d68268da2e
This fixes a bug where the aarch64 OCI image had metadata saying it was an x86_64 OCI image. On top of that, I think the metadata was actually right (aside from Conduit's binary): since all other packages were being pulled from `pkgsHost`, an OCI image cross compiled for aarch64 from a different architecture would result in unexecutable binaries (e.g. tini) since they were compiled for the completely wrong architecture. from: https://gitlab.com/famedly/conduit/-/merge_requests/579 Signed-off-by: strawberry <strawberry@puppygock.gay>
128 lines
4 KiB
YAML
128 lines
4 KiB
YAML
stages:
|
|
- ci
|
|
- artifacts
|
|
|
|
variables:
|
|
# Makes some things print in color
|
|
TERM: ansi
|
|
|
|
before_script:
|
|
# Enable nix-command and flakes
|
|
- if command -v nix > /dev/null; then echo "experimental-features = nix-command flakes" >> /etc/nix/nix.conf; fi
|
|
|
|
# Add our own binary cache
|
|
- if command -v nix > /dev/null; then echo "extra-substituters = https://nix.computer.surgery/conduit" >> /etc/nix/nix.conf; fi
|
|
- if command -v nix > /dev/null; then echo "extra-trusted-public-keys = conduit:ZGAf6P6LhNvnoJJ3Me3PRg7tlLSrPxcQ2RiE5LIppjo=" >> /etc/nix/nix.conf; fi
|
|
|
|
# Add crane binary cache
|
|
- if command -v nix > /dev/null; then echo "extra-substituters = https://crane.cachix.org" >> /etc/nix/nix.conf; fi
|
|
- if command -v nix > /dev/null; then echo "extra-trusted-public-keys = crane.cachix.org-1:8Scfpmn9w+hGdXH/Q9tTLiYAE/2dnJYRJP7kl80GuRk=" >> /etc/nix/nix.conf; fi
|
|
|
|
# Add nix-community binary cache
|
|
- if command -v nix > /dev/null; then echo "extra-substituters = https://nix-community.cachix.org" >> /etc/nix/nix.conf; fi
|
|
- if command -v nix > /dev/null; then echo "extra-trusted-public-keys = nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=" >> /etc/nix/nix.conf; fi
|
|
|
|
# Install direnv and nix-direnv
|
|
- if command -v nix > /dev/null; then nix-env -iA nixpkgs.direnv nixpkgs.nix-direnv; fi
|
|
|
|
# Allow .envrc
|
|
- if command -v nix > /dev/null; then direnv allow; fi
|
|
|
|
# Set CARGO_HOME to a cacheable path
|
|
- export CARGO_HOME="$(git rev-parse --show-toplevel)/.gitlab-ci.d/cargo"
|
|
|
|
ci:
|
|
stage: ci
|
|
image: nixos/nix:2.19.2
|
|
script:
|
|
- direnv exec . engage
|
|
cache:
|
|
key: nix
|
|
paths:
|
|
- target
|
|
- .gitlab-ci.d
|
|
|
|
static:x86_64-unknown-linux-musl:
|
|
stage: artifacts
|
|
image: nixos/nix:2.19.2
|
|
script:
|
|
# Push artifacts and build requirements to binary cache
|
|
- ./bin/nix-build-and-cache .#static-x86_64-unknown-linux-musl
|
|
|
|
# Make the output less difficult to find
|
|
- cp result/bin/conduit conduit
|
|
artifacts:
|
|
paths:
|
|
- conduit
|
|
|
|
static:aarch64-unknown-linux-musl:
|
|
stage: artifacts
|
|
image: nixos/nix:2.19.2
|
|
script:
|
|
# Push artifacts and build requirements to binary cache
|
|
- ./bin/nix-build-and-cache .#static-aarch64-unknown-linux-musl
|
|
|
|
# Make the output less difficult to find
|
|
- cp result/bin/conduit conduit
|
|
artifacts:
|
|
paths:
|
|
- conduit
|
|
|
|
# Note that although we have an `oci-image-x86_64-unknown-linux-musl` output,
|
|
# we don't build it because it would be largely redundant to this one since it's
|
|
# all containerized anyway.
|
|
oci-image:x86_64-unknown-linux-gnu:
|
|
stage: artifacts
|
|
image: nixos/nix:2.19.2
|
|
script:
|
|
# Push artifacts and build requirements to binary cache
|
|
#
|
|
# Since the OCI image package is based on the binary package, this has the
|
|
# fun side effect of uploading the normal binary too. Conduit users who are
|
|
# deploying with Nix can leverage this fact by adding our binary cache to
|
|
# their systems.
|
|
- ./bin/nix-build-and-cache .#oci-image
|
|
|
|
# Make the output less difficult to find
|
|
- cp result oci-image.tar.gz
|
|
artifacts:
|
|
paths:
|
|
- oci-image.tar.gz
|
|
|
|
oci-image:aarch64-unknown-linux-musl:
|
|
stage: artifacts
|
|
needs:
|
|
# Wait for the static binary job to finish before starting so we don't have
|
|
# to build that twice for no reason
|
|
- static:aarch64-unknown-linux-musl
|
|
image: nixos/nix:2.19.2
|
|
script:
|
|
# Push artifacts and build requirements to binary cache
|
|
- ./bin/nix-build-and-cache .#oci-image-aarch64-unknown-linux-musl
|
|
|
|
# Make the output less difficult to find
|
|
- cp result oci-image.tar.gz
|
|
artifacts:
|
|
paths:
|
|
- docker-image.tar.gz
|
|
|
|
debian:x86_64-unknown-linux-gnu:
|
|
stage: artifacts
|
|
# See also `rust-toolchain.toml`
|
|
image: rust:1.75.0
|
|
script:
|
|
- apt-get update && apt-get install -y --no-install-recommends libclang-dev
|
|
- cargo install cargo-deb
|
|
- cargo deb
|
|
|
|
# Make the output less difficult to find
|
|
- mv target/debian/*.deb conduit.deb
|
|
artifacts:
|
|
paths:
|
|
- conduit.deb
|
|
cache:
|
|
key: debian
|
|
paths:
|
|
- target
|
|
- .gitlab-ci.d
|
|
|