Skip to content

Commit 76a6801

Browse files
johnalotoskijohnalotoski
committed
imp: adds equinix-4 benchmark bk machine
1 parent 4281a85 commit 76a6801

File tree

6 files changed

+298
-3
lines changed

6 files changed

+298
-3
lines changed

‎nix/metal/bitteProfile/default.nix‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -551,6 +551,7 @@ in {
551551
equinix-1 = mkEquinixBuildkite "equinix-1" "10.12.10.1" "default" 5;
552552
equinix-2 = mkEquinixBuildkite "equinix-2" "10.12.10.3" "default" 5;
553553
equinix-3 = mkEquinixBuildkite "equinix-3" "10.12.10.5" "benchmark" 1;
554+
equinix-4 = mkEquinixBuildkite "equinix-4" "10.12.10.7" "benchmark" 1;
554555
};
555556
};
556557
};

‎nix/metal/bitteProfile/encrypted/equinix-ci-world-ssh.conf‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
{
2-
"data": "ENC[AES256_GCM,data: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,iv:wVhWi/JqscZFheOk7lTYGPHbjtQGIJ/fCU37azmWOs0=,tag:Z85am/RCKp9CflUpt8xeuQ==,type:str]",
2+
"data": "ENC[AES256_GCM,data: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,iv:vNrV58ltzcGOlaQ5m2rvOy6i85bNtzhpqhR9HUu2QGQ=,tag:+huuT0x9kTU2j3RM2vjCLQ==,type:str]",
33
"sops": {
44
"kms": [
55
{
@@ -13,8 +13,8 @@
1313
"azure_kv": null,
1414
"hc_vault": null,
1515
"age": null,
16-
"lastmodified": "2022-12-08T23:53:29Z",
17-
"mac": "ENC[AES256_GCM,data:hdsjAHwOwXFJ6XPHW0bl5yP1eMDNKzlV1TU+9GY4X9GTRLIpjtEROmLFOH/Pywo2wOAalwRgUOc+IYwpl6AYAjlOIqQ+em5opFc9jthnl5YdLOb97tHe1Fiu8Sh32P16A0GwbyL3dfNYCrStM5QkZctvv7tx1s/Ip+VOIUAnzZs=,iv:9Hk6c5dbjy0a5BlVflQbmT+PmfZQ/P6Ujt56iky4a/E=,tag:GDGcVq3ooX3dmMULI7NsHA==,type:str]",
16+
"lastmodified": "2022-12-09T17:48:53Z",
17+
"mac": "ENC[AES256_GCM,data:G5rdXvb3R8t8nCQbjfgwQAZ5ZzZus3CxHfV8Brj36rxLZuxOOygBb6Nip3cwoMhRuP0tEOZLYwHH9FvGR2JkDkFTuQhX9hyCj/gnVqp6tqqaC3eu+CTtJaN6dghqO+PUymqC/fg8KLdXCzW6H1E0RhJHLr7Rg0zLeC5o2RjUIRk=,iv:+NUEAi63a+leyaJowVtkF04vnY1LC2varRmm1333fhw=,tag:DvTuwl7UXGssPaFnh7aRWA==,type:str]",
1818
"pgp": null,
1919
"unencrypted_suffix": "_unencrypted",
2020
"version": "3.7.3"

