6c8edef685
wip: change workflows checkout action to self hosted version
CI / build:all (push) Failing after 16s
CI / build:cross (push) Failing after 15s
2026-03-17 15:28:16 +01:00
cf47139ebe
Add owl nodes to varcila
...
Fixes: rarias/jungle#243
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-03-13 12:11:43 +01:00
54dfaa9dff
Remove proot from nix-portable
...
The pkgsStatic.proot is broken due to failed
dependencies. In upstream nix-portable they have
a custom derivation on top o proot gitlab. But
since we don't need it, we can remove it safely.
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-03-11 17:23:20 +01:00
34238d81c7
Rework nix-portable derivation arguments
...
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-03-11 17:23:20 +01:00
1b36c70512
Unset mn5 default bash functions in nix-portable
...
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-03-11 17:23:19 +01:00
f5b1082ab9
Do not restore original $PATH in nix-portable
...
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-03-11 17:23:19 +01:00
386cfd8973
Use fetchurl for amd-uprof
...
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-03-11 17:23:19 +01:00
f9db76c466
Enable parallelBuilding in jemalloc
...
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-03-11 17:23:19 +01:00
0a255b1ffa
Make bsc users trusted in nix-portable
...
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-03-11 17:23:19 +01:00
af512636ac
Add sys-devices feature to nix-portable nix.conf
...
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-03-11 17:23:19 +01:00
9dae6a6f38
Add meta with license to nix-portable
...
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-03-11 17:23:19 +01:00
839b9b8c76
Bind /usr/bin/env in nix-portable
...
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-03-11 17:23:18 +01:00
7ac154a55b
Add jungle cache to nix-portable nix.conf
...
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-03-11 17:23:18 +01:00
14af841511
Use nix bwrap in nix-portable
...
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-03-11 17:23:18 +01:00
1d02f7fae4
Remove nix-portable tmpbin feature
...
It will not work without the host /lib64/ld
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-03-11 17:23:18 +01:00
a71b12c60e
Add bashInteractive in nix-portable bwrap
...
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-03-11 17:23:18 +01:00
b96e3422b2
Install netcat, ssh and git in nix-portable
...
These are needed by nix in order to properly
download and build stuff.
busybox's netcat does not work since it doesn't
support -X.
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-03-11 17:23:18 +01:00
e7b3f972b0
Only to busybox to /bin/sh in nix-portable
...
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-03-11 17:23:18 +01:00
79fdfc6c0e
Remove sgid from .nix-portable and set group
...
This should prevent issues when putting it under
/gpfs/{projects,scratch} that have sgid and group=nobody.
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-03-11 17:23:17 +01:00
71352ff5d1
Restrict paths added to bwrap in nix-portable
...
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-03-11 17:23:17 +01:00
06925bc0ca
Bind proc using --proc in nix-portable
...
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-03-11 17:23:17 +01:00
1eaca98618
Fix nix-portable pkgStatic symlink handling
...
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-03-11 17:23:17 +01:00
7195ca4cb6
Add nix-portable
...
repo: https://github.com/DavHau/nix-portable
rev: 91122e3d94ba51d7d83fe990fa81d3de0968fb32
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-03-11 17:23:17 +01:00
7674f61b17
Re-enable nix-wrap
...
libcap is no longer broken upstream
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-03-11 17:23:17 +01:00
f71e807d47
Add remote sblame probe to prometheus
...
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-03-11 16:48:15 +01:00
461d96dc75
Allow access to postgresql socket from CI runner
...
Fixes: rarias/jungle#237
Cc: Antoni Navarro <antoni.navarro@bsc.es >
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-03-11 12:41:06 +01:00
26d9e3d432
Grant gitlab-runner user access to perftestsdb
...
Cc: Antoni Navarro <antoni.navarro@bsc.es >
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-03-11 12:40:21 +01:00
5c30975b8b
Mount NFS home in tent at /nfs/home
...
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-03-09 15:27:41 +01:00
d4c00679ee
Increase NFS subnet to allow tent
...
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-03-09 15:27:41 +01:00
32a576e870
Copy Gitea backup in /ceph too
...
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-03-09 15:27:37 +01:00
8197221146
Mount /ceph in tent
...
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-03-09 08:52:11 +01:00
374cd4ce48
Allow tent to reach ceph
...
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-03-09 08:52:08 +01:00
d3e54b7c99
Rekey secrets adding tent for ceph
...
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-03-09 08:52:05 +01:00
46b7efb5ac
Rename Gitea backup service and directory
...
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-03-09 08:51:48 +01:00
56ab099017
Override files in rotating gitea dump service
...
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-03-09 08:51:44 +01:00
2654b9fdd9
Enable rotating gitea backups
...
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-03-09 08:51:23 +01:00
84a5cb09ee
Use host mode for docker network
...
In order to reduce the traffic of the secondary Ethernet device we need
to be able to directly use the physical device instead of the virtual
one. For now use the host mode and see later if we can revert it.
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-03-05 15:29:23 +01:00
4899d20748
Fix weasel infiniband interface name
...
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-02-26 10:26:01 +01:00
76cd6d64b2
Add ssanzmar user to apex and fox
...
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-02-24 14:06:12 +01:00
8dab0d82ba
Update fox documentation in website
...
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-02-04 15:08:13 +01:00
958dcd4774
Add emonteir user to apex and fox
...
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-02-04 15:08:08 +01:00
7a6e4232de
Add nom and nixfmt-tree to system packages
...
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-02-03 15:17:30 +01:00
3b56e905e5
Add standalone home-manager to system packages
...
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-02-03 15:17:29 +01:00
2d41309466
Format and sort default package list
...
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-02-03 15:17:24 +01:00
deb0cd1488
Allow USB access to TC1 from Gitlab Runner
...
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-01-23 17:56:16 +01:00
cd1f502ecc
Allow user USB access to FTDI device in tent
...
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-01-23 17:56:11 +01:00
dda6a66782
Fix gitea user to allow sending email
...
In order to send email, the gitea user needs to be in the mail-robot
group.
Fixes: rarias/jungle#220
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-01-20 12:18:52 +01:00
22420e6ac8
Remove unneeded perf package from eudy
...
It is already included in the base list of packages, which is now only
"perf" and doesn't depend on the kernel version.
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-01-20 12:18:49 +01:00
a71cd78b4c
Fix infiniband interface names
...
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-01-20 12:18:46 +01:00
e84a2cadbb
flake.lock: Update
...
Flake lock file updates:
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/8bb5646e0bed5dbd3ab08c7a7cc15b75ab4e1d0f?narHash=sha256-SqUuBFjhl/kpDiVaKLQBoD8TLD%2B/cTUzzgVFoaHrkqY%3D' (2025-11-30)
→ 'github:NixOS/nixpkgs/3c9db02515ef1d9b6b709fc60ba9a540957f661c?narHash=sha256-2GffSfQxe3sedHzK%2BsTKlYo/NTIAGzbFCIsNMUPAAnk%3D' (2026-01-05)
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-01-20 12:18:41 +01:00
