SelfPrivacy/selfprivacy-nixos-config
1
0
Fork 0
mirror of https://git.selfprivacy.org/SelfPrivacy/selfprivacy-nixos-config.git synced 2025-01-08 00:51:23 +00:00
Code Issues Projects Releases Wiki Activity

nixos-upgrade.serviceConfig.ExecCondition on /etc/nixos changes

Browse source
This commit is contained in:
Alexander Tomokhov 2023-12-28 12:14:58 +04:00
parent 0c895e4015
commit a32613ece4
1 changed files with 18 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

22
configuration.nix
View file

@ -88,13 +88,27 @@
allowReboot = config.selfprivacy.autoUpgrade.allowReboot; allowReboot = config.selfprivacy.autoUpgrade.allowReboot;
# TODO get attribute name from selfprivacy options # TODO get attribute name from selfprivacy options
flake = "/etc/nixos#default"; flake = "/etc/nixos#default";
flags = [ "--verbose" "--print-build-logs" ];
}; };
systemd.services.nixos-upgrade.serviceConfig.WorkingDirectory = "/etc/nixos"; systemd.services.nixos-upgrade.serviceConfig.WorkingDirectory = "/etc/nixos";
# TODO parameterize URL somehow; run nix flake update as non-root user # TODO parameterize URL somehow; run nix flake update as non-root user
systemd.services.nixos-upgrade.serviceConfig.ExecStartPre = '' systemd.services.nixos-upgrade.serviceConfig.ExecCondition =
${config.nix.package.out}/bin/nix flake update \ pkgs.writeShellScript "flake-update-script" ''
--override-input selfprivacy-nixos-config git+https://git.selfprivacy.org/SelfPrivacy/selfprivacy-nixos-config.git?ref=flakes set -o xtrace
''; if ${config.nix.package.out}/bin/nix flake update \
--override-input selfprivacy-nixos-config git+https://git.selfprivacy.org/SelfPrivacy/selfprivacy-nixos-config.git?ref=flakes
then
if ${pkgs.diffutils}/bin/diff -u -r /etc/selfprivacy/nixos-config-source/ /etc/nixos/
then
set +o xtrace
echo "No configuration changes detected. Nothing to upgrade."
exit 1
fi
else
# ExecStart must not start after 255 exit code, service must fail.
exit 255
fi
'';
nix = { nix = {
channel.enable = false; channel.enable = false;