|
|
|
@@ -11,10 +11,11 @@ Running standard Nix commands inside unprivileged Docker containers (which Gitea
|
|
|
|
|
This project solves all of the above by baking everything into a single, clean base image.
|
|
|
|
|
|
|
|
|
|
## ✨ Features
|
|
|
|
|
* **Base:** Official `cachix/devenv:latest` (Nix and Devenv pre-installed, flakes enabled).
|
|
|
|
|
* **Base:** Official `docker.gitea.com/runner-images:ubuntu-latest-slim`
|
|
|
|
|
* **Actions Compatible:** Pre-loaded with `nodejs`, `bash`, and `jq` so standard GitHub/Gitea Actions execute flawlessly.
|
|
|
|
|
* **Privilege Escalation:** Configured with passwordless `sudo` for smooth CI execution.
|
|
|
|
|
* **Pre-cleaned:** The `/homeless-shelter` artifact is purged during the build, guaranteeing a pure Nix environment out-of-the-box.
|
|
|
|
|
* **devenv available:** [devenv](https://devenv.sh/) is already installed and ready to use
|
|
|
|
|
|
|
|
|
|
## 🚀 Usage in your CI/CD
|
|
|
|
|
|
|
|
|
@@ -33,22 +34,16 @@ jobs:
|
|
|
|
|
# 1. Point the runner to use this custom image
|
|
|
|
|
container:
|
|
|
|
|
image: gitlab.julian-mutter.de/julian/nix-ci-runner:latest
|
|
|
|
|
# Provide credentials if your registry is private
|
|
|
|
|
credentials:
|
|
|
|
|
username: ${{ github.actor }}
|
|
|
|
|
password: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
|
|
|
|
|
|
steps:
|
|
|
|
|
# Node.js is pre-installed, so standard actions work instantly
|
|
|
|
|
- name: Checkout repository
|
|
|
|
|
uses: actions/checkout@v4
|
|
|
|
|
|
|
|
|
|
# Optional: Add caching (nix-community/cache-nix-action) here
|
|
|
|
|
|
|
|
|
|
# 2. Run your Nix commands natively
|
|
|
|
|
- name: Build Flake
|
|
|
|
|
run: nix build .#default
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
## 🔄 Maintenance
|
|
|
|
|
This repository contains a scheduled Gitea Action that runs **every Sunday**. It automatically pulls the latest `devenv` base image, reinstalls the dependencies, and pushes a fresh `latest` tag to the registry. Your pipelines will always have up-to-date Nix packages without manual intervention.
|
|
|
|
|
This repository contains a scheduled Gitea Action that runs **every Sunday**. It automatically pulls the latest base image, reinstalls the dependencies, and pushes a fresh `latest` tag to the registry. Your pipelines will always have up-to-date Nix packages without manual intervention.
|
|
|
|
|