ci: add nightly build

Author: imakira

.github/workflows/ci.yaml

@@ -4,14 +4,15 @@ on: [push]
 
 jobs:
     build:
-        environment: env
         runs-on: ubuntu-latest
         steps:
-            - uses: nixbuild/nix-quick-install-action@v30
+            - uses: actions/checkout@v3
+            - name: Install Nix
+              uses: cachix/install-nix-action@v17
               with:
-                nix_conf: |
-                  keep-env-derivations = true
-                  keep-outputs = true
+                extra_nix_config: |
+                  access-tokens = github.com=${{ secrets.GITHUB_TOKEN }}
+
             - name: Restore and save Nix store
               uses: nix-community/cache-nix-action@v6
               with:
@@ -35,20 +36,7 @@ jobs:
                 # except any version with the key that is the same as the `primary-key`
                 purge-primary-key: never
 
-            - uses: actions/checkout@v3
-            - name: Install Nix
-              uses: cachix/install-nix-action@v17
-              with:
-                extra_nix_config: |
-                  access-tokens = github.com=${{ secrets.GITHUB_TOKEN }}
-
-            - name: Set git name 
-              run: git config --global user.name "cerulean-ci"
-
-            - name: Set git email
-              run: git config --global user.email "[email protected]"
-
             - name: Running Tests
               shell: 'nix develop .#ci -c bash -e {0}'
-              run: make test-all
+              run: make ci-test-all
 

.github/workflows/nightly.yaml

@@ -0,0 +1,47 @@
+name: nightly build
+
+on:
+  schedule:
+    - cron: "30 01 * * *"
+jobs:
+  nightly_release:
+    environment: env
+    name: nightly release
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - name: Install Nix
+        uses: cachix/install-nix-action@v17
+        with:
+          extra_nix_config: |
+            access-tokens = github.com=${{ secrets.GITHUB_TOKEN }}
+
+      - name: Restore and save Nix store
+        uses: nix-community/cache-nix-action@v6
+        with:
+          # restore and save a cache using this key
+          primary-key: nix-${{ runner.os }}-${{ hashFiles('**/*.nix', '**/flake.lock') }}
+          # if there's no cache hit, restore a cache by this prefix
+          restore-prefixes-first-match: nix-${{ runner.os }}-
+          # collect garbage until the Nix store size (in bytes) is at most this number
+          # before trying to save a new cache
+          # 1G = 1073741824
+          gc-max-store-size-linux: 1G
+          # do purge caches
+          purge: true
+          # purge all versions of the cache
+          purge-prefixes: nix-${{ runner.os }}-
+          # created more than this number of seconds ago
+          purge-created: 0
+          # or last accessed this duration (ISO 8601 duration format)
+          # before the start of the `Post Restore and save Nix store` phase
+          purge-last-accessed: P1DT12H
+          # except any version with the key that is the same as the `primary-key`
+          purge-primary-key: never
+
+      - uses: actions/checkout@v6
+        with:
+          ref: master
+
+      - name: release
+        run: make ci-release-nightly

Makefile

@@ -1,5 +1,6 @@
 MAKEFLAGS += --always-make
 DOCKER_USERNAME = coruscation
+VERSION_FILE = .cerulean-version
 
 git-add-all:
 	git add ./
@@ -31,9 +32,14 @@ define with-secrets
 	env env $$(gpg --batch --decrypt --passphrase $$CERULEAN_PASSPHRASE  ./secrets.gpg | xargs) $(MAKE) $1
 endef
 
-docker-publish-impl: docker-build-and-load
-	docker login -u ${DOCKER_USERNAME} -p $${DOCKER_TOKEN}
-	docker push ${DOCKER_USERNAME}/cerulean
+docker-publish-impl: # docker-build-and-load
+	docker login -u ${DOCKER_USERNAME} -p $${DOCKER_TOKEN}; \
+	docker push ${DOCKER_USERNAME}/cerulean; \
+	cerulean_version="$$(cat $(VERSION_FILE))"; \
+	if test -n "$${cerulean_version}"; then \
+		docker image tag cerulean:latest ${DOCKER_USERNAME}/cerulean:"$${cerulean_version}"; \
+		docker push ${DOCKER_USERNAME}/cerulean:"$${cerulean_version}"; \
+	fi; \
 
 docker-publish:
 	$(call with-secrets,docker-publish-impl)
@@ -66,3 +72,28 @@ clj-deps-update:
 	neil dep update
 
 update-dependencies: | npm-update clj-deps-update nix-deps-lock nix-npm-deps-lock
+
+ci-init:
+	git config --global user.name "cerulean-ci"
+	git config --global user.email "[email protected]"
+
+prepare-release-version:
+	echo $$(date -u +"%Y-%m-%dT%H.%M.%S") > $(VERSION_FILE)
+	git add $(VERSION_FILE)
+
+release: | test-all
+	$(MAKE) docker-publish
+
+release-if-necessary:
+	if test -n "$$(git rev-list  --after='24 hours' HEAD)"; then \
+		echo "release"; \
+		$(MAKE) release;\
+	else \
+		echo "last commit committed before 24 hours, do not release"; \
+	fi \
+
+ci-release-nightly: | ci-init prepare-release-version
+	$(MAKE) release-if-necessary
+
+ci-test-all: | ci-init
+	$(MAKE) test-all