···

       
15
       
 
       
  backport:

     

       
16
       
 
       
    name: Backport Pull Request

     

       
17
       
 
       
    if: github.repository_owner == 'NixOS' && github.event.pull_request.merged == true && (github.event.action != 'labeled' || startsWith(github.event.label.name, 'backport'))

     

       
18
       
-
       
    runs-on: ubuntu-24.04

     

       
19
       
 
       
    steps:

     

       
20
       
 
       
      # Use a GitHub App to create the PR so that CI gets triggered

     

       
21
       
 
       
      # The App is scoped to Repository > Contents and Pull Requests: write for Nixpkgs

     

···

       
15
       
 
       
  backport:

     

       
16
       
 
       
    name: Backport Pull Request

     

       
17
       
 
       
    if: github.repository_owner == 'NixOS' && github.event.pull_request.merged == true && (github.event.action != 'labeled' || startsWith(github.event.label.name, 'backport'))

     

       
18
       
+
       
    runs-on: ubuntu-24.04-arm

     

       
19
       
 
       
    steps:

     

       
20
       
 
       
      # Use a GitHub App to create the PR so that CI gets triggered

     

       
21
       
 
       
      # The App is scoped to Repository > Contents and Pull Requests: write for Nixpkgs

     

···

       
12
       
 
       
jobs:

     

       
13
       
 
       
  check:

     

       
14
       
 
       
    name: cherry-pick-check

     

       
15
       
-
       
    runs-on: ubuntu-24.04

     

       
16
       
 
       
    if: github.repository_owner == 'NixOS'

     

       
17
       
 
       
    steps:

     

       
18
       
 
       
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

     

···

       
12
       
 
       
jobs:

     

       
13
       
 
       
  check:

     

       
14
       
 
       
    name: cherry-pick-check

     

       
15
       
+
       
    runs-on: ubuntu-24.04-arm

     

       
16
       
 
       
    if: github.repository_owner == 'NixOS'

     

       
17
       
 
       
    steps:

     

       
18
       
 
       
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

     

···

       
12
       
 
       


     

       
13
       
 
       
  nixos:

     

       
14
       
 
       
    name: fmt-check

     

       
15
       
-
       
    runs-on: ubuntu-24.04

     

       
16
       
 
       
    needs: get-merge-commit

     

       
17
       
 
       
    if: needs.get-merge-commit.outputs.mergedSha

     

       
18
       
 
       
    steps:

     

···

       
12
       
 
       


     

       
13
       
 
       
  nixos:

     

       
14
       
 
       
    name: fmt-check

     

       
15
       
+
       
    runs-on: ubuntu-24.04-arm

     

       
16
       
 
       
    needs: get-merge-commit

     

       
17
       
 
       
    if: needs.get-merge-commit.outputs.mergedSha

     

       
18
       
 
       
    steps:

     

···

       
41
       
 
       
  # Check that code owners is valid

     

       
42
       
 
       
  check:

     

       
43
       
 
       
    name: Check

     

       
44
       
-
       
    runs-on: ubuntu-24.04

     

       
45
       
 
       
    needs: get-merge-commit

     

       
46
       
 
       
    if: github.repository_owner == 'NixOS' && needs.get-merge-commit.outputs.mergedSha

     

       
47
       
 
       
    steps:

     
···

       
89
       
 
       
  # Request reviews from code owners

     

       
90
       
 
       
  request:

     

       
91
       
 
       
    name: Request

     

       
92
       
-
       
    runs-on: ubuntu-24.04

     

       
93
       
 
       
    if: github.repository_owner == 'NixOS'

     

       
94
       
 
       
    steps:

     

       
95
       
 
       
      - uses: cachix/install-nix-action@526118121621777ccd86f79b04685a9319637641 # v31

     

···

       
41
       
 
       
  # Check that code owners is valid

     

       
42
       
 
       
  check:

     

