nixpkgs-review.yml

# This is a basic workflow to help you get started with Actions

name: nixpkgs-review a nixpkgs PR
run-name: 'nixpkgs-review #${{ github.event.inputs.pr }}'

# Controls when the action will run. Triggers the workflow on push or pull request
# events but only for the master branch
on:
  workflow_dispatch:
    inputs:
      pr:
        description: "PR number"
        type: number
        required: true
      extra-args:
        description: "Extra args for nixpkgs-review"
        type: string
        default: ""
        required: false
      free-space:
        description: "Run workflow to increase free space (tradeoff: runs faster vs runs bigger PRs)"
        type: boolean
        default: true
        required: true
      x86_64-linux:
        type: boolean
        description: "Build on x86_64-linux"
        default: true
        required: true
      aarch64-darwin:
        type: boolean
        description: "Build on aarch64-darwin"
        default: false
        required: true
      x86_64-darwin:
        type: boolean
        description: "Build on x86_64-darwin"
        default: false
        required: true

concurrency:
  group: review-${{ github.event.inputs.pr }}
  cancel-in-progress: true

jobs:
  build-x86_64-linux:
    name: 'nixpkgs-review #${{ github.event.inputs.pr }} on x86_64-linux'
    if: ${{ github.event.inputs.x86_64-linux == 'true' }}
    runs-on: ubuntu-latest

    steps:
      - name: Free up space
        uses: lucasew/action-i-only-care-about-nix@main
        if: ${{ github.event.inputs.free-space == 'true' }}

      - name: Prepare for Nix if cleaned up
        run: |
          sudo mkdir -p /nix/build
          df -h
      - uses: actions/cache@v4
        with:
          path: nixpkgs
          key: git-folder
      - uses: actions/checkout@v4
        with:
          path: nixpkgs
          ref: ${{ github.event.inputs.branch }}
          fetch-depth: 0
      - uses: DeterminateSystems/nix-installer-action@v16
        with:
          github-token: ${{ secrets.GITHUB_TOKEN }}
          extra-conf: |
            build-dir = /nix/build
      - uses: DeterminateSystems/magic-nix-cache-action@main
      - name: Run review
        env:
          GITHUB_TOKEN: ${{ secrets.PAT_TOKEN }}
          PR: ${{ github.event.inputs.pr }}
          EXTRA_ARGS: ${{ github.event.inputs.extra-args }}
        run: |
          { while true; do df -h; uptime; sleep 60; done } &
          git config --global user.email "user@example.com"
          git config --global user.name "user"
          cd $GITHUB_WORKSPACE/nixpkgs
          nix run nixpkgs#nixpkgs-review -- pr $PR --print-result --post-result --no-shell $EXTRA_ARGS
      - uses: actions/upload-artifact@v4
        with:
          name: build-logs
          path: /nix/var/log/nix/drvs
          include-hidden-files: true

  build-aarch64-darwin:
    name: 'nixpkgs-review #${{ github.event.inputs.pr }} on aarch64-darwin'
    if: ${{ github.event.inputs.aarch64-darwin == 'true' }}
    runs-on: macos-latest

    steps:
      - uses: actions/cache@v4
        with:
          path: nixpkgs
          key: git-folder
      - uses: actions/checkout@v4
        with:
          path: nixpkgs
          ref: ${{ github.event.inputs.branch }}
          fetch-depth: 0
      - uses: DeterminateSystems/nix-installer-action@v16
        with:
          github-token: ${{ secrets.GITHUB_TOKEN }}
      - uses: DeterminateSystems/magic-nix-cache-action@main
      - name: Run review
        env:
          GITHUB_TOKEN: ${{ secrets.PAT_TOKEN }}
          PR: ${{ github.event.inputs.pr }}
          EXTRA_ARGS: ${{ github.event.inputs.extra-args }}
        run: |
          { while true; do df -h; uptime; sleep 60; done } &
          git config --global user.email "user@example.com"
          git config --global user.name "user"
          cd $GITHUB_WORKSPACE/nixpkgs
          nix run nixpkgs#nixpkgs-review -- pr $PR --print-result --post-result --no-shell $EXTRA_ARGS
      - uses: actions/upload-artifact@v4
        with:
          name: build-logs
          path: /nix/var/log/nix/drvs
          include-hidden-files: true

  build-x86_64-darwin:
    name: 'nixpkgs-review #${{ github.event.inputs.pr }} on x86_64-darwin'
    if: ${{ github.event.inputs.x86_64-darwin == 'true' }}
    runs-on: macos-13

    steps:
      - uses: actions/cache@v4
        with:
          path: nixpkgs
          key: git-folder
      - uses: actions/checkout@v4
        with:
          path: nixpkgs
          ref: ${{ github.event.inputs.branch }}
          fetch-depth: 0
      - uses: DeterminateSystems/nix-installer-action@v16
        with:
          github-token: ${{ secrets.GITHUB_TOKEN }}
      - uses: DeterminateSystems/magic-nix-cache-action@main
      - name: Run review
        env:
          GITHUB_TOKEN: ${{ secrets.PAT_TOKEN }}
          PR: ${{ github.event.inputs.pr }}
          EXTRA_ARGS: ${{ github.event.inputs.extra-args }}
        run: |
          { while true; do df -h; uptime; sleep 60; done } &
          git config --global user.email "user@example.com"
          git config --global user.name "user"
          cd $GITHUB_WORKSPACE/nixpkgs
          nix run nixpkgs#nixpkgs-review -- pr $PR --print-result --post-result --no-shell $EXTRA_ARGS
      - uses: actions/upload-artifact@v4
        with:
          name: build-logs
          path: /nix/var/log/nix/drvs
          include-hidden-files: true