Wip dashboard

.envrc

@@ -2,4 +2,4 @@ export DIRENV_WARN_TIMEOUT=20s
 
 eval "$(devenv direnvrc)"
 
-use devenv -v
+use devenv

.github/workflows/check_pr_to_master.yml

@@ -8,7 +8,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
     - name: Get current branch name
       run: |
         echo ${{ github.head_ref }}

.github/workflows/check_security_codeQL.yml

@@ -22,7 +22,7 @@ jobs:
         python-version: [3.11, 3.12, 3.13]
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
 
     # Set up Python for each version specified in the matrix
     - name: Set up Python ${{ matrix.python-version }}
@@ -32,13 +32,13 @@ jobs:
 
     # Initialize CodeQL with the current Python version
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3
+      uses: github/codeql-action/init@v4
       with:
         languages: python
         build-mode: none
         queries: security-extended
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
+      uses: github/codeql-action/analyze@v4
       with:
         category: "/language:python"

.github/workflows/push_charts.yml

@@ -10,7 +10,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
     - name: Pushes to another repository
       uses: cpina/github-action-push-to-another-repository@main
       env:

.github/workflows/push_docker.yml

@@ -11,41 +11,37 @@ on:
 jobs:
   docker:
     runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        include:
-          - image: dsccadminch/lomas_server
-            target: lomas_server
-          - image: dsccadminch/lomas_admin
-            target: lomas_admin
-          - image: dsccadminch/lomas_client
-            target: lomas_client
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
+      - uses: cachix/install-nix-action@v31.10.1
+      - uses: cachix/cachix-action@v16
+        with:
+          name: lomas
+          authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
+      - name: Install devenv.sh
+        run: nix profile add nixpkgs/400de68cd101e8cfebffea121397683caf7f5a34#devenv
+
       - name: Docker meta
         id: meta
         uses: docker/metadata-action@v5
         with:
           images:
-            ${{ matrix.image }}
+            dsccadminch/lomas
           tags: |
             type=sha
             type=semver, pattern={{version}}
             type=raw,value=latest,enable=${{ github.event_name == 'release' }}
-      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
       - name: Login to Docker Hub
         uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKERHUB_USER }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
-      - name: Build and push image
-        uses: docker/build-push-action@v5
-        with:
-          context: .
-          file: Dockerfile
-          push: ${{ github.event_name == 'push' || github.event_name == 'release' }}
-          target: ${{ matrix.target }}
-          tags: ${{ steps.meta.outputs.tags }}
+
+      - name: Build Image
+        run: devenv build outputs.lomas-oci
+
+      - name: Push Image
+        if: github.event_name == 'push' || github.event_name == 'release'
+        run: |
+          out=$(devenv build outputs.lomas-oci 2> /dev/null )
+          $out | skopeo copy docker-archive:/dev/stdin docker://dsccadminch/lomas:${DOCKER_METADATA_OUTPUT_VERSION:-debug}

.github/workflows/push_pypi.yml

@@ -10,7 +10,7 @@ jobs:
   pypi:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: astral-sh/setup-uv@v5
         with:
           python-version: 3.12

.github/workflows/push_readthedocs.yml

@@ -12,28 +12,15 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: cachix/install-nix-action@v30
-      - uses: cachix/cachix-action@v15
+      - uses: actions/checkout@v5
+      - uses: cachix/install-nix-action@v31.10.1
+      - uses: cachix/cachix-action@v16
         with:
           name: lomas
           authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
 
       - name: Install devenv.sh
-        run: nix profile install nixpkgs#devenv
-
-      - name: Restore UV cache
-        uses: actions/cache@v4
-        id: uv-cache
-        with:
-          path: /home/runner/.cache/uv
-          key: uv-store-3.12-${{ hashFiles('uv.lock') }}
-          restore-keys: uv-store-3.12-
-
-      - name: Install dependencies
-        run: |
-          sudo apt-get install pandoc
-          devenv shell -- uv pip install ".[docs]"
+        run: nix profile add nixpkgs/400de68cd101e8cfebffea121397683caf7f5a34#devenv
 
       - name: Build with sphinx
         run: devenv shell -- build-docs

.github/workflows/test_and_coverage_server.yml

@@ -12,43 +12,28 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v4
-    - uses: cachix/install-nix-action@v30
-    - uses: cachix/cachix-action@v15
+    - uses: actions/checkout@v5
+    - uses: cachix/install-nix-action@v31.10.1
+    - uses: cachix/cachix-action@v16
       with:
         name: lomas
         authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
 
     - name: Install devenv.sh
-      run: nix profile install nixpkgs#devenv
-
-    - name: Restore UV cache
-      uses: actions/cache@v4
-      id: uv-cache
-      with:
-        path: /home/runner/.cache/uv
-        key: uv-store-3.12-${{ hashFiles('uv.lock') }}
-        restore-keys: uv-store-3.12-
+      run: nix profile add nixpkgs/400de68cd101e8cfebffea121397683caf7f5a34#devenv
 
     - name: Run all test with coverage
       run: devenv shell -- ut-coverage client/ -v
 
