repo: flake-hub kind: split git_host: git.oleks.space setup_script: ci/setup.sh when_tag_event: false legs: amd64: nix_system: x86_64-linux image: git.oleks.space/oleks/nix-ci:latest app: publish publish_flag: false setup_comment: "" header: | # Build flake-hub packages for x86_64-linux and push to attic. # Separate workflow per arch — sharing one PVC across arches makes # the second pod permanently Unschedulable (PV node affinity binds # to the first arch's node). entrypoint_comment: | Same front door as a local `nix run .#publish -- --publish`. The app is parity-lib's mkAtticClosurePublish (attic-closure archetype); CI and local share one audited impl. PUBLISH=1 makes it actually push (local runs dry-run). arm64: nix_system: aarch64-linux image: git.oleks.space/oleks/nix-ci:latest app: publish-aarch64-linux publish_flag: false setup_comment: "" header: | # Build flake-hub packages for aarch64-linux and push to attic. # Separate workflow per arch — see amd64.yaml for rationale. entrypoint_comment: | NODE-BOUND LEG (emmett#44, cluster#192): aarch64-linux can't be built on emmett (linux/amd64) and these native packages have no cross path, so this leg must run on an aarch64 node (the arch nodeSelector above). Same parity-lib attic-closure front door as amd64, only the arch app differs.