rarias/jungle
2
0
Fork 3
Code Issues 61 Pull Requests 10 Actions Packages Projects 1 Releases Wiki Activity
1,556 Commits 21 Branches 0 Tags
2f75f1c3b88659f28084bdf4b64b42dd2cfa294d
Commit Graph

1556 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Aleix Boné
2f75f1c3b8 Use relaxed sandbox in nix-portable 2026-03-06 17:15:32 +01:00
Aleix Boné
5a07d1c261 Add sys-devices feature to nix-portable nix.conf 2026-03-06 17:15:32 +01:00
Aleix Boné
574ce29735 Add meta with license to nix-portable 2026-03-06 17:15:32 +01:00
Aleix Boné
a02385ed5c Bind /usr/bin/env in nix-portable 2026-03-06 17:15:32 +01:00
Aleix Boné
b354751620 Add jungle cache to nix-portable nix.conf 2026-03-06 17:15:32 +01:00
Aleix Boné
1c4f23ef44 Use nix bwrap in nix-portable 2026-03-06 17:15:32 +01:00
Aleix Boné
39d97d7ac2 Remove nix-portable tmpbin feature 
It will not work without the host /lib64/ld
 2026-03-06 17:15:31 +01:00
Aleix Boné
f961b7a5cb Include bashInteractive in nix-portable 2026-03-06 17:15:31 +01:00
Aleix Boné
cbb7bbcddb Install netcat, ssh and git in nix-portable 
These are needed by nix in order to properly
download and build stuff.

busybox's netcat does not work since it doesn't
support -X.
 2026-03-06 17:15:31 +01:00
Aleix Boné
8b3faffa6a Bind to busybox to /bin/sh in nix-portable 2026-03-06 17:15:31 +01:00
Aleix Boné
e4c62f27fe Remove sgid from .nix-portable and set group 
This should prevent issues when putting it under
/gpfs/{projects,scratch} that have sgid and group=nobody.
 2026-03-06 17:15:31 +01:00
Aleix Boné
14b381c031 Restrict paths added to bwrap in nix-portable 2026-03-06 17:15:31 +01:00
Aleix Boné
1d1af22646 Bind proc using --proc in nix-portable 2026-03-06 17:15:31 +01:00
Aleix Boné
897e74c976 Fix nix-portable pkgStatic symlink handling 2026-03-06 17:15:30 +01:00
Aleix Boné
dc62e15a8f Add nix-portable 
repo: https://github.com/DavHau/nix-portable
rev: 91122e3d94ba51d7d83fe990fa81d3de0968fb32
 2026-03-06 17:15:30 +01:00
Aleix Boné
732e183562 Re-enable nix-wrap 
libcap is no longer broken upstream
 2026-03-05 17:02:46 +01:00
Aleix Boné
4899d20748 Fix weasel infiniband interface name
All checks were successful
CI / build:cross (pull_request) Successful in 8s
Details
CI / build:all (pull_request) Successful in 17s
Details
CI / build:all (push) Successful in 4s
Details
CI / build:cross (push) Successful in 8s
Details 
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es>
 2026-02-26 10:26:01 +01:00
Rodrigo Arias Mallo
76cd6d64b2 Add ssanzmar user to apex and fox
All checks were successful
CI / build:cross (pull_request) Successful in 8s
Details
CI / build:all (pull_request) Successful in 16s
Details
CI / build:all (push) Successful in 4s
Details
CI / build:cross (push) Successful in 8s
Details 
Reviewed-by: Aleix Boné <abonerib@bsc.es>
 2026-02-24 14:06:12 +01:00
Rodrigo Arias Mallo
8dab0d82ba Update fox documentation in website
All checks were successful
CI / build:cross (pull_request) Successful in 8s
Details
CI / build:all (pull_request) Successful in 16s
Details
CI / build:all (push) Successful in 3s
Details
CI / build:cross (push) Successful in 8s
Details 
Reviewed-by: Aleix Boné <abonerib@bsc.es>
 2026-02-04 15:08:13 +01:00
Rodrigo Arias Mallo
958dcd4774 Add emonteir user to apex and fox 
Reviewed-by: Aleix Boné <abonerib@bsc.es>
 2026-02-04 15:08:08 +01:00
Aleix Boné
7a6e4232de Add nom and nixfmt-tree to system packages
All checks were successful
CI / build:all (pull_request) Successful in 55m38s
Details
CI / build:all (push) Successful in 27m13s
Details
CI / build:cross (push) Successful in 55m5s
Details
CI / build:cross (pull_request) Successful in 8s
Details 
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es>
 2026-02-03 15:17:30 +01:00
Aleix Boné
3b56e905e5 Add standalone home-manager to system packages 
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es>
 2026-02-03 15:17:29 +01:00
Aleix Boné
2d41309466 Format and sort default package list 
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es>
 2026-02-03 15:17:24 +01:00
Rodrigo Arias Mallo
deb0cd1488 Allow USB access to TC1 from Gitlab Runner
All checks were successful
CI / build:cross (pull_request) Successful in 8s
Details
CI / build:all (pull_request) Successful in 16s
Details
CI / build:all (push) Successful in 4s
Details
CI / build:cross (push) Successful in 8s
Details 
Reviewed-by: Aleix Boné <abonerib@bsc.es>
 2026-01-23 17:56:16 +01:00
Rodrigo Arias Mallo
cd1f502ecc Allow user USB access to FTDI device in tent 
Reviewed-by: Aleix Boné <abonerib@bsc.es>
 2026-01-23 17:56:11 +01:00
Rodrigo Arias Mallo
dda6a66782 Fix gitea user to allow sending email
All checks were successful
CI / build:cross (pull_request) Successful in 8s
Details
CI / build:all (pull_request) Successful in 16s
Details
CI / build:all (push) Successful in 4s
Details
CI / build:cross (push) Successful in 8s
Details 
In order to send email, the gitea user needs to be in the mail-robot
group.

