Initial commit

.drone.yml

@@ -0,0 +1,13 @@
+kind: pipeline
+name: default
+
+steps:
+  - name: docker
+    image: plugins/docker
+    settings:
+      registry: r.sbruder.de
+      username:
+        from_secret: docker_username
+      password:
+        from_secret: docker_password
+      repo: r.sbruder.de/drone-nix-runner

Dockerfile

@@ -0,0 +1,23 @@
+FROM alpine as drone-runner-exec
+
+ARG DRONE_RUNNER_EXEC_VERSION=1.0.0-beta.9
+
+RUN wget https://github.com/drone-runners/drone-runner-exec/releases/download/v${DRONE_RUNNER_EXEC_VERSION}/drone_runner_exec_linux_amd64.tar.gz \
+    && tar xvf drone_runner_exec_linux_amd64.tar.gz
+
+FROM nixos/nix
+
+# installed from alpine to not pollute nix store
+RUN apk add --no-cache \
+        git \
+        git-lfs \
+        rsync \
+        su-exec
+
+COPY --from=drone-runner-exec /drone-runner-exec /usr/local/bin/
+COPY entrypoint.sh /
+
+ENTRYPOINT ["/entrypoint.sh"]
+ENV DRONE_RUNNER_ENVIRON=NIX_PATH:nixpkgs=/nix/var/nix/profiles/per-user/root/channels/nixpkgs,NIX_STORE:/nix/store-ci
+
+EXPOSE 3000

entrypoint.sh

@@ -0,0 +1,8 @@
+#!/bin/sh
+echo "Bootstrapping initial nix store…"
+mkdir -p /nix/store-ci
+chmod 1775 /nix/store-ci
+chgrp nixbld /nix/store-ci
+rsync -a /nix/store/./ /nix/store-ci
+NIX_STORE=/nix/store-ci nix-daemon &
+exec su-exec nobody:nogroup /usr/local/bin/drone-runner-exec