oxygen and oxygenflow as pinned subrepos in deps/ (make pins moves them), and an OxygenFlow pipeline: fmt of this workspace, then clippy, tests and a release build against the pins 380996db84e5

// OxygenHub's pipeline (OxygenFlow, docs in the oxygenflow repository).

// Every push to a bookmark on OxygenHub runs it in Firecracker microVMs on

// Earth; the jobs appear as checks on the change. oxygen and oxygenflow come

// from the pinned subrepos in deps/, which the runner puts in the workspace.

schema-version 1

// The OxygenFlow build image: Rust with rustfmt and clippy, Node, and every

// crate of Cargo.lock vendored (oxygenflow/images/rust). Rebuild and re-pin

// it when Cargo.lock changes.

sandbox "rust" {

    runtime "microvm"

    rootfs "cas://blob/3ba0779a55b1d66fce10adf5a01585624c9aab089f590d228368c38fd3e65a46"

    memory-limit "8GiB"

    cpu-limit 4

    // Tests serve and connect on 127.0.0.1; nothing leaves the guest.

    network "loopback"

}

sandbox "rust-small" {

    runtime "microvm"

    rootfs "cas://blob/3ba0779a55b1d66fce10adf5a01585624c9aab089f590d228368c38fd3e65a46"

    memory-limit "1GiB"

    cpu-limit 1

    network "isolated"

}

job "fmt" {

    sandbox "rust-small"

    // Only this workspace's packages: --all would also check the path

    // dependencies in deps/, which follow their own formatting.

    exec "cargo" "fmt" "--check" "-p" "oxygenhub" "-p" "hub-api"

}

job "clippy" {

    sandbox "rust"

    depends-on "fmt"

    mount {

        source "ephemeral://disk"

        target "/src/target"

        size "24GiB"

    }

    env {

        CARGO_INCREMENTAL "0"

    }

    exec "cargo" "clippy" "--workspace" "--all-targets" "--locked" "--" "-D" "warnings"

}

job "test" {

    sandbox "rust"

    depends-on "fmt"

    mount {

        source "ephemeral://disk"

        target "/src/target"

        size "24GiB"

    }

    env {

        CARGO_INCREMENTAL "0"

    }

    exec "cargo" "test" "--workspace" "--locked"

}

job "build" {

    sandbox "rust"

    depends-on "fmt"

    mount {

        source "ephemeral://disk"

        target "/src/target"

        size "24GiB"

    }

    env {

        CARGO_INCREMENTAL "0"

    }

    exec "cargo" "build" "--release" "--locked"

}

[deps/oxygen]

url = https://earth.andymccall.xyz:7343/andymccall/oxygen

bookmark = main

[deps/oxygenflow]

url = https://earth.andymccall.xyz:7343/andymccall/oxygenflow

bookmark = main

# Pinned subrepos (oxy submodule): oxygen and oxygenflow at the states this

# hub builds against. They are workspaces of their own.

exclude = ["deps"]

oxy-core = { path = "deps/oxygen/crates/oxy-core" }

oxy-server = { path = "deps/oxygen/crates/oxy-server" }

flow-core = { path = "deps/oxygenflow/crates/flow-core" }

# Move the pinned subrepos (deps/oxygen, deps/oxygenflow) to their bookmark on

# Earth; the next commit records the new pins. Push oxygen and oxygenflow first.

.PHONY: pins

pins:

	for d in deps/oxygen deps/oxygenflow; do (cd $$d && OXY_CA=$(HOME)/.config/oxy/earth-ca.pem oxy --plain pull origin) || exit 1; done

## oxygen and oxygenflow as pinned subrepos

The hub builds against `deps/oxygen` and `deps/oxygenflow`, subrepos (`oxy submodule`) pinned to exact states, so every build says which oxygen it used and OxygenFlow can build it without network. `make pins` moves both to their `main` on Earth (push those repositories first); the next commit records the new pins. Format only this workspace, `cargo fmt -p oxygenhub -p hub-api`: `--all` also reaches the path dependencies in `deps/`, which have their own formatting. After a fresh clone, `oxy submodule update --init` fetches them.