ci: check each push, deploy main #16

Closed

bot.oppi.li 2w ago

Closed opened by and assigned to

bot.oppi.li 2w ago targeting main

Add the CI workflows for naut.

check.yml runs on each push and each pull request. It runs cargo check, clippy, and build on the crate workspace. It also runs check, clippy, and a release worker-build on the worker for wasm32. All tools come from the flake dev shell.

deploy.yml runs on each push to main. It builds the worker and deploys it with wrangler. It uses CLOUDFLARE_API_TOKEN from the repo secrets. worker/wrangler.deploy.jsonc holds the live worker name, bindings, and vars. The knot signing key stays a worker secret.

This pull is stacked on the extraction pull.

This pull request has no versions submitted yet.

Comments

oppi.li 00d47430 2w ago

remove all the comments in the workflow files, the files are self explanatory

bot.oppi.li 2w ago

done, both workflow files are comment-free now. pushed as version 1 (40ccb80); nothing else changed.

oppi.li 1w ago

update the commit message to be more consice, use ASD-STE100

oppi.li 1w ago

update the PR title and body also while you are at it

bot.oppi.li 1w ago

Done. I updated the commit message, the PR title, and the PR body.

The commit message is short now and uses ASD-STE100. I pushed it as version 4 (b98466e). The tree did not change: git diff b060816..b98466e prints nothing.

The PR title is "ci: check each push, deploy main". The PR body is short now and uses ASD-STE100.

oppi.li 1w ago

do a dry run of the check workflow. trigger a manual workflow dispatch to my spindle.

bot.oppi.li 1w ago

The manual dispatch cannot start. Here is what I did and what I found.

I called sh.tangled.ci.triggerPipeline on spindle.oppi.li with the check workflow at b98466e. The spindle loads the workflow with a --filter=tree:0 clone. The knot behind knot2-artifacts (Cloudflare Artifacts) supports only blob:none, so the clone fails and no pipeline is made:

failed to trigger pipeline: loading pipeline: syncing git repo: git clone: exit status 128:
error: RPC failed; HTTP 400

The server says: Unsupported Git fetch filter; only blob:none is supported. I reproduced it with a plain git clone --filter=tree:0 of the repo; the same clone works on git.oppi.li and knot1.tangled.sh. sh.tangled.ci.queryPipelines returns 0 pipelines for this repo, so the push triggers do not run either.

As a dry run, I ran the six check.yml steps locally on b98466e in nix develop. All pass: cargo check, clippy, and build --workspace --all-targets; the worker check and clippy on wasm32-unknown-unknown; and worker-build --release.

The workflow is fine. The blocker is the spindle's tree:0 clone against the artifacts knot, not this pull.

oppi.li 1w ago

configure spindle to use deep clones. or configure the workflow to skip clones and do it yourself in the workflow file.

bot.oppi.li 1w ago

I applied the workflow option, but the dispatch still cannot start. The spindle clones the repo to read the workflow, before any workflow option is applied.

check.yml now has clone: {skip: true} and a checkout step that runs git fetch --depth=1 (pushed as version 6, 2261ccd). The manual dispatch and sh.tangled.ci.describeWorkflowDefinition both still fail earlier, in the load clone:

git clone --no-checkout --depth=1 --filter=tree:0 --revision=<sha> <knot> <path>

The job clone (spindle/models/clone.go) has no filter, so clone: skip cannot unblock this. The one-line fix is in gitutil/sync.go: drop --filter=tree:0 (or use blob:none). The artifacts knot accepts an unfiltered or blob:none clone, and rejects tree:0 with Unsupported Git fetch filter; only blob:none is supported.

I cannot apply that from here: the live spindle is the systemd unit spindle.service on this host, and rebuilding/restarting it needs root; I have no passwordless sudo. Tell me the flake or checkout that builds it (or give me a way to rebuild) and I will patch it. I can also fix the knot instead, if you prefer.

Local dry run: all six check.yml steps still pass on 2261ccd.

oppi.li 1w ago

alright, i have documented this, close this PR then

bot.oppi.li 1w ago

Closed.