Closed musjj closed 4 months ago
I'll be honest, I still have no idea how this workflow works @NotAShelf
In general, I find cachix's much more unreliable - had many occurrences of random fetching and permission issues in the CI while using it. However, if it's good enough for Hyprland's nix CI then it's good enough for me.
LGTM, this can be merged @Aylur.
The
nix-installer-action
fromDeterminateSystems
was causing weird reproducibility issues, where the derivation hash produced in the CI differs from the one produced by my local environment.I'm not sure why it's happening, but simply switching to the
install-nix-action
provided by Cachix fixes this issue. You can test this by building locally, then comparing the produced nix store path with the one in the CI logs.Also added a lib.cleanSource pass to the source tree, to further improve reproducibility.