From 4b2db5d503e89533b972a41d1985969ae8c12f4a Mon Sep 17 00:00:00 2001 From: Tom Alexander Date: Mon, 13 Jul 2026 19:51:46 -0400 Subject: [PATCH] PAT --- docker/server/Dockerfile | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/docker/server/Dockerfile b/docker/server/Dockerfile index 5f2de0f..c6053ee 100644 --- a/docker/server/Dockerfile +++ b/docker/server/Dockerfile @@ -10,14 +10,16 @@ filter-syscalls = false substituters = http://ncps.nix-pull-through-cache.svc.cluster.local:80 https://cache.nixos.org EOF -RUN --mount=type=secret,id=cache_token echo "extra-access-tokens = ncps.nix-pull-through-cache.svc.cluster.local=$(cat /run/secrets/cache_token)" >> /etc/nix/nix.conf +RUN --mount=type=secret,id=cache_token echo "extra-access-tokens = ncps.nix-pull-through-cache.svc.cluster.local=PAT:$(cat /run/secrets/cache_token)" >> /etc/nix/nix.conf -RUN --mount=type=secret,id=cache_token NIX_CONFIG="extra-access-tokens = ncps.nix-pull-through-cache.svc.cluster.local=$(cat /run/secrets/cache_token)" cp "$(nix build nixpkgs#cacert --print-out-paths)/etc/ssl/certs/ca-bundle.crt" /tmp/ca-bundle.crt +RUN echo "conf" && cat /etc/nix/nix.conf && echo "endconf" + +RUN cp "$(nix build nixpkgs#cacert --print-out-paths)/etc/ssl/certs/ca-bundle.crt" /tmp/ca-bundle.crt COPY . /tmp/build WORKDIR /tmp/build -RUN --mount=type=secret,id=cache_token NIX_CONFIG="extra-access-tokens = ncps.nix-pull-through-cache.svc.cluster.local=$(cat /run/secrets/cache_token)" nix build '.#docker_env' +RUN nix build '.#docker_env' # Export the built closure to a folder RUN mkdir /tmp/nix-store-closure