269 lines
8.4 KiB
Nix
269 lines
8.4 KiB
Nix
{
|
|
lib,
|
|
config,
|
|
clanLib,
|
|
...
|
|
}:
|
|
let
|
|
inherit (config) inventory directory;
|
|
resolveTags =
|
|
# Inventory, { machines :: [string], tags :: [string] }
|
|
{
|
|
serviceName,
|
|
instanceName,
|
|
roleName,
|
|
inventory,
|
|
members,
|
|
}:
|
|
{
|
|
machines =
|
|
members.machines or [ ]
|
|
++ (builtins.foldl' (
|
|
acc: tag:
|
|
let
|
|
# For error printing
|
|
availableTags = lib.foldlAttrs (
|
|
acc: _: v:
|
|
v.tags or [ ] ++ acc
|
|
) [ ] (inventory.machines);
|
|
|
|
tagMembers = builtins.attrNames (
|
|
lib.filterAttrs (_n: v: builtins.elem tag v.tags or [ ]) inventory.machines
|
|
);
|
|
in
|
|
if tagMembers == [ ] then
|
|
lib.warn ''
|
|
inventory.services.${serviceName}.${instanceName}: - ${roleName} tags: no machine with tag '${tag}' found.
|
|
Available tags: ${builtins.toJSON (lib.unique availableTags)}
|
|
'' [ ]
|
|
else
|
|
acc ++ tagMembers
|
|
) [ ] members.tags or [ ]);
|
|
};
|
|
|
|
checkService =
|
|
modulepath: serviceName:
|
|
builtins.elem "inventory" (clanLib.modules.getFrontmatter modulepath serviceName).features or [ ];
|
|
|
|
compileMachine =
|
|
{ machineConfig }:
|
|
{
|
|
machineImports = [
|
|
(lib.optionalAttrs (machineConfig.deploy.targetHost or null != null) {
|
|
config.clan.core.networking.targetHost = lib.mkForce machineConfig.deploy.targetHost;
|
|
})
|
|
(lib.optionalAttrs (machineConfig.deploy.buildHost or null != null) {
|
|
config.clan.core.networking.buildHost = lib.mkForce machineConfig.deploy.buildHost;
|
|
})
|
|
];
|
|
assertions = { };
|
|
};
|
|
|
|
resolveImports =
|
|
{
|
|
supportedRoles,
|
|
resolvedRolesPerInstance,
|
|
serviceConfigs,
|
|
serviceName,
|
|
machineName,
|
|
getRoleFile,
|
|
}:
|
|
(lib.foldlAttrs (
|
|
# : [ Modules ] -> String -> ServiceConfig -> [ Modules ]
|
|
acc2: instanceName: serviceConfig:
|
|
let
|
|
resolvedRoles = resolvedRolesPerInstance.${instanceName};
|
|
|
|
isInService = builtins.any (members: builtins.elem machineName members.machines) (
|
|
builtins.attrValues resolvedRoles
|
|
);
|
|
|
|
# all roles where the machine is present
|
|
machineRoles = builtins.attrNames (
|
|
lib.filterAttrs (_role: roleConfig: builtins.elem machineName roleConfig.machines) resolvedRoles
|
|
);
|
|
|
|
machineServiceConfig = (serviceConfig.machines.${machineName} or { }).config or { };
|
|
globalConfig = serviceConfig.config or { };
|
|
|
|
globalExtraModules = serviceConfig.extraModules or [ ];
|
|
machineExtraModules = serviceConfig.machines.${machineName}.extraModules or [ ];
|
|
roleServiceExtraModules = builtins.foldl' (
|
|
acc: role: acc ++ serviceConfig.roles.${role}.extraModules or [ ]
|
|
) [ ] machineRoles;
|
|
|
|
# TODO: maybe optimize this don't lookup the role in inverse roles. Imports are not lazy
|
|
roleModules = builtins.map (
|
|
role:
|
|
if builtins.elem role supportedRoles && inventory.modules ? ${serviceName} then
|
|
getRoleFile role
|
|
else
|
|
throw "Module ${serviceName} doesn't have role: '${role}'. Role: ${
|
|
inventory.modules.${serviceName}
|
|
}/roles/${role}.nix not found."
|
|
) machineRoles;
|
|
|
|
roleServiceConfigs = builtins.filter (m: m != { }) (
|
|
builtins.map (role: serviceConfig.roles.${role}.config or { }) machineRoles
|
|
);
|
|
|
|
extraModules = map (s: if builtins.typeOf s == "string" then "${directory}/${s}" else s) (
|
|
globalExtraModules ++ machineExtraModules ++ roleServiceExtraModules
|
|
);
|
|
|
|
features =
|
|
(clanLib.modules.getFrontmatter inventory.modules.${serviceName} serviceName).features or [ ];
|
|
deprecationWarning = lib.optionalAttrs (builtins.elem "deprecated" features) {
|
|
warnings = [
|
|
''
|
|
The '${serviceName}' module has been migrated from `inventory.services` to `inventory.instances`
|
|
See https://docs.clan.lol/guides/clanServices/ for usage.