       
43
       
 
       
    name: Check

     

       
44
       
+
       
    runs-on: ubuntu-24.04-arm

     

       
45
       
 
       
    needs: get-merge-commit

     

       
46
       
 
       
    if: github.repository_owner == 'NixOS' && needs.get-merge-commit.outputs.mergedSha

     

       
47
       
 
       
    steps:

     
···

       
89
       
 
       
  # Request reviews from code owners

     

       
90
       
 
       
  request:

     

       
91
       
 
       
    name: Request

     

       
92
       
+
       
    runs-on: ubuntu-24.04-arm

     

       
93
       
 
       
    if: github.repository_owner == 'NixOS'

     

       
94
       
 
       
    steps:

     

       
95
       
 
       
      - uses: cachix/install-nix-action@526118121621777ccd86f79b04685a9319637641 # v31

     

···

       
11
       
 
       


     

       
12
       
 
       
  eval-aliases:

     

       
13
       
 
       
    name: Eval nixpkgs with aliases enabled

     

       
14
       
-
       
    runs-on: ubuntu-24.04

     

       
15
       
 
       
    needs: [ get-merge-commit ]

     

       
16
       
 
       
    steps:

     

       
17
       
 
       
      - name: Check out the PR at the test merge commit

     

···

       
11
       
 
       


     

       
12
       
 
       
  eval-aliases:

     

       
13
       
 
       
    name: Eval nixpkgs with aliases enabled

     

       
14
       
+
       
    runs-on: ubuntu-24.04-arm

     

       
15
       
 
       
    needs: [ get-merge-commit ]

     

       
16
       
 
       
    steps:

     

       
17
       
 
       
      - name: Check out the PR at the test merge commit

     

···

       
21
       
 
       


     

       
22
       
 
       
  attrs:

     

       
23
       
 
       
    name: Attributes

     

       
24
       
-
       
    runs-on: ubuntu-24.04

     

       
25
       
 
       
    needs: get-merge-commit

     

       
26
       
 
       
    if: needs.get-merge-commit.outputs.mergedSha

     

       
27
       
 
       
    outputs:

     
···

       
61
       
 
       


     

       
62
       
 
       
  outpaths:

     

       
63
       
 
       
    name: Outpaths

     

       
64
       
-
       
    runs-on: ubuntu-24.04

     

       
65
       
 
       
    needs: [ attrs, get-merge-commit ]

     

       
66
       
 
       
    strategy:

     

       
67
       
 
       
      fail-fast: false

     
···

       
70
       
 
       
    steps:

     

       
71
       
 
       
      - name: Enable swap

     

       
72
       
 
       
        run: |

     

       
73
       
-
       
          sudo fallocate -l 10G /swapfile

     

       
74
       
-
       
          sudo chmod 600 /swapfile

     

       
75
       
-
       
          sudo mkswap /swapfile

     

       
76
       
-
       
          sudo swapon /swapfile

     

       
77
       
 
       


     

       
78
       
 
       
      - name: Download the list of all attributes

     

       
79
       
 
       
        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8

     
···

       
110
       
 
       


     

       
111
       
 
       
  process:

     

       
112
       
 
       
    name: Process

     

       
113
       
-
       
    runs-on: ubuntu-24.04

     

       
114
       
 
       
    needs: [ outpaths, attrs, get-merge-commit ]

     

       
115
       
 
       
    outputs:

     

       
116
       
 
       
      targetRunId: ${{ steps.targetRunId.outputs.targetRunId }}

     
···

       
212
       
 
       
  # Separate job to have a very tightly scoped PR write token

     

       
213
       
 
       
  tag:

     

       
214
       
 
       
    name: Tag

     

       
215
       
-
       
    runs-on: ubuntu-24.04

     

       
216
       
 
       
    needs: [ attrs, process ]

     

       
217
       
 
       
    if: needs.process.outputs.targetRunId

     

