)"
|
|
||||||
echo "Abra: Available via 'abra' command"
|
export -f connect recipes help
|
||||||
'';
|
'';
|
||||||
serviceConfig = {
|
};
|
||||||
Type = "oneshot";
|
|
||||||
RemainAfterExit = true;
|
services.xserver = {
|
||||||
StandardOutput = "journal";
|
enable = true;
|
||||||
StandardError = "journal";
|
desktopManager.xfce.enable = true;
|
||||||
};
|
displayManager = {
|
||||||
};
|
lightdm.enable = true;
|
||||||
|
autoLogin.enable = true;
|
||||||
environment.sessionVariables = {
|
autoLogin.user = "workshop";
|
||||||
PATH = [ "/root/.local/bin" ];
|
};
|
||||||
};
|
};
|
||||||
};
|
|
||||||
};
|
systemd.user.services.workshop-welcome = {
|
||||||
}
|
wantedBy = [ "graphical-session.target" ];
|
||||||
) (builtins.length participantNames));
|
after = [ "graphical-session.target" ];
|
||||||
})
|
script = "${pkgs.xterm}/bin/xterm -title 'CODE CRISPIES Workshop' -e 'zsh' &";
|
||||||
];
|
serviceConfig.Type = "forking";
|
||||||
};
|
};
|
||||||
};
|
})
|
||||||
|
];
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
devShells.${system}.default = pkgs.mkShell {
|
||||||
|
packages = with pkgs; [
|
||||||
|
markdownlint-cli
|
||||||
|
jq
|
||||||
|
nixpkgs-fmt
|
||||||
|
];
|
||||||
|
};
|
||||||
|
|
||||||
|
nixosConfigurations.workshop-vm = nixpkgs.lib.nixosSystem {
|
||||||
|
inherit system;
|
||||||
|
modules = [
|
||||||
|
({ config, pkgs, ... }: {
|
||||||
|
system.stateVersion = "25.05";
|
||||||
|
|
||||||
|
boot.loader.grub.enable = false;
|
||||||
|
boot.loader.generic-extlinux-compatible.enable = true;
|
||||||
|
boot.kernel.sysctl."net.ipv4.ip_forward" = 1;
|
||||||
|
|
||||||
|
users.users.workshop = {
|
||||||
|
isNormalUser = true;
|
||||||
|
extraGroups = [ "wheel" ];
|
||||||
|
password = "";
|
||||||
|
shell = pkgs.bash;
|
||||||
|
};
|
||||||
|
|
||||||
|
security.pam.services.login.allowNullPassword = true;
|
||||||
|
security.sudo.wheelNeedsPassword = false;
|
||||||
|
|
||||||
|
services.xserver = {
|
||||||
|
enable = true;
|
||||||
|
desktopManager.xfce.enable = true;
|
||||||
|
displayManager.lightdm.enable = true;
|
||||||
|
};
|
||||||
|
|
||||||
|
services.displayManager = {
|
||||||
|
autoLogin.enable = true;
|
||||||
|
autoLogin.user = "workshop";
|
||||||
|
};
|
||||||
|
|
||||||
|
services.xserver.displayManager.sessionCommands = ''
|
||||||
|
${pkgs.xfce.xfce4-terminal}/bin/xfce4-terminal --title="Workshop Terminal" \
|
||||||
|
--command="bash -c '
|
||||||
|
echo \"Workshop VM Ready!\";
|
||||||
|
echo \"\";
|
||||||
|
echo \"SSH into containers:\";
|
||||||
|
echo \" sudo connect hopper # Container login\";
|
||||||
|
echo \" sudo connect curie # Container login\";
|
||||||
|
echo \" ssh root@192.168.100.11 # Direct SSH to hopper\";
|
||||||
|
echo \" ssh root@192.168.100.12 # Direct SSH to curie\";
|
||||||
|
echo \"\";
|
||||||
|
echo \"Container management:\";
|
||||||
|
echo \" sudo containers # List all containers\";
|
||||||
|
echo \" sudo logs # Show setup logs\";
|
||||||
|
echo \"\";
|
||||||
|
echo \"Abra is pre-installed in containers!\";
|
||||||
|
echo \"\";
|
||||||
|
bash
|
||||||
|
'" &
|
||||||
|
'';
|
||||||
|
|
||||||
|
environment.systemPackages = with pkgs; [
|
||||||
|
firefox
|
||||||
|
curl
|
||||||
|
git
|
||||||
|
jq
|
||||||
|
nano
|
||||||
|
tree
|
||||||
|
nixos-container
|
||||||
|
(pkgs.writeScriptBin "connect" ''
|
||||||
|
#!/bin/bash
|
||||||
|
if [ -z "$1" ]; then
|
||||||
|
echo "Usage: connect <container-name>"
|
||||||
|
echo "Available: hopper curie"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
exec nixos-container root-login "$1"
|
||||||
|
'')
|
||||||
|
(pkgs.writeScriptBin "containers" ''
|
||||||
|
#!/bin/bash
|
||||||
|
exec nixos-container list
|
||||||
|
'')
|
||||||
|
(pkgs.writeScriptBin "logs" ''
|
||||||
|
#!/bin/bash
|
||||||
|
exec journalctl -u container@hopper -u container@curie -f
