commit 20f981de08d8bc407d0897c03b963f5aba6fda50 · pyrox.dev/nixpkgs

+1

nixos/maintainers/scripts/azure-new/.gitignore

···

       0

···

       1
       +
       azure

+30

nixos/maintainers/scripts/azure-new/README.md

···

       1
       +
       # azure

     

       2
       +
       

     

       3
       +
       ## Demo

     

       4
       +
       

     

       5
       +
       Here's a demo of this being used: https://asciinema.org/a/euXb9dIeUybE3VkstLWLbvhmp

     

       6
       +
       

     

       7
       +
       ## Usage

     

       8
       +
       

     

       9
       +
       Build and upload the image

     

       10
       +
       ```shell

     

       11
       +
       $ ./upload-image.sh ./examples/basic/image.nix

     

       12
       +
       

     

       13
       +
       ...

     

       14
       +
       + attr=azbasic

     

       15
       +
       + nix-build ./examples/basic/image.nix --out-link azure

     

       16
       +
       /nix/store/qdpzknpskzw30vba92mb24xzll1dqsmd-azure-image

     

       17
       +
       ...

     

       18
       +
       95.5 %, 0 Done, 0 Failed, 1 Pending, 0 Skipped, 1 Total, 2-sec Throughput (Mb/s): 932.9565 

     

       19
       +
       ...

     

       20
       +
       /subscriptions/aff271ee-e9be-4441-b9bb-42f5af4cbaeb/resourceGroups/nixos-images/providers/Microsoft.Compute/images/azure-image-todo-makethisbetter

     

       21
       +
       ```

     

       22
       +
       

     

       23
       +
       Take the output, boot an Azure VM:

     

       24
       +
       

     

       25
       +
       ```

     

       26
       +
       img="/subscriptions/.../..." # use output from last command

     

       27
       +
       ./boot-vm.sh "${img}"

     

       28
       +
       ...

     

       29
       +
       => booted

     

       30
       +
       ```

+36

nixos/maintainers/scripts/azure-new/boot-vm.sh

···

       1
       +
       #!/usr/bin/env bash

     

       2
       +
       set -euo pipefail

     

       3
       +
       set -x

     

       4
       +
       

     

       5
       +
       image="${1}"

     

       6
       +
       location="westus2"

     

       7
       +
       group="nixos-test-vm"

     

       8
       +
       vm_size="Standard_D2s_v3";  os_size=42;

     

       9
       +
       

     

       10
       +
       # ensure group

     

       11
       +
       az group create --location "westus2" --name "${group}"

     

       12
       +
       group_id="$(az group show --name "${group}" -o tsv --query "[id]")"

     

       13
       +
       

     

       14
       +
       # (optional) identity

     

       15
       +
       if ! az identity show -n "${group}-identity" -g "${group}" &>/dev/stderr; then

     

       16
       +
         az identity create --name "${group}-identity" --resource-group "${group}"

     

       17
       +
       fi

     

       18
       +
       

     

       19
       +
       # (optional) role assignment, to the resource group, bad but not really great alternatives

     

       20
       +
       identity_id="$(az identity show --name "${group}-identity" --resource-group "${group}" -o tsv --query "[id]")"

     

       21
       +
       principal_id="$(az identity show --name "${group}-identity" --resource-group "${group}" -o tsv --query "[principalId]")"

     

       22
       +
       until az role assignment create --assignee "${principal_id}" --role "Owner" --scope "${group_id}"; do sleep 1; done

     

       23
       +
       

     

       24
       +
       # boot vm

     

       25
       +
       az vm create \

     

       26
       +
         --name "${group}-vm" \

     

       27
       +
         --resource-group "${group}" \

     

       28
       +
         --assign-identity "${identity_id}" \

     

       29
       +
         --size "${vm_size}" \

     

       30
       +
         --os-disk-size-gb "${os_size}" \

     

       31
       +
         --image "${image}" \

     

       32
       +
         --admin-username "${USER}" \

     

       33
       +
         --location "westus2" \

     

       34
       +
         --storage-sku "Premium_LRS" \

     

       35
       +
         --ssh-key-values "$(ssh-add -L)"