       
218
       
 
       
    permissions:

     

···

       
21
       
 
       


     

       
22
       
 
       
  attrs:

     

       
23
       
 
       
    name: Attributes

     

       
24
       
+
       
    runs-on: ubuntu-24.04-arm

     

       
25
       
 
       
    needs: get-merge-commit

     

       
26
       
 
       
    if: needs.get-merge-commit.outputs.mergedSha

     

       
27
       
 
       
    outputs:

     
···

       
61
       
 
       


     

       
62
       
 
       
  outpaths:

     

       
63
       
 
       
    name: Outpaths

     

       
64
       
+
       
    runs-on: ubuntu-24.04-arm

     

       
65
       
 
       
    needs: [ attrs, get-merge-commit ]

     

       
66
       
 
       
    strategy:

     

       
67
       
 
       
      fail-fast: false

     
···

       
70
       
 
       
    steps:

     

       
71
       
 
       
      - name: Enable swap

     

       
72
       
 
       
        run: |

     

       
73
       
+
       
          sudo fallocate -l 10G /swap

     

       
74
       
+
       
          sudo chmod 600 /swap

     

       
75
       
+
       
          sudo mkswap /swap

     

       
76
       
+
       
          sudo swapon /swap

     

       
77
       
 
       


     

       
78
       
 
       
      - name: Download the list of all attributes

     

       
79
       
 
       
        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8

     
···

       
110
       
 
       


     

       
111
       
 
       
  process:

     

       
112
       
 
       
    name: Process

     

       
113
       
+
       
    runs-on: ubuntu-24.04-arm

     

       
114
       
 
       
    needs: [ outpaths, attrs, get-merge-commit ]

     

       
115
       
 
       
    outputs:

     

       
116
       
 
       
      targetRunId: ${{ steps.targetRunId.outputs.targetRunId }}

     
···

       
212
       
 
       
  # Separate job to have a very tightly scoped PR write token

     

       
213
       
 
       
  tag:

     

       
214
       
 
       
    name: Tag

     

       
215
       
+
       
    runs-on: ubuntu-24.04-arm

     

       
216
       
 
       
    needs: [ attrs, process ]

     

       
217
       
 
       
    if: needs.process.outputs.targetRunId

     

       
218
       
 
       
    permissions:

     

···

       
11
       
 
       


     

       
12
       
 
       
jobs:

     

       
13
       
 
       
  resolve-merge-commit:

     

       
14
       
-
       
    runs-on: ubuntu-24.04

     

       
15
       
 
       
    outputs:

     

       
16
       
 
       
      mergedSha: ${{ steps.merged.outputs.mergedSha }}

     

       
17
       
 
       
    steps:

     

···

       
11
       
 
       


     

       
12
       
 
       
jobs:

     

       
13
       
 
       
  resolve-merge-commit:

     

       
14
       
+
       
    runs-on: ubuntu-24.04-arm

     

       
15
       
 
       
    outputs:

     

       
16
       
 
       
      mergedSha: ${{ steps.merged.outputs.mergedSha }}

     

       
17
       
 
       
    steps:

     

···

       
16
       
 
       
jobs:

     

       
17
       
 
       
  labels:

     

       
18
       
 
       
    name: label-pr

     

       
19
       
-
       
    runs-on: ubuntu-24.04

     

       
20
       
 
       
    if: "github.repository_owner == 'NixOS' && !contains(github.event.pull_request.title, '[skip treewide]')"

     

       
21
       
 
       
    steps:

     

       
22
       
 
       
      - uses: actions/labeler@8558fd74291d67161a8a78ce36a881fa63b766a9 # v5.0.0

     

···

       
16
       
 
       
jobs:

     

       
17
       
 
       
  labels:

     

       
18
       
 
       
    name: label-pr

     

       
19
       
+
       
    runs-on: ubuntu-24.04-arm

     

