mirror of
https://github.com/rosenpass/rosenpass.git
synced 2025-12-12 15:49:22 -08:00
2805d686e6
This resolves an error with the darwin based builds, where the install fails. Pinpointing the macos version will prevent random failrue in the future --- now we have to opt-in to potential breaking changes when a new macos release is added to the GitHub Actions runners. relevant error message: ```console ... ---- Reminders ----------------------------------------------------------------- [ 1 ] Nix won't work in active shell sessions until you restart them. Could not set environment: 150: Operation not permitted while System Integrity Protection is engaged Error: Process completed with exit code 150. ``` fixes #100
347 lines
11 KiB
YAML
347 lines
11 KiB
YAML
name: Nix
|
|
permissions:
|
|
contents: write
|
|
on:
|
|
pull_request: null
|
|
push:
|
|
branches:
|
|
- main
|
|
jobs:
|
|
i686-linux---default:
|
|
name: Build i686-linux.default
|
|
runs-on:
|
|
- ubuntu-latest
|
|
needs:
|
|
- i686-linux---rosenpass
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
- uses: cachix/install-nix-action@v22
|
|
with:
|
|
nix_path: nixpkgs=channel:nixos-unstable
|
|
- uses: cachix/cachix-action@v12
|
|
with:
|
|
name: rosenpass
|
|
authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
|
|
- name: Build
|
|
run: nix build .#packages.i686-linux.default --print-build-logs
|
|
i686-linux---rosenpass:
|
|
name: Build i686-linux.rosenpass
|
|
runs-on:
|
|
- ubuntu-latest
|
|
needs: []
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
- uses: cachix/install-nix-action@v22
|
|
with:
|
|
nix_path: nixpkgs=channel:nixos-unstable
|
|
- uses: cachix/cachix-action@v12
|
|
with:
|
|
name: rosenpass
|
|
authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
|
|
- name: Build
|
|
run: nix build .#packages.i686-linux.rosenpass --print-build-logs
|
|
i686-linux---rosenpass-oci-image:
|
|
name: Build i686-linux.rosenpass-oci-image
|
|
runs-on:
|
|
- ubuntu-latest
|
|
needs:
|
|
- i686-linux---rosenpass
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
- uses: cachix/install-nix-action@v22
|
|
with:
|
|
nix_path: nixpkgs=channel:nixos-unstable
|
|
- uses: cachix/cachix-action@v12
|
|
with:
|
|
name: rosenpass
|
|
authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
|
|
- name: Build
|
|
run: nix build .#packages.i686-linux.rosenpass-oci-image --print-build-logs
|
|
i686-linux---check:
|
|
name: Run Nix checks on i686-linux
|
|
runs-on:
|
|
- ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
- uses: cachix/install-nix-action@v22
|
|
with:
|
|
nix_path: nixpkgs=channel:nixos-unstable
|
|
- uses: cachix/cachix-action@v12
|
|
with:
|
|
name: rosenpass
|
|
authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
|
|
- name: Check
|
|
run: nix flake check . --print-build-logs
|
|
x86_64-darwin---default:
|
|
name: Build x86_64-darwin.default
|
|
runs-on:
|
|
- macos-13
|
|
needs:
|
|
- x86_64-darwin---rosenpass
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
- uses: cachix/install-nix-action@v22
|
|
with:
|
|
nix_path: nixpkgs=channel:nixos-unstable
|
|
- uses: cachix/cachix-action@v12
|
|
with:
|
|
name: rosenpass
|
|
authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
|
|
- name: Build
|
|
run: nix build .#packages.x86_64-darwin.default --print-build-logs
|
|
x86_64-darwin---release-package:
|
|
name: Build x86_64-darwin.release-package
|
|
runs-on:
|
|
- macos-13
|
|
needs:
|
|
- x86_64-darwin---rosenpass
|
|
- x86_64-darwin---rosenpass-oci-image
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
- uses: cachix/install-nix-action@v22
|
|
with:
|
|
nix_path: nixpkgs=channel:nixos-unstable
|
|
- uses: cachix/cachix-action@v12
|
|
with:
|
|
name: rosenpass
|
|
authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
