nixos-base-image/.forgejo/workflows/build-image.yml
2025-06-07 22:59:41 +02:00

87 lines
2.8 KiB
YAML

name: "Build & Upload NixOS Proxmox Image"
on:
push:
tags:
- "v*" # triggers on v1.0.0, v1.2.3, etc.
workflow_dispatch:
jobs:
build-upload:
runs-on: nixos-latest
env:
PROXMOX_HOST: 192.168.1.205
PROXMOX_USER: forgejo-runner
TEMPLATE_VMID: 9001
LATEST_TEMPLATE_VMID: 9000
steps:
- name: Install nodejs
run: nix-env -iA nixpkgs.nodejs
- name: Checkout repo
uses: actions/checkout@v4
- name: Set VERSION from tag or fallback
run: |
if [ -n "${CI_COMMIT_TAG}" ]; then
echo "VERSION=${CI_COMMIT_TAG}" >> $GITHUB_ENV
else
echo "VERSION=dev-$(date +%s)" >> $GITHUB_ENV
fi
- name: Enable experimental features
run: |
mkdir -p ~/.config/nix
echo "experimental-features = nix-command flakes" >> ~/.config/nix/nix.conf
- name: Build NixOS image
run: nix build .#base --builders "ssh://root@nixos-builder.lab x86_64-linux"
- name: Prepare SSH
env:
PROXMOX_SSH_KEY: ${{ secrets.PROXMOX_SSH_KEY }}
run: |
mkdir -p ~/.ssh
echo "$PROXMOX_SSH_KEY" > ~/.ssh/id_rsa
chmod 600 ~/.ssh/id_rsa
ssh-keyscan -H $PROXMOX_HOST >> ~/.ssh/known_hosts
# - name: Upload image to Proxmox and manage templates
# run: |
# set -e
# IMAGE="result/vm-image.vma.zst"
# REMOTE_NAME="nixos-base-image-${VERSION}.vma.zst"
# REMOTE_PATH="/var/lib/vz/template/images/$REMOTE_NAME"
# echo "Uploading $IMAGE to Proxmox as $REMOTE_NAME"
# scp $IMAGE $PROXMOX_USER@$PROXMOX_HOST:$REMOTE_PATH
# echo "Restoring as VMID $TEMPLATE_VMID"
# ssh $PROXMOX_USER@$PROXMOX_HOST "
# qm destroy $TEMPLATE_VMID --purge || true
# qmrestore $REMOTE_PATH $TEMPLATE_VMID --unique
# qm template $TEMPLATE_VMID
# echo 'Cloning to $LATEST_TEMPLATE_VMID as latest'
# qm destroy $LATEST_TEMPLATE_VMID --purge || true
# qm clone $TEMPLATE_VMID $LATEST_TEMPLATE_VMID --name nixos-base-latest
# "
# - name: Prune old templates
# run: |
# ssh $PROXMOX_USER@$PROXMOX_HOST "
# cd /var/lib/vz/template/images
# ls -tp nixos-base-image-*.vma.zst | grep -v '/$' | tail -n +6 | xargs -r rm --
# "
# - name: Create Forgejo Release (optional)
# if: ${{ github.ref_type == 'tag' }}
# uses: softprops/action-gh-release@v1
# with:
# name: "NixOS Base Image ${{ env.VERSION }}"
# tag_name: ${{ env.VERSION }}
# body: |
# This release contains the NixOS base image for Proxmox labeled `${{ env.VERSION }}`.
# files: |
# result/vm-image.vma.zst