add vault-sink

packages/skaffold.nix

@@ -0,0 +1,29 @@
+with import <nixpkgs> {};
+
+stdenv.mkDerivation {
+  name = "skaffold";
+  version = "1.17.0";
+  src = fetchurl {
+    url = "https://github.com/GoogleContainerTools/skaffold/releases/download/v1.17.0/skaffold-linux-amd64";
+    sha256 = "734a23dfe90b01feb927c44168c93b72afd05d8b978319b4670dc7e6a5e887fe";
+  };
+
+  nativeBuildInputs = [
+    autoPatchelfHook
+  ];
+
+  unpackPhase = ''
+    cp $src skaffold
+  '';
+
+  installPhase = ''
+    install -m 755 -D skaffold $out/bin/skaffold
+  '';
+
+  meta = with stdenv.lib; {
+    homepage = "https://skaffold.dev";
+    description = "skaffold";
+    platforms = platforms.linux;
+    maintainers = with maintainers; [ foosinn ];
+  };
+}

roles/admin.nix

@@ -16,6 +16,8 @@ in {
 
     podman-compose
     fuse-overlayfs
+
+    (import ../packages/skaffold.nix)
   ];
 
   virtualisation.podman = {

roles/desktop.nix

@@ -100,6 +100,7 @@ in {
     wl-clipboard
     xdg_utils
     xfce.thunar
+    xfce.thunar-volman
     unstable.keepassxc
     (
       pkgs.writeTextFile {
@@ -127,6 +128,8 @@ in {
     )
   ];
 
+  services.gvfs.enable = true;
+
   hardware.bluetooth.enable = true;
   services.blueman.enable = true;
 

roles/dev.nix

@@ -6,10 +6,12 @@ in {
   environment.systemPackages = with pkgs; [
     gnumake
     go
-    python37
-    python37Packages.pyls-black
-    python37Packages.pyls-isort
-    python37Packages.pyls-mypy
+    python38
+    python38Packages.pyls-black
+    python38Packages.pyls-isort
+    python38Packages.pyls-mypy
+    python38Packages.python-language-server
+    python38Packages.requests
     rustup
     unstable.golangci-lint
     unstable.gopls