Both the Dockerfile and Nix workflows now trigger on the same tag
pattern (*-v[0-9]*). Each workflow checks for its build file and
skips if not present. This eliminates the need for separate -nix-
tags and --nix/--dockerfile flags in the release script.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
The runner service doesn't have NIX_PATH set, so <nixpkgs> fails.
Add a step to resolve nixpkgs from the flake registry and set NIX_PATH.
Also switch to nix-build (legacy CLI) and stop hardcoding aarch64-linux
in default.nix.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Nix builds push to :v<version>-nix so both variants coexist in the
registry instead of overwriting each other.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Port from bash to uv run --script with typer. Default behavior now
builds both variants (dockerfile + nix) when both exist. Add --nix and
--dockerfile flags to release only one variant, and --dry-run to preview
without creating tags.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Create containers/nettest/default.nix using dockerTools.buildLayeredImage
with the same tools as the Dockerfile (curl, jq, dnsutils, cacert, bash).
Update container-list and container-tag-and-release to handle containers
that have both a Dockerfile and default.nix, requiring --nix or --dockerfile
flag when both exist.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>