Install seaweedfs from unstable on compute nodes.

flake.lock

@@ -69,11 +69,28 @@
         "type": "github"
       }
     },
+    "nixpkgs-unstable": {
+      "locked": {
+        "lastModified": 1688049487,
+        "narHash": "sha256-100g4iaKC9MalDjUW9iN6Jl/OocTDtXdeAj7pEGIRh4=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "4bc72cae107788bf3f24f30db2e2f685c9298dc9",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
     "root": {
       "inputs": {
         "deploy-rs": "deploy-rs",
         "impermanence": "impermanence",
-        "nixpkgs": "nixpkgs"
+        "nixpkgs": "nixpkgs",
+        "nixpkgs-unstable": "nixpkgs-unstable"
       }
     },
     "utils": {

flake.nix

@@ -6,13 +6,22 @@
     deploy-rs.inputs.nixpkgs.follows = "nixpkgs";
     impermanence.url = "github:nix-community/impermanence";
     nixpkgs.url = "github:NixOS/nixpkgs/nixos-23.05";
+    nixpkgs-unstable.url = "github:NixOS/nixpkgs/nixos-unstable";
   };
 
-  outputs = { self, nixpkgs, deploy-rs, ... }@inputs:
+  outputs = { self, nixpkgs, nixpkgs-unstable, deploy-rs, ... }@inputs:
     let
       inherit (self);
+      system = "x86_64-linux";
+
+      overlay-unstable = final: prev: {
+        unstable = nixpkgs-unstable.legacyPackages.${prev.system};
+      };
+
       mkNixos = modules: nixpkgs.lib.nixosSystem {
-        inherit modules;
+        modules = [
+          ({ config, pkgs, ... }: { nixpkgs.overlays = [ overlay-unstable ]; })
+        ] ++ modules;
         specialArgs = { inherit inputs self; };
       };
     in {

hosts/common/compute-node.nix

@@ -3,6 +3,7 @@
   imports = [
     ./impermanence.nix
     ./nomad.nix
+    ./seaweedfs.nix
     ./sshd.nix
     ./user-ppetru.nix
     ./unattended-encryption.nix

hosts/common/seaweedfs.nix

@@ -0,0 +1,14 @@
+{ pkgs, ... }:
+{
+  environment.persistence."/persist".directories = [
+  ];
+
+  environment.systemPackages = [
+    pkgs.unstable.seaweedfs
+  ];
+
+  networking.firewall = {
+    allowedTCPPorts = [ ];
+    allowedUDPPorts = [ ];
+  };
+}