Advance forge rollout, Ethereum rails, and NBC sources

scripts/deploy-ecp-forge.sh

@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+cd "${root}"
+
+target="${EVERY_CHANNEL_FORGE_TARGET_HOST:-root@git.every.channel}"
+build_host="${EVERY_CHANNEL_FORGE_BUILD_HOST:-${target}}"
+identity_file="${EVERY_CHANNEL_FORGE_SSH_IDENTITY:-$HOME/.ssh/id_ed25519}"
+
+if [[ ! -f "${identity_file}" ]]; then
+  echo "error: SSH identity not found: ${identity_file}" >&2
+  exit 2
+fi
+
+export NIX_SSHOPTS="-o BatchMode=yes -o IdentityAgent=none -o IdentitiesOnly=yes -i ${identity_file}"
+
+exec nix run nixpkgs#nixos-rebuild -- \
+  --flake "${root}#ecp-forge" \
+  --target-host "${target}" \
+  --build-host "${build_host}" \
+  --use-remote-sudo \
+  switch