fix: update NVIDIA driver version to 580.126.09 and corresponding SHA… #19
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Push Client Image to GHCR | |
| on: | |
| push: | |
| branches: | |
| - main | |
| workflow_dispatch: | |
| permissions: | |
| contents: read | |
| packages: write | |
| jobs: | |
| push-ghcr: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Free Disk Space (Ubuntu) | |
| uses: jlumbroso/free-disk-space@main | |
| - uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| - uses: nixbuild/nix-quick-install-action@v31 | |
| with: | |
| nix_conf: | | |
| download-buffer-size = 524288000 | |
| accept-flake-config = true | |
| substituters = https://cache.nixos.org/ https://cache.garnix.io/ https://nix-community.cachix.org | |
| trusted-public-keys = cache.garnix.io:CTFPyKSLcx5RMJKfLo5EEPUObbA78b0YQ2DTCJXqr9g= cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY= nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs= | |
| - name: Build image (uses Garnix/Nix binary cache if available) | |
| run: | | |
| nix build .#docker-psyche-solana-client --no-link --print-out-paths > image-path.txt | |
| - name: Push image to GHCR | |
| id: push | |
| run: | | |
| IMAGE_PATH=$(cat image-path.txt) | |
| SHORT_SHA=$(git rev-parse --short HEAD) | |
| IMAGE_NAME="ghcr.io/$(echo '${{ github.repository_owner }}' | tr '[:upper:]' '[:lower:]')/psyche-client" | |
| CREDS="${{ github.actor }}:${{ secrets.GITHUB_TOKEN }}" | |
| # Stream the Nix image directly to GHCR as :latest | |
| "$IMAGE_PATH" | skopeo copy \ | |
| --dest-creds "${CREDS}" \ | |
| docker-archive:/dev/stdin \ | |
| "docker://${IMAGE_NAME}:latest" | |
| # Copy :latest to a SHA-pinned tag (registry-to-registry, no re-streaming) | |
| skopeo copy \ | |
| --src-creds "${CREDS}" \ | |
| --dest-creds "${CREDS}" \ | |
| "docker://${IMAGE_NAME}:latest" \ | |
| "docker://${IMAGE_NAME}:sha-${SHORT_SHA}" | |
| # Print the image digest so it can be pinned in deployment manifests | |
| DIGEST=$(skopeo inspect \ | |
| --creds "${CREDS}" \ | |
| "docker://${IMAGE_NAME}:latest" \ | |
| | jq -r '.Digest') | |
| echo "Image pushed: ${IMAGE_NAME}@${DIGEST}" | |
| echo "image_digest=${DIGEST}" >> "$GITHUB_OUTPUT" | |
| echo "image_ref=${IMAGE_NAME}@${DIGEST}" >> "$GITHUB_OUTPUT" |