       
20
       
 
       
    if: "github.repository_owner == 'NixOS' && !contains(github.event.pull_request.title, '[skip treewide]')"

     

       
21
       
 
       
    steps:

     

       
22
       
 
       
      - uses: actions/labeler@8558fd74291d67161a8a78ce36a881fa63b766a9 # v5.0.0

     

···

       
14
       
 
       
jobs:

     

       
15
       
 
       
  nixpkgs:

     

       
16
       
 
       
    name: nixpkgs-manual-build

     

       
17
       
-
       
    runs-on: ubuntu-24.04

     

       
18
       
 
       
    steps:

     

       
19
       
 
       
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

     

       
20
       
 
       
        with:

     

···

       
14
       
 
       
jobs:

     

       
15
       
 
       
  nixpkgs:

     

       
16
       
 
       
    name: nixpkgs-manual-build

     

       
17
       
+
       
    runs-on: ubuntu-24.04-arm

     

       
18
       
 
       
    steps:

     

       
19
       
 
       
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

     

       
20
       
 
       
        with:

     

···

       
11
       
 
       


     

       
12
       
 
       
  tests:

     

       
13
       
 
       
    name: nix-files-parseable-check

     

       
14
       
-
       
    runs-on: ubuntu-24.04

     

       
15
       
 
       
    needs: get-merge-commit

     

       
16
       
 
       
    if: "needs.get-merge-commit.outputs.mergedSha && !contains(github.event.pull_request.title, '[skip treewide]')"

     

       
17
       
 
       
    steps:

     

···

       
11
       
 
       


     

       
12
       
 
       
  tests:

     

       
13
       
 
       
    name: nix-files-parseable-check

     

       
14
       
+
       
    runs-on: ubuntu-24.04-arm

     

       
15
       
 
       
    needs: get-merge-commit

     

       
16
       
 
       
    if: "needs.get-merge-commit.outputs.mergedSha && !contains(github.event.pull_request.title, '[skip treewide]')"

     

       
17
       
 
       
    steps:

     

···

       
13
       
 
       
      startsWith(github.event.pull_request.base.ref, 'nixos-') ||

     

       
14
       
 
       
      startsWith(github.event.pull_request.base.ref, 'nixpkgs-')

     

       
15
       
 
       
    name: "This PR is targeting a channel branch"

     

       
16
       
-
       
    runs-on: ubuntu-24.04

     

       
17
       
 
       
    steps:

     

       
18
       
 
       
      - run: |

     

       
19
       
 
       
          cat <<EOF

     

···

       
13
       
 
       
      startsWith(github.event.pull_request.base.ref, 'nixos-') ||

     

       
14
       
 
       
      startsWith(github.event.pull_request.base.ref, 'nixpkgs-')

     

       
15
       
 
       
    name: "This PR is targeting a channel branch"

     

       
16
       
+
       
    runs-on: ubuntu-24.04-arm

     

       
17
       
 
       
    steps:

     

       
18
       
 
       
      - run: |

     

       
19
       
 
       
          cat <<EOF

     

···

       
14
       
 
       


     

       
15
       
 
       
jobs:

     

       
16
       
 
       
  merge:

     

       
17
       
-
       
    runs-on: ubuntu-24.04

     

       
18
       
 
       
    name: ${{ inputs.from }} → ${{ inputs.into }}

     

       
19
       
 
       
    steps:

     

       
20
       
 
       
      # Use a GitHub App to create the PR so that CI gets triggered

     

···

       
14
       
 
       


     

       
15
       
 
       
jobs:

     

       
16
       
 
       
  merge:

     

       
17
       
+
       
    runs-on: ubuntu-24.04-arm

     

       
18
       
 
       
    name: ${{ inputs.from }} → ${{ inputs.into }}

     

       
19
       
 
       
    steps:

     

       
20
       
 
       
      # Use a GitHub App to create the PR so that CI gets triggered