Skip to content

Hercules CI's Cachix config #22

@airone01

Description

@airone01

HerculesCI on cetus does not find airone01 cache

Cache not found airone01

This is probably because the configuration of this snippet

"hercules-ci-agent-binary-caches.json" = {
content = config.sops.placeholder."binaryCaches";
owner = config.users.users.hercules-ci-agent.name;
group = config.users.users.hercules-ci-agent.group;
mode = "0400";
};

Here some custom JSON should probably be used instead for clarity instead of putting the whole JSON file in a secret.

From https://github.com/Mic92/sops-nix?tab=readme-ov-file#templates:

Create a template for your configuration file and utilize the placeholder where you'd like the secret to be inserted. During the activation phase, sops-nix will substitute the placeholder with the actual secret content.

{
  sops.templates."your-config-with-secrets.toml".content = ''
    password = "${config.sops.placeholder.your-secret}"
  '';
}

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions