121 lines
2.7 KiB
Bash
Executable File
121 lines
2.7 KiB
Bash
Executable File
#!/usr/bin/env sh
|
|
|
|
. ./common.sh
|
|
|
|
trap error INT TERM
|
|
|
|
rebuild() {
|
|
host="$(resolveAlias $1)"
|
|
skip_check=$2
|
|
|
|
msg "Rebuilding: ${host}"
|
|
|
|
if ! tsAlive $host; then
|
|
msg "can't reach ${host}.. skipping.."
|
|
return
|
|
fi
|
|
|
|
hostVersion=$(${SSH} root@${host} 'nixos-version --json | jq -r .configurationRevision')
|
|
if [ $? != 0 ]; then
|
|
return $?
|
|
fi
|
|
|
|
if [ "$hostVersion" = "$CurrentVersion" ] && [ $skip_check = false ]; then
|
|
msg "Up-to-date: ${host}"
|
|
return 0
|
|
fi
|
|
|
|
nixos-rebuild --flake .#${1} --build-host root@${host} --target-host root@${host} switch
|
|
return $?
|
|
}
|
|
|
|
if [ "$1" = "status" ]; then
|
|
start
|
|
rev=$(git rev-parse HEAD)
|
|
msg "Currently at: ${rev}\t($(git log --format=%B -n 1 $rev | head -n1))"
|
|
for h in $(ls hosts); do
|
|
host="$(resolveAlias $h)"
|
|
if ! tsAlive $host; then
|
|
msg "can't reach ${host}.. skipping.."
|
|
continue
|
|
fi
|
|
echo -n "===> $h: "
|
|
host_data="$(${SSH} root@${host} 'nixos-version --json')"
|
|
remote_rev=$(echo $host_data | jq -r .configurationRevision)
|
|
remote_ver=$(echo $host_data | jq -r .nixosVersion)
|
|
echo -e "\t\t${remote_ver}\t${remote_rev}\t($(git log --format=%B -n 1 $remote_rev | head -n1))"
|
|
done
|
|
finish
|
|
exit 0
|
|
fi
|
|
|
|
if [ "$1" = "install" ]; then
|
|
host="$(resolveAlias $2)"
|
|
|
|
start
|
|
|
|
if [ ! -d hosts/${host} ]; then
|
|
msg "No config found for $host"
|
|
exit 1
|
|
fi
|
|
|
|
set -eu
|
|
mkdir -p .gcroots
|
|
out=$(nix build -o .gcroots/${host} --json .#nixosConfigurations.${host}.config.system.build.toplevel | jq -r '.[0].outputs.out')
|
|
|
|
nix copy -s --to "ssh://root@${host}" "$out"
|
|
nix copy -s --derivation --to "ssh://root@${host}" "$out"
|
|
|
|
${SSH} "root@${host}" nix build --profile /nix/var/nix/profiles/system "$out"
|
|
${SSH} "root@${host}" nix shell -vv "$out" -c switch-to-configuration "$@"
|
|
exit 0
|
|
fi
|
|
|
|
if [ "$1" = "update" ]; then
|
|
can_sign=0
|
|
for i in $(ssh-add -L | awk '{print $NF}'); do
|
|
grep -q $i .allowed_signers && can_sign=1
|
|
done
|
|
|
|
if [ $can_sign = 1 ]; then
|
|
nix flake update --commit-lock-file
|
|
exit
|
|
else
|
|
echo "Can't find signing key."
|
|
exit 1
|
|
fi
|
|
fi
|
|
|
|
if [ "$1" = "installer" ]; then
|
|
nix build .#nixosConfigurations.isoInstall.config.system.build.isoImage
|
|
exit $?
|
|
fi
|
|
|
|
start
|
|
|
|
if [ "$1" = "diff" ]; then
|
|
set -x
|
|
host="$(resolveAlias $2)"
|
|
mkdir -p .gcroots
|
|
out=$(nix build -o .gcroots/${host} --json .#nixosConfigurations.${2}.config.system.build.toplevel | jq -r '.[0].outputs.out')
|
|
nix copy -s --to "ssh://root@$host" "$out"
|
|
nix copy -s --derivation --to "ssh://root@$host" "$out"
|
|
${SSH} "root@$host" "nix-store -qd /run/current-system $out | xargs nix-diff --color=always" | less
|
|
exit $?
|
|
fi
|
|
|
|
ret=0
|
|
if [ ${#@} = 1 ]; then
|
|
rebuild $1 true || ret=1
|
|
else
|
|
for host in $(ls hosts); do
|
|
rebuild $host false || ret=1
|
|
done
|
|
fi
|
|
|
|
if [ $ret = 0 ]; then
|
|
finish
|
|
else
|
|
msg "WARNING: Management key retained!"
|
|
fi
|