b5721847

By: Michael Lynch <git@mtlynch.io>

Make Fly deploy independent of host Skopeo policy

Provide a Nix-store containers policy for Skopeo so NixCI deployments do not depend on /etc/containers/policy.json being present. The policy rejects all sources by default and allows only the local docker-archive image produced by the deploy script.

Tree Dependencies

Suite timing

	Time to Start	Worker time	Duration	Time to finish
Config	2s	34s	34s	36s
Eval	34s	59s	59s	1m33s
Build	39s	8m30s	1m19s	1m58s
Suite	2s	10m03s	1m56s	1m58s

Timeline

Agent Instructions

This page shows suite timings.

This page is also available in machine-friendly formats. Request one with the Accept header:

curl --netrc -H 'Accept: application/json' https://nix-ci.com/cb:mtlynch:little-moments/skopeo-deploy/b57218479187fb7e396319b93ca3fd35595bf58e/timing
curl --netrc -H 'Accept: text/markdown' https://nix-ci.com/cb:mtlynch:little-moments/skopeo-deploy/b57218479187fb7e396319b93ca3fd35595bf58e/timing

For more instructions, fetch https://nix-ci.com/instructions .