ci/pipelines/post-receive.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56

{ briefcase, pkgs, ... }:

let
  inherit (builtins) fetchGit path toJSON;
  inherit (briefcase.emacs) initEl runScript;

  elispLintSrc = fetchGit {
    url = "https://github.com/gonewest818/elisp-lint";
    rev = "2b645266be8010a6a49c6d0ebf6a3ad5bd290ff4";
  };

  pipeline.steps = [
    {
      key = "lint-secrets";
      command = "${pkgs.git-secrets}/bin/git-secrets --scan-history";
      label = ":broom: lint secrets";
    }
    {
      key = "build-briefcase";
      command = ''
        nix-build . -I briefcase="$(pwd)" --no-out-link --show-trace
      '';
      label = ":nix: build briefcase";
      depends_on = "lint-secrets";
    }
    {
      key = "init-emacs";
      command = let
        scriptEl = path {
          path = ./script.el;
          name = "script.el";
        };
        runScriptEl = runScript {
          script = scriptEl;
          briefcasePath = "$(pwd)";
        };
      in "${runScriptEl} ${initEl}";
      label = ":gnu: initialize Emacs";
      depends_on = "build-briefcase";
    }
    {
      key = "build-socrates";
      command = ''
        nix-build '<nixpkgs/nixos>' \
          -I briefcase="$(pwd)" \
          -I nixpkgs=/var/lib/buildkite-agent-socrates/nixpkgs-channels \
          -I nixos-config=nixos/socrates/default.nix \
          -A system \
          --no-out-link \
          --show-trace
      '';
      label = ":nix: build socrates";
      depends_on = "build-briefcase";
    }
  ];
in pkgs.writeText "pipeline.yaml" (toJSON pipeline)