82 lines
2.6 KiB
YAML
82 lines
2.6 KiB
YAML
name: "Build & Upload NixOS Proxmox Image"
|
|
|
|
on:
|
|
push:
|
|
tags:
|
|
- "v*" # triggers on v1.0.0, v1.2.3, etc.
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
build-upload:
|
|
runs-on: nixos-latest
|
|
env:
|
|
PROXMOX_HOST: 192.168.1.205
|
|
PROXMOX_USER: forgejo-runner
|
|
TEMPLATE_VMID: 9001
|
|
LATEST_TEMPLATE_VMID: 9000
|
|
|
|
steps:
|
|
- name: Install nodejs
|
|
run: nix-env -iA nixpkgs.nodejs
|
|
|
|
- name: Checkout repo
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Set VERSION from tag or fallback
|
|
run: |
|
|
if [ -n "${CI_COMMIT_TAG}" ]; then
|
|
echo "VERSION=${CI_COMMIT_TAG}" >> $GITHUB_ENV
|
|
else
|
|
echo "VERSION=dev-$(date +%s)" >> $GITHUB_ENV
|
|
fi
|
|
|
|
- name: Build NixOS image
|
|
run: nix build .#base --builders "ssh://root@nixos-builder.lab x86_64-linux"
|
|
|
|
- name: Prepare SSH
|
|
env:
|
|
PROXMOX_SSH_KEY: ${{ secrets.PROXMOX_SSH_KEY }}
|
|
run: |
|
|
mkdir -p ~/.ssh
|
|
echo "$PROXMOX_SSH_KEY" > ~/.ssh/id_rsa
|
|
chmod 600 ~/.ssh/id_rsa
|
|
ssh-keyscan -H $PROXMOX_HOST >> ~/.ssh/known_hosts
|
|
|
|
# - name: Upload image to Proxmox and manage templates
|
|
# run: |
|
|
# set -e
|
|
# IMAGE="result/vm-image.vma.zst"
|
|
# REMOTE_NAME="nixos-base-image-${VERSION}.vma.zst"
|
|
# REMOTE_PATH="/var/lib/vz/template/images/$REMOTE_NAME"
|
|
|
|
# echo "Uploading $IMAGE to Proxmox as $REMOTE_NAME"
|
|
# scp $IMAGE $PROXMOX_USER@$PROXMOX_HOST:$REMOTE_PATH
|
|
|
|
# echo "Restoring as VMID $TEMPLATE_VMID"
|
|
# ssh $PROXMOX_USER@$PROXMOX_HOST "
|
|
# qm destroy $TEMPLATE_VMID --purge || true
|
|
# qmrestore $REMOTE_PATH $TEMPLATE_VMID --unique
|
|
# qm template $TEMPLATE_VMID
|
|
|
|
# echo 'Cloning to $LATEST_TEMPLATE_VMID as latest'
|
|
# qm destroy $LATEST_TEMPLATE_VMID --purge || true
|
|
# qm clone $TEMPLATE_VMID $LATEST_TEMPLATE_VMID --name nixos-base-latest
|
|
# "
|
|
|
|
# - name: Prune old templates
|
|
# run: |
|
|
# ssh $PROXMOX_USER@$PROXMOX_HOST "
|
|
# cd /var/lib/vz/template/images
|
|
# ls -tp nixos-base-image-*.vma.zst | grep -v '/$' | tail -n +6 | xargs -r rm --
|
|
# "
|
|
|
|
# - name: Create Forgejo Release (optional)
|
|
# if: ${{ github.ref_type == 'tag' }}
|
|
# uses: softprops/action-gh-release@v1
|
|
# with:
|
|
# name: "NixOS Base Image ${{ env.VERSION }}"
|
|
# tag_name: ${{ env.VERSION }}
|
|
# body: |
|
|
# This release contains the NixOS base image for Proxmox labeled `${{ env.VERSION }}`.
|
|
# files: |
|
|
# result/vm-image.vma.zst
|