diff --git a/terraform/all-in-one.md b/terraform/all-in-one.md
index c30e41b7..eec7be3e 100644
--- a/terraform/all-in-one.md
+++ b/terraform/all-in-one.md
@@ -125,6 +125,7 @@ No resources.
| [nixos\_system\_attr](#input_nixos_system_attr) | The nixos system to deploy i.e. your-flake#nixosConfigurations.your-evaluated-nixos.config.system.build.toplevel or just your-evaluated-nixos.config.system.build.toplevel if you are not using flakes | `string` | n/a | yes |
| [no\_reboot](#input_no_reboot) | DEPRECATED: Use `phases` instead. Do not reboot after installation | `bool` | `false` | no |
| [phases](#input_phases) | Phases to run. See `nixos-anywhere --help` for more information | `set(string)` | [
"kexec",
"disko",
"install",
"reboot"
]
| no |
+| [special\_args](#input_special_args) | A map exposed as NixOS's `specialArgs` thru a file. | `string` | `"{}"` | no |
| [stop\_after\_disko](#input_stop_after_disko) | DEPRECATED: Use `phases` instead. Exit after disko formatting | `bool` | `false` | no |
| [target\_host](#input_target_host) | DNS host to deploy to | `string` | n/a | yes |
| [target\_port](#input_target_port) | SSH port used to connect to the target\_host after installing NixOS. If install\_port is not set than this port is also used before installing. | `number` | `22` | no |
diff --git a/terraform/all-in-one/main.tf b/terraform/all-in-one/main.tf
index 5689c64d..41ab51a2 100644
--- a/terraform/all-in-one/main.tf
+++ b/terraform/all-in-one/main.tf
@@ -3,6 +3,7 @@ module "system-build" {
attribute = var.nixos_system_attr
file = var.file
nix_options = var.nix_options
+ special_args = var.special_args
}
module "partitioner-build" {
@@ -10,6 +11,7 @@ module "partitioner-build" {
attribute = var.nixos_partitioner_attr
file = var.file
nix_options = var.nix_options
+ special_args = var.special_args
}
locals {
diff --git a/terraform/all-in-one/variables.tf b/terraform/all-in-one/variables.tf
index 981c4f8c..49b809b4 100644
--- a/terraform/all-in-one/variables.tf
+++ b/terraform/all-in-one/variables.tf
@@ -131,3 +131,9 @@ variable "nixos_facter_path" {
description = "Path to which to write a `facter.json` generated by `nixos-facter`."
default = ""
}
+
+variable "special_args" {
+ type = string
+ default = "{}"
+ description = "A map exposed as NixOS's `specialArgs` thru a file."
+}
diff --git a/terraform/nix-build.md b/terraform/nix-build.md
index f64098a9..cc3d2131 100644
--- a/terraform/nix-build.md
+++ b/terraform/nix-build.md
@@ -31,11 +31,12 @@ No modules.
## Inputs
-| Name | Description | Type | Default | Required |
-| ------------------------------------------------------------------- | -------------------------------------------------- | ------------- | ------- | :------: |
-| [attribute](#input_attribute) | the attribute to build, can also be a flake | `string` | n/a | yes |
-| [file](#input_file) | the nix file to evaluate, if not run in flake mode | `string` | `null` | no |
-| [nix\_options](#input_nix_options) | the options of nix | `map(string)` | `{}` | no |
+| Name | Description | Type | Default | Required |
+| ---------------------------------------------------------------------- | --------------------------------------------------- | ------------- | ------- | :------: |
+| [attribute](#input_attribute) | the attribute to build, can also be a flake | `string` | n/a | yes |
+| [file](#input_file) | the nix file to evaluate, if not run in flake mode | `string` | `null` | no |
+| [nix\_options](#input_nix_options) | the options of nix | `map(string)` | `{}` | no |
+| [special\_args](#input_special_args) | A map exposed as NixOS's `specialArgs` thru a file. | `string` | `"{}"` | no |
## Outputs
diff --git a/terraform/nix-build/main.tf b/terraform/nix-build/main.tf
index de73e5eb..87fadf84 100644
--- a/terraform/nix-build/main.tf
+++ b/terraform/nix-build/main.tf
@@ -9,6 +9,7 @@ data "external" "nix-build" {
attribute = var.attribute
file = var.file
nix_options = local.nix_options
+ special_args = var.special_args
}
}
output "result" {
diff --git a/terraform/nix-build/nix-build.sh b/terraform/nix-build/nix-build.sh
index 8e5babca..fbef8535 100755
--- a/terraform/nix-build/nix-build.sh
+++ b/terraform/nix-build/nix-build.sh
@@ -1,15 +1,34 @@
#!/usr/bin/env bash
set -efu
-declare file attribute nix_options
-eval "$(jq -r '@sh "attribute=\(.attribute) file=\(.file) nix_options=\(.nix_options)"')"
+declare file attribute nix_options special_args
+eval "$(jq -r '@sh "attribute=\(.attribute) file=\(.file) nix_options=\(.nix_options) special_args=\(.special_args)"')"
options=$(echo "${nix_options}" | jq -r '.options | to_entries | map("--option \(.key) \(.value)") | join(" ")')
if [[ -n ${file-} ]] && [[ -e ${file-} ]]; then
# shellcheck disable=SC2086
out=$(nix build --no-link --json $options -f "$file" "$attribute")
- printf '%s' "$out" | jq -c '.[].outputs'
else
- # shellcheck disable=SC2086
- out=$(nix build --no-link --json $options "$attribute")
- printf '%s' "$out" | jq -c '.[].outputs'
+ # pass the args in a pure fashion by extending the original config
+ if [[ ${special_args-} != "{}" ]]; then
+ rest="$(echo "${attribute}" | cut -d "#" -f 2)"
+ # e.g. config_path=nixosConfigurations.aarch64-linux.myconfig
+ config_path="${rest%.config.*}"
+ # e.g. config_attribute=config.system.build.toplevel
+ config_attribute="config.${rest#*.config.}"
+
+ # grab flake nar from error message
+ flake_rel="$(echo "${attribute}" | cut -d "#" -f 1)"
+ # e.g. flake_rel="."
+ flake_dir="$(readlink -f "${flake_rel}")"
+ flake_nar="$(nix build --expr "builtins.getFlake ''git+file://${flake_dir}?narHash=sha256-0000000000000000000000000000000000000000000=''" 2>&1 | grep -Po "(?<=got ')sha256-[^']*(?=')")"
+ # substitute variables into the template
+ nix_expr="(builtins.getFlake ''file://${flake_dir}/flake.nix?narHash=${flake_nar}'').${config_path}.extendModules { specialArgs = builtins.fromJSON ''${special_args}''; }"
+ # inject `special_args` into nixos config's `specialArgs`
+ # shellcheck disable=SC2086
+ out=$(nix build --no-link --json ${options} --expr "${nix_expr}" "${config_attribute}")
+ else
+ # shellcheck disable=SC2086
+ out=$(nix build --no-link --json ${options} "$attribute")
+ fi
fi
+printf '%s' "$out" | jq -c '.[].outputs'
diff --git a/terraform/nix-build/variables.tf b/terraform/nix-build/variables.tf
index d5b9daf4..d8ad6ddb 100644
--- a/terraform/nix-build/variables.tf
+++ b/terraform/nix-build/variables.tf
@@ -14,3 +14,9 @@ variable "nix_options" {
description = "the options of nix"
default = {}
}
+
+variable "special_args" {
+ type = string
+ default = "{}"
+ description = "A map exposed as NixOS's `specialArgs` thru a file."
+}