frcc experiments #1

Merged
flowey merged 6 commits from frcc-kvm into master 2026-09-11 07:31:33 +00:00
Member
No description provided.
flowey added 1 commit 2026-09-10 23:31:15 +00:00
frcc experiments
diff-pr / dix (pull_request) Successful in 6m43s
flake-check / flake-check (pull_request) Successful in 4m42s
lint / lint (pull_request) Failing after 1m47s
096908ac39
flowey force-pushed frcc-kvm from 64486e43f7 to 096908ac39 2026-09-10 23:31:15 +00:00 Compare

["example","server-n0"]
/nix/store/prahsm2071cyy2ldx86qagz3s37prqzd-nixos-system-example-26.11.20260810.2fcb964
/nix/store/kfx10fs1msnlpkq08hpzdxpkibxl27hb-nixos-system-server-n0-26.11.20260810.2fcb964
["example","server-n0"]
/nix/store/prahsm2071cyy2ldx86qagz3s37prqzd-nixos-system-example-26.11.20260810.2fcb964
/nix/store/p8rksg4b46nk0m44yapqfnjqm2ahhvkf-nixos-system-server-n0-26.11.20260810.2fcb964

System closure diff vs master

example

<<< /nix/store/prahsm2071cyy2ldx86qagz3s37prqzd-nixos-system-example-26.11.20260810.2fcb964
>>> /nix/store/prahsm2071cyy2ldx86qagz3s37prqzd-nixos-system-example-26.11.20260810.2fcb964

PATHS: 816 -> 816 (+0, -0)
SIZE: 3.29 GiB -> 3.29 GiB
DIFF: 0 bytes

server-n0

<<< /nix/store/kfx10fs1msnlpkq08hpzdxpkibxl27hb-nixos-system-server-n0-26.11.20260810.2fcb964
>>> /nix/store/p8rksg4b46nk0m44yapqfnjqm2ahhvkf-nixos-system-server-n0-26.11.20260810.2fcb964

CHANGED
[C.] libwebp                  1.6.0 -> 1.6.0 ×2, +1.70 MiB
[C*] system-path              +49.0 KiB
[C.] unit-nix-gc.service      <none> -> <none> ×2
[C.] unit-script-nix-gc-start <none> -> <none> ×2
[C*] users-groups.json        <none> ×13 -> <none> ×14, +18.2 KiB

