build deps

.github/workflows/ci.yml

@@ -51,9 +51,22 @@ jobs:
           name: palantir-${{ matrix.target }}
           path: result/bin/*
 
+  build-nixpkgs:
+    runs-on: ubuntu-latest
+    needs: check
+    steps:
+      - uses: actions/checkout@v3
+      - uses: cachix/install-nix-action@v20
+      - uses: icewind1991/attic-action@v1
+        with:
+          name: ci
+          instance: https://cache.icewind.me
+          authToken: '${{ secrets.ATTIC_TOKEN }}'
+      - run: nix build .#dispenser
+
   docker:
     runs-on: ubuntu-latest
-    needs: build
+    needs: build-nixpkgs
     steps:
       - uses: actions/checkout@v3
       - uses: cachix/install-nix-action@v20

flake.nix

@@ -35,10 +35,11 @@
           rustc = toolchain;
         };
       hostNaersk = naerskForTarget hostTarget;
-      src = lib.sources.sourceByRegex (lib.cleanSource ./.) ["Cargo.*" "src" "src/.*"];
       nearskOpt = {
         pname = "dispenser";
-        root = src;
+
+        inherit (pkgs.dispenser) src;
+
         nativeBuildInputs = with pkgs; [
           libsodium
           pkg-config

package.nix

@@ -1,6 +1,8 @@
 {
   stdenv,
   rustPlatform,
+  libsodium,
+  pkg-config,
   lib,
 }: let
   inherit (lib.sources) sourceByRegex;
@@ -12,6 +14,14 @@ in
 
     inherit src;
 
+    buildInputs = [
+      libsodium
+    ];
+
+    nativeBuildInputs = [
+      pkg-config
+    ];
+
     cargoLock = {
       lockFile = ./Cargo.lock;
     };