fix(ci): delete unused TA workflow (#896) #2927
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Nix CI | |
| on: | |
| pull_request: | |
| workflow_dispatch: | |
| workflow_call: | |
| secrets: | |
| ORB_GIT_HUB_TOKEN: | |
| required: true | |
| CACHIX_AUTH_TOKEN: | |
| required: false | |
| push: | |
| branches: | |
| - main | |
| - prod | |
| tags: | |
| - '**' | |
| env: | |
| CI_NIXOS_HOSTNAMES: ryan-worldcoin-hil worldcoin-hil-munich-0 worldcoin-hil-munich-1 worldcoin-hil-munich-2 worldcoin-hil-jabil-0 | |
| jobs: | |
| fmt: | |
| name: Format | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # pin@v3 | |
| with: | |
| token: ${{ secrets.ORB_GIT_HUB_TOKEN }} | |
| - uses: cachix/install-nix-action@0b0e072294b088b73964f1d72dfdac0951439dbd # pin@v31.8.4 | |
| with: | |
| github_access_token: ${{ secrets.ORB_GIT_HUB_TOKEN }} | |
| - uses: cachix/cachix-action@ad2ddac53f961de1989924296a1f236fcfbaa4fc # pin@v15 | |
| continue-on-error: true | |
| with: | |
| name: worldcoin | |
| authToken: ${{ secrets.CACHIX_AUTH_TOKEN }} | |
| - name: Print environment | |
| run: | | |
| uname -a | |
| nix develop -c env | |
| - name: Check Nix formatting | |
| run: | | |
| nix develop -c \ | |
| nixpkgs-fmt --check . | |
| shells: | |
| name: Check that devshells work | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # pin@v3 | |
| with: | |
| token: ${{ secrets.ORB_GIT_HUB_TOKEN }} | |
| - uses: cachix/install-nix-action@0b0e072294b088b73964f1d72dfdac0951439dbd # pin@v31.8.4 | |
| with: | |
| github_access_token: ${{ secrets.ORB_GIT_HUB_TOKEN }} | |
| - uses: cachix/cachix-action@ad2ddac53f961de1989924296a1f236fcfbaa4fc # pin@v15 | |
| continue-on-error: true | |
| with: | |
| name: worldcoin | |
| authToken: ${{ secrets.CACHIX_AUTH_TOKEN }} | |
| - name: Authorize private git repos | |
| run: git config --global url."https://${{ secrets.ORB_GIT_HUB_TOKEN }}@github.com".insteadOf https://github.com | |
| - name: Confirm HIL FhsEnv works | |
| run: | | |
| set -Eeux -o pipefail | |
| # build only due to bwrap permissions in github owned runners | |
| nix build --print-build-logs .#tegra-bash | |
| - name: Confirm devshell works | |
| run: | | |
| set -Eeux -o pipefail | |
| OUTPUT="$(nix develop --print-build-logs --command -- echo testoutput)" | |
| [[ "${OUTPUT}" == "testoutput" ]] | |
| nixos: | |
| name: Build NixOS Machines | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # pin@v3 | |
| with: | |
| token: ${{ secrets.ORB_GIT_HUB_TOKEN }} | |
| - uses: cachix/install-nix-action@0b0e072294b088b73964f1d72dfdac0951439dbd # pin@v31.8.4 | |
| with: | |
| github_access_token: ${{ secrets.ORB_GIT_HUB_TOKEN }} | |
| - uses: cachix/cachix-action@ad2ddac53f961de1989924296a1f236fcfbaa4fc # pin@v15 | |
| continue-on-error: true | |
| with: | |
| name: worldcoin | |
| authToken: ${{ secrets.CACHIX_AUTH_TOKEN }} | |
| - name: Authorize private git repos | |
| run: git config --global url."https://${{ secrets.ORB_GIT_HUB_TOKEN }}@github.com".insteadOf https://github.com | |
| - name: Build NixOS configurations | |
| run: | | |
| set -Eeux -o pipefail | |
| # TODO: Build *all* configurations. | |
| for hostname in ${CI_NIXOS_HOSTNAMES}; do | |
| nix build --print-build-logs .#nixosConfigurations.${hostname}.config.system.build.toplevel | |
| done | |
| liveusb: | |
| name: Build NixOS Installer | |
| runs-on: public-ubuntu-24.04-32core | |
| steps: | |
| - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # pin@v3 | |
| with: | |
| token: ${{ secrets.ORB_GIT_HUB_TOKEN }} | |
| - uses: cachix/install-nix-action@0b0e072294b088b73964f1d72dfdac0951439dbd # pin@v31.8.4 | |
| with: | |
| github_access_token: ${{ secrets.ORB_GIT_HUB_TOKEN }} | |
| - uses: cachix/cachix-action@ad2ddac53f961de1989924296a1f236fcfbaa4fc # pin@v15 | |
| continue-on-error: true | |
| with: | |
| name: worldcoin | |
| authToken: ${{ secrets.CACHIX_AUTH_TOKEN }} | |
| - name: Authorize private git repos | |
| run: git config --global url."https://${{ secrets.ORB_GIT_HUB_TOKEN }}@github.com".insteadOf https://github.com | |
| - name: Build Disko Image Script | |
| run: | | |
| set -Eeuxo pipefail | |
| nix build --print-build-logs .#nixosConfigurations.liveusb.config.system.build.diskoImagesScript | |
| ls -alhR ./result | |
| - name: Run Disko Image Script | |
| run: | | |
| set -Eeuxo pipefail | |
| sudo prlimit --pid $$ --nofile=500000:500000 | |
| ./result --build-memory 1024 | |
| ls -lh *.raw | |
| - name: Compress artifact | |
| run: | | |
| set -Eeuxo pipefail | |
| mkdir -p artifacts | |
| gzip --stdout liveusb.raw > artifacts/liveusb.raw.gz | |
| ls -aRsh artifacts | |
| - name: Upload Artifacts | |
| uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # pin@v4.3.3 | |
| if: github.event_name == 'workflow_dispatch' || format('refs/heads/{0}', github.event.repository.default_branch) == github.ref | |
| with: | |
| # upload v4 doesn't support writing multiple times to the same artifact name. | |
| # so its important that we name it after the workflow and not something | |
| # general like "artifacts" | |
| name: nix | |
| path: artifacts/* | |
| compression-level: 0 | |
| if-no-files-found: error | |
| retention-days: 14 |