07831e52

Author: Michael Lynch <git@mtlynch.io>

Committer: Michael Lynch <mtlynch@noreply.codeberg.org>

Use Fly registry auth for Dockerless deploys (#266)

Have the deploy script ask flyctl to mint the short-lived registry credentials that Fly expects, then pass those credentials to Skopeo through a temporary auth file. This keeps the NixCI deploy path Dockerless while avoiding raw token authentication issues against registry.fly.io.

Document the deploy flow, including the Nix-built archive, temporary auth setup, registry push, and final image deploy steps.

Reviewed-on: https://codeberg.org/mtlynch/little-moments/pulls/266

Suite timing

Time to Start Worker time Duration Time to finish
Config 2s 12s 12s 15s
Eval 12s 1m01s 1m01s 1m14s
Build 18s 6m25s 1m18s 1m37s
Deploy 1m42s 3m28s 3m28s 5m10s
Suite 2s 11m07s 5m08s 5m10s

Timeline

0s1m2m3m4m5m