hydra
hydra copied to clipboard
Nix build on self-hosted runner fails with ssl certificates
https://github.com/input-output-hk/hydra/actions/runs/8003565955/job/21859136773
Seems like the nix develop invocation in the workflow fails fails to download from github when run from the workflow runner.
Manually invoking nix develop in an interactive shell does work and will resolve this until we need to fetch some flake inputs again from github. Note that we need to make sure to checkout the same commit on the github runner.
We tried manually this now:
nix profile install nixpkgs#cacert
cat <<EOF >>$HOME/actions-runner/.env
PATH=$HOME/.nix-profile/bin:/nix/var/nix/profiles/default/bin:/usr/local/bin:/usr/bin:/bin
NIX_PROFILES="/nix/var/nix/profiles/default $HOME/.nix-profile"
NIX_SSL_CERT_FILE="/home/admin/.nix-profile/etc/ssl/certs/ca-bundle.crt"
EOF