nixos-runner

Forgejo Actions runner image with Nix, Git, Node.js, and common shell tools.

Build locally:

nix build .#image

Publish:

nix develop --command skopeo copy \
  --dest-creds "$REGISTRY_USER:$REGISTRY_TOKEN" \
  docker-archive:result \
  docker://git.itanimul.li/itanimulli/nixos-runner:latest

The Forgejo Actions label is:

nixos:docker://git.itanimul.li/itanimulli/nixos-runner:latest

Forgejo setup:

1. Create a token for itanimulli with package write permission.
2. Add it to this repo's Actions secrets as REGISTRY_TOKEN.
3. Run the Publish runner image workflow once.
4. Make the published package public, or configure Podman auth on Haru before switching the runner label to this image.

Bootstrap order:

Publish the image before deploying the Haru config that points the nixos runner label at git.itanimul.li/itanimulli/nixos-runner:latest. Otherwise the runner will try to pull an image that does not exist yet.