build.yml

# SPDX-FileCopyrightText: 2023-2024 TII (SSRC) and the Ghaf contributors
#
# SPDX-License-Identifier: Apache-2.0

name: build

on:
  push:
    branches:
      - "gh_actions_updates"

permissions:
  contents: read

jobs:
  build_target:
    runs-on: ubuntu-latest
    timeout-minutes: 360
    name: Build FMO-OS
    steps:
      - uses: actions/checkout@v4
        with:
          ref: ${{ github.event.pull_request.head.sha || github.ref }}
      - uses: jlumbroso/free-disk-space@main
        with:
          # this might remove tools that are actually needed,
          # if set to "true" but frees about 6 GB
          tool-cache: false

          # all of these default to true, but feel free to set to
          # "false" if necessary for your workflow
          android: true
          dotnet: true
          haskell: true
          large-packages: true
          docker-images: true
          swap-storage: true
      - uses: cachix/install-nix-action@v30
        with:
          extra_nix_config: accept-flake-config=true
      - uses: cachix/cachix-action@v15
        with:
          name: fmo-os
          authToken: "${{ secrets.CACHIX_TOKEN }}"
        run: |
          SSH_DIR=$HOME/.ssh
          mkdir -p $SSH_DIR
          echo '${{ secrets.RA_TOKEN }}' > $SSH_DIR/id_rsa
          chmod 0600 $SSH_DIR/id_rsa
          ssh-keyscan -t ed25519 -H github.com > $SSH_DIR/known_hosts
          chmod 600 $SSH_DIR/known_hosts

          nix flake show
          cachix watch-exec fmo-os -- nix build --print-build-logs .#packages.x86_64-linux.fmo-os-installer-debug