Skip to content

backend/enh/docker-push-for-ci #26

backend/enh/docker-push-for-ci

backend/enh/docker-push-for-ci #26

Workflow file for this run

name: CI
on:
push:
branches: ["main"] # Only trigger on pushes to the main branch
pull_request:
branches: ["*"]
workflow_dispatch:
jobs:
build:
runs-on: x86_64-linux
steps:
- uses: actions/checkout@v4
- uses: cachix/cachix-action@v15
with:
name: nammayatri
authToken: "${{ secrets.CACHIX_AUTH_TOKEN }}"
skipPush: true
- name: Build all flake outputs
run: om ci
- name: Login to GitHub Container Registry
if: github.event_name == 'push' && github.event.pull_request.merged == true
uses: docker/login-action@v3
with:
registry: ghcr.io
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Build and push Docker image
if: github.event_name == 'push' && github.event.pull_request.merged == true
run: |
docker load -i $(nix build .#dockerImage --no-link --print-out-paths)
IMAGE_NAME="$(nix eval --json .#packages.x86_64-linux."$ARG1".buildArgs | jq -r '"\(.name):\(.tag)"')"
echo "Built and loaded: ''${IMAGE_NAME}"
# Use a temp directory as $HOME, because 'docker login' stores the
# password insecurely.
HOME="$(mktemp -d)"
export HOME
# Remove the image so it doesn't eat up disk space over time.
trap 'docker rmi "''${IMAGE_NAME}"; rm -rf "$HOME"' EXIT
docker push "$IMAGE_NAME"
echo "Pushed image: $IMAGE_NAME"