|
|
- name: Build
|
|
run: nix build .#packages.x86_64-darwin.release-package --print-build-logs
|
|
x86_64-darwin---rosenpass:
|
|
name: Build x86_64-darwin.rosenpass
|
|
runs-on:
|
|
- macos-13
|
|
needs: []
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
- uses: cachix/install-nix-action@v22
|
|
with:
|
|
nix_path: nixpkgs=channel:nixos-unstable
|
|
- uses: cachix/cachix-action@v12
|
|
with:
|
|
name: rosenpass
|
|
authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
|
|
- name: Build
|
|
run: nix build .#packages.x86_64-darwin.rosenpass --print-build-logs
|
|
x86_64-darwin---rosenpass-oci-image:
|
|
name: Build x86_64-darwin.rosenpass-oci-image
|
|
runs-on:
|
|
- macos-13
|
|
needs:
|
|
- x86_64-darwin---rosenpass
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
- uses: cachix/install-nix-action@v22
|
|
with:
|
|
nix_path: nixpkgs=channel:nixos-unstable
|
|
- uses: cachix/cachix-action@v12
|
|
with:
|
|
name: rosenpass
|
|
authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
|
|
- name: Build
|
|
run: nix build .#packages.x86_64-darwin.rosenpass-oci-image --print-build-logs
|
|
x86_64-darwin---check:
|
|
name: Run Nix checks on x86_64-darwin
|
|
runs-on:
|
|
- macos-13
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
- uses: cachix/install-nix-action@v22
|
|
with:
|
|
nix_path: nixpkgs=channel:nixos-unstable
|
|
- uses: cachix/cachix-action@v12
|
|
with:
|
|
name: rosenpass
|
|
authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
|
|
- name: Check
|
|
run: nix flake check . --print-build-logs
|
|
x86_64-linux---default:
|
|
name: Build x86_64-linux.default
|
|
runs-on:
|
|
- ubuntu-latest
|
|
needs:
|
|
- x86_64-linux---rosenpass
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
- uses: cachix/install-nix-action@v22
|
|
with:
|
|
nix_path: nixpkgs=channel:nixos-unstable
|
|
- uses: cachix/cachix-action@v12
|
|
with:
|
|
name: rosenpass
|
|
authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
|
|
- name: Build
|
|
run: nix build .#packages.x86_64-linux.default --print-build-logs
|
|
x86_64-linux---proof-proverif:
|
|
name: Build x86_64-linux.proof-proverif
|
|
runs-on:
|
|
- ubuntu-latest
|
|
needs:
|
|
- x86_64-linux---proverif-patched
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
- uses: cachix/install-nix-action@v22
|
|
with:
|
|
nix_path: nixpkgs=channel:nixos-unstable
|
|
- uses: cachix/cachix-action@v12
|
|
with:
|
|
name: rosenpass
|
|
authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
|
|
- name: Build
|
|
run: nix build .#packages.x86_64-linux.proof-proverif --print-build-logs
|
|
x86_64-linux---proverif-patched:
|
|
name: Build x86_64-linux.proverif-patched
|
|
runs-on:
|
|
- ubuntu-latest
|
|
needs: []
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
- uses: cachix/install-nix-action@v22
|
|
with:
|
|
nix_path: nixpkgs=channel:nixos-unstable
|
|
- uses: cachix/cachix-action@v12
|
|
with:
|
|
name: rosenpass
|
|
authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
|
|
- name: Build
|
|
run: nix build .#packages.x86_64-linux.proverif-patched --print-build-logs
|
|
x86_64-linux---release-package:
|
|
name: Build x86_64-linux.release-package
|
|
runs-on:
|
|
- ubuntu-latest
|
|
needs:
|
|
- x86_64-linux---rosenpass-static-oci-image
|
|
- x86_64-linux---rosenpass-static
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
- uses: cachix/install-nix-action@v22
|
|
with:
|
|
nix_path: nixpkgs=channel:nixos-unstable
|
|
- uses: cachix/cachix-action@v12
|
|
with:
|
|
name: rosenpass
|
|
authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
|
|
- name: Build
|
|
run: nix build .#packages.x86_64-linux.release-package --print-build-logs
|
|
x86_64-linux---rosenpass:
|
|
name: Build x86_64-linux.rosenpass
|
