diff --git a/.github/workflows/download-latest.yml b/.github/workflows/download-latest.yml index 84105d5..e86a615 100644 --- a/.github/workflows/download-latest.yml +++ b/.github/workflows/download-latest.yml @@ -59,7 +59,7 @@ jobs: commit-data: runs-on: ubuntu-latest needs: [download-binary] - if: always() && ${{ needs.download-binary.outputs.DETERMINATE_BINARY_DIFF != 0 }} + if: ${{ needs.download-binary.outputs.DETERMINATE_BINARY_DIFF != 0 }} steps: - name: Reset outputs from previous job run: | diff --git a/.github/workflows/flake-update.yml b/.github/workflows/flake-update.yml deleted file mode 100644 index e86a615..0000000 --- a/.github/workflows/flake-update.yml +++ /dev/null @@ -1,112 +0,0 @@ -name: "Update Determinate Nix binary" -on: - repository_dispatch: - workflow_dispatch: - schedule: - - cron: "00 12 * * *" - push: - paths: - - '.github/workflows/*' -jobs: - download-binary: - runs-on: ubuntu-latest - if: github.ref == 'refs/heads/main' # ensure workflow_dispatch only runs on main - steps: - - name: Checkout repository - uses: actions/checkout@v4 - - name: Get metadata - run: | - url=https://us-east-2.swim.install.determinate.systems/nix-installer/stable/x86_64-linux - while redirect_url=$( - curl -I -s -S -f -w "%{redirect_url}\n" -o /dev/null "$url" - ); do - echo "$url" - url=$redirect_url - [[ -z "$url" ]] && break - final_url=$url - done - echo "DETERMINATE_URL="$(printf "$final_url") | tee -a $GITHUB_ENV - - determinate_version=$(echo $final_url | sed -E -e 's/.*(v[0-9.]+).*/\1/g') - echo "DETERMINATE_VERSION=$(echo $determinate_version)" | tee -a $GITHUB_ENV - - binary_name=$(echo $final_url | sed -E -e 's/.*\/(.*)/\1/g') - echo "DETERMINATE_BINARY=$(echo $binary_name)" | tee -a $GITHUB_ENV - - name: Download binary - id: binary-check - run: | - wget --content-disposition -nv "$DETERMINATE_URL" - - if git diff --quiet && git ls-files --error-unmatch "$DETERMINATE_BINARY"; then - echo "DETERMINATE_BINARY_DIFF=0" | tee -a "$GITHUB_OUTPUT" - else - echo "DETERMINATE_BINARY_DIFF=1" | tee -a "$GITHUB_OUTPUT" - fi - env: - DETERMINATE_URL: ${{ env.DETERMINATE_URL }} - DERMINATE_BINARY: ${{ env.DETERMINATE_BINARY }} - - uses: actions/upload-artifact@v3 - with: - name: determinate-binary - path: ${{ env.DETERMINATE_BINARY }} - compression-level: 9 - if-no-files-found: error - retention-period: 5 - outputs: - DETERMINATE_BINARY_DIFF: ${{ steps.binary-check.outputs.DETERMINATE_BINARY_DIFF }} - DETERMINATE_BINARY: ${{ env.DETERMINATE_BINARY }} - DETERMINATE_VERSION: ${{ env.DETERMINATE_VERSION }} - commit-data: - runs-on: ubuntu-latest - needs: [download-binary] - if: ${{ needs.download-binary.outputs.DETERMINATE_BINARY_DIFF != 0 }} - steps: - - name: Reset outputs from previous job - run: | - echo "DETERMINATE_BINARY=${{ needs.download-binary.outputs.DETERMINATE_BINARY }}" | tee -a "$GITHUB_ENV" - echo "DETERMINATE_VERSION=${{ needs.download-binary.outputs.DETERMINATE_VERSION }}" | tee -a "$GITHUB_ENV" - - name: Checkout repository - uses: actions/checkout@v4 - - uses: actions/download-artifact@v3 - with: - name: determinate-binary - - name: Git config - run: | - git config user.name github-actions - git config user.email github-actions@github.com - git config lfs.https://nayeonie.com/ahuston-0/determinate-nix-mirror.git/info/lfs.locksverify true - - name: Commit binary - run: | - git add . - git commit -m "automated download workflow" - commit_id=$(git rev-parse HEAD) - echo "COMMIT_ID=$(echo $commit_id)" >> $GITHUB_ENV - - name: Tag new target - run: | - git tag -f "$DETERMINATE_VERSION" "$COMMIT_ID" - env: - DETERMINATE_VERSION: ${{ env.DETERMINATE_VERSION }} - COMMIT_ID: ${{ env.COMMIT_ID }} - - name: Push new tag - run: | - git push origin "$DETERMINATE_VERSION" --force - git checkout main - git merge "$DETERMINATE_VERSION" - git push - env: - DETERMINATE_VERSION: ${{ env.DETERMINATE_VERSION }} - - name: Publish release - uses: akkuman/gitea-release-action@v1 - env: - NODE_OPTIONS: '--experimental-fetch' # if nodejs < 18 - with: - files: ${{ env.DETERMINATE_BINARY }} - name: ${{ env.DETERMINATE_VERSION }} - tag_name: ${{ env.DETERMINATE_VERSION }} - target_commitish_value: ${{ env.COMMIT_ID }} - sha256sum: true - md5sum: false -permissions: - pull-requests: write - contents: write - packages: write