mirror of
https://gitlab.com/TECHNOFAB/nix-gitlab-ci.git
synced 2025-12-13 02:30:09 +01:00
technofab
586fb88b9d
add multi-arch (arm & x64) image add multiple pipelines (ci now creates the "default" pipeline as a shorthand) simplify devenv flake input merge all cache options together, now $NIX_CI_CACHE_STRATEGY decides how the cache works setup_nix_ci and finalize_nix_ci are now flake packages and work standalone the specific image is not needed anymore, any image with the right dependencies works runner cache is not the default anymore (because it sucked most of the time) the pipeline is selected by $NIX_CI_PIPELINE_NAME or if empty by $CI_PIPELINE_SOURCE, so for the old behaviour $NIX_CI_PIPELINE_NAME=default is needed, future work will be needed to handle this more nicely
49 lines
1.7 KiB
YAML
49 lines
1.7 KiB
YAML
include:
|
|
- component: $CI_SERVER_FQDN/$CI_PROJECT_PATH/nix-gitlab-ci@$CI_COMMIT_SHA
|
|
inputs:
|
|
image_tag: $CI_COMMIT_SHORT_SHA
|
|
stages:
|
|
- build-images
|
|
- build
|
|
- trigger
|
|
build:image:
|
|
stage: build-images
|
|
parallel:
|
|
matrix:
|
|
- ARCH: ["x86_64-linux", "aarch64-linux"]
|
|
image: nixpkgs/nix-flakes:latest
|
|
before_script:
|
|
- nix profile install nixpkgs#buildah
|
|
- export PATH="$PATH:$HOME/.nix-profile/bin"
|
|
script:
|
|
- nix build .#image --system $ARCH
|
|
after_script:
|
|
- install -D result dist/nix-ci-$ARCH.tar.gz
|
|
artifacts:
|
|
paths:
|
|
- dist
|
|
deploy:image:
|
|
stage: build-images
|
|
needs:
|
|
- build:image
|
|
before_script:
|
|
- export REGISTRY_AUTH_FILE=''${HOME}/auth.json
|
|
- echo "$CI_REGISTRY_PASSWORD" | buildah login -u "$CI_REGISTRY_USER" --password-stdin $CI_REGISTRY
|
|
- mkdir -p /etc/containers && echo '{"default":[{"type":"insecureAcceptAnything"}]}' > /etc/containers/policy.json
|
|
- mkdir -p /var/tmp
|
|
script:
|
|
- export NORMALIZED_BRANCH=${CI_COMMIT_BRANCH/\//-}
|
|
- buildah manifest create localhost/nix-ci
|
|
- buildah manifest add localhost/nix-ci docker-archive:dist/nix-ci-x86_64-linux.tar.gz
|
|
- buildah manifest add localhost/nix-ci docker-archive:dist/nix-ci-aarch64-linux.tar.gz
|
|
- buildah manifest push --all localhost/nix-ci docker://''${CI_REGISTRY_IMAGE}/nix-ci:${CI_COMMIT_SHORT_SHA}
|
|
# branches
|
|
- |
|
|
if [ -z "$CI_COMMIT_TAG" ]; then
|
|
buildah manifest push --all localhost/nix-ci docker://''${CI_REGISTRY_IMAGE}/nix-ci:${NORMALIZED_BRANCH/main/latest}
|
|
fi
|
|
# tags
|
|
- |
|
|
if [ -n "$CI_COMMIT_TAG" ]; then
|
|
buildah manifest push --all localhost/nix-ci docker://''${CI_REGISTRY_IMAGE}/nix-ci:${CI_COMMIT_TAG}
|
|
fi
|