on: [push]
jobs:
  check:
    runs-on: nix-upstream-latest
    steps:
      - run: echo "experimental-features = nix-command flakes" >> /etc/nix/nix.conf
      - run: nix-env -i nodejs # bootstrap
      - uses: actions/checkout@v4
      - run: mkdir -p /etc/containers && cp default-policy.json /etc/containers/policy.json
      - run: |-
          nix develop --command bash -c '
            for line in $(cat tags.txt); do
              IFS=: read -r pkg tag <<< $line
              cp $(nix build .#$pkg --print-out-paths) /tmp/img.tar.gz
              gunzip /tmp/img.tar.gz
              skopeo copy --dest/-creds="${{ secrets.FJ_USER }}:${{ secrets.FJ_PASS }}" oci-archive:///tmp/img.tar docker://git.10110110.xyz/ci/$tag:latest
            done
          '