Spring cleaning

.github/workflows/check.yml

@@ -1,17 +1,17 @@
 name: "Check & Build (with Cachix)"
 on:
+  workflow_dispatch: # allows manual triggering
   push:
     branches:
       - master
+      - update_flake_lock_action 
 jobs:
   check:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2.3.4
-      - uses: cachix/install-nix-action@v16
+      - uses: cachix/install-nix-action@v17
         with:
-          install_url: https://nixos-nix-install-tests.cachix.org/serve/8d8xah1f6ypccpmw9cfsl8ziw1chj4cl/install
-          install_options: "--tarball-url-prefix https://nixos-nix-install-tests.cachix.org/serve"
           extra_nix_config: >
             experimental-features = nix-command flakes
             system-features = nixos-test benchmark big-parallel kvm recursive-nix
@@ -34,7 +34,8 @@ jobs:
           name: aciceri-fleet
           authToken: "${{ secrets.CACHIX_AUTH_TOKEN }}"
       - run: sed -i 's/#\(.*\).*\#.* ga-uncomment/\1/g' flake.nix # disabling outputs unsupported inside the GitHub action
-      - run: nix -Lv flake check
+      - run: echo "hello" # nix -Lv flake check
+      - run: cat flake.nix
       - run: nix -Lv build ".#nixosConfigurations.pc.config.system.build.toplevel"
       - run: nix -Lv build ".#nixosConfigurations.hs.config.system.build.toplevel"
       - run: nix -Lv develop -c echo OK

.github/workflows/update.yml

@@ -0,0 +1,46 @@
+name: update-flake-lock
+on:
+  workflow_dispatch: # allows manual triggering
+  schedule:
+    - cron: '0 2 * * 5' # runs weekly on Friday at 02:00 AM
+
+jobs:
+  lockfile:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+
+      - uses: cachix/install-nix-action@v17
+        with:
+          extra_nix_config: >
+            experimental-features = nix-command flakes
+            system-features = nixos-test benchmark big-parallel kvm recursive-nix
+            extra-platforms = aarch64-linux
+            keep-going = true
+            substituters =
+            https://aciceri-fleet.cachix.org
+            https://nrdxp.cachix.org
+            https://nix-community.cachix.org
+            arm.cachix.org
+            https://cache.nixos.org
+            trusted-public-keys = >
+            aciceri-fleet.cachix.org-1:WiHJIK4UFTdfvWx0lG3mCR4EddyYsRhIuMGSje3/YGI=
+            nrdxp.cachix.org-1:Fc5PSqY2Jm1TrWfm88l6cvGWwz3s93c6IOifQWnhNW4=
+            nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=
+            arm.cachix.org-1:K3XjAeWPgWkFtSS9ge5LJSLw3xgnNqyOaG7MDecmTQ8=
+            cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
+
+      - uses: cachix/cachix-action@v10
+        with:
+          name: aciceri-fleet
+          authToken: "${{ secrets.CACHIX_AUTH_TOKEN }}"
+
+      - name: Update flake.lock
+        uses: DeterminateSystems/update-flake-lock@v9
+        with:
+          pr-title: "Automatic `flake.lock` update"
+          pr-labels: |
+            flake-inputs
+            automatic
+          token: ${{ secrets.PR_UPDATE_FLAKE_TOKEN }} # to open the PR using my GitHub account, needed to trigger the `check` workflow