commit 2030a91f58cde5a8c8b8db339da8af9dfe366b04 · pyrox.dev/nixpkgs

+59 -28
nixos/modules/services/monitoring/cadvisor.nix
···

       54
       54
        
             storageDriverPassword = mkOption {

     

       55
       55
        
               default = "root";

     

       56
       56
        
               type = types.str;

     

       57
       57
       -
               description = "Cadvisor storage driver password.";

     

       57
       57
       +
               description = ''

     

       58
       58
       +
                 Cadvisor storage driver password.

     

       59
       59
       +
       

     

       60
       60
       +
                 Warning: this password is stored in the world-readable Nix store. It's

     

       61
       61
       +
                 recommended to use the <option>storageDriverPasswordFile</option> option

     

       62
       62
       +
                 since that gives you control over the security of the password.

     

       63
       63
       +
                 <option>storageDriverPasswordFile</option> also takes precedence over <option>storageDriverPassword</option>.

     

       64
       64
       +
               '';

     

       65
       65
       +
             };

     

       66
       66
       +
       

     

       67
       67
       +
             storageDriverPasswordFile = mkOption {

     

       68
       68
       +
               type = types.str;

     

       69
       69
       +
               description = ''

     

       70
       70
       +
                 File that contains the cadvisor storage driver password.

     

       71
       71
       +
       

     

       72
       72
       +
                 <option>storageDriverPasswordFile</option> takes precedence over <option>storageDriverPassword</option>

     

       73
       73
       +
       

     

       74
       74
       +
                 Warning: when <option>storageDriverPassword</option> is non-empty this defaults to a file in the

     

       75
       75
       +
                 world-readable Nix store that contains the value of <option>storageDriverPassword</option>.

     

       76
       76
       +
       

     

       77
       77
       +
                 It's recommended to override this with a path not in the Nix store.

     

       78
       78
       +
                 Tip: use <link xlink:href='https://nixos.org/nixops/manual/#idm140737318306400'>nixops key management</link>

     

       79
       79
       +
               '';

     

       58
       80
        
             };

     

       59
       81
        
       

     

       60
       82
        
             storageDriverSecure = mkOption {

     
···

       65
       87
        
           };

     

       66
       88
        
         };

     

       67
       89
        
       

     

       68
       68
       -
         config = mkIf cfg.enable {

     

       69
       69
       -
           systemd.services.cadvisor = {

     

       70
       70
       -
             wantedBy = [ "multi-user.target" ];

     

       71
       71
       -
             after = [ "network.target" "docker.service" "influxdb.service" ];

     

       90
       90
       +
         config = mkMerge [

     

       91
       91
       +
           { services.cadvisor.storageDriverPasswordFile = mkIf (cfg.storageDriverPassword != "") (

     

       92
       92
       +
               mkDefault (toString (pkgs.writeTextFile {

     

       93
       93
       +
                 name = "cadvisor-storage-driver-password";

     

       94
       94
       +
                 text = cfg.storageDriverPassword;

     

       95
       95
       +
               }))

     

       96
       96
       +
             );

     

       97
       97
       +
           }

     

       72
       98
        
       

     

       73
       73
       -
             postStart = mkBefore ''

     

       74
       74
       -
               until ${pkgs.curl.bin}/bin/curl -s -o /dev/null 'http://${cfg.listenAddress}:${toString cfg.port}/containers/'; do

     

       75
       75
       -
                 sleep 1;

     

       76
       76
       -
               done

     

       77
       77
       -
             '';

     

       99
       99
       +
           (mkIf cfg.enable {

     

       100
       100
       +
             systemd.services.cadvisor = {

     

       101
       101
       +
               wantedBy = [ "multi-user.target" ];

     

       102
       102
       +
               after = [ "network.target" "docker.service" "influxdb.service" ];

     

       103
       103
       +
       

     

       104
       104
       +
               postStart = mkBefore ''

     

       105
       105
       +
                 until ${pkgs.curl.bin}/bin/curl -s -o /dev/null 'http://${cfg.listenAddress}:${toString cfg.port}/containers/'; do

     

       106
       106
       +
                   sleep 1;

     

       107
       107
       +
                 done

     

       108
       108
       +
               '';

     

       78
       109
        
       

     

       79
       79
       -
             serviceConfig = {

     

       80
       80
       -
               ExecStart = ''${pkgs.cadvisor}/bin/cadvisor \

     

       81
       81
       -
                 -logtostderr=true \

     

       82
       82
       -
                 -listen_ip=${cfg.listenAddress} \

     

       83
       83
       -
                 -port=${toString cfg.port} \

     

       84
       84
       -
                 ${optionalString (cfg.storageDriver != null) ''

     

       85
       85
       -
                   -storage_driver ${cfg.storageDriver} \

     

       86
       86
       -
                   -storage_driver_user ${cfg.storageDriverHost} \

     

       87
       87
       -
                   -storage_driver_db ${cfg.storageDriverDb} \

     

       88
       88
       -
                   -storage_driver_user ${cfg.storageDriverUser} \

     

       89
       89
       -
                   -storage_driver_password ${cfg.storageDriverPassword} \

     

       90
       90
       -
                   ${optionalString cfg.storageDriverSecure "-storage_driver_secure"}

     

       91
       91
       -
                 ''}

     

       110
       110
       +
               script = ''

     

       111
       111
       +
                 exec ${pkgs.cadvisor}/bin/cadvisor \

     

       112
       112
       +
                   -logtostderr=true \

     

       113
       113
       +
                   -listen_ip="${cfg.listenAddress}" \

     

       114
       114
       +
                   -port="${toString cfg.port}" \

     

       115
       115
       +
                   ${optionalString (cfg.storageDriver != null) ''

     

       116
       116
       +
                     -storage_driver "${cfg.storageDriver}" \

     

       117
       117
       +
                     -storage_driver_user "${cfg.storageDriverHost}" \

     

       118
       118
       +
                     -storage_driver_db "${cfg.storageDriverDb}" \

     

       119
       119
       +
                     -storage_driver_user "${cfg.storageDriverUser}" \

     

       120
       120
       +
                     -storage_driver_password "$(cat "${cfg.storageDriverPasswordFile}")" \

     

       121
       121
       +
                     ${optionalString cfg.storageDriverSecure "-storage_driver_secure"}

     

       122
       122
       +
                   ''}

     

       92
       123
        
               '';

     

       93
       93
       -
               TimeoutStartSec=300;

     

       94
       94
       -
             };

     

       95
       95
       -
           };

     

       96
       124
        
       

     

       97
       97
       -
           virtualisation.docker.enable = mkDefault true;

     

       98
       98
       -
         };

     

       125
       125
       +
               serviceConfig.TimeoutStartSec=300;

     

       126
       126
       +
             };

     

       127
       127
       +
             virtualisation.docker.enable = mkDefault true;

     

       128
       128
       +
           })

     

       129
       129
       +
         ];

     

       99
       130
        
       }