cb6d94e2

By: Michael Lynch <git@mtlynch.io>

Test Dockerfile as impure NixCI job

Replace the pure docker-image derivation with a runnable wrapper that NixCI can execute as an impure test. The test runs Kaniko against the real Dockerfile from an in-repository checkout, so registry pulls, Go module downloads, and apk installs happen outside the pure Nix build sandbox.

Suite timing

Time to Start Worker time Duration Time to finish Idle
Config 1s 6s 6s 8s 1s
Eval 6s 36s 44m13s 44m20s 0s
Build 11s 4m25s 44m08s 44m20s 0s
Test 28s 12s 13s 42s 0s
Suite 1s 5m21s 44m18s 44m20s 43m32s

Timeline

0s10s20s30s40s