tamipes/forgejo-actions
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages 2 Wiki Activity Actions

feat: add nix-host and also transition to building both images with it
Some checks failed
Build and Push docker image / buildAndPush (nix) (push) Failing after 3s
Details
Build and Push docker image / buildAndPush (nix-host) (push) Failing after 3s
Details

Browse source
This commit is contained in:
Tamipes 2026-08-22 18:05:28 +02:00
parent a6c6db37b1
commit 8436b99f18
2 changed files with 50 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

42
flake.nix
View file

@ -12,6 +12,7 @@
let
system = "x86_64-linux";
pkgs = import nixpkgs { inherit system; };
lib = pkgs.lib;
in
{
packages.${system} = rec {
@ -55,5 +56,46 @@
};
};
};
nix-host = pkgs.callPackage
({ dockerTools }:
dockerTools.buildImage {
name = "nix-host";
tag = "latest";
runAsRoot = ''
${dockerTools.shadowSetup}
useradd -m -s /run/current-system/sw/bin/bash docker-ci
'';
# volumes to mount
# -v /nix:/nix:ro
# -v /run/current-system:/run/current-system
# -v ${pkgs.buildEnv ... }:/run/container-env
config = {
Entrypoint = [ "/run/current-system/sw/bin/bash" ];
User = "1000:1000";
Env = [
"NIX_REMOTE=daemon"
"PATH=${lib.concatStringsSep ":" [
"/run/current-system/sw/bin"
"/run/current-system/sw/sbin"
"/run/container-env/bin"
# "/run/container-env/sbin" # This might not be needed
]}"
"SSL_CERT_FILE=/run/current-system/etc/ssl/certs/ca-bundle.crt"
"GIT_SSL_CAINFO=/run/current-system/etc/ssl/certs/ca-bundle.crt"
"NIX_SSL_CERT_FILE=/run/current-system/etc/ssl/certs/ca-bundle.crt"
];
Labels = {
"org.opencontainers.image.title" = "Nix Daemon Client";
"org.opencontainers.image.source" = "https://git.tami.moe/tamipes/forgejo-actions";
"org.opencontainers.image.vendor" = "Tamipes";
"org.opencontainers.image.version" = "0.1.0";
"org.opencontainers.image.description" = "Nix container image which is designed to use the host system's nix daemon";
};
};
})
{ };
};
}