Fixes: #220
Reviewed-by: Aleix Boné <abonerib@bsc.es>
 2026-01-20 12:18:52 +01:00
Rodrigo Arias Mallo
22420e6ac8 Remove unneeded perf package from eudy 
It is already included in the base list of packages, which is now only
"perf" and doesn't depend on the kernel version.

Reviewed-by: Aleix Boné <abonerib@bsc.es>
 2026-01-20 12:18:49 +01:00
Rodrigo Arias Mallo
a71cd78b4c Fix infiniband interface names 
Reviewed-by: Aleix Boné <abonerib@bsc.es>
 2026-01-20 12:18:46 +01:00
Rodrigo Arias Mallo
e84a2cadbb flake.lock: Update 
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/8bb5646e0bed5dbd3ab08c7a7cc15b75ab4e1d0f?narHash=sha256-SqUuBFjhl/kpDiVaKLQBoD8TLD%2B/cTUzzgVFoaHrkqY%3D' (2025-11-30)
  → 'github:NixOS/nixpkgs/3c9db02515ef1d9b6b709fc60ba9a540957f661c?narHash=sha256-2GffSfQxe3sedHzK%2BsTKlYo/NTIAGzbFCIsNMUPAAnk%3D' (2026-01-05)

Reviewed-by: Aleix Boné <abonerib@bsc.es>
 2026-01-20 12:18:41 +01:00
Aleix Boné
d3e43eb651 Remove conflicting definitions in amd-uprof-driver 
See: https://lkml.org/lkml/2025/4/9/1709

Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es>
 2026-01-20 12:15:18 +01:00
Aleix Boné
a491546ffb Mark mcxx as broken and remove from package list 
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es>
 2026-01-20 12:15:14 +01:00
Aleix Boné
933c78a80b Fix moved package linuxPackages.perf is now perf 
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es>
 2026-01-20 12:15:10 +01:00
Aleix Boné
150969be9b Fix replaced nixseparatedebuginfod 
nixseparatedebuginfod has been replaced by nixseparatedebuginfod2

Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es>
 2026-01-20 12:15:06 +01:00
Aleix Boné
9097729759 Use standard gcc for intel packages 
This reverts 26f52aa27d

Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es>
 2026-01-20 12:15:02 +01:00
Aleix Boné
779449f1db Fix renamed option watchdog.runtimeTime 
The option 'systemd.watchdog.runtimeTime' has been renamed to
'systemd.settings.Manager.RuntimeWatchdogSec'.

Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es>
 2026-01-20 12:14:59 +01:00
Aleix Boné
6cbe33bd80 Replace wrapGAppsHook with wrapGAppsHook3 
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es>
 2026-01-20 12:14:56 +01:00
Aleix Boné
3f1f5ae8f2 Fix changed cudaPackages.cuda_cudart output 
See: https://github.com/NixOS/nixpkgs/pull/437723
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es>
 2026-01-20 12:14:49 +01:00
Aleix Boné
fe8586e780 Set pyproject=true in buildPythonApplication 
The buildPythonPackage and buildPythonApplication functions now
  require an explicit format attribute. Previously the default format
  used setuptools and called setup.py from the source tree, which is
  deprecated. The modern alternative is to configure pyproject = true
  with build-system = [ setuptools ].

Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es>
 2026-01-20 12:14:31 +01:00
Aleix Boné
8677adba27 Fix renamed llvm bintools 
Moved from llvmPackages_latest.tools.bintools to
llvmPackages_latest.bintools

Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es>
 2026-01-20 12:14:27 +01:00
Aleix Boné
f614149edf Upgrade nixpkgs to 25.11 
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es>
 2026-01-20 12:14:11 +01:00
Vincent A. Arcila
859eebda98 Change varcila shell to zsh
All checks were successful
CI / build:all (push) Successful in 59m37s
Details
CI / build:cross (push) Successful in 1h27m33s
Details
CI / build:cross (pull_request) Successful in 1h29m20s
Details
CI / build:all (pull_request) Successful in 1h29m22s
Details 
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es>
 2026-01-07 13:22:17 +01:00
Rodrigo Arias Mallo
c2a201b085 Increase fail2ban ban time on each attempt
Some checks failed
CI / build:all (push) Has been cancelled
Details
CI / build:cross (push) Has been cancelled
Details
CI / build:all (pull_request) Successful in 1h38m5s
Details
CI / build:cross (pull_request) Successful in 1h38m3s
Details 
Reviewed-by: Aleix Boné <abonerib@bsc.es>
 2026-01-07 13:14:34 +01:00
Rodrigo Arias Mallo
f921f0a4bd Disable password login via SSH in apex 
Reviewed-by: Aleix Boné <abonerib@bsc.es>
 2026-01-07 13:14:30 +01:00
Rodrigo Arias Mallo
aa16bfc0bc Enable fail2ban in apex login node 
We are seeing a lot of failed attempts from the same IPs:

    apex% sudo journalctl -u sshd -b0 | grep 'Failed password' | wc -l
    2441

Reviewed-by: Aleix Boné <abonerib@bsc.es>
 2026-01-07 13:14:22 +01:00
Aleix Boné
a173af654f Fix osu cross-compilation
All checks were successful
CI / build:cross (pull_request) Successful in 12s
Details
CI / build:all (pull_request) Successful in 15s
Details
CI / build:all (push) Successful in 3s
Details
CI / build:cross (push) Successful in 12s
Details 
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es>
 2025-10-31 16:23:46 +01:00
Aleix Boné
2fff7e4a7b Set mpich default compilers from targetPackages 
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es>
 2025-10-31 16:23:46 +01:00
Aleix Boné
a761b73336 Enable meta.cross for mpich related packages 
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es>
 2025-10-31 16:23:46 +01:00
Aleix Boné
86eb796771 Disable meta.cross for gpi-2 and tagaspi 
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es>
 2025-10-31 16:23:46 +01:00
Aleix Boné
08633435cf Fix nativeBuildInputs for tagaspi 
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es>
 2025-10-31 16:23:46 +01:00
Aleix Boné
39d64456a4 Fix nativeBuildInputs for gpi-2 
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es>
 2025-10-31 16:23:46 +01:00