ci.yml

name: CI

on:
  pull_request:
  push:
    branches: [main]
  workflow_dispatch:

jobs:
  tests:
    runs-on: ubuntu-22.04
    needs:
      - check-dist-up-to-date
      - install-nix-linux
    # NOTE(cole-h): GitHub treats "skipped" as "OK" for the purposes of required checks on branch
    # protection, so we take advantage of this fact and fail if any of the dependent actions failed,
    # or "skip" (which is a success for GHA's purposes) if none of them did.
    if: failure()
    steps:
      - name: Dependent checks failed
        run: exit 1

  check-dist-up-to-date:
    name: Check the dist/ folder is up to date
    runs-on: ubuntu-22.04
    steps:
      - uses: actions/checkout@v4
      - uses: DeterminateSystems/nix-installer-action@main
      - uses: DeterminateSystems/magic-nix-cache-action@main
      - name: pnpm install
        run: nix develop --command pnpm install
      - name: prettier format
        run: nix develop --command pnpm run check-fmt
      - name: ESLint
        run: nix develop --command pnpm run lint
      - name: tsup build
        run: nix develop --command pnpm run build
      - name: ncc package
        run: nix develop --command pnpm run package
      - name: Git status
        run: git status --porcelain=v1
      - name: Ensure no staged changes
        run: git diff --exit-code

  install-nix-linux:
    name: Run test suite for Linux systems
    strategy:
      matrix:
        runner:
          - nscloud-ubuntu-22.04-amd64-4x16
          #- namespace-profile-default-arm64
        determinate:
          - true
          - false
    runs-on: ${{ matrix.runner }}
    permissions:
      contents: read
      id-token: write
    steps:
      - uses: actions/checkout@v4
      - name: Install Nix
        uses: ./
        with:
          determinate: ${{ matrix.determinate }}
          source-tag: v0.26.0
          logger: pretty
          log-directives: nix_installer=trace
          backtrace: full
          _internal-strict-mode: true
      - name: echo $PATH
        run: echo $PATH

      - name: Render the devshell
        if: success() || failure()
        run: |
          nix develop --command date

      - name: Test `nix` with `$GITHUB_PATH`
        if: success() || failure()
        run: |
          nix run nixpkgs#hello
          nix profile install nixpkgs#hello
          hello
          nix store gc
          nix run nixpkgs#hello

      - name: Test bash
        run: nix-instantiate -E 'builtins.currentTime' --eval
        if: success() || failure()
        shell: bash --login {0}
      - name: Test sh
        run: nix-instantiate -E 'builtins.currentTime' --eval
        if: success() || failure()
        shell: sh -l {0}
      - name: Install Nix again (noop)
        uses: ./
        with:
          logger: pretty
          log-directives: nix_installer=trace
          backtrace: full
          _internal-strict-mode: true
      - name: Test `nix` with `$GITHUB_PATH`
        if: success() || failure()
        run: |
          nix run nixpkgs#hello
          nix profile install nixpkgs#hello
          hello
          nix store gc
          nix run nixpkgs#hello
      - name: Reinstall Nix
        uses: ./
        with:
          logger: pretty
          log-directives: nix_installer=trace
          backtrace: full
          reinstall: true
          extra-conf: |
            use-sqlite-wal = true
          _internal-strict-mode: true
      - name: Test `nix` with `$GITHUB_PATH`
        if: success() || failure()
        run: |
          nix run nixpkgs#hello
          nix profile install nixpkgs#hello
          hello
          nix store gc
          nix run nixpkgs#hello
      - name: Verify the generated nix.conf
        run: |
          cat -n /etc/nix/nix.conf
          grep -E "^trusted-users = .*$USER" /etc/nix/nix.conf
          grep -E "^use-sqlite-wal = true" /etc/nix/nix.conf
      - uses: namespacelabs/breakpoint-action@v0
        if: failure()
        with:
          duration: 30m
          authorized-users: grahamc