c5a9eb9c

Author: Michael Lynch <git@mtlynch.io>

Committer: Michael Lynch <mtlynch@noreply.codeberg.org>

Make Fly deploy independent of host Skopeo policy (#265)

Provide a Nix-store containers policy for Skopeo so NixCI deployments do not depend on /etc/containers/policy.json being present. The policy rejects all sources by default and allows only the local docker-archive image produced by the deploy script.

Reviewed-on: https://codeberg.org/mtlynch/little-moments/pulls/265

Suite timing

Time to Start Worker time Duration Time to finish
Config 2s 8s 8s 10s
Eval 8s 47s 47s 56s
Build 13s 7m37s 1m28s 1m42s
Deploy 2m00s 6m21s 6m23s 8m24s
Suite 2s 14m55s 8m22s 8m24s

Timeline

0s1m3m4m5m6m7m8m