By: Michael Lynch <git@mtlynch.io>
Make Fly deploy independent of host Skopeo policy Provide a Nix-store containers policy for Skopeo so NixCI deployments do not depend on /etc/containers/policy.json being present. The policy rejects all sources by default and allows only the local docker-archive image produced by the deploy script.