ADDED
[A.] SDL2_image               2.8.12, +210 KiB
[A.] abseil-cpp               20260107.1, +3.35 MiB
[A.] appstream                1.1.3, +6.54 MiB
[A.] cdparanoia-iii           10.2, +367 KiB
[A.] chromaprint              1.6.0, +181 KiB
[A.] cjson                    1.7.19, +72.3 KiB
[A.] dav1d                    1.5.3, +2.52 MiB
[A.] faad2                    2.11.2, +983 KiB
[A.] fdk-aac                  2.0.3, +1.55 MiB
[A.] ffado                    2.4.9, +3.11 MiB
[A.] ffmpeg-headless          8.1.2-data, 8.1.2-lib, +33.7 MiB
[A.] fftw-double              3.3.11, +3.86 MiB
[A.] fftw-single              3.3.11, +4.08 MiB
[A.] flac                     1.5.0, +756 KiB
[A.] flite                    2.2-lib, +60.4 MiB
[A.] fluidsynth               2.5.6, +807 KiB
[A.] freepats                 20060219, +31.8 MiB
[A.] game-music-emu           0.6.5, +1.23 MiB
[A.] gfxstream                0.1.2, +7.93 MiB
[A.] glibmm                   2.66.8, +4.17 MiB
[A.] gnum4                    1.4.21, +1.06 MiB
[A.] graphene                 1.10.8, +183 KiB
[A.] gsm                      1.0.24, +216 KiB
[A.] gssdp                    1.6.6, +120 KiB
[A.] gst-plugins-bad          1.28.5, +16.9 MiB
[A.] gst-plugins-base         1.28.5, +8.91 MiB
[A.] gstreamer                1.28.5, +6.11 MiB
[A.] gtk4                     4.22.4, +30.4 MiB
[A.] gupnp                    1.6.10, +345 KiB
[A.] gupnp-igd                1.6.0, +50.9 KiB
[A.] hwdata                   0.409, +9.99 MiB
[A.] imath                    3.2.2, +901 KiB
[A.] lame                     3.100-lib, +349 KiB
[A.] ldacbt                   2.0.72, +98.7 KiB
[A.] libadwaita               1.9.2, +3.04 MiB
[A.] libajantv2               17.5.0, +13.2 MiB
[A.] libao                    1.2.2, +124 KiB
[A.] libaom                   3.12.1, +8.44 MiB
[A.] libass                   0.17.4, +253 KiB
[A.] libavc1394               0.5.4, +146 KiB
[A.] libbluray                1.4.1, +1.12 MiB
[A.] libbs2b                  3.1.0, +88.2 KiB
[A.] libcacard                2.8.2, +138 KiB
[A.] libcamera                0.7.0, +6.06 MiB
[A.] libcanberra              0.30, +251 KiB
[A.] libconfig                1.8.2, +407 KiB
[A.] libdc1394                2.2.7, +407 KiB
[A.] libde265                 1.1.1, +983 KiB
[A.] libdecor                 0.2.5, +199 KiB
[A.] libdrm                   2.4.134-bin, 2.4.134-dev, 2.4.134, +1.93 MiB
[A.] libdv                    1.0.0, +238 KiB
[A.] libdvdcss                1.5.0, +158 KiB
[A.] libdvdnav                6.1.1, +189 KiB
[A.] libdvdread               7.0.1, +520 KiB
[A.] libebur128               1.2.6, +54.2 KiB
[A.] libfreeaptx              0.2.2, +55.5 KiB
[A.] libfyaml                 0.9.6, +951 KiB
[A.] libgudev                 238, +73.3 KiB
[A.] libiec61883              1.2.0, +155 KiB
[A.] libjack2                 1.9.22, +421 KiB
[A.] liblc3                   1.1.3, +175 KiB
[A.] libmad                   0.15.1b, +143 KiB
[A.] libmodplug               0.8.9.0, +394 KiB
[A.] libmpg123                1.33.6, +1.09 MiB
[A.] libmysofa                1.3.4, +1.33 MiB
[A.] libnice                  0.1.23, +477 KiB
[A.] libogg                   1.3.6, +47.0 KiB
[A.] libopenmpt               0.8.7, +2.95 MiB
[A.] libopus                  1.6.1, +501 KiB
[A.] libpciaccess             0.19, +172 KiB
[A.] libpulseaudio            17.0, +4.70 MiB
[A.] libraw1394               2.1.2, +197 KiB
[A.] librist                  0.2.11, +423 KiB
[A.] librsvg                  2.62.3, +15.8 MiB
[A.] libsamplerate            0.2.2, +1.50 MiB
[A.] libsigc++                2.12.1, +42.0 KiB
