CI: Simplify verify action by leveraging packaged defaults

.forgejo/workflows/verify.yaml

@@ -4,12 +4,10 @@ on:
       - '*'
     paths:
       - src/**
-      - static/graph*
+      - static/*
-      - static/welcome.toml
       - .forgejo/**
       - .justfile
-      - Cargo.toml
+      - Cargo.*
-      - Cargo.lock
 
 jobs:
   verify:
@@ -17,57 +15,43 @@ jobs:
     timeout-minutes: 20
     container:
       image: rust:slim
-      env:
-        RUSTUP_HOME: /rust/rustup
-        CARGO_HOME: /rust/cargo
     steps:
       - name: Install action dependencies
-        run: >
+        run: |
-          apt-get install --no-install-recommends --update -y
+          apt-get install --no-install-recommends --update -y \
-          nodejs git curl xz-utils
+            nodejs git nix
 
       - name: Checkout code
         uses: actions/checkout@v6
         with:
           fetch-tags: true
 
-      - name: Set up Rust toolchain
+      - name: Cleanup checkout action dependencies
-        run: |
+        run: apt-get purge -y nodejs git
-          mkdir -p "$RUSTUP_HOME"
-          mkdir -p "$CARGO_HOME"
-
-          rust_version=$(
-              grep '^rust-version = "' Cargo.toml \
-              | cut -d '"' -f 2
-          )
-
-          rustup default "$rust_version"
-          rustup toolchain install nightly
-          rustup component add llvm-tools
-          rustup component add --toolchain nightly rustfmt clippy
-          rustup target add x86_64-unknown-linux-musl x86_64-unknown-linux-gnu
 
       - name: Set up CI user
         run: |
           useradd -m ci
-          mkdir /nix
+          chown -R ci:ci /nix .
-          chown -R ci:ci "$RUSTUP_HOME" "$CARGO_HOME" "$PWD" /nix
-          printf '[safe]\ndirectory = %s\n' "$PWD" > /etc/gitconfig
 
-      - name: Set up Nix
+      - name: Set up Rust toolchain
         run: |
-          mkdir /etc/nix
+          rust_version=$(sed -nE 's/^rust-version = "(.*)"$/\1/p' Cargo.toml)
-          echo experimental-features = nix-command flakes \
+
-            >> /etc/nix/nix.conf
           su ci -c "
-            sh -c 'curl -L https://nixos.org/nix/install |
+            rustup default '$rust_version'
-              bash -s -- --no-daemon' \
+            rustup toolchain install nightly
+            rustup component add llvm-tools
+            rustup component add --toolchain nightly rustfmt clippy
+            rustup target add \
+              x86_64-unknown-linux-musl \
+              x86_64-unknown-linux-gnu
           "
 
       - name: Assess
         run: |
-          su ci -lc "
+          ENV_PATH=$PATH su ci -c "
-            export RUSTUP_HOME=$RUSTUP_HOME CARGO_HOME=$CARGO_HOME
+            nix --experimental-features 'nix-command flakes' \
-            nix develop path:$FORGEJO_WORKSPACE -c \
+              develop path:$PWD \
-              just -f $FORGEJO_WORKSPACE/.justfile verify
+              -c just -f $PWD/.justfile verify
           "

flake.nix

@@ -48,6 +48,7 @@
                         cargo-deny
                         cargo-llvm-cov
                         cargo-msrv
+                        git
                         just
                         rustup
                         taplo
@@ -60,7 +61,6 @@
                     dev = [
                         cargo-mutants
                         watchexec
-                        git
                     ];
                     edit = dev ++ [
                         neovim