diff options
| author | Franck Cuny <franck@fcuny.net> | 2022-11-05 13:26:49 -0700 |
|---|---|---|
| committer | Franck Cuny <franck@fcuny.net> | 2022-11-06 19:27:33 -0800 |
| commit | 9038f3998dcc66f2ca091100f857a518fe201212 (patch) | |
| tree | 6e0ff5e7b3ee7367d1fedbf57a407040b8b8ec49 /modules/services/drone/runner-exec | |
| parent | Revert "ref(drone): remove all modules and configurations" (diff) | |
| download | world-9038f3998dcc66f2ca091100f857a518fe201212.tar.gz | |
fix(services/drone): enable drone
The URL for drone changed to https://ci.fcuny.net. The secrets also changed (and we remove the unencrypted file with secrets).
Diffstat (limited to 'modules/services/drone/runner-exec')
| -rw-r--r-- | modules/services/drone/runner-exec/default.nix | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/modules/services/drone/runner-exec/default.nix b/modules/services/drone/runner-exec/default.nix index 01cc11b..cbfbb9d 100644 --- a/modules/services/drone/runner-exec/default.nix +++ b/modules/services/drone/runner-exec/default.nix @@ -19,10 +19,12 @@ in "DRONE_SERVER_PROTO=https" "DRONE_RUNNER_CAPACITY=10" "CLIENT_DRONE_RPC_HOST=127.0.0.1:${toString cfg.port}" - "NIX_REMOTE=daemon" "PAGER=cat" ]; - BindPaths = [ "/nix/var/nix/daemon-socket/socket" ]; + BindPaths = [ + "/nix/var/nix/daemon-socket/socket" + "/var/run/docker.sock" + ]; BindReadOnlyPaths = [ "/etc/resolv.conf:/etc/resolv.conf" "/etc/resolvconf.conf:/etc/resolvconf.conf" @@ -49,6 +51,7 @@ in users.users.drone-runner-exec = { isSystemUser = true; group = "drone-runner-exec"; + extraGroups = [ "docker" ]; # Give access to the daemon }; users.groups.drone-runner-exec = { }; }; |