07831e52

Author: Michael Lynch <git@mtlynch.io>

Committer: Michael Lynch <mtlynch@noreply.codeberg.org>

Use Fly registry auth for Dockerless deploys (#266)

Have the deploy script ask flyctl to mint the short-lived registry credentials that Fly expects, then pass those credentials to Skopeo through a temporary auth file. This keeps the NixCI deploy path Dockerless while avoiding raw token authentication issues against registry.fly.io.

Document the deploy flow, including the Nix-built archive, temporary auth setup, registry push, and final image deploy steps.

Reviewed-on: https://codeberg.org/mtlynch/little-moments/pulls/266

Suite timing

Time to Start Worker time Duration Time to finish Idle
Config 2s 12s 12s 15s 2s
Eval 12s 1m01s 1m01s 1m14s 0s
Build 18s 6m25s 1m18s 1m37s 0s
Deploy 1m42s 3m28s 3m28s 5m10s 4s
Suite 2s 11m07s 5m08s 5m10s 6s

Timeline

0s1m2m3m4m5m