]>
Commit | Line | Data |
---|---|---|
1 | export | |
2 | ifndef NIXOPS_CONFIG_PASS_SUBTREE_PATH | |
3 | $(error Please set NIXOPS_CONFIG_PASS_SUBTREE_PATH to the password-store subtree path) | |
4 | endif | |
5 | ||
6 | NIXOPS_STATE ?= ./state/eldiron.nixops | |
7 | NIXOPS_DEPLOYMENT = cef694f3-081d-11e9-b31f-0242ec186adf | |
8 | nixpkgs ?= https://releases.nixos.org/nixos/19.03/nixos-19.03.173677.daf861a810d/nixexprs.tar.xz | |
9 | NIX_PATH = nixpkgs=${nixpkgs}:nixpkgsNext=${nixpkgs}:nixpkgsPrevious=${nixpkgs} | |
10 | ||
11 | NIXOPS := $(shell NIX_PATH=$(NIX_PATH) nix-build --no-out-link -E "with import <nixpkgs> { overlays = builtins.attrValues (import ../overlays); }; nixops")/bin/nixops | |
12 | NIXOPS_PRIV = ./scripts/with_env $(NIXOPS) | |
13 | ||
14 | ###### Current channel information | |
15 | nix-info: | |
16 | @version=$$(nix eval --raw nixpkgs.lib.version) && \ | |
17 | mainversion=$$(echo $$version | cut -d"." -f -2) && \ | |
18 | echo "https://releases.nixos.org/nixos/$$mainversion/nixos-$$version/nixexprs.tar.xz" && \ | |
19 | nix-instantiate --find-file nixpkgs | |
20 | .PHONY: nix-info | |
21 | ||
22 | ###### Initial setup | |
23 | setup: | |
24 | ./scripts/setup | |
25 | .PHONY: setup | |
26 | ||
27 | ###### Nixops regular tasks | |
28 | NIXOPS_ARGS ?= | |
29 | nixops: | |
30 | $(NIXOPS_PRIV) $(NIXOPS_ARGS) | |
31 | ||
32 | SSH_ARGS ?= | |
33 | ssh-eldiron: | |
34 | $(NIXOPS_PRIV) ssh eldiron -- $(SSH_ARGS) | |
35 | ||
36 | ssh-dilion: | |
37 | $(NIXOPS_PRIV) ssh dilion -- $(SSH_ARGS) | |
38 | ||
39 | ssh-backup-2: | |
40 | $(NIXOPS_PRIV) ssh backup-2 -- $(SSH_ARGS) | |
41 | ||
42 | ssh-monitoring-1: | |
43 | $(NIXOPS_PRIV) ssh monitoring-1 -- $(SSH_ARGS) | |
44 | ||
45 | info: | |
46 | $(NIXOPS_PRIV) list | |
47 | $(NIXOPS_PRIV) info | |
48 | ||
49 | debug: | |
50 | $(NIXOPS_PRIV) deploy --build-only --show-trace | |
51 | ||
52 | dry-run: | |
53 | $(NIXOPS_PRIV) deploy --dry-run | |
54 | ||
55 | build: | |
56 | $(NIXOPS_PRIV) deploy --build-only | |
57 | ||
58 | upload: | |
59 | $(NIXOPS_PRIV) deploy --copy-only | |
60 | ||
61 | deploy: | |
62 | $(NIXOPS_PRIV) deploy | |
63 | ||
64 | deploy-reboot: | |
65 | $(NIXOPS_PRIV) deploy --force-reboot | |
66 | ||
67 | reboot: | |
68 | $(NIXOPS_PRIV) reboot --include=eldiron | |
69 | .PHONY: nixops ssh-eldiron info debug dry-run build upload deploy deploy-reboot reboot | |
70 | ||
71 | ###### Cleanup generations and garbage collection | |
72 | profile := $$($(NIXOPS_PRIV) info | grep "^Nix profile: " | sed -e "s/^Nix profile: //") | |
73 | GEN ?= "+3" | |
74 | ||
75 | list-generations: | |
76 | nix-env -p $(profile) --list-generations | |
77 | $(NIXOPS_PRIV) ssh eldiron -- nix-env -p /nix/var/nix/profiles/system --list-generations | |
78 | .PHONY: list-generations | |
79 | ||
80 | delete-generations: | |
