c5a9eb9c

Author: Michael Lynch <git@mtlynch.io>

Committer: Michael Lynch <mtlynch@noreply.codeberg.org>

Make Fly deploy independent of host Skopeo policy (#265)

Provide a Nix-store containers policy for Skopeo so NixCI deployments do not depend on /etc/containers/policy.json being present. The policy rejects all sources by default and allows only the local docker-archive image produced by the deploy script.

Reviewed-on: https://codeberg.org/mtlynch/little-moments/pulls/265