dcdbcc5afa
Use fetchurl for amd-uprof
CI / build:cross (pull_request) Successful in 8s
CI / build:all (pull_request) Failing after 48s
2026-03-09 12:32:05 +01:00
8cf6101ffe
Enable parallelBuilding in jemalloc
2026-03-09 12:32:04 +01:00
1216a5b93c
Make bsc users trusted in nix-portable
2026-03-09 12:32:04 +01:00
9678247cbb
Add sys-devices feature to nix-portable nix.conf
2026-03-09 12:32:04 +01:00
3ff503fa6e
Add meta with license to nix-portable
2026-03-09 12:32:04 +01:00
143c0d1b39
Bind /usr/bin/env in nix-portable
2026-03-09 12:32:04 +01:00
85f49b17ac
Add jungle cache to nix-portable nix.conf
2026-03-09 12:32:04 +01:00
8df96f3cf6
Use nix bwrap in nix-portable
2026-03-09 12:32:04 +01:00
a4757a0050
Remove nix-portable tmpbin feature
...
It will not work without the host /lib64/ld
2026-03-09 12:32:03 +01:00
29a531b906
Add bashInteractive in nix-portable bwrap
2026-03-09 12:32:03 +01:00
5f0aeed3c0
Install netcat, ssh and git in nix-portable
...
These are needed by nix in order to properly
download and build stuff.
busybox's netcat does not work since it doesn't
support -X.
2026-03-06 17:31:11 +01:00
951cd9bc11
Bind to busybox to /bin/sh in nix-portable
2026-03-06 17:31:11 +01:00
75c02153a3
Remove sgid from .nix-portable and set group
...
This should prevent issues when putting it under
/gpfs/{projects,scratch} that have sgid and group=nobody.
2026-03-06 17:31:10 +01:00
e14225a447
Restrict paths added to bwrap in nix-portable
2026-03-06 17:31:10 +01:00
24a35583af
Bind proc using --proc in nix-portable
2026-03-06 17:31:10 +01:00
35df90594e
Fix nix-portable pkgStatic symlink handling
2026-03-06 17:31:10 +01:00
57077e0276
Add nix-portable
...
repo: https://github.com/DavHau/nix-portable
rev: 91122e3d94ba51d7d83fe990fa81d3de0968fb32
2026-03-06 17:31:10 +01:00
30bd998114
Re-enable nix-wrap
...
libcap is no longer broken upstream
2026-03-06 17:31:10 +01:00
84a5cb09ee
Use host mode for docker network
...
CI / build:cross (pull_request) Successful in 8s
CI / build:all (pull_request) Successful in 16s
CI / build:all (push) Successful in 4s
CI / build:cross (push) Successful in 8s
In order to reduce the traffic of the secondary Ethernet device we need
to be able to directly use the physical device instead of the virtual
one. For now use the host mode and see later if we can revert it.
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-03-05 15:29:23 +01:00
4899d20748
Fix weasel infiniband interface name
...
CI / build:cross (pull_request) Successful in 8s
CI / build:all (pull_request) Successful in 17s
CI / build:all (push) Successful in 4s
CI / build:cross (push) Successful in 8s
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-02-26 10:26:01 +01:00
76cd6d64b2
Add ssanzmar user to apex and fox
...
CI / build:cross (pull_request) Successful in 8s
CI / build:all (pull_request) Successful in 16s
CI / build:all (push) Successful in 4s
CI / build:cross (push) Successful in 8s
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-02-24 14:06:12 +01:00
8dab0d82ba
Update fox documentation in website
...
CI / build:cross (pull_request) Successful in 8s
CI / build:all (pull_request) Successful in 16s
CI / build:all (push) Successful in 3s
CI / build:cross (push) Successful in 8s
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-02-04 15:08:13 +01:00
958dcd4774
Add emonteir user to apex and fox
...
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-02-04 15:08:08 +01:00
7a6e4232de
Add nom and nixfmt-tree to system packages
...
CI / build:all (pull_request) Successful in 55m38s
CI / build:all (push) Successful in 27m13s
CI / build:cross (push) Successful in 55m5s
CI / build:cross (pull_request) Successful in 8s
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-02-03 15:17:30 +01:00
3b56e905e5
Add standalone home-manager to system packages
...
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-02-03 15:17:29 +01:00
2d41309466
Format and sort default package list
...
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-02-03 15:17:24 +01:00
deb0cd1488
Allow USB access to TC1 from Gitlab Runner
...
CI / build:cross (pull_request) Successful in 8s
CI / build:all (pull_request) Successful in 16s
CI / build:all (push) Successful in 4s
CI / build:cross (push) Successful in 8s
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-01-23 17:56:16 +01:00
cd1f502ecc
Allow user USB access to FTDI device in tent
...
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-01-23 17:56:11 +01:00
dda6a66782
Fix gitea user to allow sending email
...
