Skip to content

feat(dogfood): install nix package manager #5308

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 19 commits into from
Jan 26, 2023
Merged

feat(dogfood): install nix package manager #5308

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
19 commits
Select commit Hold shift + click to select a range
78e395e
feat(dogfood): install nix package manager
ghuntley Dec 6, 2022
f166695
Update dogfood/Dockerfile
ghuntley Dec 6, 2022
ee4f7b6
enable unfree and source in bashprofile
ghuntley Dec 6, 2022
22b2535
style/linting adjustments.
ghuntley Dec 6, 2022
8ac9021
add comments
ghuntley Dec 6, 2022
7984ed7
ensure coder user can write to /nix
ghuntley Dec 6, 2022
41d1aef
chown coder:coder /nix
ghuntley Dec 8, 2022
25b1ac3
add further comments
ghuntley Dec 8, 2022
0872948
🎶 https://www.youtube.com/watch?v=oRdxUFDoQe0
ghuntley Dec 12, 2022
a516413
hopefully the final review iteration, thanks for your help!
ghuntley Dec 12, 2022
68402a9
arg not export
ghuntley Dec 12, 2022
fb1eac8
Update dogfood/Dockerfile
ghuntley Dec 22, 2022
ec10dc1
line now exists in main.tf
ghuntley Dec 22, 2022
fd882b2
remove whitespace
ghuntley Dec 22, 2022
ae0f24b
Merge branch 'main' into ghuntley-patch-2
kylecarbs Jan 17, 2023
4160ad4
Apply @mafredri's suggestion
kylecarbs Jan 17, 2023
9417529
Fix user
mafredri Jan 17, 2023
d89f634
Match indent
mafredri Jan 17, 2023
e16b97c
Merge branch 'main' into ghuntley-patch-2
mafredri Jan 26, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 20 additions & 1 deletion dogfood/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -316,7 +316,24 @@ COPY --from=go /tmp/bin /usr/local/bin
COPY --from=rust-utils /tmp/bin /usr/local/bin
COPY --from=proto /tmp/bin /usr/local/bin

USER coder
# Configure Nix without sandboxing
# - https://github.com/NixOS/nix/issues/2636#issuecomment-455302745
# - https://nixos.org/manual/nix/stable/installation/multi-user.html#setting-up-the-build-users
RUN addgroup --system nixbld \
&& adduser coder nixbld \
&& for i in $(seq 1 30); do useradd -ms /bin/bash nixbld$i && adduser nixbld$i nixbld; done \
&& mkdir -m 0755 /nix && chown coder:coder /nix \
&& mkdir -p /etc/nix && echo 'sandbox = false' > /etc/nix/nix.conf

# Install Nix
ARG NIX_VERSION=2.3.15
RUN cd /opt \
&& curl --silent --show-error --location \
"https://releases.nixos.org/nix/nix-${NIX_VERSION}/nix-${NIX_VERSION}-x86_64-linux.tar.xz" \
-o "nix-${NIX_VERSION}-x86_64-linux.tar.xz" \
&& tar -xf "nix-${NIX_VERSION}-x86_64-linux.tar.xz" \
&& ln -s "nix-${NIX_VERSION}-x86_64-linux" nix \
&& rm -rf "nix-${NIX_VERSION}-x86_64-linux.tar.xz"

# Ensure go bins are in the 'coder' user's path. Note that no go bins are
# installed in this docker file, as they'd be mounted over by the persistent
Expand All @@ -332,3 +349,5 @@ ENV GOPRIVATE="coder.com,cdr.dev,go.coder.com,github.com/cdr,github.com/coder"

# Increase memory allocation to NodeJS
ENV NODE_OPTIONS="--max-old-space-size=8192"

USER coder
41 changes: 41 additions & 0 deletions dogfood/main.tf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -63,10 +63,19 @@ resource "coder_agent" "dev" {
startup_script = <<EOF
#!/bin/sh
set -x

# install and start code-server
curl -fsSL https://code-server.dev/install.sh | sh -s -- --version 4.8.3
code-server --auth none --port 13337 &

sudo service docker start

# Install Nix into our bash profile so `nix-shell`, `nix-build, and `nix` are available
bash /opt/nix/install --no-daemon
if ! grep -q '. ~/.nix-profile/etc/profile.d/nix.sh' ~/.bashrc; then
echo '. ~/.nix-profile/etc/profile.d/nix.sh' >> ~/.bashrc
fi

DOTFILES_URI=${var.dotfiles_uri}
rm -f ~/.personalize.log
if [ -n "$DOTFILES_URI" ]; then
Expand Down Expand Up @@ -123,6 +132,33 @@ resource "docker_volume" "home_volume" {
}
}

resource "docker_volume" "nix_volume" {
name = "coder-${data.coder_workspace.me.id}-nix"
# Protect the volume from being deleted due to changes in attributes.
lifecycle {
ignore_changes = all
}
# Add labels in Docker to keep track of orphan resources.
labels {
label = "coder.owner"
value = data.coder_workspace.me.owner
}
labels {
label = "coder.owner_id"
value = data.coder_workspace.me.owner_id
}
labels {
label = "coder.workspace_id"
value = data.coder_workspace.me.id
}
# This field becomes outdated if the workspace is renamed but can
# be useful for debugging or cleaning out dangling volumes.
labels {
label = "coder.workspace_name_at_creation"
value = data.coder_workspace.me.name
}
}

resource "coder_metadata" "home_info" {
resource_id = docker_volume.home_volume.id
item {
Expand Down Expand Up @@ -174,6 +210,11 @@ resource "docker_container" "workspace" {
volume_name = docker_volume.home_volume.name
read_only = false
}
volumes {
container_path = "/nix"
volume_name = docker_volume.nix_volume.name
read_only = false
}
# Add labels in Docker to keep track of orphan resources.
labels {
label = "coder.owner"
Expand Down