initial setup

.forgejo/workflows/runner-image.yml

@@ -0,0 +1,47 @@
+name: Create OCI image(s)
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - main
+
+env:
+  registry: git.amarth.cloud
+  owner: amarth
+  image: default
+  tag: latest
+
+jobs:
+  build:
+    name: Build and push images
+    runs-on: default
+    steps:
+      - name: Checkout
+        run: |
+          git clone ${{ forge.server_url }}/${{ forge.repository }}.git .
+
+      - name: Prepare podman
+        run: |
+          # configure container policy to accept insecure registry
+          nix-env -iA nixpkgs.podman nixpkgs.kvmtool
+
+          # configure container policy to accept insecure registry
+          mkdir -p ~/.config/containers
+          echo '{ "default": [ {"type":"insecureAcceptAnything"} ] }' > ~/.config/containers/policy.json
+
+      - name: Log into registry
+        run: |
+          podman login --username "${{ forge.actor }}" --password "${{ forge.token }}" ${{ env.registry }}
+
+      - name: Create image
+        run: |
+          nix-build src/default.nix
+          podman load < result
+
+      - name: Push image
+        run: >-
+          podman push
+          --creds="${{ forge.actor }}:${{ forge.token }}"
+          localhost/default:latest
+          ${{ env.registry }}/${{ env.owner }}/${{ env.image }}:${{ env.tag }}