pkgs.yml

name: Packages

on:
  schedule:
    - cron: '0 0 * * *'
  workflow_dispatch:

jobs:
  update:
    name: Update
    runs-on: ubuntu-latest
    outputs:
      changed: ${{ steps.update.outputs.changed }}
      head: ${{ steps.stage.outputs.head }}
    steps:
      - uses: cachix/install-nix-action@v23
        with:
          extra_nix_config: |
            system-features = benchmark big-parallel kvm nixos-test

      - uses: actions/checkout@v4
        with:
          ssh-key: ${{ secrets.REPO_KEY }}
          fetch-depth: 0

      - name: Configure git
        run: |
          git config user.name 'github-actions[bot]'
          git config user.email '41898282+github-actions[bot]@users.noreply.github.com'

      - name: Configure $NIX_PATH
        run: |
          echo "NIX_PATH=nixpkgs=https://github.com/NixOS/nixpkgs/archive/$(jq -r '.nodes.nixpkgs.locked.rev' flake.lock).tar.gz" >> $GITHUB_ENV

      - id: update
        name: nix-shell scripts/update.nix --argstr commit true
        run: |
          echo | nix-shell scripts/update.nix --argstr commit true

          if ! git diff --exit-code --quiet remotes/origin/${{ github.ref_name }}..; then
            echo "changed=true" >> $GITHUB_OUTPUT
          fi

      - id: stage
        name: Stage changes
        if: steps.update.outputs.changed == 'true'
        run: |
          git push -f origin 'HEAD:ci/pkgs/${{ github.sha }}'

          echo 'head=ci/pkgs/${{ github.sha }}' >> $GITHUB_OUTPUT

  check:
    name: Run Flake Checks
    needs: [update]
    if: needs.update.outputs.changed == 'true'
    uses: ./.github/workflows/checks.yml
    with:
      ref_head: ${{ needs.update.outputs.head }}
    secrets:
      cachix_auth_token: ${{ secrets.CACHIX_AUTH_TOKEN }}

  push:
    name: Push
    runs-on: ubuntu-latest
    needs: [update, check]
    if: needs.update.outputs.changed == 'true'
    steps:
      - uses: actions/checkout@v4
        with:
          ssh-key: ${{ secrets.REPO_KEY }}
          fetch-depth: 0
          ref: ${{ needs.update.outputs.head }}

      - name: Configure git
        run: |
          git config user.name 'github-actions[bot]'
          git config user.email '41898282+github-actions[bot]@users.noreply.github.com'

      - name: Push changes
        run: |
          git pull --rebase origin '${{ github.ref }}'
          git push origin 'HEAD:${{ github.ref }}'
          git push origin -d '${{ needs.update.outputs.head }}'