Merge branch 'master' into gr-flake-module

clusters/github-runner/README.md

@@ -13,6 +13,11 @@ While we could use the `nix-darwin` module for Github Runners, we do it the othe
   - The Linux VM's `/etc/ssh/ssh_host_ed25519_key` is used to authorize itself to connect to the Mac.
 - The author has observed the official "linux-builder" to be slow, in comparison to a Parallels VM. Prefer setting up a Parallels VM if you can.
 
+## Known Issues
+
+- GitHub token must be provided to avoid the "API rate limit exceeded" error (which can happen if you do all this on your laptop and work around the world). See https://github.com/srid/nixos-config/issues/54
+- GitHub runner might crash due to out of sync time on the VM. If you are Parallels, you should [sync time from Mac](https://kb.parallels.com/113271).
+
 ## Usage
 
 - `/systems/darwin.nix` (macOS config)

clusters/github-runner/nixos-module.nix

@@ -19,6 +19,7 @@ let
           inherit user group tokenFile name;
           enable = true;
           replace = true;
+          ephemeral = true;
           extraPackages = with pkgs; runner-pkgs ++ [
             # Standard nix tools
             nixci
@@ -39,6 +40,11 @@ in
   users.groups.${group} = { };
   nix.settings.trusted-users = [ user ];
 
+  # No way to do this: https://github.com/NixOS/nix/issues/6536
+  #nix.extraOptions = ''
+  #  !include /run/keys/nix-conf-gh-token.secret
+  #'';
+
   # Runners
   services.github-runners = mkPersonalRunners "srid" repos.srid;
 

clusters/github-runner/repos.nix

@@ -6,5 +6,7 @@
     nixos-config.num = 2;
     nixos-flake.num = 2 * 5;
     perpetuum.num = 2;
+    emanote.num = 2;
+    nixci.num = 2;
   };
 }