asxpi/iac
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

ci: evaluate NixOS in the job, build on the server

Browse source 
The first run failed with "home directory /homeless-shelter exists":
job containers are unprivileged, Nix cannot sandbox builds in them, and
unsandboxed builds trip over each other's leftovers.

Evaluate the system in the job instead, which still catches broken
options before main, and let nixos-rebuild build on the target host,
where the Nix daemon has a proper sandbox.

Assisted-by: Claude:fable-5-2
This commit is contained in:
Sergei Poljanski 2026-11-12 17:05:14 +04:00
commit 0b331bc5f1
3 changed files with 11 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

2
README.md
View file

@ -39,7 +39,7 @@ blog, czsk, vhpbot, storage). Each deploys from its own repository into
Edit, push a branch, merge to `main`.
- A branch push builds the NixOS system and dry-runs Ansible against
- A branch push evaluates the NixOS system and dry-runs Ansible against
asxpio-ops.
- `main` then switches asxpio-services to the new system and applies
Ansible to asxpio-ops.