feat(flake): bump nixpkgs to 24.11 and buildbot-nix (#183)

* feat(flake): bump to nixos-24.11 and buildbot-nix

* fix(monitoring): remove alloy import from unstable

* refactor(buildbot-nix-0): remove unused monitoring.nix

* dweb-reverse-tls-proxy: disable nomad

* refactor(modules): extract nomad-server module

* chore: bump nomad to latest version

* fix(modules/flake-parts/packages.postbuildstepper/test): wait until minio is live

.envrc

@@ -1,9 +1,12 @@
+#!/usr/bin/env bash
+
 if ! has nix_direnv_version || ! nix_direnv_version 3.0.4; then
   source_url "https://raw.githubusercontent.com/nix-community/nix-direnv/3.0.4/direnvrc" "sha256-DzlYZ33mWF/Gs8DDeyjr8mnVmQGx7ASYqA5WlxwvBG4="
 fi
 
 if [[ "$(hostname)" =~ (steveej|sj-).* ]]; then
-  export PULUMI_CONFIG_PASSPHRASE="$(prs show Work/Holo/holochain-infra-pulumi-passphrase)"
+  PULUMI_CONFIG_PASSPHRASE="$(prs show Work/Holo/holochain-infra-pulumi-passphrase)"
+  export PULUMI_CONFIG_PASSPHRASE
 fi
 
 use flake

.github/workflows/pr.yml

@@ -5,13 +5,12 @@ on:
   push:
     branches: [develop]
 
-
 jobs:
   os:
     strategy:
       fail-fast: false
       matrix:
-        os: [ ]
+        os: []
     name: OS
     runs-on: ${{ matrix.os }}
     permissions:

.github/workflows/turn-readiness-check.yml

@@ -16,8 +16,8 @@ jobs:
       id-token: "write"
       contents: "read"
     steps:
-    - uses: actions/checkout@v4
-    - uses: DeterminateSystems/nix-installer-action@main
-    - uses: DeterminateSystems/magic-nix-cache-action@main
-    - name: Run script
-      run: nix run .\#turn-readiness-check
+      - uses: actions/checkout@v4
+      - uses: DeterminateSystems/nix-installer-action@main
+      - uses: DeterminateSystems/magic-nix-cache-action@main
+      - name: Run script
+        run: nix run .\#turn-readiness-check

.vscode/settings.json

@@ -1,6 +1,6 @@
 {
-    "nixEnvSelector.nixFile": "${workspaceRoot}/flake.nix",
-    "[nix]": {
-        "editor.defaultFormatter": null,
-    },
+  "nixEnvSelector.nixFile": "${workspaceRoot}/flake.nix",
+  "[nix]": {
+    "editor.defaultFormatter": null
+  }
 }

flake.nix

@@ -5,14 +5,17 @@
 
     nix-filter.url = "github:numtide/nix-filter";
 
-    nixpkgs.follows = "nixpkgs-24-05";
+    nixpkgs.follows = "nixpkgs-24-11";
     nixpkgs-23-11 = {
       url = "github:nixos/nixpkgs/nixos-23.11";
     };
     nixpkgs-24-05 = {
       url = "github:nixos/nixpkgs/nixos-24.05";
     };
-    nixpkgsNix.follows = "nixpkgs-24-05";
+    nixpkgs-24-11 = {
+      url = "github:nixos/nixpkgs/nixos-24.11";
+    };
+    nixpkgsNix.follows = "nixpkgs-24-11";
     nixpkgsGithubActionRunners = {
       url = "github:nixos/nixpkgs/nixos-unstable";
     };
@@ -44,7 +47,7 @@
     darwin.inputs.nixpkgs.follows = "nixpkgs";
 
     # home manager
-    home-manager.url = "github:nix-community/home-manager/release-24.05";
+    home-manager.url = "github:nix-community/home-manager/release-24.11";
     home-manager.inputs.nixpkgs.follows = "nixpkgs";
 
     # secret management
@@ -213,7 +216,7 @@
 
     # do not forward 'nixpkgs' there as buildbot-nix uses custom buildbot patches
     buildbot-nix.url = "github:nix-community/buildbot-nix";
-    buildbot-nix.inputs.nixpkgs.follows = "nixpkgsUnstable";
+    buildbot-nix.inputs.nixpkgs.follows = "nixpkgs-24-11";
   };
 
   outputs =
@@ -434,7 +437,7 @@
                       pulumi-command
                     ]
                   ))
-                  pkgs.go_1_21
+                  pkgs.go_1_23
                 ]
                 ++ (
                   let
@@ -452,8 +455,6 @@
 
           packages =
             {
-              # nomad = pkgs.nomad_1_6;
-
               nixos-anywhere = inputs'.nixos-anywhere.packages.default;
             }
             // (

modules/flake-parts/nixosConfigurations.buildbot-nix-0/configuration.nix

@@ -88,7 +88,8 @@
   boot.loader.efi.canTouchEfiVariables = false;
   boot.kernelPackages = pkgs.linuxPackages_latest;
 
-  systemd.network.networks."10-uplink".networkConfig.Address = "${config.passthru.primaryIpv6}/${config.passthru.primaryIpv6Suffix}";
+  systemd.network.networks."10-uplink".networkConfig.Address =
+    "${config.passthru.primaryIpv6}/${config.passthru.primaryIpv6Suffix}";
 
   disko.devices =
     let

modules/flake-parts/nixosConfigurations.buildbot-nix-0/default.nix

@@ -5,7 +5,7 @@
   ...
 }:
 let
-  evaluatedSystem = inputs.nixpkgsUnstable.lib.nixosSystem {
+  evaluatedSystem = inputs.nixpkgs.lib.nixosSystem {
     modules = [ ./configuration.nix ];
     system = "x86_64-linux";
     specialArgs = self.specialArgs;