‎nix/metal/bitteProfile/equinix/equinix-4/configuration.nix‎

Lines changed: 106 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,106 @@
1+
# Edit this configuration file to define what should be installed on
2+
# your system. Help is available in the configuration.nix(5) man page
3+
# and in the NixOS manual (accessible by running ‘nixos-help’).
4+
{
5+
config,
6+
pkgs,
7+
...
8+
}: {
9+
imports = [
10+
# Include the results of the hardware scan.
11+
./packet.nix
12+
];
13+
14+
# Use the systemd-boot EFI boot loader.
15+
boot.loader.systemd-boot.enable = true;
16+
boot.loader.efi.canTouchEfiVariables = true;
17+
18+
# networking.hostName = "nixos"; # Define your hostname.
19+
# Pick only one of the below networking options.
20+
# networking.wireless.enable = true; # Enables wireless support via wpa_supplicant.
21+
# networking.networkmanager.enable = true; # Easiest to use and most distros use this by default.
22+
23+
# Set your time zone.
24+
# time.timeZone = "Europe/Amsterdam";
25+
26+
# Configure network proxy if necessary
27+
# networking.proxy.default = "http://user:password@proxy:port/";
28+
# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
29+
30+
# Select internationalisation properties.
31+
# i18n.defaultLocale = "en_US.UTF-8";
32+
# console = {
33+
# font = "Lat2-Terminus16";
34+
# keyMap = "us";
35+
# useXkbConfig = true; # use xkbOptions in tty.
36+
# };
37+
38+
# Enable the X11 windowing system.
39+
# services.xserver.enable = true;
40+
41+
# Configure keymap in X11
42+
# services.xserver.layout = "us";
43+
# services.xserver.xkbOptions = {
44+
# "eurosign:e";
45+
# "caps:escape" # map caps to escape.
46+
# };
47+
48+
# Enable CUPS to print documents.
49+
# services.printing.enable = true;
50+
51+
# Enable sound.
52+
# sound.enable = true;
53+
# hardware.pulseaudio.enable = true;
54+
55+
# Enable touchpad support (enabled default in most desktopManager).
56+
# services.xserver.libinput.enable = true;
57+
58+
# Define a user account. Don't forget to set a password with ‘passwd’.
59+
# users.users.jane = {
60+
# isNormalUser = true;
61+
# extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user.
62+
# packages = with pkgs; [
63+
# firefox
64+
# thunderbird
65+
# ];
66+
# };
67+
68+
# List packages installed in system profile. To search, run:
69+
# $ nix search wget
70+
# environment.systemPackages = with pkgs; [
71+
# vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default.
72+
# wget
73+
# ];
74+
75+
# Some programs need SUID wrappers, can be configured further or are
76+
# started in user sessions.
77+
# programs.mtr.enable = true;
78+
# programs.gnupg.agent = {
79+
# enable = true;
80+
# enableSSHSupport = true;
81+
# };
82+
83+
# List services that you want to enable:
84+
85+
# Enable the OpenSSH daemon.
86+
# services.openssh.enable = true;
87+
88+
# Open ports in the firewall.
89+
# networking.firewall.allowedTCPPorts = [ ... ];
90+
# networking.firewall.allowedUDPPorts = [ ... ];
91+
# Or disable the firewall altogether.
92+
# networking.firewall.enable = false;
93+
94+
# Copy the NixOS configuration file and link it from the resulting system
95+
# (/run/current-system/configuration.nix). This is useful in case you
96+
# accidentally delete configuration.nix.
97+
# system.copySystemConfiguration = true;
98+
99+
# This value determines the NixOS release from which the default
100+
# settings for stateful data, like file locations and database versions
101+
# on your system were taken. It‘s perfectly fine and recommended to leave
102+
# this value at the release version of the first install of this system.
103+
# Before changing this value read the documentation for this option
104+
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
105+
system.stateVersion = "22.05"; # Did you read the comment?
106+
}

‎nix/metal/bitteProfile/equinix/equinix-4/packet.nix‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
{
2+
imports = [
3+
./packet/auth.nix
4+
./packet/system.nix
5+
];
6+
}

‎nix/metal/bitteProfile/equinix/equinix-4/packet/auth.nix‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
{
2+
users.users.root.initialHashedPassword = "$6$R73qYnGFph1ixTyj$YkcwgFFQfH2fZWMrgkejgn7AmJu2EO.tCn02NPeMdS81AXB3bh3pa2.ypXLNmQ7xcQvl26Qrm7mE4/dqudLV11";
3+
4+
users.users.root.openssh.authorizedKeys.keys = [
5+
"ssh-rsa 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"
6+
];
7+
}

