add artifact step

.github/actions/clean-disk/action.yml

@@ -34,17 +34,15 @@ runs:
 
           echo "Removing unwanted software... "
 
-          sudo rm -rf /opt &
-          sudo rm -rf "$AGENT_TOOLSDIRECTORY" &
-
           if [[ "${{ inputs.purge-packages }}" == 'true' ]]; then
             sudo apt-get purge \
               --allow-remove-essential \
               -qq \
-              $(non_manifest_packages) > /dev/null &
-            wait
+              $(non_manifest_packages) # > /dev/null
           fi
 
+          sudo rm -rf /opt &
+          sudo rm -rf "$AGENT_TOOLSDIRECTORY" &
 
           sudo rm -rf /var/lib/docker &
           sudo rm -rf /usr/{local,share} &

.github/workflows/nightly.yml

@@ -64,20 +64,13 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
-      - run: git checkout -B flake-lock
-
-      # - name: Setup Git Bot
-      #   run: |
-      #     git --version
-      #     git config user.name 'github-actions[bot]'
-      #     git config user.email 'github-actions[bot]@users.noreply.github.com'
 
       - uses: DeterminateSystems/nix-installer-action@v12
         with:
           extra-conf: |
             accept-flake-config = true
 
-      # - uses: DeterminateSystems/magic-nix-cache-action@v7
+      - uses: DeterminateSystems/magic-nix-cache-action@v7
 
       - uses: ./.github/actions/clean-disk
         with:
@@ -93,4 +86,30 @@ jobs:
               --verbose \
               --debug \
               -- \
-              --print-build-logs
+              --print-build-logs \
+              --out-link current
+
+      - run: git checkout flake-lock
+
+      - name: Build Updated
+        run: |
+          system_attr=$(nix run . -- output --host "othalan" --flake .)
+          nix run . \
+            -- \
+            build $system_attr \
+              --flake . \
+              --verbose \
+              --debug \
+              -- \
+              --print-build-logs \
+              --out-link updated
+
+      - run: nix run "nixpkgs#nvd" diff ./current ./updated
+      - run: df -h
+
+      # is this necessary?
+      - run: cat $GITHUB_STEP_SUMMARY > summary.md
+      - uses: actions/upload-artifact@v4
+        with:
+          name: summary
+          path: summary.md

modules/nix.nix

@@ -40,6 +40,12 @@
   programs.nix-index.enableBashIntegration = false;
   programs.nix-index.enableFishIntegration = false;
 
+  system.activationScripts.diff = ''
+    if [[ -e /run/current-system ]]; then
+      ${pkgs.nix}/bin/nix store diff-closures /run/current-system "$systemConfig"
+    fi
+  '';
+
   nix.settings = {
     trusted-users = [ "@wheel" ];
     accept-flake-config = true;

todo.md

@@ -5,6 +5,7 @@
 ## software
 
 - [ ] lid closed does not engage hyprlock?
+  > check the logind conf in Nixos
 - [ ] include langservers for enabled languages?
 
 ## hardware