chore(bors): merge pull request #811

811: Fix helm pins on release branch (backport #809) r=tiagolobocastro a=mergify[bot]




## Description


## Motivation and Context




## Regression




## How Has This Been Tested?




## Types of changes

- [ ] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing functionality to change)

## Checklist:


- [ ] My code follows the code style of this project.
- [ ] My change requires a change to the documentation.
- [ ] I have updated the documentation accordingly.
- [ ] I have added unit tests to cover my changes.<hr>This is an automatic backport of pull request #809 done by [Mergify](https://mergify.com).

Co-authored-by: Tiago Castro <[email protected]>

Author: mayastor-bors

.github/actions/setup-nix/action.yml

@@ -0,0 +1,63 @@
+name: Setup Nix
+
+description: GC Disk, install nix
+
+inputs:
+  preFetchNix:
+    description: Pre-run nix-shell for downloading the dependencies
+    required: false
+    default: ""
+  gc:
+    description: Clear up storage from worker
+    required: false
+    default: false
+  enable_kvm:
+    required: false
+    default: true
+
+runs:
+  using: composite
+  steps:
+    - name: Disk Garbage Collection
+      shell: bash
+      if: ${{ runner.os == 'Linux' && inputs.gc }}
+      run: |
+        lsblk -fm
+        sudo rm -rf /usr/local/lib/android
+        sudo rm -rf /usr/local/.ghcup
+        sudo rm -rf /opt/hostedtoolcache
+        sudo rm -rf /usr/share/dotnet
+        sudo rm -rf /usr/share/swift
+        lsblk -fm
+    - id: nixpkgs
+      shell: bash
+      run: |
+        echo "nix_path=nixpkgs=$(jq -r '.nixpkgs.url' nix/sources.json)" >> $GITHUB_OUTPUT
+        echo "home=${HOME:-/home/runner}" >> $GITHUB_OUTPUT
+    - uses: cachix/[email protected]
+      with:
+        nix_path: "${{ steps.nixpkgs.outputs.nix_path }}"
+        install_options: ${{ runner.os == 'Linux' && '--no-daemon' || '' }}
+        enable_kvm: ${{ inputs.enable_kvm }}
+        extra_nix_config: |
+          keep-env-derivations = true
+          keep-outputs = true
+      env:
+        HOME: ${{ steps.nixpkgs.outputs.home }}
+        NIX_PATH: "${{ steps.nixpkgs.outputs.nix_path }}"
+    - name: PreFetch Nix
+      if: ${{ inputs.preFetchNix }}
+      shell: bash
+      run: |
+        IFS=',' read -ra arr <<< "${{ inputs.preFetchNix }}"
+        for nix in "${arr[@]}"; do
+          echo "::group::Step: nix-build $nix"
+          start=$(date +%s)
+
+          nix-build "$nix"
+
+          end=$(date +%s)
+          echo "::endgroup::"
+
+          echo "⏱️ $nix took $(( end - start ))s"
+        done

.github/workflows/develop-chart.yml

@@ -11,13 +11,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: cachix/[email protected]
-
-      - name: Pre-populate nix-shell
-        run: |
-          export NIX_PATH=nixpkgs=$(jq '.nixpkgs.url' nix/sources.json -r)
-          echo "NIX_PATH=$NIX_PATH" >> $GITHUB_ENV
-          nix-shell --pure --run "echo" ./scripts/helm/shell.nix
+      - uses: ./.github/actions/setup-nix
+        with:
+          preFetchNix: ./scripts/helm/shell.nix
 
       - name: Publish locally in the workspace
         run: |

.github/workflows/develop-to-release.yml

@@ -8,12 +8,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: cachix/[email protected]
-      - name: Pre-populate nix-shell
-        run: |
-          export NIX_PATH=nixpkgs=$(jq '.nixpkgs.url' nix/sources.json -r)
-          echo "NIX_PATH=$NIX_PATH" >> $GITHUB_ENV
-          nix-shell --pure --run "echo" ./scripts/helm/shell.nix
+      - uses: ./.github/actions/setup-nix
+        with:
+          preFetchNix: ./scripts/helm/shell.nix
       - name: Check if the chart is publishable
         run: |
           branch="${{ github.ref_name }}"

.github/workflows/helm-chart.yml

@@ -16,12 +16,9 @@ jobs:
       - uses: actions/checkout@v4
         with:
           submodules: 'recursive'
-      - uses: cachix/[email protected]
-      - name: Pre-populate nix-shell
-        run: |
-          export NIX_PATH=nixpkgs=$(jq '.nixpkgs.url' nix/sources.json -r)
-          echo "NIX_PATH=$NIX_PATH" >> $GITHUB_ENV
-          nix-shell --run "echo" ./scripts/helm/shell.nix
+      - uses: ./.github/actions/setup-nix
+        with:
+          preFetchNix: ./scripts/helm/shell.nix
       - name: HelmChart publish test
         run: nix-shell --pure --run "./scripts/helm/test-publish-chart-yaml.sh" ./scripts/helm/shell.nix
       - name: HelmChart Readme
@@ -35,17 +32,9 @@ jobs:
       - uses: actions/checkout@v4
         with:
           submodules: recursive
-      - uses: cachix/install-nix[email protected]
+      - uses: ./.github/actions/setup-nix
         with:
-          enable_kvm: true
-      - name: Setup Nix Path
-        run: |
-          export NIX_PATH=nixpkgs=$(jq '.nixpkgs.url' nix/sources.json -r)
-          echo "NIX_PATH=$NIX_PATH" >> $GITHUB_ENV
-      - name: Pre-populate K8s nix-shell
-        run: nix-shell ./scripts/k8s/shell.nix --run "echo"
-      - name: Pre-populate helm nix-shell
-        run: nix-shell ./scripts/helm/shell.nix --run "echo"
+          preFetchNix: ./scripts/k8s/shell.nix,./scripts/helm/shell.nix
       - name: Generate image list
         run: nix-shell ./scripts/helm/shell.nix --run "./scripts/helm/images.sh generate --dependency-update --exit-code"
       - name: Login to Docker Hub

