diff options
| author | Alex Auvolat <alex@adnab.me> | 2022-12-22 23:59:51 +0100 |
|---|---|---|
| committer | Alex Auvolat <alex@adnab.me> | 2022-12-22 23:59:51 +0100 |
| commit | 94a9c8afa8471cbb328262e6385fbda3383f7dde (patch) | |
| tree | dc1923fde8d772abf7dd28ebf0d38288d24e224d /deploy_nixos | |
| parent | 0e1574a82b7067910d5403cfd46e94bcf929327a (diff) | |
| download | nixcfg-94a9c8afa8471cbb328262e6385fbda3383f7dde.tar.gz nixcfg-94a9c8afa8471cbb328262e6385fbda3383f7dde.zip | |
security for deployment on prod
Diffstat (limited to 'deploy_nixos')
| -rwxr-xr-x | deploy_nixos | 17 |
1 files changed, 13 insertions, 4 deletions
diff --git a/deploy_nixos b/deploy_nixos index 4663acf..4f8aa2a 100755 --- a/deploy_nixos +++ b/deploy_nixos @@ -11,8 +11,17 @@ if [ "$CLUSTER" = "staging" ]; then copy nix/nomad-driver-nix2.nix /etc/nixos/nomad-driver-nix2.nix fi -# use ./upgrade_nixos instead to upgrade NixOS -#cmd "nix-channel --add https://nixos.org/channels/nixos-22.05 nixos" -#cmd nixos-rebuild switch --upgrade --show-trace -cmd nixos-rebuild switch +if [ "$CLUSTER" = "prod" ]; then + cmd nixos-rebuild boot + message "-------------------------------------------------------------------------------------" + message "New NixOS configuration hasn't been applied, to avoid disturbing production services." + message "Please apply the following procedure to node '$NIXHOST':" + message "1. Drain node in Nomad so that all jobs are relocated elsewhere" + message "2. Reboot node manually. You can also take the opportunity to upgrade with:" + message " REBOOT_NODES=yes ./upgrade_nixos prod $NIXHOST" + message "3. Mark node as eligible again in Nomad" + message "-------------------------------------------------------------------------------------" +else + cmd nixos-rebuild switch +fi |