ci: made CI pipelines use nix instead

This makes sure that all workflows use the same version of node as the runtime
node it should use.

Author: Tygo-van-den-Hurk

.github/workflows/many--build-and-push-image.yaml

@@ -20,8 +20,7 @@ on:
       - '*[Dd]ocker*'
 
 env:  
-  IMAGE: image
-  TARGET: production
+  IMAGE: slyde:latest
 
 jobs:
   build:
@@ -34,6 +33,8 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/[email protected]
+      - name: Install Nix using cachix
+        uses: cachix/[email protected]
       - name: Get image tags
         id: vars
         shell: bash
@@ -61,11 +62,7 @@ jobs:
             echo "tags=unstable" >> $GITHUB_OUTPUT
           fi
       - name: Build docker image
-        run: docker build --target "$TARGET" --tag "$IMAGE" .
-      - name: Basic container runtime test
-        run: docker run --rm "$IMAGE" -- --help
-      - name: Save image to disk
-        run: docker save "$IMAGE" | gzip > image.tar.gz
+        run: nix build --print-build-logs .#container
       - name: Creating unique artifact name
         id: artifact-name
         run: echo "name=${{ github.sha }}-${{ github.ref_name }}" >> "$GITHUB_OUTPUT"
@@ -76,7 +73,7 @@ jobs:
           if-no-files-found: 'error'
           retention-days: 1
           include-hidden-files: true
-          path: image.tar.gz
+          path: result
 
   deploy:
     name: Deploy to ${{ matrix.name }}
@@ -105,7 +102,11 @@ jobs:
         uses: actions/[email protected]
         with: { name: "${{ needs.build.outputs.artifact_name }}" }
       - name: Load image from disk
-        run: docker load < image.tar.gz
+        run: docker load < result
+      - name: Basic container runtime test
+        run: >
+          PACKAGE_VERSION=$(jq -r '.version' package.json)
+          docker run --rm "$IMAGE" --version | grep "$PACKAGE_VERSION"
       - name: Log in to Container Repository (${{ matrix.server }})
         run: docker login "$SERVER" --username "$USER" --password "$PASSWORD"
         env: { PASSWORD: "${{ secrets[matrix.password] }}" }

.github/workflows/many--publish-npm-package.yaml

@@ -34,12 +34,10 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/[email protected]
-      - name: Set up Node.js
-        uses: actions/[email protected]
-        with:
-          node-version: 24
-          cache-dependency-path: package-lock.json
-          cache: 'npm'
+      - name: Install Nix using cachix
+        uses: cachix/[email protected]
+      - name: Set up Node.js using nix
+        run: nix profile install .#nodejs
       - name: Read `package.json` file and output contents
         id: package
         run: |
@@ -139,11 +137,10 @@ jobs:
       PACKAGE_NAME: ${{ needs.build.outputs.package_name }}
       PACKAGE_VERSION: ${{ needs.build.outputs.package_version }}
     steps:
-      - name: Set up Node.js
-        uses: actions/[email protected]
-        with:
-          node-version: 24
-          registry-url: ${{ matrix.registry_url }}
+      - name: Install Nix using cachix
+        uses: cachix/[email protected]
+      - name: Set up Node.js using nix
+        run: nix profile install .#nodejs
       - name: Download build artifact
         uses: actions/[email protected]
         with: { name: "${{ needs.build.outputs.artifact_name }}" }

.github/workflows/push--basic-ci-checks.yaml

@@ -20,19 +20,10 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/[email protected]
-      - name: Set up Node.js
-        uses: actions/[email protected]
-        with:
-          node-version: 24
-          cache-dependency-path: package-lock.json
-          cache: 'npm'
-      - name: Restore npm cache
-        uses: actions/[email protected]
-        with:
-          path: ~/.npm
-          key: ${{ runner.os }}-node-24-${{ hashFiles('package-lock.json') }}
-          restore-keys: |
-            ${{ runner.os }}-node-24-
+      - name: Install Nix using cachix
+        uses: cachix/[email protected]
+      - name: Set up Node.js using nix
+        run: nix profile install .#nodejs
       - name: Install all dependencies
         run: npm ci
       - name: Run task (npm run ${{ matrix.task }})