[A.] libsndfile               1.2.2, +645 KiB
[A.] libsrtp                  2.8.0, +110 KiB
[A.] libssh                   0.12.1, +682 KiB
[A.] libtheora                1.2.0, +675 KiB
[A.] libva                    2.24.0, +358 KiB
[A.] libva-minimal            2.24.0, +258 KiB
[A.] libvmaf                  3.0.0, +2.65 MiB
[A.] libvorbis                1.3.7, +1.06 MiB
[A.] libvpx                   1.16.0, +8.91 MiB
[A.] libxml++                 3.2.5, +300 KiB
[A.] libxmlb                  0.3.27-lib, +236 KiB
[A.] libxscrnsaver            1.2.5, +32.9 KiB
[A.] libxv                    1.0.13, +31.4 KiB
[A.] lilv                     0.28.0, +382 KiB
[A.] lrdf                     0.6.1, +62.8 KiB
[A.] lttng-ust                2.15.1, +1.83 MiB
[A.] mesa-libgbm              26.1.3, +58.2 KiB
[A.] mjpegtools               2.2.1-lib, +620 KiB
[A.] mpg123                   1.33.6, +1.14 MiB
[A.] neon                     0.37.1, +897 KiB
[A.] nspr                     4.39, +350 KiB
[A.] nss                      3.112.5, +4.04 MiB
[A.] ocl-icd                  2.3.5, +630 KiB
[A.] openal-soft              1.24.3, +2.84 MiB
[A.] openapv                  0.2.1.3, +720 KiB
[A.] openexr                  3.4.13, +3.72 MiB
[A.] openfec                  1.4.2.12, +204 KiB
[A.] openh264                 2.6.0, +1.28 MiB
[A.] openjpeg                 2.5.4, +1.61 MiB
[A.] opusfile                 0.12, +125 KiB
[A.] orc                      0.4.42, +1.22 MiB
[A.] pipewire                 1.6.8, +16.6 MiB
[A.] qemu-host-cpu-only       11.0.3-doc, 11.0.3-ga, 11.0.3, +422 MiB
[A.] raptor2                  2.0.16, +625 KiB
[A.] roc-toolkit              0.4.0, +7.88 MiB
[A.] rtmpdump                 2.6, +488 KiB
[A.] rutabaga_gfx             0.1.6, +10.6 MiB
[A.] sbc                      2.2, +277 KiB
[A.] sdl2-compat              2.32.70, +920 KiB
[A.] sdl3                     3.4.12-lib, +4.67 MiB
[A.] serd                     0.32.10, +137 KiB
[A.] sord                     0.16.22, +99.5 KiB
[A.] soundtouch               2.4.1, +432 KiB
[A.] sox                      14.4.2-unstable-2021-05-09-lib, +702 KiB
[A.] soxr                     0.1.3, +298 KiB
[A.] spandsp                  0.0.6, +984 KiB
[A.] speex                    1.2.1, +134 KiB
[A.] speexdsp                 1.2.1, +78.5 KiB
[A.] spice                    0.16.0, +1.54 MiB
[A.] sratom                   0.6.22, +47.2 KiB
[A.] srt                      1.5.6, +6.99 MiB
[A.] svt-av1                  4.1.0, +7.33 MiB
[A.] tremor-unstable          2018-03-16, +133 KiB
[A.] unit-nix-gc.timer        <none>
[A.] usbredir                 0.15.0, +133 KiB
[A.] v4l-utils                1.32.0, +782 KiB
[A.] vid.stab                 1.1.1-unstable-2025-08-21, +553 KiB
[A.] virglrenderer            1.3.0, +3.91 MiB
[A.] vo-aacenc                0.1.3, +155 KiB
[A.] vte                      0.84.1, +1.83 MiB
[A.] vulkan-loader            1.4.350.0, +702 KiB
[A.] wavpack                  5.9.0, +547 KiB
[A.] webrtc-audio-processing  1.3, 2.1, +2.83 MiB
[A.] wildmidi                 0.4.6, +236 KiB
[A.] wildmidi.cfg             <none>
[A.] x264                     0-unstable-2025-01-03-lib, +2.35 MiB
[A.] x265                     4.2, +23.9 MiB
[A.] xorgproto                2025.1, +1.64 MiB
[A.] xvidcore                 1.3.7, +787 KiB
[A.] zenity                   4.2.2, +8.88 MiB
[A.] zimg                     3.0.6, +763 KiB
[A.] zint                     2.16.0-lib, +1014 KiB
[A.] zix                      0.8.2, +145 KiB
[A.] zvbi                     0.2.44, +1.04 MiB
[A.] zxing-cpp                3.0.2, +1.30 MiB