|
runs-on:
|
|
- ubuntu-latest
|
|
needs: []
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
- uses: cachix/install-nix-action@v22
|
|
with:
|
|
nix_path: nixpkgs=channel:nixos-unstable
|
|
- uses: cachix/cachix-action@v12
|
|
with:
|
|
name: rosenpass
|
|
authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
|
|
- name: Build
|
|
run: nix build .#packages.x86_64-linux.rosenpass --print-build-logs
|
|
x86_64-linux---rosenpass-oci-image:
|
|
name: Build x86_64-linux.rosenpass-oci-image
|
|
runs-on:
|
|
- ubuntu-latest
|
|
needs:
|
|
- x86_64-linux---rosenpass
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
- uses: cachix/install-nix-action@v22
|
|
with:
|
|
nix_path: nixpkgs=channel:nixos-unstable
|
|
- uses: cachix/cachix-action@v12
|
|
with:
|
|
name: rosenpass
|
|
authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
|
|
- name: Build
|
|
run: nix build .#packages.x86_64-linux.rosenpass-oci-image --print-build-logs
|
|
x86_64-linux---rosenpass-static:
|
|
name: Build x86_64-linux.rosenpass-static
|
|
runs-on:
|
|
- ubuntu-latest
|
|
needs: []
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
- uses: cachix/install-nix-action@v22
|
|
with:
|
|
nix_path: nixpkgs=channel:nixos-unstable
|
|
- uses: cachix/cachix-action@v12
|
|
with:
|
|
name: rosenpass
|
|
authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
|
|
- name: Build
|
|
run: nix build .#packages.x86_64-linux.rosenpass-static --print-build-logs
|
|
x86_64-linux---rosenpass-static-oci-image:
|
|
name: Build x86_64-linux.rosenpass-static-oci-image
|
|
runs-on:
|
|
- ubuntu-latest
|
|
needs:
|
|
- x86_64-linux---rosenpass-static
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
- uses: cachix/install-nix-action@v22
|
|
with:
|
|
nix_path: nixpkgs=channel:nixos-unstable
|
|
- uses: cachix/cachix-action@v12
|
|
with:
|
|
name: rosenpass
|
|
authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
|
|
- name: Build
|
|
run: nix build .#packages.x86_64-linux.rosenpass-static-oci-image --print-build-logs
|
|
x86_64-linux---whitepaper:
|
|
name: Build x86_64-linux.whitepaper
|
|
runs-on:
|
|
- ubuntu-latest
|
|
needs: []
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
- uses: cachix/install-nix-action@v22
|
|
with:
|
|
nix_path: nixpkgs=channel:nixos-unstable
|
|
- uses: cachix/cachix-action@v12
|
|
with:
|
|
name: rosenpass
|
|
authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
|
|
- name: Build
|
|
run: nix build .#packages.x86_64-linux.whitepaper --print-build-logs
|
|
x86_64-linux---check:
|
|
name: Run Nix checks on x86_64-linux
|
|
runs-on:
|
|
- ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
- uses: cachix/install-nix-action@v22
|
|
with:
|
|
nix_path: nixpkgs=channel:nixos-unstable
|
|
- uses: cachix/cachix-action@v12
|
|
with:
|
|
name: rosenpass
|
|
authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
|
|
- name: Check
|
|
run: nix flake check . --print-build-logs
|
|
x86_64-linux---whitepaper-upload:
|
|
name: Upload whitepaper x86_64-linux
|
|
runs-on: ubuntu-latest
|
|
if: ${{ github.ref == 'refs/heads/main' }}
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
- uses: cachix/install-nix-action@v22
|
|
with:
|
|
nix_path: nixpkgs=channel:nixos-unstable
|
|
- uses: cachix/cachix-action@v12
|
|
with:
|
|
name: rosenpass
|
|
authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
|
|
- name: Git add git sha and commit
|
|
run: cd papers && ./tex/gitinfo2.sh && git add gitHeadInfo.gin
|
|
- name: Build
|
|
run: nix build .#packages.x86_64-linux.whitepaper --print-build-logs
|
|
- name: Deploy PDF artifacts
|
|
uses: peaceiris/actions-gh-pages@v3
|
|
with:
|
|
github_token: ${{ secrets.GITHUB_TOKEN }}
|
|
publish_dir: result/
|
|
publish_branch: papers-pdf
|
|
force_orphan: true
|