Merge pull request #168 from input-output-hk/fix-nix-build

Improve nix setup and fix nix build

Author: garbas

.github/CODEOWNERS

@@ -0,0 +1,8 @@
+# DEVOPS
+
+/.github/action/nix-common-setup*  @input-output-hk/jormungandr-devops
+/.github/workflows/nix.yml         @input-output-hk/jormungandr-devops
+/default.nix                       @input-output-hk/jormungandr-devops
+/flake.lock                        @input-output-hk/jormungandr-devops
+/flake.nix                         @input-output-hk/jormungandr-devops
+/shell.nix                         @input-output-hk/jormungandr-devops

.github/actions/nix-common-setup/action.yml

@@ -0,0 +1,18 @@
+name: Setup Nix Environment
+inputs:
+  CACHIX_AUTH_TOKEN:
+    required: true
+    description: 'Cachix Auth Token'
+runs:
+  using: "composite"
+  steps:
+
+    - name: Installing Nix
+      uses: cachix/install-nix-action@v16
+      with:
+        nix_path: nixpkgs=channel:nixpkgs-unstable
+
+    - uses: cachix/cachix-action@v10
+      with:
+        name: iog
+        authToken: '${{ inputs.CACHIX_AUTH_TOKEN }}'

.github/dependabot.yml

@@ -0,0 +1,13 @@
+version: 2
+updates:
+
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: daily
+      time: '00:00'
+      timezone: UTC
+    open-pull-requests-limit: 10
+    commit-message:
+        prefix: "chore"
+        include: "scope"

.github/workflows/nix.yml

@@ -0,0 +1,69 @@
+name: Nix CI
+on:
+  push:
+    branches:
+      - main
+      - catalyst-fund*
+  pull_request:
+
+jobs:
+  decision:
+    name: Decide what we need to build
+    runs-on: ubuntu-latest
+
+    outputs:
+      packages: ${{ steps.packages.outputs.packages }}
+
+    steps:
+    - name: Checkout
+      uses: actions/checkout@v3
+
+    - name: Setup
+      uses: ./.github/actions/nix-common-setup
+      with:
+        CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }}
+
+    - name: Packages
+      id: packages
+      run: |
+        packages=$(nix eval .#packages.x86_64-linux --apply builtins.attrNames --json)
+        echo "PACKAGES -> $packages"
+        echo "::set-output name=packages::$packages"
+
+  build:
+    name: Build ${{ matrix.package }} package
+    needs:
+      - decision
+    runs-on: ubuntu-latest
+
+    strategy:
+      fail-fast: false
+      matrix:
+        package: ${{ fromJSON(needs.decision.outputs.packages) }}
+        exclude:
+          - package: default
+
+    steps:
+
+    - name: Checkout
+      uses: actions/checkout@v3
+
+    - name: Setup
+      uses: ./.github/actions/nix-common-setup
+      with:
+        CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }}
+
+    - name: Build package
+      run: |
+        path=$(nix eval --raw .#packages.x86_64-linux.${{ matrix.package }})
+        hash=${path:11:32}
+        url="https://iog.cachix.org/$hash.narinfo";
+        if curl --output /dev/null --silent --head --fail "$url"; then
+          echo "Nothing to build!!!"
+          echo ""
+          echo "See build log with:"
+          echo "  nix log $path"
+          echo ""
+        else
+          nix build .#packages.x86_64-linux.${{ matrix.package }} --show-trace -L
+        fi

.github/workflows/update-flake-lock.yml

@@ -0,0 +1,19 @@
+name: update-flake-lock
+on:
+  workflow_dispatch: # allows manual triggering
+  schedule:
+    - cron: '0 0 * * 0' # runs weekly on Sunday at 00:00
+
+jobs:
+  lockfile:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+      - name: Install Nix
+        uses: cachix/install-nix-action@v17
+        with:
+          extra_nix_config: |
+            access-tokens = github.com=${{ secrets.GITHUB_TOKEN }}
+      - name: Update flake.lock
+        uses: DeterminateSystems/update-flake-lock@v14