commit f4ac3ac7e49e3a2096855a56943111441541c16c · pyrox.dev/nixpkgs

+42 -8

nixos/modules/services/monitoring/cockpit.nix

···

       49
        
               '';

     

       50
        
             };

     

       51
        
       

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       52
        
             port = mkOption {

     

       53
        
               description = "Port where cockpit will listen.";

     

       54
        
               type = types.port;

     
···

       62
        
             };

     

       63
        
           };

     

       64
        
         };

     

       65
       -
         config = mkIf cfg.enable {

     

       66
        
       

     

       0
        
       
     

       67
        
           # expose cockpit-bridge system-wide

     

       68
        
           environment.systemPackages = [ cfg.package ];

     

       69
        
       

     

       70
        
           # allow cockpit to find its plugins

     

       71
        
           environment.pathsToLink = [ "/share/cockpit" ];

     

       72
        
       

     

       73
       -
           # generate cockpit settings

     

       74
       -
           environment.etc."cockpit/cockpit.conf".source = settingsFormat.generate "cockpit.conf" cfg.settings;

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       75
        
       

     

       76
        
           security.pam.services.cockpit = {

     

       77
        
             startSession = true;

     
···

       80
        
           networking.firewall.allowedTCPPorts = mkIf cfg.openFirewall [ cfg.port ];

     

       81
        
       

     

       82
        
           systemd.packages = [ cfg.package ];

     

       83
       -
           systemd.sockets.cockpit.wantedBy = [ "multi-user.target" ];

     

       84
       -
           systemd.sockets.cockpit.listenStreams = [

     

       85
       -
             "" # workaround so it doesn't listen on both ports caused by the runtime merging

     

       86
       -
             (toString cfg.port)

     

       87
       -
           ];

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       88
        
       

     

       89
        
           systemd.tmpfiles.rules = [

     

       90
        
             # From $out/lib/tmpfiles.d/cockpit-tmpfiles.conf

···

       49
        
               '';

     

       50
        
             };

     

       51
        
       

     

       52
       +
             showBanner = mkOption {

     

       53
       +
               description = "Whether to add the Cockpit banner to the issue and motd files.";

     

       54
       +
               type = types.bool;

     

       55
       +
               default = true;

     

       56
       +
               example = false;

     

       57
       +
             };

     

       58
       +
       

     

       59
        
             port = mkOption {

     

       60
        
               description = "Port where cockpit will listen.";

     

       61
        
               type = types.port;

     
···

       69
        
             };

     

       70
        
           };

     

       71
        
         };

     

       0
        
       
     

       72
        
       

     

       73
       +
         config = mkIf cfg.enable {

     

       74
        
           # expose cockpit-bridge system-wide

     

       75
        
           environment.systemPackages = [ cfg.package ];

     

       76
        
       

     

       77
        
           # allow cockpit to find its plugins

     

       78
        
           environment.pathsToLink = [ "/share/cockpit" ];

     

       79
        
       

     

       80
       +
           environment.etc = {

     

       81
       +
             # generate cockpit settings

     

       82
       +
             "cockpit/cockpit.conf".source = settingsFormat.generate "cockpit.conf" cfg.settings;

     

       83
       +
       

     

       84
       +
             # Add "Web console: ..." line to issue and MOTD

     

       85
       +
             "issue.d/cockpit.issue" = {

     

       86
       +
               enable = cfg.showBanner;

     

       87
       +
               source = "/run/cockpit/issue";

     

       88
       +
             };

     

       89
       +
             "motd.d/cockpit" = {

     

       90
       +
               enable = cfg.showBanner;

     

       91
       +
               source = "/run/cockpit/issue";

     

       92
       +
             };

     

       93
       +
           };

     

       94
        
       

     

       95
        
           security.pam.services.cockpit = {

     

       96
        
             startSession = true;

     
···

       99
        
           networking.firewall.allowedTCPPorts = mkIf cfg.openFirewall [ cfg.port ];

     

       100
        
       

     

       101
        
           systemd.packages = [ cfg.package ];

     

       102
       +
       

     

       103
       +
           systemd.sockets.cockpit = {

     

       104
       +
             wantedBy = [ "multi-user.target" ];

     

       105
       +
             listenStreams = [

     

       106
       +
               "" # workaround so it doesn't listen on both ports caused by the runtime merging

     

       107
       +
               (toString cfg.port)

     

       108
       +
             ];

     

       109
       +
           };

     

       110
       +
       

     

       111
       +
           # Enable connecting to remote hosts from the login page

     

       112
       +
           systemd.services = mkIf (cfg.settings ? LoginTo -> cfg.settings.LoginTo) {

     

       113
       +
             "cockpit-wsinstance-http".path = [

     

       114
       +
               config.programs.ssh.package

     

       115
       +
               cfg.package

     

       116
       +
             ];

     

       117
       +
             "cockpit-wsinstance-https@".path = [

     

       118
       +
               config.programs.ssh.package

     

       119
       +
               cfg.package

     

       120
       +
             ];

     

       121
       +
           };

     

       122
        
       

     

       123
        
           systemd.tmpfiles.rules = [

     

       124
        
             # From $out/lib/tmpfiles.d/cockpit-tmpfiles.conf

+11

pkgs/by-name/co/cockpit/branding.css

···

       1
       +
       #badge {

     

       2
       +
           inline-size: 225px;

     

       3
       +
           block-size: 80px;

     

       4
       +
           background-image: url("logo.png");

     

       5
       +
           background-size: contain;

     

