ci-images/img/builder.nix

{
  buildah,
  git,
  lib',
  nix,
  nix-output-monitor,
  nodejs_24,
  pkgs,
  podman,
  writeTextFile,

  name,
  ...
}:
let
  policy = (
    writeTextFile {
      name = "policy.json";
      text = ''
        {
          "default": [{"type": "insecureAcceptAnything"}]
        }
      '';
      destination = "/etc/containers/policy.json";
    }
  );
  nix-conf = writeTextFile {
    name = "nix.conf";
    text = ''
      experimental-features = nix-command flakes
    '';
    destination = "/etc/nix/nix.conf";
  };
in
lib'.mkImage pkgs {
  name = name "builder";
  copyToRoot = pkgs.buildEnv {
    name = "policy";
    paths = [
      policy
      nix-conf
    ];
  };
  initializeNixDatabase = true;
  layers = [
    {
      deps = [
        buildah
        git
        nix
        nix-output-monitor
        podman
        policy
      ];
    }
    {
      deps = [
        nodejs_24
      ];
    }
  ];
}