81 | nix-env -p $(profile) --delete-generations $(GEN) | |
82 | $(NIXOPS_PRIV) ssh eldiron -- nix-env -p /nix/var/nix/profiles/system --delete-generations $(GEN) | |
83 | $(NIXOPS_PRIV) ssh dilion -- nix-env -p /nix/var/nix/profiles/system --delete-generations $(GEN) | |
84 | $(NIXOPS_PRIV) ssh backup-2 -- nix-env -p /nix/var/nix/profiles/system --delete-generations $(GEN) | |
85 | $(NIXOPS_PRIV) ssh monitoring-1 -- nix-env -p /nix/var/nix/profiles/system --delete-generations $(GEN) | |
86 | .PHONY: delete-generations | |
87 | ||
88 | cleanup: delete-generations | |
89 | nix-store --gc | |
90 | $(NIXOPS_PRIV) ssh eldiron -- nix-store --gc | |
91 | $(NIXOPS_PRIV) ssh dilion -- nix-store --gc | |
92 | $(NIXOPS_PRIV) ssh backup-2 -- nix-store --gc | |
93 | $(NIXOPS_PRIV) ssh monitoring-1 -- nix-store --gc | |
94 | .PHONY: cleanup | |
95 | ||
96 | ###### Pull environment and deployment from remote | |
97 | # Don't include pull_deployment by default as this should happen only rarely | |
98 | pull: pull_environment; | |
99 | .PHONY: pull | |
100 | ||
101 | pull_environment: | |
102 | ifndef NIXOPS_CONFIG_PASS_SUBTREE_REMOTE | |
103 | $(error "Please set NIXOPS_CONFIG_PASS_SUBTREE_REMOTE to the password-store subtree remote name") | |
104 | endif | |
105 | pass git subtree pull --prefix=$(NIXOPS_CONFIG_PASS_SUBTREE_PATH) $(NIXOPS_CONFIG_PASS_SUBTREE_REMOTE) master | |
106 | .PHONY: pull_environment | |
107 | ||
108 | pull_deployment: | |
109 | @if $(NIXOPS) info -d $(NIXOPS_DEPLOYMENT) 2>/dev/null >/dev/null ; then \ | |
110 | echo "This will remove your current deployment file and recreate it!. Continue? [y/N]" && \ | |
111 | read y && \ | |
112 | [ "$$y" = "y" -o "$$y" = "Y" ] && \ | |
113 | $(NIXOPS) delete --force -d $(NIXOPS_DEPLOYMENT); \ | |
114 | fi | |
115 | pass show $(NIXOPS_CONFIG_PASS_SUBTREE_PATH)/Nixops/Deployment | $(NIXOPS) import | |
116 | $(NIXOPS) modify -d $(NIXOPS_DEPLOYMENT) "$$(pwd)/default.nix" | |
117 | .PHONY: pull_deployment | |
118 | ||
119 | deployment_is_set: | |
120 | $(NIXOPS) info -d $(NIXOPS_DEPLOYMENT) 2>/dev/null >/dev/null | |
121 | .PHONY: deployment_is_set | |
122 | ||
123 | ###### Push environment and deployment information to password store | |
124 | push: push_deployment push_environment; | |
125 | .PHONY: push | |
126 | ||
127 | push_deployment: | |
128 | $(NIXOPS) export | pass insert -m $(NIXOPS_CONFIG_PASS_SUBTREE_PATH)/Nixops/Deployment | |
129 | .PHONY: push_deployment | |
130 | ||
131 | push_environment: | |
132 | ifndef NIXOPS_CONFIG_PASS_SUBTREE_REMOTE | |
133 | $(error "Please set NIXOPS_CONFIG_PASS_SUBTREE_REMOTE to the password-store subtree remote name") | |
134 | endif | |
135 | pass git subtree push --prefix=$(NIXOPS_CONFIG_PASS_SUBTREE_PATH) $(NIXOPS_CONFIG_PASS_SUBTREE_REMOTE) master | |
136 | .PHONY: push_environment |