Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
59 changes: 0 additions & 59 deletions .github/workflows/build.yml
Original file line number Diff line number Diff line change
Expand Up @@ -58,65 +58,6 @@ jobs:
subject-digest: ${{ steps.push.outputs.digest }}
push-to-registry: true

build-nix:
runs-on: ubuntu-latest
permissions:
contents: read
packages: write
attestations: write
id-token: write

steps:
- name: Checkout repository
uses: actions/checkout@v6

- name: Install Nix
uses: cachix/install-nix-action@v31
with:
extra_nix_config: |
experimental-features = nix-command flakes

- name: Cache Nix store
uses: actions/cache@v5
with:
path: |
/nix/store
~/.cache/nix
key: nix-${{ runner.os }}-${{ hashFiles('images/nix/flake.lock') }}
restore-keys: |
nix-${{ runner.os }}-

- name: Generate flake.lock if missing
run: |
if [ ! -f images/nix/flake.lock ]; then
nix flake lock ./images/nix
fi

- name: Build Docker image with Nix
run: nix build ./images/nix#dockerImage

- name: Log in to the Container registry
uses: docker/login-action@v4
with:
registry: ${{ env.REGISTRY }}
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}

- name: Load and push Docker image
id: push
run: |
docker load < result
docker push ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:nix
digest=$(docker inspect --format='{{index .RepoDigests 0}}' ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:nix | cut -d@ -f2)
echo "digest=$digest" >> "$GITHUB_OUTPUT"

- name: Generate artifact attestation
uses: actions/attest-build-provenance@v4
with:
subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
subject-digest: ${{ steps.push.outputs.digest }}
push-to-registry: true

build-variants:
needs: build-base
runs-on: ubuntu-latest
Expand Down
32 changes: 0 additions & 32 deletions .github/workflows/ci.yml
Original file line number Diff line number Diff line change
Expand Up @@ -23,38 +23,6 @@ jobs:
docker run --rm test-base sops --version
docker run --rm test-base age --version

check-nix:
if: github.event_name == 'pull_request'
runs-on: ubuntu-latest
steps:
- name: Checkout repository
uses: actions/checkout@v6

- name: Install Nix
uses: cachix/install-nix-action@v31
with:
extra_nix_config: |
experimental-features = nix-command flakes

- name: Cache Nix store
uses: actions/cache@v5
with:
path: |
/nix/store
~/.cache/nix
key: nix-${{ runner.os }}-${{ hashFiles('images/nix/flake.lock') }}
restore-keys: |
nix-${{ runner.os }}-

- name: Generate flake.lock if missing
run: |
if [ ! -f images/nix/flake.lock ]; then
nix flake lock ./images/nix
fi

- name: Build nix image
run: nix build ./images/nix#dockerImage

check-devops:
if: github.event_name == 'pull_request'
runs-on: ubuntu-latest
Expand Down
8 changes: 0 additions & 8 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,6 @@ Base images for Coder workspaces.
| Image | Tag | Contents |
|-------|-----|----------|
| Base | `:base` | Ubuntu Noble + bash, bash-completion, git, curl, Node.js 24, gh CLI, tea CLI, ripgrep, fd-find, tmux, build-essential, age, sops, ssh-to-age |
| Nix | `:nix` | Nix-built image + bash, bash-completion, git, curl, Node.js, gh CLI, ripgrep, fd, tmux, gcc, make, sops, age, nix, direnv, nix-direnv, nix-ld |
| DevOps | `:devops` | Base + Terraform, Packer, tflint, azcopy |

## Usage
Expand All @@ -16,9 +15,6 @@ Base images for Coder workspaces.
# Base image
FROM ghcr.io/plumelo/coder-images:base

# Nix image (includes nix, direnv, nix-ld)
FROM ghcr.io/plumelo/coder-images:nix

# DevOps image (includes Terraform, Packer, tflint)
FROM ghcr.io/plumelo/coder-images:devops
```
Expand Down Expand Up @@ -53,10 +49,6 @@ docker build -t test-base ./images/base
# Build variant using local base
docker build --build-arg BASE_IMAGE=test-base -t test-devops ./images/devops

# Build nix image (requires nix with flakes enabled)
nix build ./images/nix#dockerImage
docker load < result

# Verify tools
docker run --rm test-base sops --version
docker run --rm test-base age --version
Expand Down
1 change: 0 additions & 1 deletion images/nix/.gitignore

This file was deleted.

Loading