The runner mounts a persistent nix-store volume over /nix. The current nixos/nix image makes /etc/nix/nix.conf a symlink into /nix/store, and the volume does not hold that path, so the link dangles and appending to it fails before checkout: "/etc/nix/nix.conf: No such file or directory". Pass the settings in NIX_CONFIG instead. Without a config file Nix also falls back to build-users-group = nixbld, which the container lacks, so set it empty and turn the sandbox off, as the image config does. Assisted-by: Claude:opus-5-5
63 lines
2.1 KiB
YAML
63 lines
2.1 KiB
YAML
name: Tests
|
|
|
|
# main is covered by the test job inside deploy.yaml (which gates the build);
|
|
# this workflow covers every other branch.
|
|
on:
|
|
push:
|
|
branches-ignore:
|
|
- main
|
|
|
|
jobs:
|
|
test:
|
|
runs-on: nix-latest
|
|
# Settings via env, not /etc/nix/nix.conf: in the image that is a
|
|
# symlink into /nix/store, which the runner's nix-store volume
|
|
# shadows, so it dangles once the image moves on.
|
|
env:
|
|
NIX_CONFIG: |
|
|
experimental-features = nix-command flakes
|
|
build-users-group =
|
|
sandbox = false
|
|
services:
|
|
# CI stand-in for bin/test's ephemeral Postgres: the nix container runs
|
|
# as root and initdb refuses to run as root, so the DB lives in a
|
|
# service container instead and the suite connects via TEST_DATABASE_URL.
|
|
# Job and service share the per-workflow bridge network (the runner's
|
|
# container.network must stay "" — with "host" the service network is
|
|
# never created and services fail to start).
|
|
postgres:
|
|
image: postgres:17-alpine
|
|
env:
|
|
POSTGRES_USER: postgres
|
|
POSTGRES_HOST_AUTH_METHOD: trust
|
|
POSTGRES_DB: asxpio_test
|
|
steps:
|
|
- name: Prepare container for actions
|
|
run: |
|
|
# node for JS actions (checkout); git-minimal is already in the image
|
|
nix-env -iA nixpkgs.nodejs_22
|
|
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
# The nix closure persists in the runner's nix-store volume; gems live
|
|
# in the workspace (.gems via the flake's BUNDLE_PATH), so cache those.
|
|
- name: Cache gems
|
|
uses: actions/cache@v4
|
|
with:
|
|
path: .gems
|
|
key: gems-${{ hashFiles('Gemfile.lock') }}
|
|
|
|
- name: Wait for Postgres
|
|
run: |
|
|
for i in $(seq 1 30); do
|
|
nix develop -c pg_isready -h postgres -U postgres && exit 0
|
|
sleep 2
|
|
done
|
|
echo "Postgres service never became ready" >&2
|
|
exit 1
|
|
|
|
- name: Run test suite
|
|
env:
|
|
TEST_DATABASE_URL: postgres://postgres@postgres:5432/asxpio_test
|
|
run: nix develop -c bundle exec rake test
|