|
|
''
|
|
];
|
|
};
|
|
in
|
|
if !(serviceConfig.enabled or true) then
|
|
acc2
|
|
else if isInService then
|
|
acc2
|
|
++ [
|
|
deprecationWarning
|
|
{
|
|
imports = roleModules ++ extraModules;
|
|
clan.inventory.services.${serviceName}.${instanceName} = {
|
|
roles = resolvedRoles;
|
|
# TODO: Add inverseRoles to the service config if needed
|
|
# inherit inverseRoles;
|
|
};
|
|
}
|
|
(lib.optionalAttrs (globalConfig != { } || machineServiceConfig != { } || roleServiceConfigs != [ ])
|
|
{
|
|
clan.${serviceName} = lib.mkMerge (
|
|
[
|
|
globalConfig
|
|
machineServiceConfig
|
|
]
|
|
++ roleServiceConfigs
|
|
);
|
|
}
|
|
)
|
|
]
|
|
else
|
|
acc2
|
|
) [ ] (serviceConfigs));
|
|
in
|
|
{
|
|
imports = [
|
|
./interface.nix
|
|
];
|
|
config = {
|
|
machines = builtins.mapAttrs (
|
|
machineName: machineConfig: m:
|
|
let
|
|
compiledServices = lib.mapAttrs (
|
|
_: serviceConfigs:
|
|
(
|
|
{ config, ... }:
|
|
let
|
|
serviceName = config.serviceName;
|
|
|
|
getRoleFile = role: builtins.seq role inventory.modules.${serviceName} + "/roles/${role}.nix";
|
|
in
|
|
{
|
|
_file = "inventory/builder.nix";
|
|
_module.args = {
|
|
inherit
|
|
resolveTags
|
|
inventory
|
|
clanLib
|
|
machineName
|
|
serviceConfigs
|
|
;
|
|
};
|
|
imports = [
|
|
./roles.nix
|
|
];
|
|
|
|
machineImports = resolveImports {
|
|
supportedRoles = config.supportedRoles;
|
|
resolvedRolesPerInstance = config.resolvedRolesPerInstance;
|
|
inherit
|
|
serviceConfigs
|
|
serviceName
|
|
machineName
|
|
getRoleFile
|
|
;
|
|
};
|
|
|
|
# Assertions
|
|
assertions = {
|
|
"checkservice.${serviceName}" = {
|
|
assertion = checkService inventory.modules.${serviceName} serviceName;
|
|
message = ''
|
|
Service ${serviceName} cannot be used in inventory. It does not declare the 'inventory' feature.
|
|
|
|
To allow it add the following to the beginning of the README.md of the module:
|
|
|
|
---
|
|
...
|
|
|
|
features = [ "inventory" ]
|
|
---
|
|
|
|
Also make sure to test the module with the 'inventory' feature enabled.
|
|
|
|
'';
|
|
};
|
|
};
|
|
}
|
|
)
|
|
) (config.inventory.services or { });
|
|
|
|
compiledMachine = compileMachine {
|
|
inherit
|
|
machineConfig
|
|
;
|
|
};
|
|
|
|
machineImports = (
|
|
compiledMachine.machineImports
|
|
++ builtins.foldl' (
|
|
acc: service:
|
|
let
|
|
failedAssertions = (lib.filterAttrs (_: v: !v.assertion) service.assertions);
|
|
failedAssertionsImports =
|
|
if failedAssertions != { } then
|
|
[
|
|
{
|
|
clan.inventory.assertions = failedAssertions;
|
|
}
|
|
]
|
|
else
|
|
[
|
|
{
|
|
clan.inventory.assertions = {
|
|
"alive.assertion.inventory" = {
|
|
assertion = true;
|
|
message = ''
|
|
No failed assertions found for machine ${machineName}. This will never be displayed.
|
|
It is here for testing purposes.
|
|
'';
|
|
};
|
|
};
|
|
}
|
|
];
|
|
in
|
|
acc
|
|
++ service.machineImports
|
|
# Import failed assertions
|
|
++ failedAssertionsImports
|
|
) [ ] (builtins.attrValues m.config.compiledServices)
|
|
);
|
|
in
|
|
{
|
|
inherit machineImports compiledServices compiledMachine;
|
|
}
|
|
) (inventory.machines or { });
|
|
};
|
|
}
|