Remove Jehad key and provision new deployment key

Closes #147

See merge request !436

Signed-off-by: Benoit Donneaux <benoit@leastauthority.com>

Signed-off-by: Benoit Donneaux <benoit@leastauthority.com>

Signed-off-by: Benoit Donneaux <benoit@leastauthority.com>

Signed-off-by: Benoit Donneaux <benoit@leastauthority.com>

Propagate missing token count which differs for HRO only

Closes #148

See merge request !435

Signed-off-by: Benoit Donneaux <benoit@leastauthority.com>

Fix HRO storage003 boot and remove unnecessary zfs module

Closes #149

See merge request !434

Signed-off-by: Benoit Donneaux <benoit@leastauthority.com>

Signed-off-by: Benoit Donneaux <benoit@leastauthority.com>

Reworked hro-config as new morph grid in a branch we can merge in develop

See merge request !433

Signed-off-by: Benoit Donneaux <benoit@leastauthority.com>

Signed-off-by: Benoit Donneaux <benoit@leastauthority.com>

Signed-off-by: Benoit Donneaux <benoit@leastauthority.com>

Signed-off-by: Benoit Donneaux <benoit@leastauthority.com>

Signed-off-by: Benoit Donneaux <benoit@leastauthority.com>

Signed-off-by: Benoit Donneaux <benoit@leastauthority.com>

Signed-off-by: Benoit Donneaux <benoit@leastauthority.com>

Signed-off-by: Benoit Donneaux <benoit@leastauthority.com>

Signed-off-by: Benoit Donneaux <benoit@leastauthority.com>

Signed-off-by: Benoit Donneaux <benoit@leastauthority.com>

Signed-off-by: Benoit Donneaux <benoit@leastauthority.com>

Jehad authored 1 year ago and Benoit Donneaux committed 1 year ago

Co-authored-by: Benoit Donneaux <benoit@leastauthority.com>
Signed-off-by: Benoit Donneaux <benoit@leastauthority.com>

Jehad authored 1 year ago and Benoit Donneaux committed 1 year ago

Co-authored-by: Benoit Donneaux <benoit@leastauthority.com>
Signed-off-by: Benoit Donneaux <benoit@leastauthority.com>

Jehad authored 2 years ago and Benoit Donneaux committed 1 year ago

Co-authored-by: Benoit Donneaux <benoit@leastauthority.com>
Signed-off-by: Benoit Donneaux <benoit@leastauthority.com>

This is also specified in the minimal profile

See merge request !431

Tryfix overriding tahoe.ro-storage.unitConfig.Requires

See merge request !424

Without the lib.mkForce() this is a no-op.

Use swap in emergency situations

See merge request !410

Fix prod deployment

Closes #143

See merge request !422

Closes #143.
Thanks to http://nixos.wiki/wiki/Nix_Language:_Tips_%26_Tricks for
inspiration.

bump nixpkgs version

See merge request !420

Remove user access: Andreas

See merge request !416

Signed-off-by: Benoit Donneaux <benoit@leastauthority.com>

On never kernels, a swappiness of 0 means "disable swap completely"
where it would before ~ 2.6.32 would still allow the kernel to swap
in certain emergency situations.

We have alerting in place in case of any swapping, hoping we can react
quickly enough to catch problems of runaway machines before they have
to haywire OOM or reboot.

Command: `rg -l swappiness | xargs sed -i 's/swappiness" = 0/swappiness" = 1/'`
(but not adding the change to the virtual hardware for the local grid).

bump nixpkgs version

See merge request !400