Merge pull request #7 from artificialio/cd/2025-09-01-add-oci-output

Add oci output and push to ghcr.io on release tag

Author: chrisdone-artificial

.github/workflows/push.yml

@@ -0,0 +1,41 @@
+name: Push Docker Image
+
+on:
+  release:
+    types: [published]
+
+jobs:
+  docker:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: nixbuild/nix-quick-install-action@v28
+        with:
+          nix_conf: experimental-features = nix-command flakes
+
+      # Log in to GHCR
+      - name: Log in to GHCR
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      # Create a docker image
+      - run: nix run .#packages.x86_64-linux.container.copyToDockerDaemon
+      - run: docker tag perfly:latest ghcr.io/artificialio/perfly:${{ github.event.release.tag_name }}
+
+      # Build and push the image
+      - name: Build and Push Docker image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          push: true
+          tags: |
+            ghcr.io/artificialio/perfly:latest
+            ghcr.io/artificialio/perfly:${{ github.event.release.tag_name }}

flake.lock

@@ -4,9 +4,10 @@
     flake-parts.url = "github:hercules-ci/flake-parts";
     haskell-flake.url = "github:srid/haskell-flake";
     hell.url = "github:chrisdone/hell?ref=551133cecdafed1d6d3f4da7d8a466df2eed8af5";
-
+    nix2container.url = "github:nlewo/nix2container";
   };
-  outputs = inputs@{ self, nixpkgs, flake-parts, hell, ... }:
+
+  outputs = inputs@{ self, nixpkgs, flake-parts, hell, nix2container, ... }:
     flake-parts.lib.mkFlake { inherit inputs; } {
       systems = nixpkgs.lib.systems.flakeExposed;
       imports = [ inputs.haskell-flake.flakeModule ];
@@ -52,6 +53,25 @@
 
         # Hook up tests so `nix flake check` runs them
         checks.default = self'.packages.perfly;
+
+        packages.container = nix2container.packages.${system}.nix2container.buildImage {
+             name = "perfly";
+             tag = "latest";
+             config = {
+               Cmd = [ "/perfly" ];
+               WorkingDir = "/";
+             };
+             # Extract ONLY the binary, nothing else
+             copyToRoot = pkgs.runCommand "perfly-only" {} ''
+               mkdir -p $out
+               # Copy just the binary, not the entire package closure
+               cp ${self'.packages.perfly}/bin/perfly $out/perfly
+               # Strip debug symbols
+               ${pkgs.binutils}/bin/strip $out/perfly 2>/dev/null || true
+               # Make executable
+               chmod +x $out/perfly
+             '';
+           };
       };
     };
 }