containerbase nix releases

Prebuild nix releases used by containerbase/base.

Local development

mise install installs Node.js, pnpm, jactionlint, shellcheck and zizmor, then pnpm install --frozen-lockfile installs the dependencies.

pnpm lint            # pnpm oxfmt-fix to fix the formatting
jactionlint          # the GitHub workflows
zizmor .github/      # security audit of the GitHub workflows

CI runs jactionlint and zizmor through mise in the lint job, and the commit hook runs them on staged workflow files.

Build the image

docker build -t builder --build-arg APT_HTTP_PROXY=http://apt-proxy:3142 .

Test the image

docker run --rm -it -v ${PWD}/.cache:/cache -e DEBUG=true builder 2.26.1

${PWD}/.cache will contain packed releases after successful build.

Optional environment variables

Name	Description	Default
APT_HTTP_PROXY	Set an APT http proxy for installing build deps	<empty>
DEBUG	Show verbose nix build output	<empty>