aboutsummaryrefslogtreecommitdiff
path: root/scripts/ci/provision.sh (unfollow)
Commit message (Collapse)AuthorFilesLines
2019-05-26ci dbgEuAndreh1-0/+1
2019-05-26Fix missing argument to sshEuAndreh1-1/+1
2019-05-26Specify shell type to ShellCheck in nix-shell shebang filesEuAndreh1-0/+1
2019-05-26Use more robust Bash cd approachEuAndreh1-1/+1
2019-05-26Use nix-shell shebang to run CI scriptsEuAndreh1-1/+2
2019-05-26Prepare builds.sr.ht CI environment before running build tasksEuAndreh1-5/+0
Make content of .envrc available to subsequent build jobs.
2019-05-26Unlock with git-crypt in setup phaseEuAndreh1-8/+2
2019-05-26Disable shellcheck 2139 offenseEuAndreh1-0/+1
2019-05-26Remove extra newline at "Done.\n" messagesEuAndreh1-5/+5
2019-05-26Fix unexpected shell scapingEuAndreh1-1/+1
2019-05-26Automate provisioning and deployment of VPSEuAndreh1-0/+36
In order to perform that I had to remove Terraform's =.tfstate= files from the repository. Terraform does support "backends" for storing the state files, but I settled for storing it on a separate repo (vps-state). For now it solves the state management problem: - it has history of states; - all state files are GPG encrypted; - there's no coordination however, but only the CI should perform a deploy in order to avoid race conditions. I had to add GPG and SSH keys to sr.ht to achieve that: - SSH public key to my profile to authorize it to push to vps-state repo; - SSH private key to the secret builds.sr.ht environment to enable push to the repository from the pipeline; - GPG public key to git-crypt to make it possible for the pipeline to unlock the encrypted content; - GPG private key to the secret builds.sr.ht environment to enable decrypting git-crypt content from the pipeline. In order to avoid divergent environment from local and CI, the ./provision.sh script is ran through nix-shell.
2019-05-25Remove provisioning from TerraformEuAndreh1-24/+0
2019-05-25Use apt_wait before interacting with apt-getEuAndreh1-3/+20
2019-05-25Move provisioning code into provision.shEuAndreh1-0/+7