Rename of Jude to Zeke

Since Jude is a now a server, we rename it to Zeke, for Ezekiel Update of tailscale to auto-register nodes Update kubernetes to install the etcd application Update Zeke IP address and DNS bindings
2025-07-02 12:01:27 -05:00
parent f1f38d85ec
commit f9f1357b8e
17 changed files with 147 additions and 202 deletions
@@ -0,0 +1,116 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+
+let
+  environmentVariables = {
+    EFI_DIR = "${pkgs.OVMF.fd}/FV/";
+    STORAGE_URL = "s3.thehellings.lan:9000";
+  };
+  passthru = [
+    "1002:164e" # Raphael - embedded GPU
+    "1002:1640" # Rembrandt - Audio
+    #"10de:2507" # RTX 3050 video
+    #"10de:228e" # RTX 3050 audio
+  ];
+in
+{
+  specialisation = {
+    vbox.configuration = {
+      users.extraGroups.vboxusers.members = [ "greg" ];
+
+      virtualisation = {
+        virtualbox.host = {
+          enable = true;
+          enableExtensionPack = true;
+        };
+      };
+
+      services.gitlab-runner.services = lib.mkForce {
+        vbox = {
+          inherit environmentVariables;
+          authenticationTokenConfigFile = config.age.secrets.vbox.path;
+          executor = "shell";
+          limit = 5;
+        };
+      };
+
+      systemd.services.gitlab-runner = {
+        serviceConfig = {
+          DevicePolicy = lib.mkForce "auto";
+          User = "root";
+          DynamicUser = lib.mkForce false;
+        };
+      };
+    };
+  };
+
+  age.secrets = {
+    qemu.file = ../../secrets/gitlab/nixos-qemu-shell.age;
+    vbox.file = ../../secrets/gitlab/nixos-vbox-shell.age;
+  };
+
+  # These options enable sharing of the GPU with the VM
+  boot = {
+    # Order matters here, to prevent the AMD driver from getting to the driver before
+    # vfio-pci does
+    initrd.kernelModules = [
+      "vfio_pci"
+      "vfio"
+      "vfio_iommu_type1"
+
+      #"amdgpu"
+      #"nvidia"
+      #"nvidia_modeset"
+      #"nvidia_uvm"
+      #"nvidia_drm"
+    ];
+    kernelParams = [
+      "amd_iommu=on"
+      "iommu=pt"
+      ("vfio-pci.ids=" + (lib.concatStringsSep "," passthru))
+    ];
+  };
+
+  hardware.graphics.enable = true;
+
+  services.gitlab-runner = {
+    enable = true;
+    settings.concurrent = 5;
+    services.qemu = {
+      inherit environmentVariables;
+      executor = "shell";
+      limit = 5;
+      authenticationTokenConfigFile = config.age.secrets.qemu.path;
+    };
+  };
+
+  systemd.services = {
+    "libvirt-nosleep@" = {
+      description = "Prevent sleep while %i is running";
+      serviceConfig = {
+        Type = "simple";
+        ExecStart = ''
+          ${pkgs.systemd}/bin/systemd-inhibit --what=sleep --why="Libvirt domain %i is running" --who=%U --mode=block sleep infinity
+        '';
+      };
+    };
+  };
+
+  virtualisation = {
+    libvirtd = {
+      extraConfig = ''
+        log_filters="1:qemu"
+        log_outputs="1:file:/var/log/libvirt/libvirtd.log"
+      '';
+      hooks.qemu = {
+        win10 = lib.getExe pkgs.qemu-hook;
+      };
+    };
+
+    spiceUSBRedirection.enable = true;
+  };
+}