hackclub/burrow
1
0
Fork 0
Code Pull requests Releases Packages Activity Actions

Use repo-built Forgejo Namespace services
Some checks failed
Cache: Publish Nix / Publish Nix Cache (push) Failing after 26s
Details
Build Rust / Cargo Test (push) Successful in 5m50s
Details
Build Site / Next.js Build (push) Failing after 5s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details

Browse source
This commit is contained in:
Conrad Kramer 2026-06-07 08:48:05 -07:00
parent 6b9065008d
commit de32d8390e
2 changed files with 5 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
evolution/proposals/BEP-0009-release-infrastructure-and-store-upload-pipeline.md
View file

@ -115,7 +115,9 @@ The same change also makes the forge itself the release authority: release tags
config points at Linux state paths such as `/var/lib/forgejo-runner`. config points at Linux state paths such as `/var/lib/forgejo-runner`.
- Run forge Namespace services with the repo-owned `nsc` package and keep it - Run forge Namespace services with the repo-owned `nsc` package and keep it
current with the token format expected by Namespace. `nsc 0.0.520` is the current with the token format expected by Namespace. `nsc 0.0.520` is the
first required baseline for revokable token-file auth. first required baseline for revokable token-file auth. The dispatcher and
autoscaler systemd units must also use the repo-built packages so runner fixes
ship with Burrow deploys instead of staying pinned to the module input.
- Render the sealed Namespace runner token with `nsc token create --token_file` - Render the sealed Namespace runner token with `nsc token create --token_file`
instead of `nsc auth generate-dev-token`. The dev-token output is for direct instead of `nsc auth generate-dev-token`. The dev-token output is for direct
API/registry access, while the dispatcher needs the JSON token-file format API/registry access, while the dispatcher needs the JSON token-file format

2
nixos/hosts/burrow-forge/default.nix
View file

@ -276,10 +276,12 @@ in
nscPackage = self.packages.${pkgs.stdenv.hostPlatform.system}.nsc; nscPackage = self.packages.${pkgs.stdenv.hostPlatform.system}.nsc;
nscTokenFile = config.age.secrets.burrowForgejoNscToken.path; nscTokenFile = config.age.secrets.burrowForgejoNscToken.path;
dispatcher = { dispatcher = {
package = self.packages.${pkgs.stdenv.hostPlatform.system}.forgejo-nsc-dispatcher;
configFile = config.age.secrets.burrowForgejoNscDispatcherConfig.path; configFile = config.age.secrets.burrowForgejoNscDispatcherConfig.path;
}; };
autoscaler = { autoscaler = {
enable = true; enable = true;
package = self.packages.${pkgs.stdenv.hostPlatform.system}.forgejo-nsc-autoscaler;
configFile = config.age.secrets.burrowForgejoNscAutoscalerConfig.path; configFile = config.age.secrets.burrowForgejoNscAutoscalerConfig.path;
}; };
}; };