| 1 |
// oxygenvcs.com's pipeline (OxygenFlow): every push builds the static |
| 2 |
// site and keeps it as an artifact, with a signed provenance statement. |
| 3 |
// Nothing deploys from here: the host serving the site pulls the newest |
| 4 |
// passing build of main itself (deploy/pull.sh, oxygenvcs-web#1). |
| 5 |
schema-version 1 |
| 6 |
|
| 7 |
// The OxygenFlow build image (oxygenflow/images/rust); the build needs |
| 8 |
// only sh, awk and tar, which it has. No network. |
| 9 |
sandbox "site" { |
| 10 |
runtime "microvm" |
| 11 |
rootfs "cas://blob/836461b613019f62399a960c61a25c482eb74e30054ff2cd44d5594c3305872b" |
| 12 |
memory-limit "1GiB" |
| 13 |
cpu-limit 1 |
| 14 |
network "isolated" |
| 15 |
} |
| 16 |
|
| 17 |
job "site" { |
| 18 |
sandbox "site" |
| 19 |
exec "sh" "scripts/build.sh" |
| 20 |
output { |
| 21 |
artifact "site.tar.gz" { |
| 22 |
path "/src/site.tar.gz" |
| 23 |
} |
| 24 |
} |
| 25 |
} |