     

       36
       +

+7

nixos/maintainers/scripts/azure-new/common.sh

···

       1
       +
       export group="${AZURE_RESOURCE_GROUP:-"azure"}"

     

       2
       +
       export location="${AZURE_LOCATION:-"westus2"}"

     

       3
       +
       

     

       4
       +
       img_file=$(echo azure/*.vhd)

     

       5
       +
       img_name="$(basename "${img_file}")"

     

       6
       +
       img_name="${img_name%".vhd"}"

     

       7
       +
       export img_name="${img_name//[._]/-}"

+10

nixos/maintainers/scripts/azure-new/examples/basic/image.nix

···

       1
       +
       let

     

       2
       +
         pkgs = (import <nixpkgs> {});

     

       3
       +
         machine = import "${pkgs.path}/nixos/lib/eval-config.nix" {

     

       4
       +
           system = "x86_64-linux";

     

       5
       +
           modules = [

     

       6
       +
             ({config, ...}: { imports = [ ./system.nix ]; })

     

       7
       +
           ];

     

       8
       +
         };

     

       9
       +
       in

     

       10
       +
         machine.config.system.build.azureImage

+42

nixos/maintainers/scripts/azure-new/examples/basic/system.nix

···

       1
       +
       { pkgs, modulesPath, ... }:

     

       2
       +
       

     

       3
       +
       {

     

       4
       +
         imports = [

     

       5
       +
           "${modulesPath}/virtualisation/azure-common.nix"

     

       6
       +
           "${modulesPath}/virtualisation/azure-image.nix"

     

       7
       +
         ];

     

       8
       +
       

     

       9
       +
         ##### test user ######

     

       10
       +
         users.extraGroups."cole".gid = 1000;

     

       11
       +
           users.extraUsers."cole" = {

     

       12
       +
             isNormalUser = true;

     

       13
       +
             home = "/home/cole";

     

       14
       +
             description = "Cole Mickens";

     

       15
       +
             openssh.authorizedKeys.keys = ["ssh-rsa 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 (none)"];

     

       16
       +
             #mkpasswd -m sha-512

     

       17
       +
             hashedPassword = "$6$k.vT0coFt3$BbZN9jqp6Yw75v9H/wgFs9MZfd5Ycsfthzt3Jdw8G93YhaiFjkmpY5vCvJ.HYtw0PZOye6N9tBjNS698tM3i/1";

     

       18
       +
             uid = 1000;

     

       19
       +
             group = "cole";

     

       20
       +
           };

     

       21
       +
           nix.trustedUsers = [ "cole" ];

     

       22
       +
         ##### test user ######

     

       23
       +
       

     

       24
       +
         virtualisation.azureImage.diskSize = 2500;

     

       25
       +
       

     

       26
       +
         system.stateVersion = "20.03";

     

       27
       +
         networking.hostName = "azbuildworld";

     

       28
       +
         boot.kernelPackages = pkgs.linuxPackages_latest;

     

       29
       +
       

     

       30
       +
         #environment.noXlibs = true;

     

       31
       +
         #documentation.enable = false;

     

       32
       +
         #documentation.nixos.enable = false;

     

       33
       +
       

     

       34
       +
         services.openssh.passwordAuthentication = false;

     

       35
       +
         programs.mosh.enable = true;

     

       36
       +
       

     

       37
       +
         security.sudo.wheelNeedsPassword = false;

     

       38
       +
           

     

       39
       +
         environment.systemPackages = with pkgs; [

     

       40
       +
           git neovim jq file htop ripgrep cachix wget curl tmux zsh

     

       41
       +
         ];

     

       42
       +
       }

+13

nixos/maintainers/scripts/azure-new/shell.nix

···

       1
       +
       with (import ../../../../default.nix {});

     

       2
       +
       stdenv.mkDerivation {

     

       3
       +
         name = "nixcfg-azure-devenv";

     

       4
       +
       

     

       5
       +
         nativeBuildInputs = [

     

       6
       +
           azure-cli

     

       7
       +
           bash

     

       8
       +
           cacert

     

