Buildkite - Revision history

imported>Fufexan: Fix position of runtimePackages

2022-08-09T19:11:28Z

Fix position of runtimePackages

← Older revision		Revision as of 19:11, 9 August 2022
Line 8:		Line 8:
	tokenPath = "/path/to/token";		tokenPath = "/path/to/token";
	privateSshKeyPath = "/path/to/ssh/key";		privateSshKeyPath = "/path/to/ssh/key";
	};
	# tools needed for basic nix-build		# tools needed for basic nix-build
	runtimePackages = [		runtimePackages = [
	pkgs.gnutar		pkgs.gnutar
	pkgs.bash		pkgs.bash
Line 16:		Line 16:
	pkgs.gzip		pkgs.gzip
	pkgs.git		pkgs.git
	];		];
			};
	}		}
	</syntaxHighlight>		</syntaxHighlight>

imported>Nix: add Software/Applications subcategory

2021-09-20T05:40:06Z

add Software/Applications subcategory

← Older revision		Revision as of 05:40, 20 September 2021
Line 61:		Line 61:

	* [[Continuous Integration (CI)]]		* [[Continuous Integration (CI)]]

			[[Category:Applications]]

imported>Garbas at 21:42, 24 September 2020

2020-09-24T21:42:14Z

← Older revision		Revision as of 21:42, 24 September 2020
Line 20:		Line 20:
	</syntaxHighlight>		</syntaxHighlight>

	[https://nixos.org/~~nixos~~/~~options.html#~~services.buildkite Further NixOS options]		[https://search.nixos.org/options/?query=services.buildkite Further NixOS options]

	== Using buildkite for public repository ==		== Using buildkite for public repository ==

imported>Mic92 at 08:52, 2 August 2020

2020-08-02T08:52:25Z

← Older revision		Revision as of 08:52, 2 August 2020
Line 57:		Line 57:

	Since pull requests can modify the build instructions it is recommend to move <code>.buildkite/pipeline.yml</code> from the repository itself and only provide it via the web interface. Also consider using <code>restrict-eval</code> options to prevent leaking the buildkite's ssh key and api token, since those are still mounted into the chroot.		Since pull requests can modify the build instructions it is recommend to move <code>.buildkite/pipeline.yml</code> from the repository itself and only provide it via the web interface. Also consider using <code>restrict-eval</code> options to prevent leaking the buildkite's ssh key and api token, since those are still mounted into the chroot.

			== See also ==

			* [[Continuous Integration (CI)]]

imported>Mic92 at 08:50, 2 August 2020

2020-08-02T08:50:36Z

← Older revision		Revision as of 08:50, 2 August 2020
Line 1:		Line 1:
	NixOS comes with a module to run [https://buildkite.com ~~build-kite~~] agents:		NixOS comes with a module to run [https://buildkite.com buildkite] agents:

	<syntaxHighlight lang=nix>		<syntaxHighlight lang=nix>

imported>Mic92 at 08:50, 2 August 2020

2020-08-02T08:50:17Z

← Older revision		Revision as of 08:50, 2 August 2020
Line 56:		Line 56:
	</syntaxHighlight>		</syntaxHighlight>

	Since pull requests can modify the build instructions it is recommend to move <code>.buildkite/pipeline.yml</code> from the repository itself and only provide it via the web interface. Also consider using <code>restrict-eval</code> options to prevent leaking the buildkite's ssh key and api token, since those are still ~~mounte~~ into the chroot.		Since pull requests can modify the build instructions it is recommend to move <code>.buildkite/pipeline.yml</code> from the repository itself and only provide it via the web interface. Also consider using <code>restrict-eval</code> options to prevent leaking the buildkite's ssh key and api token, since those are still mounted into the chroot.

imported>Mic92 at 08:50, 2 August 2020

2020-08-02T08:50:01Z

← Older revision		Revision as of 08:50, 2 August 2020
Line 31:		Line 31:
	Make sure that you don't add secrets to your nix store!		Make sure that you don't add secrets to your nix store!

	~~```~~nix		<syntaxHighlight lang=nix>
	{ pkgs, config, ... }:		{ pkgs, config, ... }:
	{		{
Line 54:		Line 54:
	};		};
	}		}
	~~```~~		</syntaxHighlight>

	Since pull requests can modify the build instructions it is recommend to move <code>.buildkite/pipeline.yml</code> from the repository itself and only provide it via the web interface. Also consider using <code>restrict-eval</code> options to prevent leaking the buildkite's ssh key and api token, since those are still mounte into the chroot.		Since pull requests can modify the build instructions it is recommend to move <code>.buildkite/pipeline.yml</code> from the repository itself and only provide it via the web interface. Also consider using <code>restrict-eval</code> options to prevent leaking the buildkite's ssh key and api token, since those are still mounte into the chroot.

imported>Mic92: add sandbox builds

2020-08-02T08:49:36Z

add sandbox builds

@@ Line 9: / Line 9: @@
      privateSshKeyPath = "/path/to/ssh/key";
    };
+}
 </syntaxHighlight>
 [https://nixos.org/nixos/options.html#services.buildkite Further NixOS options]

imported>Mic92: Created page with "NixOS comes with a module to run [https://buildkite.com build-kite] agents: { services.buildkite-agents.builder = { enable = true; # stor..."

2020-08-02T08:38:11Z

Created page with "NixOS comes with a module to run [https://buildkite.com build-kite] agents: <syntaxHighlight lang=nix> { services.buildkite-agents.builder = { enable = true; # stor..."

New page

NixOS comes with a module to run [https://buildkite.com build-kite] agents:

<syntaxHighlight lang=nix>
{
services.buildkite-agents.builder = {
enable = true;
# store a token provided in the buildkite webinterface in the `Agents` tab under `Agents token`
tokenPath = "/path/to/token";
privateSshKeyPath = "/path/to/ssh/key";
};
}
</syntaxHighlight>

[https://nixos.org/nixos/options.html#services.buildkite Further NixOS options]