Public: anyone can read this; nobody can change it.
azure-gate: NixOS-safe bicep — nixpkgs#bicep on PATH + use_binary_from_path #153
Check · Review · Land · Live — It conflicts with its base.
fix/azure-gate-nixos-bicep → main 1 commit
A guest
This pull comes from a guest: its preview runs without the app's variables or a forge token until a person who can write here approves it.
This pull waits for a person who can write here to review it; it never lands on its own.
2 files
changed +8
−1
.forgejo/workflows/azure-gate.yml +4 −1
| @@ -100,7 +100,10 @@ jobs: | ||
| 100 | 100 | [ "${{ github.event.inputs.e2e }}" = "false" ] && ARGS="$ARGS --skip-e2e" |
| 101 | 101 | # Orchestrator tools on PATH; gate.sh layers `nix develop` (flake tools) |
| 102 | 102 | # for germinate + coldstart-assert. az/kubectl/jq/ssh/curl cover both modes. |
| 103 | nix shell nixpkgs#azure-cli nixpkgs#kubectl nixpkgs#jq nixpkgs#openssh nixpkgs#curl --command \ | |
| 103 | # bicep: az's self-downloaded binary is dynamically linked and cannot | |
| 104 | # run on this NixOS host (stub-ld) — provide the nixpkgs one; gate.sh | |
| 105 | # points az at it via bicep.use_binary_from_path. | |
| 106 | nix shell nixpkgs#azure-cli nixpkgs#bicep nixpkgs#kubectl nixpkgs#jq nixpkgs#openssh nixpkgs#curl --command \ | |
| 104 | 107 | bash src/deploy/azure/gate.sh $ARGS |
| 105 | 108 | |
| 106 | 109 | - name: Safety net — the RG must be gone (unless keep) |
deploy/azure/gate.sh +4
| @@ -85,6 +85,10 @@ fi | ||
| 85 | 85 | [ -n "" ] && az account set -s "" |
| 86 | 86 | SUB= |
| 87 | 87 | say "mode= subscription= region=" |
| 88 | # az self-downloads a generic dynamically-linked bicep that cannot run on a | |
| 89 | # NixOS runner (stub-ld) — when a bicep is already on PATH (CI provides | |
| 90 | # nixpkgs#bicep), tell az to use that one instead of its own download. | |
| 91 | command -v bicep >/dev/null 2>&1 && az config set bicep.use_binary_from_path=true --only-show-errors | |
| 88 | 92 | |
| 89 | 93 | # ── Cloudflare helpers (aks per-run sub-domain delegation) ─────────────────── |
| 90 | 94 | CF_ZONE_ID="" CF_TOKEN="" |