ci-images/img/builder.nix

{
  buildah,
  git,
  lib',
  nix,
  nix-output-monitor,
  nodejs_24,
  pkgs,
  podman,
  writeTextFile,

  name,
  ...
}:
let
  policy = (
    writeTextFile {
      name = "policy.json";
      text = ''
        {
          "default": [{"type": "insecureAcceptAnything"}]
        }
      '';
      destination = "/etc/containers/policy.json";
    }
  );
in
lib'.mkImage {
  name = name "builder";
  contents = [
    buildah
    git
    nix
    nix-output-monitor
    nodejs_24
    podman
    policy
  ];
  includeNixDB = true;
}