CI / build:cross (pull_request) Successful in 8s
CI / build:all (pull_request) Successful in 16s
CI / build:all (push) Successful in 4s
CI / build:cross (push) Successful in 8s
In order to send email, the gitea user needs to be in the mail-robot
group.
Fixes: #220
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-01-20 12:18:52 +01:00
22420e6ac8
Remove unneeded perf package from eudy
...
It is already included in the base list of packages, which is now only
"perf" and doesn't depend on the kernel version.
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-01-20 12:18:49 +01:00
a71cd78b4c
Fix infiniband interface names
...
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-01-20 12:18:46 +01:00
e84a2cadbb
flake.lock: Update
...
Flake lock file updates:
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/8bb5646e0bed5dbd3ab08c7a7cc15b75ab4e1d0f?narHash=sha256-SqUuBFjhl/kpDiVaKLQBoD8TLD%2B/cTUzzgVFoaHrkqY%3D' (2025-11-30)
→ 'github:NixOS/nixpkgs/3c9db02515ef1d9b6b709fc60ba9a540957f661c?narHash=sha256-2GffSfQxe3sedHzK%2BsTKlYo/NTIAGzbFCIsNMUPAAnk%3D' (2026-01-05)
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-01-20 12:18:41 +01:00
d3e43eb651
Remove conflicting definitions in amd-uprof-driver
...
See: https://lkml.org/lkml/2025/4/9/1709
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-01-20 12:15:18 +01:00
a491546ffb
Mark mcxx as broken and remove from package list
...
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-01-20 12:15:14 +01:00
933c78a80b
Fix moved package linuxPackages.perf is now perf
...
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-01-20 12:15:10 +01:00
150969be9b
Fix replaced nixseparatedebuginfod
...
nixseparatedebuginfod has been replaced by nixseparatedebuginfod2
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-01-20 12:15:06 +01:00
9097729759
Use standard gcc for intel packages
...
This reverts 26f52aa27drodrigo.arias@bsc.es >
2026-01-20 12:15:02 +01:00
779449f1db
Fix renamed option watchdog.runtimeTime
...
The option 'systemd.watchdog.runtimeTime' has been renamed to
'systemd.settings.Manager.RuntimeWatchdogSec'.
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-01-20 12:14:59 +01:00
6cbe33bd80
Replace wrapGAppsHook with wrapGAppsHook3
...
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-01-20 12:14:56 +01:00
3f1f5ae8f2
Fix changed cudaPackages.cuda_cudart output
...
See: https://github.com/NixOS/nixpkgs/pull/437723
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-01-20 12:14:49 +01:00
fe8586e780
Set pyproject=true in buildPythonApplication
...
The buildPythonPackage and buildPythonApplication functions now
require an explicit format attribute. Previously the default format
used setuptools and called setup.py from the source tree, which is
deprecated. The modern alternative is to configure pyproject = true
with build-system = [ setuptools ].
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-01-20 12:14:31 +01:00
8677adba27
Fix renamed llvm bintools
...
Moved from llvmPackages_latest.tools.bintools to
llvmPackages_latest.bintools
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-01-20 12:14:27 +01:00
f614149edf
Upgrade nixpkgs to 25.11
...
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-01-20 12:14:11 +01:00
859eebda98
Change varcila shell to zsh
...
CI / build:all (push) Successful in 59m37s
CI / build:cross (push) Successful in 1h27m33s
CI / build:cross (pull_request) Successful in 1h29m20s
CI / build:all (pull_request) Successful in 1h29m22s
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2026-01-07 13:22:17 +01:00
c2a201b085
Increase fail2ban ban time on each attempt
...
CI / build:all (push) Has been cancelled
CI / build:cross (push) Has been cancelled
CI / build:all (pull_request) Successful in 1h38m5s
CI / build:cross (pull_request) Successful in 1h38m3s
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-01-07 13:14:34 +01:00
f921f0a4bd
Disable password login via SSH in apex
...
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-01-07 13:14:30 +01:00
aa16bfc0bc
Enable fail2ban in apex login node
...
We are seeing a lot of failed attempts from the same IPs:
apex% sudo journalctl -u sshd -b0 | grep 'Failed password' | wc -l
2441
Reviewed-by: Aleix Boné <abonerib@bsc.es >
2026-01-07 13:14:22 +01:00
a173af654f
Fix osu cross-compilation
...
CI / build:cross (pull_request) Successful in 12s
CI / build:all (pull_request) Successful in 15s
CI / build:all (push) Successful in 3s
CI / build:cross (push) Successful in 12s
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2025-10-31 16:23:46 +01:00
2fff7e4a7b
Set mpich default compilers from targetPackages
...
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2025-10-31 16:23:46 +01:00
a761b73336
Enable meta.cross for mpich related packages
...
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es >
2025-10-31 16:23:46 +01:00
