Rodrigo Arias Mallo
35a94a9b02
The old runners for the PM gitlab were disabled in configuration in the last outage, but they remained working until we reboot the node. With this change we enable the runners for both PM and gitlab.bsc.es. Reviewed-by: Aleix Roca Nonell <aleix.rocanonell@bsc.es>
71 lines
2.4 KiB
Nix
71 lines
2.4 KiB
Nix
{ pkgs, lib, config, ... }:
|
|
|
|
{
|
|
age.secrets.ovniToken.file = ../../secrets/ovni-token.age;
|
|
age.secrets.gitlabToken.file = ../../secrets/gitlab-bsc-es-token.age;
|
|
age.secrets.nosvToken.file = ../../secrets/nosv-token.age;
|
|
|
|
services.gitlab-runner = {
|
|
enable = true;
|
|
settings.concurrent = 5;
|
|
services = let
|
|
common-shell = {
|
|
executor = "shell";
|
|
tagList = [ "nix" "xeon" ];
|
|
registrationFlags = [
|
|
# Using space doesn't work, and causes it to misread the next flag
|
|
"--locked='false'"
|
|
];
|
|
environmentVariables = {
|
|
SHELL = "${pkgs.bash}/bin/bash";
|
|
};
|
|
};
|
|
common-docker = {
|
|
dockerImage = "debian:stable";
|
|
tagList = [ "docker" "xeon" ];
|
|
registrationFlags = [
|
|
"--locked='false'"
|
|
"--docker-network-mode host"
|
|
];
|
|
environmentVariables = {
|
|
https_proxy = "http://localhost:23080";
|
|
http_proxy = "http://localhost:23080";
|
|
};
|
|
};
|
|
in {
|
|
# For gitlab.bsc.es
|
|
gitlab-bsc-es-shell = common-shell // {
|
|
registrationConfigFile = config.age.secrets.gitlabToken.path;
|
|
};
|
|
gitlab-bsc-es-docker = common-docker // {
|
|
registrationConfigFile = config.age.secrets.gitlabToken.path;
|
|
};
|
|
# For pm.bsc.es/gitlab
|
|
gitlab-pm-shell = common-shell // {
|
|
registrationConfigFile = config.age.secrets.ovniToken.path;
|
|
};
|
|
gitlab-pm-docker = common-docker // {
|
|
registrationConfigFile = config.age.secrets.ovniToken.path;
|
|
};
|
|
};
|
|
};
|
|
|
|
#systemd.services.gitlab-runner.serviceConfig.Shell = "${pkgs.bash}/bin/bash";
|
|
systemd.services.gitlab-runner.serviceConfig.DynamicUser = lib.mkForce false;
|
|
systemd.services.gitlab-runner.serviceConfig.User = "gitlab-runner";
|
|
systemd.services.gitlab-runner.serviceConfig.Group = "gitlab-runner";
|
|
systemd.services.gitlab-runner.serviceConfig.ExecStart = lib.mkForce
|
|
''${pkgs.gitlab-runner}/bin/gitlab-runner run --config ''${HOME}/.gitlab-runner/config.toml --listen-address "127.0.0.1:9252" --working-directory ''${HOME}'';
|
|
|
|
users.users.gitlab-runner = {
|
|
uid = config.ids.uids.gitlab-runner;
|
|
#isNormalUser = true;
|
|
home = "/var/lib/gitlab-runner";
|
|
description = "Gitlab Runner";
|
|
group = "gitlab-runner";
|
|
extraGroups = [ "docker" ];
|
|
createHome = true;
|
|
};
|
|
users.groups.gitlab-runner.gid = config.ids.gids.gitlab-runner;
|
|
}
|