MythEclipse/GMW
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

ci(deploy): force narinfo write with --ignore-upstream-cache-filter; Traefik readTimeout=0 on imrnes

Browse Source
This commit is contained in:
asepharyana
2026-08-10 20:18:56 +07:00
parent 4cb4904517
commit 7d6c741bb2
1 changed files with 11 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/deploy.yml
+11 -4
View File
@@ -153,9 +153,13 @@ jobs:
echo "Fallback: VPS-hop attic push" echo "Fallback: VPS-hop attic push"
# Copy closure to VPS (fast if attic already has it via substitute) # Copy closure to VPS (fast if attic already has it via substitute)
ssh "$VPS_USER@$VPS_HOST" "sudo /nix/var/nix/profiles/default/bin/nix-store --realise '$STORE_PATH'" 2>/dev/null \ ssh "$VPS_USER@$VPS_HOST" "sudo /nix/var/nix/profiles/default/bin/nix-store --realise '$STORE_PATH'" 2>/dev/null \
|| nix copy --to "ssh://$VPS_USER@$VPS_HOST" "$STORE_PATH" || nix copy --to "ssh://***@$VPS_HOST" "$STORE_PATH"
# Push from VPS → Attic over Tailscale (reliable for large payloads) # Push from VPS → Attic over Tailscale.
ssh "$VPS_USER@$VPS_HOST" "$ATTIC_BIN push imrnes-ts:gmw '$STORE_PATH' --jobs 4" \ # --ignore-upstream-cache-filter is REQUIRED: without it, attic skips
# writing the narinfo to gmw when chunks exist in the upstream
# cache.nixos.org — leaving the path 404 on gmw so the VPS deploy's
# nix-store --realise can't find it and falls back to ssh copy.
ssh "$VPS_USER@$VPS_HOST" "$ATTIC_BIN push imrnes-ts:gmw '$STORE_PATH' --jobs 4 --ignore-upstream-cache-filter" \
|| echo "attic push failed (non-fatal; ssh copy fallback below)" || echo "attic push failed (non-fatal; ssh copy fallback below)"
} }
@@ -183,6 +187,9 @@ jobs:
fi fi
# ── Direct push: runner → attic public endpoint ────────────────── # ── Direct push: runner → attic public endpoint ──────────────────
# --ignore-upstream-cache-filter forces the narinfo write even when
# the path's chunks already exist in upstream cache.nixos.org (which
# attic would otherwise skip, leaving the path 404 on the gmw cache).
mkdir -p "$HOME/.config/attic" mkdir -p "$HOME/.config/attic"
cat > "$HOME/.config/attic/config.toml" <<EOF cat > "$HOME/.config/attic/config.toml" <<EOF
default-server = "pub" default-server = "pub"
@@ -191,7 +198,7 @@ jobs:
endpoint = "https://attic.asepharyana.my.id" endpoint = "https://attic.asepharyana.my.id"
token = "$ATTIC_TOKEN" token = "$ATTIC_TOKEN"
EOF EOF
if "$ATTIC_BIN" push pub:gmw "$STORE_PATH" --jobs 4; then if "$ATTIC_BIN" push pub:gmw "$STORE_PATH" --jobs 4 --ignore-upstream-cache-filter; then
echo "✅ Pushed $STORE_PATH to attic directly from runner" echo "✅ Pushed $STORE_PATH to attic directly from runner"
else else
echo "⚠️ Direct attic push failed; using VPS-hop flow" echo "⚠️ Direct attic push failed; using VPS-hop flow"