binaries.yml

name: "Build and upload static Nix binaries"

on:
  push:
    paths:
      - flake.nix
      - flake.lock
      - 'static-bins/**'

jobs:
  precompile-bitrise:
    name: Build macOS-specific derivations on Bitrise
    runs-on: ubuntu-latest
    if: github.ref == 'refs/heads/master'
    steps:
      - name: Wake up Bitrise
        uses: llaine/hans-landa@0.5
        with:
          github_token: ${{ secrets.GITHUB_TOKEN }}
          bitrise_app_slug: fa692dd0b84f09a9
          bitrise_build_trigger_token: ${{ secrets.BITRISE_TOKEN }}
          bitrise_workflow: primary
      - name: Wait for Bitrise to complete
        id: waitBitrise
        uses: fountainhead/action-wait-for-check@v1.1.0
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          checkName: Bitrise
      - if: steps.waitBitrise.outputs.conclusion != 'success'
        run: exit 1

  assemble-linux:
    name: Build Linux binaries and merge derivation
    runs-on: ubuntu-latest
    needs: precompile-bitrise
    environment: Cachix
    if: github.ref == 'refs/heads/master'
    steps:
      - name: Checkout code
        uses: actions/checkout@v3
      - name: Set up Nix
        uses: cachix/install-nix-action@v20
      - name: Set up Cachix access
        uses: cachix/cachix-action@v12
        with:
          name: nix-wrap
          authToken: "${{ secrets.CACHIX_AUTH_TOKEN }}"
          pushFilter: "(-source|-man)$"
      - name: Install QEMU for AArch64 builds
        run: |
          sudo apt-get -q -y update
          sudo apt-get -q -y install qemu-user-static
      - name: Build and pin final output
        run: |
          nix --extra-platforms aarch64-linux build .#static-bins
          cachix push nix-wrap $(nix eval --raw .#static-bins)
          cachix pin nix-wrap binaries $(nix eval --raw .#static-bins) --keep-forever