-1

nix/apps/default.nix

reviewed

··· 2 2 imports = [ 3 3 ./assets.nix 4 4 ./ci.nix 5 5 - ./docker-lock.nix 6 5 ]; 7 6 }

-29

nix/apps/docker-lock.nix

reviewed

··· 1 1 - { 2 2 - perSystem = {pkgs, ...}: { 3 3 - apps.docker-lock = { 4 4 - meta.description = "Extracts digests from docker containers"; 5 5 - program = 6 6 - pkgs.writeNuScriptStdinBin "docker-lock" 7 7 - # nu 8 8 - '' 9 9 - # Generates composer.override.yaml based on running containers 10 10 - # 11 11 - # As seen on https://github.com/docker/compose/issues/12836#issuecomment-2887147815 12 12 - def main [ 13 13 - output: path = ./composer.override.yaml # Override file to create/update 14 14 - --update-existing = true # Merge the generated digests with the existing file 15 15 - ]: nothing -> nothing { 16 16 - sudo docker compose config --lock-image-digests 17 17 - | from yaml 18 18 - | if ($update_existing and ($output | path exists)) { 19 19 - open $output --raw 20 20 - | from yaml 21 21 - | deep merge $in 22 22 - } else { $in } 23 23 - | to yaml 24 24 - | save --force $output 25 25 - } 26 26 - ''; 27 27 - }; 28 28 - }; 29 29 - }