Comment on Replacement for Docker Content Trust (DCT)
moonpiedumplings@programming.dev 3 weeks ago
Also what are you building? You might be able to replace docker with nix for example.
Comment on Replacement for Docker Content Trust (DCT)
moonpiedumplings@programming.dev 3 weeks ago
Also what are you building? You might be able to replace docker with nix for example.
moonshine69@lemmy.nz 3 weeks ago
Maybe not apt…but
sudo dnf install nix nix-daemonmoonpiedumplings@programming.dev 3 weeks ago
Nix is also packaged in debian as nix-bin.
We do our pre-releases on CI runners for convenience. GitHub automatically kicks-off a build when we
git push.When it comes time to do a real release, we can just run the job locally on our build machines (this is easier thanks to docker). Because our builds are reproducible, we can just check that the hash matches on our local build and the one from the free GitHub CI runners. That way we don’t have to trust the infrastructure, but we can use it for free & easy iteration before our final release.