feat ✨: s3cache

Signed-off-by: Victor Hang <[email protected]>
didactiklabs · Dec 19, 2024 · 5e53603 · 5e53603
1 parent c61f4e5
commit 5e53603
Show file tree

Hide file tree

Showing 3 changed files with 20 additions and 22 deletions.
diff --git a/.github/workflows/build-frieren.yaml b/.github/workflows/build-frieren.yaml
@@ -41,14 +41,13 @@ jobs:
             };
           }
           EOF'
-      - name: Setup Attic cache
-        uses: ryanccn/attic-action@v0
-        with:
-          endpoint: ${{ secrets.ATTIC_ENDPOINT }}
-          cache: ${{ secrets.ATTIC_CACHE }}
-          token: ${{ secrets.ATTIC_TOKEN }}
-      - name: Build
-        run: nix-build '<nixpkgs/nixos>' -A config.system.build.toplevel -I nixos-config=profiles/frieren/configuration.nix
-      - name: Push
+      - name: Auth to s3 cache
+        run: |
+          aws --profile default configure set aws_access_key_id "${{ secrets.AWS_ACCESS_KEY_ID }}"
+          aws --profile default configure set aws_secret_access_key "${{ secrets.AWS_SECRET_ACCESS_KEY_ID }}"
+      - name: Build and Push
         run: |
-          attic push didactiklabs ./result
+          echo '${{ secrets.CACHE_PRIVATE_KEY }}' > cache-priv.pem
+          build=$(nix-build '<nixpkgs/nixos>' -A config.system.build.toplevel -I nixos-config=profiles/frieren/configuration.nix)
+          nix store sign -k cache-priv.pem $build
+          nix copy --to 's3://nix-cache?profile=default&scheme=https&endpoint=s3.didactiklabs.io' $build
diff --git a/.github/workflows/build-gojo.yaml b/.github/workflows/build-gojo.yaml
@@ -41,14 +41,13 @@ jobs:
             };
           }
           EOF'
-      - name: Setup Attic cache
-        uses: ryanccn/attic-action@v0
-        with:
-          endpoint: ${{ secrets.ATTIC_ENDPOINT }}
-          cache: ${{ secrets.ATTIC_CACHE }}
-          token: ${{ secrets.ATTIC_TOKEN }}
-      - name: Build
-        run: nix-build '<nixpkgs/nixos>' -A config.system.build.toplevel -I nixos-config=profiles/gojo/configuration.nix
-      - name: Push
+      - name: Auth to s3 cache
+        run: |
+          aws --profile default configure set aws_access_key_id "${{ secrets.AWS_ACCESS_KEY_ID }}"
+          aws --profile default configure set aws_secret_access_key "${{ secrets.AWS_SECRET_ACCESS_KEY_ID }}"
+      - name: Build and Push
         run: |
-          attic push didactiklabs ./result
+          echo '${{ secrets.CACHE_PRIVATE_KEY }}' > cache-priv.pem
+          build=$(nix-build '<nixpkgs/nixos>' -A config.system.build.toplevel -I nixos-config=profiles/gojo/configuration.nix)
+          nix store sign -k cache-priv.pem $build
+          nix copy --to 's3://nix-cache?profile=default&scheme=https&endpoint=s3.didactiklabs.io' $build
diff --git a/base.nix b/base.nix
@@ -151,8 +151,8 @@ in
         "root"
         "@wheel"
       ];
-      substituters = [ "https://didactiklabs.cachix.org" ];
-      trusted-public-keys = [ "didactiklabs.cachix.org-1:HYJV+l+6uSwJIAm4wdqVP/TuclEptn6oI2dzLqHq88k=" ];
+      substituters = [ "https://s3.didactiklabs.io/nix-cache" ];
+      trusted-public-keys = [ "didactiklabs-nixcache:PxLKN0+ZkP07M8g8/B6xbP6A4MYpqQg6LH7V3muiy/0=" ];
     };
   };
   # SSH Agent