hydra icon indicating copy to clipboard operation
hydra copied to clipboard

Nix build on self-hosted runner fails with ssl certificates

Open v0d1ch opened this issue 1 year ago • 2 comments

https://github.com/input-output-hk/hydra/actions/runs/8003565955/job/21859136773

Seems like the nix develop invocation in the workflow fails fails to download from github when run from the workflow runner.

Manually invoking nix develop in an interactive shell does work and will resolve this until we need to fetch some flake inputs again from github. Note that we need to make sure to checkout the same commit on the github runner.


We tried manually this now:

nix profile install nixpkgs#cacert
cat <<EOF >>$HOME/actions-runner/.env
PATH=$HOME/.nix-profile/bin:/nix/var/nix/profiles/default/bin:/usr/local/bin:/usr/bin:/bin
NIX_PROFILES="/nix/var/nix/profiles/default $HOME/.nix-profile"
NIX_SSL_CERT_FILE="/home/admin/.nix-profile/etc/ssl/certs/ca-bundle.crt"
EOF

v0d1ch avatar Jul 29 '24 07:07 v0d1ch