use pureintent as remote builder

srid · Nov 18, 2024 · c5dec72 · c5dec72
1 parent e7f21de
commit c5dec72
Show file tree

Hide file tree

Showing 3 changed files with 23 additions and 4 deletions.
diff --git a/configurations/nixos/vixen/default.nix b/configurations/nixos/vixen/default.nix
@@ -9,6 +9,7 @@ in
     self.nixosModules.default
     inputs.nixos-hardware.nixosModules.lenovo-thinkpad-p14s-amd-gen4
     ./configuration.nix
+    (self + /modules/nixos/linux/distributed-build.nix)
     (self + /modules/nixos/linux/gui/hyprland)
     (self + /modules/nixos/linux/gui/gnome.nix)
     (self + /modules/nixos/linux/gui/desktopish/fonts.nix)

diff --git a/modules/nixos/linux/distributed-build.nix b/modules/nixos/linux/distributed-build.nix
@@ -1,15 +1,29 @@
 # https://nixos.wiki/wiki/Distributed_build
+{ flake, ... }:
+let
+  buildHost = "pureintent";
+  user = flake.config.me.username;
+in
 {
-  services.openssh.settings.PermitRootLogin = "prohibit-password";
+  home-manager.users."root" = {
+    programs.ssh.matchBlocks = {
+      ${buildHost} = {
+        inherit user;
+        identityFile = "/etc/ssh/ssh_host_ed25519_key";
+      };
+    };
+  };
+  # services.openssh.settings.PermitRootLogin = "prohibit-password";
   nix.buildMachines = [
     {
-      hostName = "thick";
+      hostName = buildHost;
       system = "x86_64-linux";
+      protocol = "ssh-ng";
       # if the builder supports building for multiple architectures, 
       # replace the previous line by, e.g.,
       # systems = ["x86_64-linux" "aarch64-linux"];
       maxJobs = 16;
-      speedFactor = 3;
+      speedFactor = 1;
       supportedFeatures = [ "nixos-test" "benchmark" "big-parallel" "kvm" ];
       mandatoryFeatures = [ ];
     }

diff --git a/modules/nixos/shared/primary-as-admin.nix b/modules/nixos/shared/primary-as-admin.nix
@@ -6,7 +6,11 @@
   users.users =
     let
       me = flake.config.me;
-      myKeys = [ me.sshKey ];
+      myKeys = [
+        me.sshKey
+        # vixen host key (see distributed-build.nix)
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIImY2zbqe3HlPF62gSgUrJI7xY3n3NEBwRi/MkDrVjp5"
+      ];
     in
     {
       root.openssh.authorizedKeys.keys = myKeys;