‎nix/metal/bitteProfile/equinix/equinix-4/packet/system.nix‎

Lines changed: 175 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,175 @@
1+
{
2+
imports = [
3+
{
4+
boot.kernelModules = ["dm_multipath" "dm_round_robin" "ipmi_watchdog"];
5+
services.openssh.enable = true;
6+
system.stateVersion = "22.05";
7+
}
8+
{
9+
nixpkgs.config.allowUnfree = true;
10+
11+
boot.initrd.availableKernelModules = [
12+
"xhci_pci"
13+
"ahci"
14+
"usbhid"
15+
"sd_mod"
16+
];
17+
boot.initrd.kernelModules = [];
18+
boot.kernelModules = ["kvm-intel"];
19+
boot.kernelParams = ["console=ttyS1,115200n8"];
20+
boot.extraModulePackages = [];
21+
22+
hardware.enableAllFirmware = true;
23+
}
24+
(
25+
{lib, ...}: {
26+
boot.loader = {
27+
systemd-boot.enable = true;
28+
efi.canTouchEfiVariables = true;
29+
};
30+
nix.maxJobs = lib.mkDefault 64;
31+
}
32+
)
33+
{
34+
swapDevices = [
35+
{
36+
device = "/dev/disk/by-id/ata-Micron_5300_MTFDDAK480TDT_22043459D535-part2";
37+
}
38+
];
39+
40+
fileSystems = {
41+
"/boot" = {
42+
device = "/dev/disk/by-id/ata-Micron_5300_MTFDDAK480TDT_22043459D535-part1";
43+
fsType = "vfat";
44+
};
45+
46+
"/" = {
47+
device = "zpool/root";
48+
fsType = "zfs";
49+
options = ["defaults"];
50+
};
51+
52+
"/nix" = {
53+
device = "zpool/nix";
54+
fsType = "zfs";
55+
options = ["defaults"];
56+
};
57+
58+
"/var" = {
59+
device = "zpool/var";
60+
fsType = "zfs";
61+
options = ["defaults"];
62+
};
63+
64+
"/cache" = {
65+
device = "zpool/cache";
66+
fsType = "zfs";
67+
options = ["defaults"];
68+
};
69+
70+
"/var/lib/nomad" = {
71+
device = "zpool/nomad";
72+
fsType = "zfs";
73+
options = ["defaults"];
74+
};
75+
76+
"/var/lib/containers" = {
77+
device = "zpool/containers";
78+
fsType = "zfs";
79+
options = ["defaults"];
80+
};
81+
82+
"/var/lib/docker" = {
83+
device = "zpool/docker";
84+
fsType = "zfs";
85+
options = ["defaults"];
86+
};
87+
88+
"/home" = {
89+
device = "zpool/home";
90+
fsType = "zfs";
91+
options = ["defaults"];
92+
};
93+
};
94+
95+
boot.loader.efi.efiSysMountPoint = "/boot";
96+
}
97+
{networking.hostId = "c2bfe3bc";}
98+
(
99+
{modulesPath, ...}: {
100+
networking.hostName = "equinix-4";
101+
networking.useNetworkd = true;
102+
103+
systemd.network.networks."40-bond0" = {
104+
matchConfig.Name = "bond0";
105+
linkConfig = {
106+
RequiredForOnline = "carrier";
107+
MACAddress = "e8:eb:d3:58:c7:64";
108+
};
109+
networkConfig.LinkLocalAddressing = "no";
110+
dns = [
111+
"147.75.207.207"
112+
"147.75.207.208"
113+
];
114+
};
115+
116+
boot.extraModprobeConfig = "options bonding max_bonds=0";
117+
systemd.network.netdevs = {
118+
"10-bond0" = {
119+
netdevConfig = {
120+
Kind = "bond";
121+
Name = "bond0";
122+
};
123+
bondConfig = {
124+
Mode = "802.3ad";
125+
LACPTransmitRate = "fast";
126+
TransmitHashPolicy = "layer3+4";
127+
DownDelaySec = 0.2;
128+
UpDelaySec = 0.2;
129+
MIIMonitorSec = 0.1;
130+
};
131+
};
132+
};
133+
134+
systemd.network.networks."30-enp1s0f0np0" = {
135+
matchConfig = {
136+
Name = "enp1s0f0np0";
137+
PermanentMACAddress = "e8:eb:d3:58:c7:64";
138+
};
139+
networkConfig.Bond = "bond0";
140+
};
141+
142+
systemd.network.networks."30-enp1s0f1np1" = {
143+
matchConfig = {
144+
Name = "enp1s0f1np1";
145+
PermanentMACAddress = "e8:eb:d3:58:c7:65";
146+
};
147+
networkConfig.Bond = "bond0";
148+
};
149+
150+
systemd.network.networks."40-bond0".addresses = [
151+
{
152+
addressConfig.Address = "147.75.85.233/31";
153+
}
154+
{
155+
addressConfig.Address = "2604:1380:4601:5b00::7/127";
156+
}
157+
{
158+
addressConfig.Address = "10.12.10.7/31";
159+
}
160+
];
161+
systemd.network.networks."40-bond0".routes = [
162+
{
163+
routeConfig.Gateway = "147.75.85.232";
164+
}
165+
{
166+
routeConfig.Gateway = "2604:1380:4601:5b00::6";
167+
}
168+
{
169+
routeConfig.Gateway = "10.12.10.6";
170+
}
171+
];
172+
}
173+
)
174+
];
175+
}

0 commit comments

Comments
 (0)