Use nixos-unstable channel's prebuilt qemu_full with canokey support builtin from nix cache #1687
Conversation
tlaurion
force-pushed
the
use_nixos-unstable_prebuild_qemu-canokey
branch
2 times, most recently
from
921f28e to
656e6a4
Compare
|
Updated README.md notes and used it to build docker image out of nix develop, updated flake.nix and flake.lock accordingly to include now prebuild qemu with canokey support and tested to work. Tested working successfully. Added last todo in OP needing to be done at time of merging (push latest to be another tag of v0.1.9 docker image. |
|
Oups lol. I pushed vx.y.z copy/pasting my example without changing variables content at Fixing to v0.1.9, force pushing |
tlaurion
force-pushed
the
use_nixos-unstable_prebuild_qemu-canokey
branch
from
656e6a4 to
5627a5f
Compare
…builtin, downloaded from nix cache - flake.lock: bumps lcoekd package list to latest packages list through 'nix flake update' - flake.nix : comment out customizations of derivatives, removing canokey-qemu lib since qemu_full depends on qemu which depends on canokey-qemu by default now - flake.nux: add 'less' so that 'git log' is usable - circleci/config.yml: use docker v0.1.9 - README.md : update docker image maintainer notes to ease upstreaming of docker images and for others to play around, requiring dockerhub account For testing iterations of this, I used: docker_version="v0.1.9" && docker_hub_repo="tlaurion/heads-dev-env" && sed "s@\(image: \)\(.*\):\(v[0-9]*\.[0-9]*\.[0-9]*\)@\1\2:$docker_version@" -i .circleci/config.yml && nix --print-build-logs --verbose develop --ignore-environment --command true && nix build .#dockerImage && docker load < result && docker tag linuxboot/heads:dev-env "$docker_hub_repo:$docker_version" && docker push "$docker_hub_repo:$docker_version" Then added final commit, and pushed. Signed-off-by: Thierry Laurion <[email protected]>
tlaurion
force-pushed
the
use_nixos-unstable_prebuild_qemu-canokey
branch
from
5627a5f to
c7d1495
Compare
tlaurion
changed the title
|
@JonathonHall-Purism needs approval + merge when ready! |
That's awesome 🤩 Let me give it a try 🤞 edit: It works! I reproduced the v0.1.9 image |
@JonathonHall-Purism isn't this awesome? Meaning commits of today will be reproducible forever! Done! I'm really impressed by Nix. |
…eded Signed-off-by: Thierry Laurion <[email protected]>
|
@JonathonHall-Purism Drop what you would love to have under docker image under #1690 |
WiP: not yet under nixos-unstable. See c7d1495 log for details.EDIT: part of nixos-unstable as of this PR, having called
nix flake updateto update flake.lock to pin to new package list including qemu built with canokey by default as per https://nixpk.gs/pr-tracker.html?pr=311914 PR inclusion and hydra having built all derivatives, downloadable from cache for flake.nix based develop to build docker image reproducibly.Notes:
Track:
when CircleCI board builds all succeed.Todo:
docker tag tlaurion/heads-dev-env:v0.1.9 tlaurion/heads-dev-env:latest && docker push tlaurion/heads-dev-env:latest