feat(nixos): vzbot235 and CI changes

Author: truelecter

.github/workflows/build-aarch64-host.yaml

@@ -0,0 +1,30 @@
+name: Build aarch64 host
+on:
+  workflow_call:
+    inputs:
+      configuration:
+        required: true
+        type: string
+    secrets:
+      CACHIX_AUTH_TOKEN:
+        required: true
+jobs:
+  build_system:
+    runs-on: ubuntu-22.04-arm
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+      - name: Install Nix
+        uses: cachix/install-nix-action@v30
+        with:
+          nix_path: nixpkgs=channel:nixos-24.11
+          extra_nix_config: |
+            access-tokens = github.com=${{ secrets.GITHUB_TOKEN }}
+      - uses: cachix/cachix-action@v15
+        with:
+          name: truelecter
+          extraPullNames: cuda-maintainers, mic92, nix-community, nrdxp
+          authToken: "${{ secrets.CACHIX_AUTH_TOKEN }}"
+      - name: Build system configuration
+        run: |
+          nix build ".#nixosConfigurations.${{ inputs.configuration }}.config.system.build.toplevel"

.github/workflows/build-oracle.yaml

@@ -0,0 +1,11 @@
+name: Build oracle
+on:
+  push:
+  workflow_dispatch:
+
+jobs:
+  call-workflow-passing-data:
+    uses: ./.github/workflows/build-aarch64-host.yaml
+    with:
+      configuration: oracle
+    secrets: inherit

.github/workflows/build-voron.yaml

@@ -0,0 +1,11 @@
+name: Build voron
+on:
+  push:
+  workflow_dispatch:
+
+jobs:
+  call-workflow-passing-data:
+    uses: ./.github/workflows/build-aarch64-host.yaml
+    with:
+      configuration: voron
+    secrets: inherit

.github/workflows/build-vzbot235.yaml

@@ -0,0 +1,11 @@
+name: Build vzbot235
+on:
+  push:
+  workflow_dispatch:
+
+jobs:
+  call-workflow-passing-data:
+    uses: ./.github/workflows/build-aarch64-host.yaml
+    with:
+      configuration: vzbot235
+    secrets: inherit

.github/workflows/build-x86-devshell.yaml

@@ -5,7 +5,7 @@ on:
 
 jobs:
   build_shell:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - name: Checkout repository
         uses: actions/checkout@v3

.github/workflows/build-x86-host.yaml

@@ -10,7 +10,7 @@ on:
         required: true
 jobs:
   build_system:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - name: Checkout repository
         uses: actions/checkout@v3

.sops.yaml

@@ -14,6 +14,7 @@ keys:
   - &print-farm 3901b2e5705df031bb41338c5ba8634804f9940d
   - &sirius age1vpflrapt4lz5akw8jcft6lhhq0h26ptjq6ce8da27gzuvfdmtqvs8rk8h6
   - &nas 70732b3ee3a1c10a8b6b849a959a413b28c00df9
+  - &vzbot235 age1whtmnnc0ar8u0htwayr4qkukeyq05jt397prfzkkak0aec29ystsyfzdkt
 
 creation_rules:
   - path_regex: cells/secrets/sops/envs.yaml
@@ -44,6 +45,7 @@ creation_rules:
           - *print-farm
         age:
           - *sirius
+          - *vzbot235
 
   - path_regex: cells/secrets/sops/k3s.yaml
     key_groups:
@@ -71,6 +73,7 @@ creation_rules:
           - *nas
         age:
           - *sirius
+          - *vzbot235
 
   - path_regex: cells/secrets/sops/ssh.*$
     key_groups:

cells/darwin/darwinProfiles/system-preferences/dock.nix

@@ -6,7 +6,7 @@
     dashboard-in-overlay = false;
     enable-spring-load-actions-on-all-items = false;
     expose-animation-duration = 0.1;
-    expose-group-by-app = true;
+    expose-group-apps = true;
     launchanim = false;
     mineffect = "genie";
     minimize-to-application = true;

cells/nixos/hosts/voron/klipper/configs/klipper.d/main.cfg

@@ -35,5 +35,3 @@ max_z_velocity: 20
 max_z_accel: 350
 square_corner_velocity: 20.0
 minimum_cruise_ratio: 0.3
-
-[respond]

cells/nixos/hosts/voron/wifi.nix

@@ -9,63 +9,27 @@
   networking.wireless = {
     enable = true;
     interfaces = ["wlan0"];
-    networks."Xata290" = {
-      psk = "@WIFI_PASSWORD@";
-      priority = 5;
-    };
-    networks."Xata290.5" = {
-      psk = "@WIFI_PASSWORD@";
-      priority = 10;
+
+    networks = {
+      "Xata290.5" = {
+        pskRaw = "ext:WIFI_PASSWORD";
+        priority = 10;
+      };
+
+      "Xata290" = {
+        pskRaw = "ext:WIFI_PASSWORD";
+        priority = 5;
+      };
     };
-    environmentFile = config.sops.secrets.xata-password-env.path;
+
+    secretsFile = config.sops.secrets.xata-password-env.path;
     extraConfig = ''
       ctrl_interface=DIR=/var/run/wpa_supplicant GROUP=wifi
-      country=UA
+      country=US
       update_config=1
     '';
   };
 
-  # TODO: make it possible to choose between ant1,ant2 and noant, make PR to nixos-hardware
-  hardware = {
-    deviceTree = {
-      overlays = [
-        # Equivalent to dtparam=ant2
-        {
-          name = "choose-antenna";
-          dtsText = ''
-            /dts-v1/;
-            /plugin/;
-            / {
-              compatible = "brcm,bcm2711";
-              fragment@0 {
-                // Despite this being ant1 instead of ant2,
-                // CM4 will use external antenna. This is because
-                // ant1 is enabled by default and switching
-                // GPIO pins causes it to activate external antenna
-                target = <&ant1>;
-
-                __overlay__ {
-                  gpios = <7 0>;
-                };
-              };
-
-              fragment@1 {
-                target = <&ant2>;
-
-                __overlay__ {
-                  // output-low is still present here
-                  gpios = <3 0>;
-                };
-              };
-            };
-          '';
-        }
-      ];
-    };
-    enableRedistributableFirmware = lib.mkForce false;
-    firmware = [pkgs.raspberrypiWirelessFirmware];
-  };
-
   boot = {
     extraModprobeConfig = ''
       options cfg80211 ieee80211_regdom="UA"