       6
       +
           background-repeat: no-repeat;

     

       7
       +
       }

     

       8
       +
       

     

       9
       +
       #brand::before {

     

       10
       +
           content: "${PRETTY_NAME}";

     

       11
       +
       }

+32 -2

pkgs/by-name/co/cockpit/package.nix

···

       37
        
         systemd,

     

       38
        
         udev,

     

       39
        
         xmlto,

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       40
        
       }:

     

       41
        
       

     

       42
        
       stdenv.mkDerivation (finalAttrs: {

     
···

       148
        
       

     

       149
        
           # hardcode libexecdir, I am assuming that cockpit only use it to find it's binaries

     

       150
        
           printf 'def get_libexecdir() -> str:\n\treturn "%s"' "$out/libexec" >> src/cockpit/packages.py

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       151
        
         '';

     

       152
        
       

     

       153
        
         configureFlags = [

     
···

       200
        
           substituteInPlace $out/lib/systemd/*/* \

     

       201
        
             --replace-warn /bin /run/current-system/sw/bin

     

       202
        
       

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       203
        
           runHook postFixup

     

       204
        
         '';

     

       205
        
       

     
···

       219
        
           export G_MESSAGES_DEBUG=cockpit-ws,cockpit-wrapper,cockpit-bridge

     

       220
        
           export PATH=$PATH:$(pwd)

     

       221
        
       

     

       222
       -
           make check  -j$NIX_BUILD_CORES || true

     

       223
        
           npm run eslint

     

       224
        
           npm run stylelint

     

       225
        
         '';

     
···

       235
        
           homepage = "https://cockpit-project.org/";

     

       236
        
           changelog = "https://cockpit-project.org/blog/cockpit-${finalAttrs.version}.html";

     

       237
        
           license = lib.licenses.lgpl21;

     

       238
       -
           maintainers = [ lib.maintainers.lucasew ];

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       239
        
         };

     

       240
        
       })

···

       37
        
         systemd,

     

       38
        
         udev,

     

       39
        
         xmlto,

     

       40
       +
         # Enables lightweight NixOS branding, replacing the default Cockpit icons

     

       41
       +
         withBranding ? true,

     

       42
       +
         nixos-icons,

     

       43
        
       }:

     

       44
        
       

     

       45
        
       stdenv.mkDerivation (finalAttrs: {

     
···

       151
        
       

     

       152
        
           # hardcode libexecdir, I am assuming that cockpit only use it to find it's binaries

     

       153
        
           printf 'def get_libexecdir() -> str:\n\treturn "%s"' "$out/libexec" >> src/cockpit/packages.py

     

       154
       +
       

     

       155
       +
           # patch paths used as visibility conditions in apps

     

       156
       +
           substituteInPlace pkg/*/manifest.json \

     

       157
       +
             --replace-warn '"/usr/bin' '"/run/current-system/sw/bin' \

     

       158
       +
             --replace-warn '"/usr/sbin' '"/run/current-system/sw/bin' \

     

       159
       +
             --replace-warn '"/usr/share' '"/run/current-system/sw/share' \

     

       160
       +
             --replace-warn '"/lib/systemd' '"/run/current-system/sw/lib/systemd'

     

       161
       +
       

     

       162
       +
           # replace reference to system python interpreter, used for e.g. sosreport

     

       163
       +
           substituteInPlace pkg/lib/python.ts \

     

       164
       +
             --replace-fail /usr/libexec/platform-python ${python3Packages.python.interpreter}

     

       165
        
         '';

     

       166
        
       

     

       167
        
         configureFlags = [

     
···

       214
        
           substituteInPlace $out/lib/systemd/*/* \

     

       215
        
             --replace-warn /bin /run/current-system/sw/bin

     

       216
        
       

     

       217
       +
           ${lib.optionalString withBranding ''

     

       218
       +
             mkdir -p "$out/share/cockpit/branding/nixos"

     

       219
       +
             pushd "$out/share/cockpit/branding/nixos"

     

       220
       +
       

     

       221
       +
             icons="${nixos-icons}/share/icons/hicolor"

     

       222
       +
             ln -s "$icons/16x16/apps/nix-snowflake.png" favicon.ico

     

       223
       +
             ln -s "$icons/256x256/apps/nix-snowflake.png" logo.png

     

       224
       +
             ln -s "$icons/256x256/apps/nix-snowflake.png" apple-touch-icon.png

     

       225
       +
             cp "${./branding.css}" branding.css

     

       226
       +
       

     

       227
       +
             popd

     

       228
       +
           ''}

     

       229
       +
       

     

       230
        
           runHook postFixup

     

       231
        
         '';

     

       232
        
       

     
···

       246
        
           export G_MESSAGES_DEBUG=cockpit-ws,cockpit-wrapper,cockpit-bridge

     

       247
        
           export PATH=$PATH:$(pwd)

     

       248
        
       

     

       249
       +
           make check -j$NIX_BUILD_CORES || true

     

       250
        
           npm run eslint

     

       251
        
           npm run stylelint

     

       252
        
         '';

     
···

       262
        
           homepage = "https://cockpit-project.org/";

     

       263
        
           changelog = "https://cockpit-project.org/blog/cockpit-${finalAttrs.version}.html";

     

       264
        
           license = lib.licenses.lgpl21;

     

       265
       +
           maintainers = with lib.maintainers; [

     

       266
       +
             lucasew

     

       267
       +
             andre4ik3

     

       268
       +
           ];

     

       269
        
         };

     

       270
        
       })