PATHS: 2150 -> 2311 (+191, -30)
SIZE: 9.77 GiB -> 10.6 GiB
DIFF: +888 MiB

["example","server-n0"]
/nix/store/xqjyw5hlcl26mrgpfd0n75ps16j37iaf-inspect-example.json
/nix/store/lv60zd4xkwzlcz5h668fs7yxzkqb4nm1-inspect-server-n0.json
["example","server-n0"]
/nix/store/xqjyw5hlcl26mrgpfd0n75ps16j37iaf-inspect-example.json
/nix/store/f0vkg259dzxhxxmyl9ncj035c4agr5dl-inspect-server-n0.json

Inspection diff vs master

server-n0

@@ dependencies @@
+ edges:
+   - from: ci-runner:timers.target
+     kind: wants
+     to: ci-runner:nix-gc.timer
@@ units @@
  @host.container@ssh-generic.service.script:
@@ -119,7 +119,7 @@
   --setenv HOST_PORT="${HOST_PORT-}" \
   --setenv PATH="$PATH" \
    \
-   \
+  --capability="CAP_NET_ADMIN,CAP_MKNOD" \
    \
   ${EXTRA_NSPAWN_FLAGS-} \
   container-init "${SYSTEM_PATH:-/nix/var/nix/profiles/system}/init"
+ @host.container@ssh-generic.service.serviceConfig.DeviceAllow:
+   - /dev/kvm rw
+ @host.container@ssh-generic.service.serviceConfig.DeviceAllow:
+   - /dev/vhost-net rw
+ @host.container@ssh-generic.service.serviceConfig.DeviceAllow:
+   - /dev/net/tun rwm
- ci-runner.nix-gc.service.script: exec nix-2.34.8/bin/nix-collect-garbage 
+ ci-runner.nix-gc.service.script: exec nix-2.34.8/bin/nix-collect-garbage --delete-older-than 14d
+ ci-runner.nix-gc.timer:
+   description: 
+   enable: true
+   name: nix-gc.timer
+   timerConfig:
+     OnCalendar:
+       - daily
+     Persistent: true
+     RandomizedDelaySec: 0
+   unitConfig: {}
+   wantedBy:
+     - timers.target
@@ users @@
+ ssh-generic.groups.kvm.members:
+   - runner
+ ssh-generic.users.runner.extraGroups:
+   - kvm
<!-- dix-diff --> ["example","server-n0"] /nix/store/prahsm2071cyy2ldx86qagz3s37prqzd-nixos-system-example-26.11.20260810.2fcb964 /nix/store/kfx10fs1msnlpkq08hpzdxpkibxl27hb-nixos-system-server-n0-26.11.20260810.2fcb964 ["example","server-n0"] /nix/store/prahsm2071cyy2ldx86qagz3s37prqzd-nixos-system-example-26.11.20260810.2fcb964 /nix/store/p8rksg4b46nk0m44yapqfnjqm2ahhvkf-nixos-system-server-n0-26.11.20260810.2fcb964 ### System closure diff vs `master` ## example ``` <<< /nix/store/prahsm2071cyy2ldx86qagz3s37prqzd-nixos-system-example-26.11.20260810.2fcb964 >>> /nix/store/prahsm2071cyy2ldx86qagz3s37prqzd-nixos-system-example-26.11.20260810.2fcb964 PATHS: 816 -> 816 (+0, -0) SIZE: 3.29 GiB -> 3.29 GiB DIFF: 0 bytes ``` ## server-n0 ``` <<< /nix/store/kfx10fs1msnlpkq08hpzdxpkibxl27hb-nixos-system-server-n0-26.11.20260810.2fcb964 >>> /nix/store/p8rksg4b46nk0m44yapqfnjqm2ahhvkf-nixos-system-server-n0-26.11.20260810.2fcb964 CHANGED [C.] libwebp 1.6.0 -> 1.6.0 ×2, +1.70 MiB [C*] system-path +49.0 KiB [C.] unit-nix-gc.service <none> -> <none> ×2 [C.] unit-script-nix-gc-start <none> -> <none> ×2 [C*] users-groups.json <none> ×13 -> <none> ×14, +18.2 KiB ADDED [A.] SDL2_image 2.8.12, +210 KiB [A.] abseil-cpp 20260107.1, +3.35 MiB [A.] appstream 1.1.3, +6.54 MiB [A.] cdparanoia-iii 10.2, +367 KiB [A.] chromaprint 1.6.0, +181 KiB [A.] cjson 1.7.19, +72.3 KiB [A.] dav1d 1.5.3, +2.52 MiB [A.] faad2 2.11.2, +983 KiB [A.] fdk-aac 2.0.3, +1.55 MiB [A.] ffado 2.4.9, +3.11 MiB [A.] ffmpeg-headless 8.1.2-data, 8.1.2-lib, +33.7 MiB [A.] fftw-double 3.3.11, +3.86 