From 105c08172827499504816106ffe1b61d76c2d4c8 Mon Sep 17 00:00:00 2001
From: Alex Auvolat <alex@adnab.me>
Date: Mon, 28 Nov 2022 22:58:39 +0100
Subject: Staging: ability to run Nix jobs using exec2 driver

---
 nix/deuxfleurs.nix         |  1 +
 nix/nomad-driver-exec2.nix | 31 +++++++++++++++++++++++++++++++
 2 files changed, 32 insertions(+)
 create mode 100644 nix/nomad-driver-exec2.nix

(limited to 'nix')

diff --git a/nix/deuxfleurs.nix b/nix/deuxfleurs.nix
index edf97fb..a83dda4 100644
--- a/nix/deuxfleurs.nix
+++ b/nix/deuxfleurs.nix
@@ -171,6 +171,7 @@ in
     # and to pass directly to public DNS resolver all others
     services.unbound = {
       enable = true;
+      enableRootTrustAnchor = false;  # disable DNSSEC as it causes issues
       settings = {
         server = {
           interface = [ "127.0.0.1" "${cfg.lan_ip}" "172.17.0.1" ];
diff --git a/nix/nomad-driver-exec2.nix b/nix/nomad-driver-exec2.nix
new file mode 100644
index 0000000..16aa8c0
--- /dev/null
+++ b/nix/nomad-driver-exec2.nix
@@ -0,0 +1,31 @@
+{
+  pkgs ? import <nixpkgs> {}
+}:
+pkgs.buildGoModule rec {
+  pname = "nomad-driver-exec2";
+  version = "0.1.0";
+
+  src = pkgs.fetchFromGitHub {
+    owner = "Alexis211";
+    repo = "nomad-driver-exec2";
+    rev = "14bd8f2010c3a1f90c6d1297f47ebbf46ee87dde";
+    sha256 = "sha256-k75VEi2+9mS9v3bx/ygumy0niQP7bLWIgB0Zwhuky+k=";
+  };
+
+  vendorSha256 = "sha256-EQdTxVOBRYQjg7kAB+pFJYcNwk0zlsjjJxM+EO/cK84=";
+
+  ldflags = [
+    "-X github.com/Alexis211/nomad-driver-exec2/exec2.pluginVersion=${version}"
+  ];
+
+  postInstall = ''
+    mv $out/bin/nomad-driver-exec2 $out/bin/exec2-driver
+  '';
+
+  meta = with pkgs.lib; {
+    description = "Nomad exec driver with support for bind mouns";
+    homepage = "https://github.com/Alexis211/nomad-driver-exec2";
+    license = licenses.mpl20;
+    platforms = platforms.linux;
+  };
+}
-- 
cgit v1.2.3