| #!/usr/bin/env bash | |
| # TODO: run in nix shell gitlab:abstract-binary/nix-nar-rs, nix-shell does not support | |
| # flakes, nix shell no shebangs atm. | |
| STORE_PATH="/nix/store/4q7ij8ivy09vbhini8j0gzd7f77z0bwn-disk-image" | |
| FILE_NAME="nixos.root.qcow2" | |
| CACHE_URL="https://nix-dabei.cachix.org" | |
| HASH="$(echo "$STORE_PATH" | sed 's|^/nix/store/\([^-]*\)-.*$|\1|')" | |
| NAR_INFO_URL="$CACHE_URL/$HASH.narinfo" |
| { name ? "hello" | |
| , text ? "echo 'Hello World'" | |
| , pkgs ? import <nixpkgs> {} | |
| }: | |
| builtins.derivation { | |
| inherit name; | |
| inherit (pkgs) system; | |
| builder = "${pkgs.busybox}/bin/busybox"; | |
| args = [ | |
| "sh" |
| # https://stackoverflow.com/questions/7136385/calculate-day-number-from-an-unix-timestamp-in-a-math-way | |
| # https://howardhinnant.github.io/date_algorithms.html#civil_from_days | |
| let | |
| t = builtins.currentTime; | |
| z = t / 86400 + 719468; | |
| era = (if z >= 0 then z else z - 146096) / 146097; | |
| doe = (z - era * 146097); | |
| y' = (yoe) + era * 400; | |
| doy = doe - (365 * yoe + yoe / 4 - yoe / 100); | |
| yoe = (doe - doe / 1460 + doe / 36524 - doe / 146096) / 365; |
| $(nix-build -A packages.odoo.config.lock.refresh --no-out-link)/bin/refresh | |
| nix-build -A packages.odoo |
| import json | |
| import uuid | |
| import subprocess | |
| from pathlib import Path | |
| age_identity = Path("~/.passage/identities").expanduser() | |
| store_dir = Path("~/.passage/store").expanduser() | |
| folders = [] | |
| items = [] |
- result/master/amazon:{out}
+ result/new/amazon:{out}
• The set of input derivation names do not match:
- nixos-system-unnamed-25.05pre-git
+ nixos-system-unnamed-amazon-25.05pre-git
• The input derivation named `closure-info` differs
| #!/usr/bin/env bash | |
| # Given a hostname of a host, this uses "clan secrets" to copy the age identity key for | |
| # sops-nix into a disk image built outside the nix store. | |
| # The file will be owned root:root with u+rw perms inside the vm, but will still only | |
| # be as secure as the disk image is, as it contains the age identity key unencrypted. | |
| # This can still be very useful to build ready-to-boot appliances which can already | |
| # non-interactively, access secrets on first-boot. | |
| set -eu |