|
||||||
|
'')
|
||||||
|
];
|
||||||
|
|
||||||
|
networking = {
|
||||||
|
hostName = "workshop-vm";
|
||||||
|
firewall.enable = false;
|
||||||
|
nat = {
|
||||||
|
enable = true;
|
||||||
|
internalInterfaces = [ "ve-+" ];
|
||||||
|
externalInterface = "eth0";
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
containers = builtins.listToAttrs (builtins.genList
|
||||||
|
(i:
|
||||||
|
let
|
||||||
|
name = builtins.elemAt participantNames i;
|
||||||
|
ip = "192.168.100.${toString (11 + i)}";
|
||||||
|
in
|
||||||
|
{
|
||||||
|
inherit name;
|
||||||
|
value = {
|
||||||
|
autoStart = true;
|
||||||
|
privateNetwork = true;
|
||||||
|
hostAddress = "192.168.100.1";
|
||||||
|
localAddress = ip;
|
||||||
|
|
||||||
|
config = {
|
||||||
|
system.stateVersion = "25.05";
|
||||||
|
|
||||||
|
users.users.root.password = "root";
|
||||||
|
users.users.workshop = {
|
||||||
|
isNormalUser = true;
|
||||||
|
password = "workshop";
|
||||||
|
extraGroups = [ "wheel" "docker" ];
|
||||||
|
};
|
||||||
|
|
||||||
|
services.openssh = {
|
||||||
|
enable = true;
|
||||||
|
settings = {
|
||||||
|
PasswordAuthentication = true;
|
||||||
|
PermitRootLogin = "yes";
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
networking = {
|
||||||
|
hostName = name;
|
||||||
|
nameservers = [ "8.8.8.8" ];
|
||||||
|
firewall.enable = false;
|
||||||
|
};
|
||||||
|
|
||||||
|
security.sudo.wheelNeedsPassword = false;
|
||||||
|
virtualisation.docker.enable = true;
|
||||||
|
|
||||||
|
environment.systemPackages = with pkgs; [
|
||||||
|
docker
|
||||||
|
curl
|
||||||
|
git
|
||||||
|
wget
|
||||||
|
jq
|
||||||
|
bash
|
||||||
|
];
|
||||||
|
|
||||||
|
systemd.services.workshop-setup = {
|
||||||
|
wantedBy = [ "multi-user.target" ];
|
||||||
|
after = [ "network-online.target" "docker.service" ];
|
||||||
|
wants = [ "network-online.target" ];
|
||||||
|
script = ''
|
||||||
|
echo "Setting up ${name} container..."
|
||||||
|
|
||||||
|
for i in {1..10}; do
|
||||||
|
if ${pkgs.curl}/bin/curl -s --max-time 5 google.com >/dev/null 2>&1; then
|
||||||
|
echo "Network ready"
|
||||||
|
break
|
||||||
|
fi
|
||||||
|
echo "Waiting for network... ($i/10)"
|
||||||
|
sleep 2
|
||||||
|
done
|
||||||
|
|
||||||
|
${pkgs.docker}/bin/docker swarm init --advertise-addr ${ip} || true
|
||||||
|
|
||||||
|
export HOME=/root
|
||||||
|
if [ ! -f /root/.local/bin/abra ]; then
|
||||||
|
echo "Installing abra..."
|
||||||
|
${pkgs.curl}/bin/curl -fsSL https://install.abra.coopcloud.tech | ${pkgs.bash}/bin/bash
|
||||||
|
echo "Abra installed"
|
||||||
|
fi
|
||||||
|
|
||||||
|
if ! grep -q "/.local/bin" /root/.bashrc 2>/dev/null; then
|
||||||
|
echo 'export PATH="$HOME/.local/bin:$PATH"' >> /root/.bashrc
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ -f /root/.local/bin/abra ]; then
|
||||||
|
ln -sf /root/.local/bin/abra /usr/local/bin/abra 2>/dev/null || true
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ -f /root/.local/bin/abra ]; then
|
||||||
|
export PATH="/root/.local/bin:$PATH"
|
||||||
|
/root/.local/bin/abra server add ${name}.local 2>/dev/null || true
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "${name} container ready!"
|
||||||
|
echo "SSH: ssh root@${ip} (password: root)"
|
||||||
|
echo "Abra: Available via 'abra' command"
|
||||||
|
'';
|
||||||
|
serviceConfig = {
|
||||||
|
Type = "oneshot";
|
||||||
|
RemainAfterExit = true;
|
||||||
|
StandardOutput = "journal";
|
||||||
|
StandardError = "journal";
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
environment.sessionVariables = {
|
||||||
|
PATH = [ "/root/.local/bin" ];
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
}
|
||||||
|
)
|
||||||
|
(builtins.length participantNames));
|
||||||
|
})
|
||||||
|
];
|
||||||
|
};
|
||||||
|
};
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user