-    - name: Store UV cache
-      uses: actions/cache@v4
-      if: steps.uv-cache.outputs.cache-hit != 'true'
-      with:
-        path: /home/runner/.cache/uv
-        key: uv-store-3.12-${{ hashFiles('uv.lock') }}
-
     - run: mv .coverage .coverage.client
     - name: Store coverage file
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v6
       with:
         name: coverage-client
         path: .coverage.client
         include-hidden-files: true
     - name: Store logs
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v6
       if: success() || failure()
       with:
         name: test-logs-notebooks
@@ -64,49 +49,34 @@ jobs:
         python-version: [3.11, 3.12, 3.13]
 
     steps:
-    - uses: actions/checkout@v4
-    - uses: cachix/install-nix-action@v30
-    - uses: cachix/cachix-action@v15
+    - uses: actions/checkout@v5
+    - uses: cachix/install-nix-action@v31.10.1
+    - uses: cachix/cachix-action@v16
       with:
         name: lomas
         authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
 
     - name: Install devenv.sh
-      run: nix profile install nixpkgs#devenv
-
-    - name: Restore UV cache
-      uses: actions/cache@v4
-      id: uv-cache
-      with:
-        path: /home/runner/.cache/uv
-        key: uv-store-${{ matrix.python-version }}-${{ hashFiles('uv.lock') }}
-        restore-keys: uv-store-${{ matrix.python-version }}-
+      run: nix profile add nixpkgs/400de68cd101e8cfebffea121397683caf7f5a34#devenv
 
     - name: Set Python package
       run: |
         cat > devenv.local.nix <<EOF
-        { pkgs, ... }: { languages.python.package = pkgs.python$(echo ${{ matrix.python-version }} | tr -d .); }
+        { pkgs, ... }: { lomas.pyenv.package = pkgs.python$(echo ${{ matrix.python-version }} | tr -d .); }
         EOF
 
     - name: Run all test with coverage
       run: devenv shell -- ut-coverage server/
 
-    - name: Store UV cache
-      uses: actions/cache@v4
-      if: steps.uv-cache.outputs.cache-hit != 'true'
-      with:
-        path: /home/runner/.cache/uv
-        key: uv-store-${{ matrix.python-version }}-${{ hashFiles('uv.lock') }}
-
     - run: mv .coverage .coverage.${{ matrix.python-version }}
     - name: Store coverage file
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v6
       with:
         name: coverage-${{ matrix.python-version }}
         path: .coverage.${{ matrix.python-version }}
         include-hidden-files: true
     - name: Store logs
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v6
       if: success() || failure()
       with:
         name: test-logs-${{ matrix.python-version }}
@@ -126,9 +96,9 @@ jobs:
       # comments (to avoid publishing multiple comments in the same PR)
       contents: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v6
         id: download
         with:
           pattern: coverage-*
@@ -144,7 +114,7 @@ jobs:
           MERGE_COVERAGE_FILES: true
 
       - name: Store Pull Request comment to be posted
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         if: steps.coverage_comment.outputs.COMMENT_FILE_WRITTEN == 'true'
         with:
           name: python-coverage-comment-action

.github/workflows/test_docker_compose.yml

@@ -11,16 +11,18 @@ jobs:
     name: Run tests on Python ${{ matrix.python-version }}
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
-    - uses: cachix/install-nix-action@v30
-    - uses: cachix/cachix-action@v15
+    - uses: actions/checkout@v5
+    - uses: cachix/install-nix-action@v31.10.1
+    - uses: cachix/cachix-action@v16
       with:
         name: lomas
         authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
 
     - name: Install devenv.sh
-      run: nix profile install nixpkgs#devenv
+      run: nix profile add nixpkgs/400de68cd101e8cfebffea121397683caf7f5a34#devenv
 
     - name: Run a notebook within a container
+      shell: devenv shell bash -- -e {0}
       run: |
-        devenv shell -- docker-compose-test
+        docker-load-image
+        docker-compose-test

.github/workflows/test_linters.yml

@@ -10,23 +10,15 @@ jobs:
     runs-on: ubuntu-latest
     name: Lint
     steps:
-      - uses: actions/checkout@v4
-      - uses: cachix/install-nix-action@v30
-      - uses: cachix/cachix-action@v15
+      - uses: actions/checkout@v5
+      - uses: cachix/install-nix-action@v31.10.1
+      - uses: cachix/cachix-action@v16
         with:
           name: lomas
           authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
 
       - name: Install devenv.sh
-        run: nix profile install nixpkgs#devenv
-
-      - name: Restore UV cache
-        uses: actions/cache@v4
-        id: uv-cache
-        with:
-          path: /home/runner/.cache/uv
-          key: uv-store-3.12-${{ hashFiles('uv.lock') }}
-          restore-keys: uv-store-3.12-
+        run: nix profile add nixpkgs/400de68cd101e8cfebffea121397683caf7f5a34#devenv
 
       - name: ruff
         run: devenv shell -- ruff check core/lomas_core client/lomas_client server/lomas_server