chore(CI): modify cache_files and add ssl ca certs to test job

.gitlab-ci.yml

@@ -47,6 +47,9 @@ deploy:image:
 include:
 - component: $CI_SERVER_FQDN/$CI_PROJECT_PATH/nix-gitlab-ci@$CI_COMMIT_SHORT_SHA
   inputs:
+    cache_files:
+    - flake.*
+    - nix/repo/ci.nix
     version: $CI_COMMIT_SHORT_SHA
 stages:
 - build-images

nix/repo/ci.nix

@@ -1,10 +1,11 @@
 {inputs, ...}: let
-  inherit (inputs) cilib;
+  inherit (inputs) pkgs cilib;
 in
   cilib.mkCI {
     config.soonix = {
       componentUrl = "$CI_SERVER_FQDN/$CI_PROJECT_PATH/nix-gitlab-ci";
       componentVersion = "$CI_COMMIT_SHORT_SHA";
+      componentInputs.cache_files = ["flake.*" "nix/repo/ci.nix"];
       # bootstrapping still needs to be done in the gitlab-ci.yml directly,
       # the child pipeline can then use the built images to test them
       extraData = {
@@ -63,6 +64,10 @@ in
           script = [
             "nix run .#tests -- --junit=junit.xml"
           ];
+          variables = {
+            "SSL_CERT_FILE" = "${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt";
+            "NIX_SSL_CERT_FILE" = "${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt";
+          };
           allow_failure = true;
           artifacts = {
             when = "always";

tests/modules_test.nix

@@ -34,6 +34,7 @@
         expected = {
           stages = [".pre" "test" ".post"];
           "test" = {
+            image = "$NIX_CI_IMAGE";
             stage = "test";
             before_script = ["source setup_nix_ci \"gitlab-ci:pipeline:test:job-deps:test\""];
             script = ["echo hello world"];