test/ci-nix-privileged #20

Merged
litelotus merged 3 commits from test/ci-nix-privileged into main 2026-09-13 18:51:05 +00:00
Owner
No description provided.
ci: test privileged nix steps in check.yaml
Some checks failed
ci/crow/push/check Pipeline was canceled
0b48d7e530
Hypothesis (2026-09-10): the /nix/store chown block on this Crow instance
only applies to UNprivileged containers. The seaweed repo's nix image
build (.crow/build.yaml) runs nix build + skopeo with privileged: true
and works flawlessly. check.yaml's flake check/show steps have been
red since #222 with 'changing ownership of /nix/store: Operation not
permitted'.

This adds privileged: true to both check steps as a controlled A/B test.
If green: flake validation becomes a real CI gate; update the
nix-multihost-flake + crow-ci-cli skills accordingly.
ci: point nix steps at attic cache (cache.litelot.us/nix-cache)
Some checks failed
ci/crow/push/check Pipeline failed
07b5d218f2
Adds NIX_CONFIG to both check steps: substituters = cache.nixos.org +
https://cache.litelot.us/nix-cache, trusted keys incl. nix-cache:...0nM=
(rotated key from the Sep 2026 cache recreation).

Speeds up any future nix build steps in CI (seaweed-style image builds)
by pulling store paths from the LAN attic cache instead of compiling
cold every run. flake check --no-build doesn't fetch store paths, but
the config is groundwork for dropping --no-build / validating real
builds in CI.
adding aria2
Some checks failed
ci/crow/push/check Pipeline failed
b32b246a5c
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
litelotus/.nix!20
No description provided.