60708795

By: Michael Lynch <git@mtlynch.io>

Use Fly registry auth for Dockerless deploys

Have the deploy script ask flyctl to mint the short-lived registry credentials that Fly expects, then pass those credentials to Skopeo through a temporary auth file. This keeps the NixCI deploy path Dockerless while avoiding raw token authentication issues against registry.fly.io.

Add comments that explain the image build, temporary auth setup, registry push, and final image deploy steps.

Suite timing

Time to Start Worker time Duration Time to finish
Config 2s 10s 10s 12s
Eval 10s 1m00s 1m00s 1m11s
Build 14s 6m59s 1m03s 1m18s
Suite 2s 8m10s 1m16s 1m18s

Timeline

0s10s20s30s40s50s1m1m10s