neelsani runner-images
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Neel Sani f78f24828c
All checks were successful
publish / publish (push) Successful in 2m53s
ci: stop baking attic cache into nix image
2026-09-20 16:02:11 +00:00
.forgejo/workflows Create Skopeo temporary directory 2026-09-19 18:57:42 +00:00
cosign.pub Sign published runner image with Cosign 2026-09-19 09:03:02 +00:00
flake.lock Lock runner image flake 2026-09-19 07:47:15 +00:00
flake.nix ci: stop baking attic cache into nix image 2026-09-20 16:02:11 +00:00
README.md ci: stop baking attic cache into nix image 2026-09-20 16:02:11 +00:00

runner-images

Declarative OCI images used by the nxgit Forgejo Actions runner.

The image is built with dockerTools, so the publishing workflow does not need a Docker socket, privileged mode, or access to the private Forgejo IP. It contains Nix, Node.js, Git, and attic-client. Repositories that need Attic cache access should configure it explicitly in their workflow.

Configure a repository Actions secret named REGISTRY_TOKEN with permission to publish packages to Forgejo. Pushes to main publish both the commit SHA tag and latest; version tags publish the immutable version tag.

Published images are signed with Cosign and verified by the publish workflow.