wip: add ci

.github/workflows/build-and-deploy.yaml

@@ -0,0 +1,78 @@
+name: Build and Deploy
+
+on:
+  push:
+    branches:
+      - ci
+
+concurrency:
+  group: ${{ github.workflow }}
+  cancel-in-progress: true
+
+permissions:
+  contents: write
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Clone repository
+        uses: actions/checkout@v4
+      - name: Install Nix
+        uses: DeterminateSystems/nix-installer-action@v11
+      - name: Setup Nix build cache
+        uses: DeterminateSystems/magic-nix-cache-action@v6
+      - name: Check Nix flake inputs
+        uses: DeterminateSystems/flake-checker-action@v7
+
+      - name: Build Kubernetes cluster
+        run: nix build .#kubernetes
+
+      - name: Upload cluster artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: cluster
+          path: result/
+
+  deploy:
+    runs-on: ubuntu-latest
+    needs: build
+    steps:
+      - name: Checkout cluster branch
+        uses: actions/checkout@v4
+        with:
+          ref: cluster
+
+      - name: Download cluster artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: cluster
+
+      - name: Create commit message
+        id: commit-msg
+        uses: actions/github-script@v7
+        env:
+          COMMITS: ${{ toJSON(github.event.commits) }}
+        with:
+          result-encoding: string
+          script: |
+            const commits = JSON.parse(process.env.COMMITS);
+            const lines = [];
+            for (const commit of commits) {
+              lines.push(`${commit.id.substring(0, 7)} ${commit.message}`);
+            }
+            if (lines.length == 1) {
+              return `[rebuild] ${lines[0]}`;
+            }
+            const body = lines.reverse().map(x => `- ${x}`).join('\n\n');
+            return `[rebuild] ${lines.length} commits\n\n${body}`;
+
+      - name: Commit and push
+        env:
+          COMMIT_MSG: ${{ steps.commit-msg.outputs.result }}
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git add -A
+          git commit -m "$COMMIT_MSG"
+          git push