From 707069b80d7f2a94d77d2bd57a44fd827dab1747 Mon Sep 17 00:00:00 2001
From: John Axel Eriksson <john@insane.se>
Date: Sun, 24 Nov 2024 21:21:18 +0100
Subject: [PATCH] chore: add buildkite environment on icarus (#1013)

---
 hosts/x86_64-linux/icarus.nix  |   9 +++++++++
 secrets/cachix-signing-key.age | Bin 0 -> 517 bytes
 2 files changed, 9 insertions(+)
 create mode 100644 secrets/cachix-signing-key.age

diff --git a/hosts/x86_64-linux/icarus.nix b/hosts/x86_64-linux/icarus.nix
index 0c3e1399..2c0204f5 100644
--- a/hosts/x86_64-linux/icarus.nix
+++ b/hosts/x86_64-linux/icarus.nix
@@ -108,6 +108,11 @@
       nixos = "true";
       queue = "default-queue";
     };
+    hooks = {
+      environment = ''
+        CACHIX_SIGNING_KEY="$(head -1 ${config.age.secrets.cachix-signing-key.path})"
+      '';
+    };
   };
 
   services.tailscale.auth = {
@@ -285,6 +290,10 @@
       file = ../../secrets/buildkite-ssh-key.age;
       owner = "buildkite-agent-nix-build";
     };
+    cachix-signing-key = {
+      file = ../../secrets/cachix-signing-key.age;
+      owner = "buildkite-agent-nix-build";
+    };
   };
 
   security.acme.certs = {
diff --git a/secrets/cachix-signing-key.age b/secrets/cachix-signing-key.age
new file mode 100644
index 0000000000000000000000000000000000000000..153d7036e69c4da3056e61a6d242c2579919ce6a
GIT binary patch
literal 517
zcmY+-O>5I&007{@aA064D8f#QNOvhQ$-6em6o+X@ll8kz`jyK_(<XV-CheQnq{(SF
z*$z9Yhn?p906`0S@TTa+qZ2235D~mi^fnYP;?d_1Ji65*dY<7&qX`^(mxsPZ1~f*j
z<0BXlBamirCS`W}7S7w&07zayne8mul>7}*E{ap2LN1q$Cx|R?MO`-{6hTA4GIpjK
zRa$ynu$n5bN+hg>y2mOigR-(ix=1kvhmVA5bNJsS<vN2P#Q7m8OsFy|<!U)tqDo<s
zMbM?}RDd9uR*;=qg{rI7^(s&>HlL##3}4EYgP{@`v0_uQ&%kcnbK2B6jEi(&=4n0O
zY4HE9@z^GMU64-GYq(TN*%J$=bO8KnJC8Wm)to36Jjeph5nQ<*4#prwO1xv5H?nMG
zVSSn_b`4Hz$-0Hm1eKkEheEMK#UQEm>Z=xFGW_aVAt{L%K@fPYp*BilTPlr^+->lE
zK=(2kkgg%Y)KJ%lLMN(<8#S%nGO*7_%)y1{?Cm#yR!-yJcCRcvy}0=(F-t7hKOQ`}
zdj0&*S#r)>UYS39nP=x-ENSkJx3_rb-up|(>u=rtdHCw&2loBQC>IhtU-o8)yNSm)
rPc42r`S45Ies}BjgZ=wwo-Jr#bnc;l_w4c4rRcX}Z|hrI*IIu87>l@L

literal 0
HcmV?d00001