.github/workflows/helm-testing-chart.yml

@@ -15,12 +15,9 @@ jobs:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
-      - uses: cachix/[email protected]
-      - name: Pre-populate nix-shell
-        run: |
-          export NIX_PATH=nixpkgs=$(jq '.nixpkgs.url' nix/sources.json -r)
-          echo "NIX_PATH=$NIX_PATH" >> $GITHUB_ENV
-          nix-shell --pure --run "echo" ./scripts/helm/shell.nix
+      - uses: ./.github/actions/setup-nix
+        with:
+          preFetchNix: ./scripts/helm/shell.nix
       - name: Update chart
         run: |
           # Update logLevel to 'debug'

.github/workflows/image-pr.yml

@@ -14,7 +14,9 @@ jobs:
       - uses: actions/checkout@v4
         with:
           submodules: 'recursive'
-      - uses: cachix/[email protected]
+      - uses: ./.github/actions/setup-nix
+        with:
+          gc: true
       - name: Test building the release images
         run: ./scripts/release.sh --skip-publish --build-bins --debug
       - name: Test building the static binaries

.github/workflows/image.yml

@@ -40,8 +40,7 @@ jobs:
             git fetch -f origin ${{ github.ref }}:${{ github.ref }}
           fi
 
-      - uses: cachix/[email protected]
-
+      - uses: ./.github/actions/setup-nix
       - name: Login to Docker Hub
         uses: docker/login-action@v3
         with:
@@ -62,4 +61,4 @@ jobs:
             ./scripts/release.sh --tag ${{ inputs.tag }} --registry ${{ inputs.registry }}/${{ github.repository_owner }}/${{ inputs.namespace }}
           elif [[ "${{ github.event_name }}" == "push" ]]; then
             ./scripts/release.sh
-          fi        
+          fi

.github/workflows/k8s-ci.yml

@@ -23,19 +23,9 @@ jobs:
         with:
           fetch-depth: 0
           submodules: recursive
-      - uses: cachix/install-nix[email protected]
+      - uses: ./.github/actions/setup-nix
         with:
-          enable_kvm: true
-      - name: Setup Nix Path
-        run: |
-          export NIX_PATH=nixpkgs=$(jq '.nixpkgs.url' nix/sources.json -r)
-          echo "NIX_PATH=$NIX_PATH" >> $GITHUB_ENV
-      - name: Pre-populate K8s nix-shell
-        run: nix-shell ./scripts/k8s/shell.nix --run "echo"
-      - name: Pre-populate helm nix-shell
-        run: nix-shell ./scripts/helm/shell.nix --run "echo"
-      - name: Pre-populate pytest nix-shell
-        run: nix-shell ./scripts/python/shell.nix --run "echo"
+          preFetchNix: ./scripts/k8s/shell.nix,./scripts/helm/shell.nix,./scripts/python/shell.nix
       - name: Login to Docker Hub
         if: ${{ !inputs.helm-pins }}
         uses: docker/login-action@v3

.github/workflows/lint.yml

@@ -15,12 +15,9 @@ jobs:
         with:
           submodules: 'recursive'
           fetch-depth: 0
-      - uses: cachix/[email protected]
-      - name: Pre-populate nix-shell
-        run: |
-          export NIX_PATH=nixpkgs=$(jq '.nixpkgs.url' nix/sources.json -r)
-          echo "NIX_PATH=$NIX_PATH" >> $GITHUB_ENV
-          nix-shell --run "echo" shell.nix
+      - uses: ./.github/actions/setup-nix
+        with:
+          preFetchNix: ./shell.nix
       - name: Handle Rust dependencies caching
         uses: Swatinem/rust-cache@v2
       - name: Lint rust code

.github/workflows/mod-update.yml

@@ -16,11 +16,7 @@ jobs:
         with:
           fetch-depth: 0
           submodules: recursive
-      - uses: cachix/[email protected]
-      - name: Pre-populate nix-shell
-        run: |
-          export NIX_PATH=nixpkgs=$(jq '.nixpkgs.url' nix/sources.json -r)
-          echo "NIX_PATH=$NIX_PATH" >> $GITHUB_ENV
+      - uses: ./.github/actions/setup-nix
       - name: Update submodules
         run: |
           ./scripts/git/set-submodule-branches.sh -u