ci: pin Nixpkgs for deployments #310

Merged

fricklerhandwerk merged 2 commits from pin-nixpkgs-deployment into main

2024-11-01 09:17:46 +00:00

fricklerhandwerk commented

2024-10-31 18:57:20 +00:00

(Migrated from github.com)

this doesn't rely on NIX_PATH and is therefore fully pure, and uses our
own, controlled dependencies.

the Nixpkgs for deployment currently not decoupled from the one for
development because the build is broken on the newest version.

we still need a policy for how to run updates, but ideally we'd use
exactly one version of Nixpkgs for everything.

this doesn't rely on NIX_PATH and is therefore fully pure, and uses our own, controlled dependencies. the Nixpkgs for deployment currently not decoupled from the one for development because the build is broken on the newest version. we still need a policy for how to run updates, but ideally we'd use exactly one version of Nixpkgs for everything.

RaitoBezarius (Migrated from github.com) reviewed

2024-10-31 18:57:20 +00:00

RaitoBezarius (Migrated from github.com) approved these changes

2024-10-31 19:35:17 +00:00

RaitoBezarius commented

2024-10-31 19:35:48 +00:00

(Migrated from github.com)

This doesn't pass CI though.

fricklerhandwerk commented

2024-10-31 19:38:35 +00:00

(Migrated from github.com)

Nothing passes CI at the moment because we can't build the server against unstable.

RaitoBezarius commented

2024-10-31 20:14:10 +00:00

(Migrated from github.com)

That's not the error.

Le jeu. 31 oct. 2024, 20:38, Valentin Gagarin @.***> a
écrit :

Nothing passes CI at the moment because we can't build the server against
unstable.

—
Reply to this email directly, view it on GitHub
https://github.com/Nix-Security-WG/nix-security-tracker/pull/310#issuecomment-2450679803,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AACMZRDOGFHYBGSLJW4ZULDZ6KBNFAVCNFSM6AAAAABQ65W43GVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDINJQGY3TSOBQGM
.
You are receiving this because your review was requested.Message ID:
@.***>

That's not the error. Le jeu. 31 oct. 2024, 20:38, Valentin Gagarin ***@***.***> a écrit : > Nothing passes CI at the moment because we can't build the server against > unstable. > > — > Reply to this email directly, view it on GitHub > <https://github.com/Nix-Security-WG/nix-security-tracker/pull/310#issuecomment-2450679803>, > or unsubscribe > <https://github.com/notifications/unsubscribe-auth/AACMZRDOGFHYBGSLJW4ZULDZ6KBNFAVCNFSM6AAAAABQ65W43GVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDINJQGY3TSOBQGM> > . > You are receiving this because your review was requested.Message ID: > ***@***.***> >

👍 1

fricklerhandwerk commented

2024-11-01 02:16:55 +00:00

(Migrated from github.com)

The dry activations check is expected to fail because it runs in the base branch's context (it's has a pull_request_target trigger). It should unbreak once this change is merged.

The dry activations check is expected to fail because it runs in the base branch's context (it's has a `pull_request_target` trigger). It should unbreak once this change is merged.