MiB [A.] fftw-single 3.3.11, +4.08 MiB [A.] flac 1.5.0, +756 KiB [A.] flite 2.2-lib, +60.4 MiB [A.] fluidsynth 2.5.6, +807 KiB [A.] freepats 20060219, +31.8 MiB [A.] game-music-emu 0.6.5, +1.23 MiB [A.] gfxstream 0.1.2, +7.93 MiB [A.] glibmm 2.66.8, +4.17 MiB [A.] gnum4 1.4.21, +1.06 MiB [A.] graphene 1.10.8, +183 KiB [A.] gsm 1.0.24, +216 KiB [A.] gssdp 1.6.6, +120 KiB [A.] gst-plugins-bad 1.28.5, +16.9 MiB [A.] gst-plugins-base 1.28.5, +8.91 MiB [A.] gstreamer 1.28.5, +6.11 MiB [A.] gtk4 4.22.4, +30.4 MiB [A.] gupnp 1.6.10, +345 KiB [A.] gupnp-igd 1.6.0, +50.9 KiB [A.] hwdata 0.409, +9.99 MiB [A.] imath 3.2.2, +901 KiB [A.] lame 3.100-lib, +349 KiB [A.] ldacbt 2.0.72, +98.7 KiB [A.] libadwaita 1.9.2, +3.04 MiB [A.] libajantv2 17.5.0, +13.2 MiB [A.] libao 1.2.2, +124 KiB [A.] libaom 3.12.1, +8.44 MiB [A.] libass 0.17.4, +253 KiB [A.] libavc1394 0.5.4, +146 KiB [A.] libbluray 1.4.1, +1.12 MiB [A.] libbs2b 3.1.0, +88.2 KiB [A.] libcacard 2.8.2, +138 KiB [A.] libcamera 0.7.0, +6.06 MiB [A.] libcanberra 0.30, +251 KiB [A.] libconfig 1.8.2, +407 KiB [A.] libdc1394 2.2.7, +407 KiB [A.] libde265 1.1.1, +983 KiB [A.] libdecor 0.2.5, +199 KiB [A.] libdrm 2.4.134-bin, 2.4.134-dev, 2.4.134, +1.93 MiB [A.] libdv 1.0.0, +238 KiB [A.] libdvdcss 1.5.0, +158 KiB [A.] libdvdnav 6.1.1, +189 KiB [A.] libdvdread 7.0.1, +520 KiB [A.] libebur128 1.2.6, +54.2 KiB [A.] libfreeaptx 0.2.2, +55.5 KiB [A.] libfyaml 0.9.6, +951 KiB [A.] libgudev 238, +73.3 KiB [A.] libiec61883 1.2.0, +155 KiB [A.] libjack2 1.9.22, +421 KiB [A.] liblc3 1.1.3, +175 KiB [A.] libmad 0.15.1b, +143 KiB [A.] libmodplug 0.8.9.0, +394 KiB [A.] libmpg123 1.33.6, +1.09 MiB [A.] libmysofa 1.3.4, +1.33 MiB [A.] libnice 0.1.23, +477 KiB [A.] libogg 1.3.6, +47.0 KiB [A.] libopenmpt 0.8.7, +2.95 MiB [A.] libopus 1.6.1, +501 KiB [A.] libpciaccess 0.19, +172 KiB [A.] libpulseaudio 17.0, +4.70 MiB [A.] libraw1394 2.1.2, +197 KiB [A.] librist 0.2.11, +423 KiB [A.] librsvg 2.62.3, +15.8 MiB [A.] libsamplerate 0.2.2, +1.50 MiB [A.] libsigc++ 2.12.1, +42.0 KiB [A.] libsndfile 1.2.2, +645 KiB [A.] libsrtp 2.8.0, +110 KiB [A.] libssh 0.12.1, +682 KiB [A.] libtheora 1.2.0, +675 KiB [A.] libva 2.24.0, +358 KiB [A.] libva-minimal 2.24.0, +258 KiB [A.] libvmaf 3.0.0, +2.65 MiB [A.] libvorbis 1.3.7, +1.06 MiB [A.] libvpx 1.16.0, +8.91 MiB [A.] libxml++ 3.2.5, +300 KiB [A.] libxmlb 0.3.27-lib, +236 KiB [A.] libxscrnsaver 1.2.5, +32.9 KiB [A.] libxv 1.0.13, +31.4 KiB [A.] lilv 0.28.0, +382 KiB [A.] lrdf 0.6.1, +62.8 KiB [A.] lttng-ust 2.15.1, +1.83 MiB [A.] mesa-libgbm 26.1.3, +58.2 KiB [A.] mjpegtools 2.2.1-lib, +620 KiB [A.] mpg123 1.33.6, +1.14 MiB [A.] neon 0.37.1, +897 KiB [A.] nspr 4.39, +350 KiB [A.] nss 3.112.5, +4.04 MiB [A.] ocl-icd 2.3.5, +630 KiB [A.] openal-soft 1.24.3, +2.84 MiB [A.] openapv 0.2.1.3, +720 KiB [A.] openexr 3.4.13, +3.72 MiB [A.] openfec 1.4.2.12, +204 KiB [A.] openh264 2.6.0, +1.28 MiB [A.] openjpeg 2.5.4, +1.61 MiB [A.] opusfile 0.12, +125 KiB [A.] orc 0.4.42, +1.22 MiB [A.] pipewire 1.6.8, +16.6 MiB [A.] qemu-host-cpu-only 11.0.3-doc, 11.0.3-ga, 11.0.3, +422 MiB [A.] raptor2 2.0.16, +625 KiB [A.] roc-toolkit 0.4.0, +7.88 MiB [A.] rtmpdump 2.6, +488 KiB [A.] rutabaga_gfx 0.1.6, +10.6 