       9
       +
           azure-storage-azcopy

     

       10
       +
         ];

     

       11
       +
       

     

       12
       +
         AZURE_CONFIG_DIR="/tmp/azure-cli/.azure";

     

       13
       +
       }

+55

nixos/maintainers/scripts/azure-new/upload-image.sh

···

       1
       +
       #!/usr/bin/env bash

     

       2
       +
       set -euo pipefail

     

       3
       +
       set -x

     

       4
       +
       

     

       5
       +
       attr="${1:-"azbasic"}"

     

       6
       +
       

     

       7
       +
       nix-build ./examples/basic/image.nix --out-link "azure"

     

       8
       +
       

     

       9
       +
       group="nixos-images"

     

       10
       +
       location="westus2"

     

       11
       +
       img_name="azure-image-todo-makethisbetter" # TODO: clean this up

     

       12
       +
       img_file="$(readlink -f ./azure/disk.vhd)" # TODO: this doesn't feel great either

     

       13
       +
       

     

       14
       +
       if ! az group show -n "${group}" &>/dev/null; then

     

       15
       +
         az group create --name "${group}" --location "${location}"

     

       16
       +
       fi

     

       17
       +
       

     

       18
       +
       if ! az disk show -g "${group}" -n "${img_name}" &>/dev/null; then

     

       19
       +
         bytes="$(stat -c %s ${img_file})"

     

       20
       +
         size="30"

     

       21
       +
         az disk create \

     

       22
       +
           --resource-group "${group}" \

     

       23
       +
           --name "${img_name}" \

     

       24
       +
           --for-upload true --upload-size-bytes "${bytes}"

     

       25
       +
       

     

       26
       +
         timeout=$(( 60 * 60 )) # disk access token timeout

     

       27
       +
         sasurl="$(\

     

       28
       +
           az disk grant-access \

     

       29
       +
             --access-level Write \

     

       30
       +
             --resource-group "${group}" \

     

       31
       +
             --name "${img_name}" \

     

       32
       +
             --duration-in-seconds ${timeout} \

     

       33
       +
               | jq -r '.accessSas'

     

       34
       +
         )"

     

       35
       +
       

     

       36
       +
         azcopy copy "${img_file}" "${sasurl}" \

     

       37
       +
           --blob-type PageBlob 

     

       38
       +
           

     

       39
       +
         az disk revoke-access \

     

       40
       +
           --resource-group "${group}" \

     

       41
       +
           --name "${img_name}"

     

       42
       +
       fi

     

       43
       +
       

     

       44
       +
       if ! az image show -g "${group}" -n "${img_name}" &>/dev/null; then

     

       45
       +
         diskid="$(az disk show -g "${group}" -n "${img_name}" -o json | jq -r .id)"

     

       46
       +
       

     

       47
       +
         az image create \

     

       48
       +
           --resource-group "${group}" \

     

       49
       +
           --name "${img_name}" \

     

       50
       +
           --source "${diskid}" \

     

       51
       +
           --os-type "linux" >/dev/null

     

       52
       +
       fi

     

       53
       +
       

     

       54
       +
       imageid="$(az image show -g "${group}" -n "${img_name}" -o json | jq -r .id)"

     

       55
       +
       echo "${imageid}"

+1

nixos/modules/virtualisation/azure-image.nix

···

       21
        
             name = "azure-image";

     

       22
        
             postVM = ''

     

       23
        
               ${pkgs.vmTools.qemu}/bin/qemu-img convert -f raw -o subformat=fixed,force_size -O vpc $diskImage $out/disk.vhd

     

       0
        
       
     

       24
        
             '';

     

       25
        
             configFile = ./azure-config-user.nix;

     

       26
        
             format = "raw";

···

       21
        
             name = "azure-image";

     

       22
        
             postVM = ''

     

       23
        
               ${pkgs.vmTools.qemu}/bin/qemu-img convert -f raw -o subformat=fixed,force_size -O vpc $diskImage $out/disk.vhd

     

       24
       +
               rm $diskImage

     

       25
        
             '';

     

       26
        
             configFile = ./azure-config-user.nix;

     

       27
        
             format = "raw";