embrace 🫂

CHANGELOG.md

@@ -1,3 +1,4 @@
+- Use `clan.lol` as a remote builder for `hermes-macos`
 - Added `phi-nixos` to `clan`
 - Changed `nixpkgs.hostPlatform` to be automatically set by `mkConfiguration` rather than `hardware-configuration.nix` and passed as `system` to `nixpkgs.lib.nixosSystem`
 - Changed `no-ifd` patch to change `hosts/hermes/hardware-configuration.nix` instead of `flake.nix` to reduce churn

hosts/hermes/darwin-configuration.nix

@@ -36,5 +36,19 @@
   nix.linux-builder.config.virtualisation.darwin-builder.diskSize = 50
     * 1024; # 50 GiB
 
+  nix.distributedBuilds = true;
+
+  nix.buildMachines = [{
+    # Use ssh-ng for trustless remote building of input-addressed derivations
+    # i.e. not requiring remote user to be a trusted-user
+    protocol = "ssh-ng";
+    hostName = "clan.lol";
+    sshUser = "enzime";
+    sshKey = "/etc/ssh/ssh_host_ed25519_key";
+    system = "x86_64-linux";
+    supportedFeatures = [ "kvm" "benchmark" "big-parallel" ];
+    maxJobs = 96;
+  }];
+
   system.stateVersion = 5;
 }