MiB [A.] sbc 2.2, +277 KiB [A.] sdl2-compat 2.32.70, +920 KiB [A.] sdl3 3.4.12-lib, +4.67 MiB [A.] serd 0.32.10, +137 KiB [A.] sord 0.16.22, +99.5 KiB [A.] soundtouch 2.4.1, +432 KiB [A.] sox 14.4.2-unstable-2021-05-09-lib, +702 KiB [A.] soxr 0.1.3, +298 KiB [A.] spandsp 0.0.6, +984 KiB [A.] speex 1.2.1, +134 KiB [A.] speexdsp 1.2.1, +78.5 KiB [A.] spice 0.16.0, +1.54 MiB [A.] sratom 0.6.22, +47.2 KiB [A.] srt 1.5.6, +6.99 MiB [A.] svt-av1 4.1.0, +7.33 MiB [A.] tremor-unstable 2018-03-16, +133 KiB [A.] unit-nix-gc.timer <none> [A.] usbredir 0.15.0, +133 KiB [A.] v4l-utils 1.32.0, +782 KiB [A.] vid.stab 1.1.1-unstable-2025-08-21, +553 KiB [A.] virglrenderer 1.3.0, +3.91 MiB [A.] vo-aacenc 0.1.3, +155 KiB [A.] vte 0.84.1, +1.83 MiB [A.] vulkan-loader 1.4.350.0, +702 KiB [A.] wavpack 5.9.0, +547 KiB [A.] webrtc-audio-processing 1.3, 2.1, +2.83 MiB [A.] wildmidi 0.4.6, +236 KiB [A.] wildmidi.cfg <none> [A.] x264 0-unstable-2025-01-03-lib, +2.35 MiB [A.] x265 4.2, +23.9 MiB [A.] xorgproto 2025.1, +1.64 MiB [A.] xvidcore 1.3.7, +787 KiB [A.] zenity 4.2.2, +8.88 MiB [A.] zimg 3.0.6, +763 KiB [A.] zint 2.16.0-lib, +1014 KiB [A.] zix 0.8.2, +145 KiB [A.] zvbi 0.2.44, +1.04 MiB [A.] zxing-cpp 3.0.2, +1.30 MiB PATHS: 2150 -> 2311 (+191, -30) SIZE: 9.77 GiB -> 10.6 GiB DIFF: +888 MiB ``` ["example","server-n0"] /nix/store/xqjyw5hlcl26mrgpfd0n75ps16j37iaf-inspect-example.json /nix/store/lv60zd4xkwzlcz5h668fs7yxzkqb4nm1-inspect-server-n0.json ["example","server-n0"] /nix/store/xqjyw5hlcl26mrgpfd0n75ps16j37iaf-inspect-example.json /nix/store/f0vkg259dzxhxxmyl9ncj035c4agr5dl-inspect-server-n0.json ### Inspection diff vs `master` ## server-n0 ```diff @@ dependencies @@ + edges: + - from: ci-runner:timers.target + kind: wants + to: ci-runner:nix-gc.timer @@ units @@ @host.container@ssh-generic.service.script: @@ -119,7 +119,7 @@ --setenv HOST_PORT="${HOST_PORT-}" \ --setenv PATH="$PATH" \ \ - \ + --capability="CAP_NET_ADMIN,CAP_MKNOD" \ \ ${EXTRA_NSPAWN_FLAGS-} \ container-init "${SYSTEM_PATH:-/nix/var/nix/profiles/system}/init" + @host.container@ssh-generic.service.serviceConfig.DeviceAllow: + - /dev/kvm rw + @host.container@ssh-generic.service.serviceConfig.DeviceAllow: + - /dev/vhost-net rw + @host.container@ssh-generic.service.serviceConfig.DeviceAllow: + - /dev/net/tun rwm - ci-runner.nix-gc.service.script: exec nix-2.34.8/bin/nix-collect-garbage + ci-runner.nix-gc.service.script: exec nix-2.34.8/bin/nix-collect-garbage --delete-older-than 14d + ci-runner.nix-gc.timer: + description: + enable: true + name: nix-gc.timer + timerConfig: + OnCalendar: + - daily + Persistent: true + RandomizedDelaySec: 0 + unitConfig: {} + wantedBy: + - timers.target @@ users @@ + ssh-generic.groups.kvm.members: + - runner + ssh-generic.users.runner.extraGroups: + - kvm ```
flowey added 1 commit 2026-09-11 00:31:00 +00:00
Merge branch 'master' into frcc-kvm
diff-pr / dix (pull_request) Successful in 18m18s
flake-check / flake-check (pull_request) Successful in 4m40s
lint / lint (pull_request) Failing after 1m57s
06ed76e5ab
@@ -67,3 +68,3 @@
inherit net resources;
svc.autoStart = true;
isolation.nixDaemon = nixDaemon;
isolation = { nixDaemon = nixDaemon; } // isolation;

