Merge pull request #175 from DeterminateSystems/provenance

Support provenance

Author: cole-h

.cargo/config.toml

@@ -0,0 +1,12 @@
+[build]
+rustflags = [
+  "-Clink-arg=-fuse-ld=lld",
+  "-Crelocation-model=static",
+]
+
+[target.aarch64-unknown-linux-musl]
+rustflags = [
+  "-Clink-arg=-fuse-ld=lld",
+  "-Crelocation-model=static",
+  "-Clink-arg=-lgcc",
+]

.github/workflows/build.yaml

@@ -18,16 +18,13 @@ jobs:
         systems:
           - nix-system: x86_64-linux
             system: X64-Linux
-            runner: ubuntu-22.04
+            runner: UbuntuLatest32Cores128G
           - nix-system: aarch64-linux
             system: ARM64-Linux
-            runner: namespace-profile-default-arm64
-          - nix-system: x86_64-darwin
-            system: X64-macOS
-            runner: macos-latest-xlarge
+            runner: UbuntuLatest32Cores128GArm
           - nix-system: aarch64-darwin
             system: ARM64-macOS
-            runner: macos-latest-xlarge
+            runner: namespace-profile-mac-m2-12c28g
     steps:
       - uses: actions/checkout@v4
       - name: Install Nix on ${{ matrix.systems.system }}

.github/workflows/check-and-test.yaml

@@ -51,8 +51,6 @@ jobs:
             runner: ubuntu-22.04
           - system: ARM64-Linux
             runner: namespace-profile-default-arm64
-          - system: X64-macOS
-            runner: macos-latest-xlarge
           - system: ARM64-macOS
             runner: macos-latest-xlarge
     permissions:

.github/workflows/release-branches.yml

@@ -39,13 +39,6 @@ jobs:
       - name: Persist the cache binary
         run: cp ./cache-binary-ARM64-macOS/magic-nix-cache.closure.xz ./artifacts/ARM64-macOS
 
-      - uses: actions/download-artifact@v4.1.8
-        with:
-          name: magic-nix-cache-X64-macOS
-          path: cache-binary-X64-macOS
-      - name: Persist the cache binary
-        run: cp ./cache-binary-X64-macOS/magic-nix-cache.closure.xz ./artifacts/X64-macOS
-
       - uses: actions/download-artifact@v4.1.8
         with:
           name: magic-nix-cache-X64-Linux

.github/workflows/release-prs.yml

@@ -43,13 +43,6 @@ jobs:
       - name: Persist the cache binary
         run: cp ./cache-binary-ARM64-macOS/magic-nix-cache.closure.xz ./artifacts/ARM64-macOS
 
-      - uses: actions/download-artifact@v4.1.8
-        with:
-          name: magic-nix-cache-X64-macOS
-          path: cache-binary-X64-macOS
-      - name: Persist the cache binary
-        run: cp ./cache-binary-X64-macOS/magic-nix-cache.closure.xz ./artifacts/X64-macOS
-
       - uses: actions/download-artifact@v4.1.8
         with:
           name: magic-nix-cache-X64-Linux

.github/workflows/release-tags.yml

@@ -31,13 +31,6 @@ jobs:
       - name: Persist the cache binary
         run: cp ./cache-binary-ARM64-macOS/magic-nix-cache.closure.xz ./artifacts/ARM64-macOS
 
-      - uses: actions/download-artifact@v4.1.8
-        with:
-          name: magic-nix-cache-X64-macOS
-          path: cache-binary-X64-macOS
-      - name: Persist the cache binary
-        run: cp ./cache-binary-X64-macOS/magic-nix-cache.closure.xz ./artifacts/X64-macOS
-
       - uses: actions/download-artifact@v4.1.8
         with:
           name: magic-nix-cache-X64-Linux
@@ -63,7 +56,6 @@ jobs:
       - name: Rename binaries for GH release
         run: |
           mv ./artifacts/{,magic-nix-cache-closure-}ARM64-macOS
-          mv ./artifacts/{,magic-nix-cache-closure-}X64-macOS
           mv ./artifacts/{,magic-nix-cache-closure-}X64-Linux
           mv ./artifacts/{,magic-nix-cache-closure-}ARM64-Linux