name: Nix build

on:
  push:
    tags-ignore:
      - "kbuildx-v*"
  pull_request:
  workflow_dispatch:

permissions:
  contents: read

jobs:
  kbuildx:
    name: kbuildx (${{ matrix.system }})
    strategy:
      fail-fast: false
      matrix:
        include:
          - runner: ubuntu-latest
            system: x86_64-linux
            flags: ""
          - runner: ubuntu-24.04-arm
            system: aarch64-linux
            flags: ""
          - runner: macos-latest
            system: aarch64-darwin
            # The bsdkrun dependency has no libkrun in nixpkgs on macOS — its
            # flake links Homebrew's libkrun impurely (LIBKRUN_PREFIX).
            flags: "--impure"
    runs-on: ${{ matrix.runner }}

    steps:
      - name: Check out repository
        uses: actions/checkout@v4

      - name: Install Nix
        uses: DeterminateSystems/nix-installer-action@main

      - name: Install libkrun (macOS)
        if: runner.os == 'macOS'
        run: brew install tsirysndr/tap/libkrun

      - name: Build kbuildx
        run: nix build ".#packages.${{ matrix.system }}.kbuildx" --print-build-logs ${{ matrix.flags }}

      - name: Verify packaged CLI
        run: ./result/bin/kbuildx --version