RSS Reader using AT Protocol
rssbase.io
feed
atom
rss
reader
atproto
social
fix ci by adding docker?
Romain Gautier
(Jul 3, 2026, 12:50 AM +0200)
b7aaa862
dc77a030
+37
-15
+16
-11
.tangled/workflows/build.yml
+16
-11
.tangled/workflows/build.yml
···
6
6
7
7
engine: microvm
8
8
image: nixos
9
+
dependencies:
10
+
- devenv
11
+
virtualisation:
12
+
docker: true
9
13
10
14
clone:
11
15
skip: false
12
16
depth: 1
13
-
14
-
dependencies:
15
-
- devenv
16
17
17
18
steps:
18
19
- name: "Initialize devenv"
19
20
command: devenv shell true
20
21
21
-
- name: "Build production image with Dagger"
22
-
command: DAGGER_NO_NAG=1 devenv shell dagger call application build-prod sync
22
+
# - name: "Build production image with Dagger"
23
+
# command: DAGGER_NO_NAG=1 devenv shell dagger call application build-prod sync
23
24
24
-
- name: "Build production image with Docker Compose"
25
+
- name: "Build production image for Docker Compose"
25
26
command: |
26
27
devenv shell -- bash -c '
27
28
set -euo pipefail
29
+
export DOCKER_BUILDKIT=1
28
30
cd application
29
-
export APP_SECRET="${APP_SECRET:-ci-app-secret}"
30
-
export CADDY_MERCURE_JWT_SECRET="${CADDY_MERCURE_JWT_SECRET:-ci-mercure-secret}"
31
-
docker-compose -f compose.yaml -f compose.prod.yaml build --pull
31
+
docker-buildx build --progress=plain --pull --load --target frankenphp_prod --tag app-php-prod .
32
32
'
33
33
34
34
- name: "Start production services and smoke test"
35
35
command: |
36
36
devenv shell -- bash -c '
37
37
set -euo pipefail
38
+
export DOCKER_BUILDKIT=1
39
+
export COMPOSE_DOCKER_CLI_BUILD=1
38
40
cd application
39
41
export APP_SECRET="${APP_SECRET:-ci-app-secret}"
40
42
export CADDY_MERCURE_JWT_SECRET="${CADDY_MERCURE_JWT_SECRET:-ci-mercure-secret}"
43
+
export HTTP_PORT="${HTTP_PORT:-8080}"
44
+
export HTTPS_PORT="${HTTPS_PORT:-8443}"
45
+
export HTTP3_PORT="${HTTP3_PORT:-8443}"
41
46
trap "docker-compose -f compose.yaml -f compose.prod.yaml down --volumes --remove-orphans" EXIT
42
47
docker-compose -f compose.yaml -f compose.prod.yaml down --volumes --remove-orphans
43
48
docker-compose -f compose.yaml -f compose.prod.yaml up --wait --wait-timeout 120 --no-build -d
44
-
curl -v --fail-with-body http://localhost
45
-
curl -vI --insecure --fail-with-body "https://localhost/.well-known/mercure?topic=test"
49
+
curl -v --fail-with-body "http://localhost:${HTTP_PORT}"
50
+
curl -vI --insecure --fail-with-body "https://localhost:${HTTPS_PORT}/.well-known/mercure?topic=test"
46
51
'
+19
-4
.tangled/workflows/check.yml
+19
-4
.tangled/workflows/check.yml
···
6
6
7
7
engine: microvm
8
8
image: nixos
9
+
dependencies:
10
+
- devenv
11
+
virtualisation:
12
+
docker: true
9
13
10
14
clone:
11
15
skip: false
12
16
depth: 1
13
17
14
-
dependencies:
15
-
- devenv
16
-
17
18
steps:
18
19
- name: "Initialize devenv"
19
20
command: devenv shell true
20
21
21
22
- name: "Run Dagger checks"
22
-
command: DAGGER_NO_NAG=1 devenv shell dagger check
23
+
command: |
24
+
set -euo pipefail
25
+
if [ -z "${DAGGER_CLOUD_TOKEN:-}" ]; then
26
+
echo "DAGGER_CLOUD_TOKEN is missing"
27
+
exit 1
28
+
fi
29
+
DAGGER_NO_NAG=1 devenv shell -- bash -lc '
30
+
set -euo pipefail
31
+
if [ -z "${DAGGER_CLOUD_TOKEN:-}" ]; then
32
+
echo "DAGGER_CLOUD_TOKEN is missing inside devenv"
33
+
exit 1
34
+
fi
35
+
echo "DAGGER_CLOUD_TOKEN is present inside devenv"
36
+
dagger check --progress=plain
37
+
'
+2
devenv.nix
+2
devenv.nix
···
11
11
{
12
12
# https://devenv.sh/packages/
13
13
packages = [
14
+
pkgs.docker-buildx # BuildKit builder for CI image builds
14
15
pkgs.docker-compose # used by application
15
16
dagger # dagger CLI dev build (until 1.0)
16
17
pkgs.skills # used to manage .agents/skills
···
21
22
enterShell = devenvSummary {
22
23
title = "RSSBase devenv:";
23
24
rows = [
25
+
{ pkg = pkgs.docker-buildx; }
24
26
{ pkg = pkgs.docker-compose; }
25
27
{ pkg = dagger; }
26
28
{ pkg = pkgs.skills; }