buskerud: add libvirtd

flake.lock

@@ -213,11 +213,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1716150352,
-        "narHash": "sha256-c13lzYbLmbrcbEdPTYZYtlX2Qsz1W+2sLsIMGShPgwo=",
+        "lastModified": 1718404592,
+        "narHash": "sha256-Ud8pD0mxmbfvwBXKy2q3Yp8r1EofaTcodZtI3fbnfDY=",
         "ref": "refs/heads/master",
-        "rev": "2cab4df4b119e08a1f90ea1c944652cd78b4d478",
-        "revCount": 459,
+        "rev": "6e4a79ed3ddae8dfc80eb8af1789985d07bcf297",
+        "revCount": 463,
         "type": "git",
         "url": "https://git.pvv.ntnu.no/Projects/nettsiden.git"
       },

flake.nix

@@ -27,15 +27,9 @@
     grzegorz.inputs.nixpkgs.follows = "nixpkgs-unstable";
     grzegorz-clients.url = "github:Programvareverkstedet/grzegorz-clients";
     grzegorz-clients.inputs.nixpkgs.follows = "nixpkgs";
-
-    ozai.url = "git+https://git.pvv.ntnu.no/Projects/ozai.git";
-    ozai.inputs.nixpkgs.follows = "nixpkgs";
-    ozai-webui.url = "git+https://git.pvv.ntnu.no/adriangl/ozai-webui.git";
-    ozai-webui.inputs.nixpkgs.follows = "nixpkgs";
-
   };
 
-  outputs = { self, nixpkgs, nixpkgs-unstable, pvv-nettsiden, sops-nix, disko, ozai, ozai-webui, ... }@inputs:
+  outputs = { self, nixpkgs, nixpkgs-unstable, pvv-nettsiden, sops-nix, disko, ... }@inputs:
   let
     nixlib = nixpkgs.lib;
     systems = [
@@ -127,12 +121,7 @@
           inputs.grzegorz-clients.nixosModules.grzegorz-webui
         ];
       };
-      buskerud = stableNixosConfig "buskerud" {
-        modules = [
-          ozai.nixosModules.ozai
-          ozai-webui.nixosModules.ozai-webui
-        ];
-      };
+      buskerud = stableNixosConfig "buskerud" { };
     };
 
     devShells = forAllSystems (system: {

hosts/buskerud/configuration.nix

@@ -4,8 +4,8 @@
     ./hardware-configuration.nix
     ../../base.nix
     ../../misc/metrics-exporters.nix
-    
-    ./services/ozai.nix
+
+    ./services/libvirt.nix
   ];
 
   # buskerud does not support efi?

hosts/buskerud/services/libvirt.nix

@@ -0,0 +1,10 @@
+{ config, pkgs, lib, ... }:
+{
+  virtualisation.libvirtd.enable = true;
+  programs.dconf.enable = true;
+  boot.kernelModules = [ "kvm-intel" ];
+
+  # On a gui-enabled machine, connect with:
+  # $ virt-manager --connect "qemu+ssh://buskerud/system?socket=/var/run/libvirt/libvirt-sock"
+}
+

hosts/buskerud/services/ozai.nix

@@ -1,33 +0,0 @@
-{ config, pkgs, lib, ... }:
-let
-domain = "buskerud.pvv.ntnu.no";
-in
-{
-
-  services.ozai = {
-    enable = true;
-    host = "0.0.0.0";
-    port = 8000;
-  };
-
-  services.ozai-webui = {
-    enable = true;
-    port = 8080;
-    host = "0.0.0.0";
-  };
-
-  services.nginx.virtualHosts."${domain}" = {
-      forceSSL = true;
-      enableACME = true;
-      locations."/azul/" = {
-        proxyWebsockets = true;
-        proxyPass = "http://${config.services.ozai-webui.host}:${config.services.ozai-webui.port}";
-      };
-       locations."/ozai/" = {
-        proxyWebsockets = true;
-        proxyPass = "http://${config.services.ozai.host}:${config.services.ozai.port}";
-      };
-    };
-
-
-}

users/felixalb.nix

@@ -1,8 +1,12 @@
-{ pkgs, ... }:
+{ pkgs, lib, config, ... }:
 {
   users.users.felixalb = {
     isNormalUser = true;
-    extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user.
+    extraGroups = [
+      "wheel"
+    ] ++ lib.optionals ( config.users.groups ? "libvirtd" ) [
+      "libvirtd"
+    ];
     shell = pkgs.zsh;
     openssh.authorizedKeys.keys = [
       "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDKzPICGew7uN0cmvRmbwkwTCodTBUgEhkoftQnZuO4Q felixalbrigtsen@gmail.com"