ci: Build container image

Test Plan
=========

CI

.github/workflows/container.yml

@@ -0,0 +1,35 @@
+name: build container image
+on:
+  pull_request:
+  push:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  container:
+    runs-on: ubuntu-22.04
+    permissions:
+      id-token: write
+      contents: read
+      packages: write
+
+    steps:
+    - uses: actions/checkout@main
+    - uses: DeterminateSystems/nix-installer-action@main
+    - uses: DeterminateSystems/magic-nix-cache-action@main
+
+    - name: Set up nix dev env
+      run: nix develop --command echo 0
+    - name: Build container image
+      run: nix build .#container
+    - name: Push container image on commits to main
+      if: ${{ github.ref_name == 'main' }}
+      run: |
+        nix develop --ignore-environment --command skopeo copy --dest-creds="${{ github.repository_owner }}:${{ github.token }}" docker-archive:./result docker://ghcr.io/javierhonduco/lightswitch:main-${{ github.sha }}
+    - name: Push container image on new releases
+      if: ${{ github.ref_type == 'tag' }}
+      run: |
+        nix develop --ignore-environment --command skopeo copy --dest-creds="${{ github.repository_owner }}:${{ github.token }}" docker-archive:./result docker://ghcr.io/javierhonduco/lightswitch:${{ github.ref_name }}
+        nix develop --ignore-environment --command skopeo copy --dest-creds="${{ github.repository_owner }}:${{ github.token }}" docker-archive:./result docker://ghcr.io/javierhonduco/lightswitch:latest

.github/workflows/static-build-and-upload.yml

@@ -1,7 +1,7 @@
 name: static build and upload
 on:
-    pull_request:
-    push:
+  pull_request:
+  push:
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}

.github/workflows/vmtests.yml

@@ -1,7 +1,7 @@
 name: vmtests
 on:
-    pull_request:
-    push:
+  pull_request:
+  push:
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}

flake.nix

@@ -57,7 +57,6 @@
             default = lightswitch;
             container = pkgs.dockerTools.buildLayeredImage {
               name = "lightswitch";
-              tag = "${self.dirtyShortRev}";
               config = {
                 Cmd = [ "${lightswitch}/bin/lightswitch" ];
                 Env = [
@@ -75,6 +74,7 @@
               gdb
               openssl
               # Other tools
+              skopeo
               cargo-edit
               # snapshot testing plugin binary
               cargo-insta