[nixfmt] reported by reviewdog 🐶

      isolation = {
        nixDaemon = nixDaemon;
      }
      // isolation;
**[nixfmt]** <sub>reported by [reviewdog](https://github.com/reviewdog/reviewdog) :dog:</sub><br> ```suggestion isolation = { nixDaemon = nixDaemon; } // isolation; ``` <!-- __reviewdog__:ChA4OGMzNjlhZWQxOGM1ZThiEgZuaXhmbXQ= -->
@@ -67,3 +68,3 @@
inherit net resources;
svc.autoStart = true;
isolation.nixDaemon = nixDaemon;
isolation = { nixDaemon = nixDaemon; } // isolation;

[statix] reported by reviewdog 🐶
This assignment is better written with inherit

**[statix]** <sub>reported by [reviewdog](https://github.com/reviewdog/reviewdog) :dog:</sub><br>This assignment is better written with `inherit` <!-- __reviewdog__:ChAzY2Y5NGZhZmUxYmU3NWQ4EgZzdGF0aXg= -->
@@ -72,2 +73,4 @@
miscProperties = self._sshpiperRegister routingInfo;
};
kvmTrait = {
Owner

Avoid giving people wheel, there should be a way to add the user to a group to permit kvm use without root. Trait is good for reuse.

Avoid giving people wheel, there should be a way to add the user to a group to permit kvm use without root. Trait is good for reuse.
autumn added 3 commits 2026-09-11 06:49:04 +00:00
frcc experiments
diff-pr / dix (pull_request) Canceled after 0s
flake-check / flake-check (pull_request) Canceled after 0s
lint / lint (pull_request) Canceled after 0s
33ccab9ad4
meow
diff-pr / dix (pull_request) Successful in 6m46s
flake-check / flake-check (pull_request) Successful in 4m40s
lint / lint (pull_request) Failing after 1m54s
bb79660386
@@ -67,3 +68,3 @@
inherit net resources;
svc.autoStart = true;
isolation.nixDaemon = nixDaemon;
isolation = { inherit nixDaemon; } // isolation;

[nixfmt] reported by reviewdog 🐶

      isolation = {
        inherit nixDaemon;
      }
      // isolation;
**[nixfmt]** <sub>reported by [reviewdog](https://github.com/reviewdog/reviewdog) :dog:</sub><br> ```suggestion isolation = { inherit nixDaemon; } // isolation; ``` <!-- __reviewdog__:ChAyNTMzZTUxZTcyMWVmNTNhEgZuaXhmbXQ= -->
autumn added 1 commit 2026-09-11 07:08:12 +00:00
meow2
diff-pr / dix (pull_request) Successful in 6m20s
flake-check / flake-check (pull_request) Successful in 52s
lint / lint (pull_request) Successful in 1m50s
3605fc36ef
flowey merged commit 1447febbaf into master 2026-09-11 07:31:33 +00:00
flowey deleted branch frcc-kvm 2026-09-11 07:31:33 +00:00
Sign in to join this conversation.
No Reviewers
3 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: server/server-config#1