PR checks

.github/workflows/checks.yaml

@@ -0,0 +1,21 @@
+name: "Run Checks"
+on:
+  workflow_dispatch: {}
+  pull_request:
+    branches:
+    - main
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v3
+    - uses: cachix/install-nix-action@v20
+      with:
+        nix_path: nixpkgs=channel:nixos-unstable
+        extra_nix_config: |
+          experimental-features = nix-command flakes
+          extra-platforms = aarch64-linux
+    - run: |
+        nix fmt .
+        git diff-files --quiet || (git -P diff; echo -e "\nNOT FORMATTED: run 'nix fmt'"; false)

.github/workflows/example.yaml

@@ -0,0 +1,28 @@
+name: "Build Example"
+on:
+  workflow_dispatch: {}
+  pull_request:
+    branches:
+    - main
+
+jobs:
+  build_example:
+    runs-on: ubuntu-latest
+    needs: build_packages
+    steps:
+    - uses: actions/checkout@v3
+    - run: |
+        DEBIAN_FRONTEND=noninteractive
+        sudo apt-get update -q -y && sudo apt-get install -q -y qemu-system-aarch64 qemu-efi binfmt-support qemu-user-static
+    - uses: cachix/install-nix-action@v20
+      with:
+        nix_path: nixpkgs=channel:nixos-unstable
+        extra_nix_config: |
+          experimental-features = nix-command flakes
+          extra-platforms = aarch64-linux
+    - uses: cachix/cachix-action@v12
+      with:
+        name: nabam-nixos-rockchip
+    - working-directory: ./example
+      run: |
+        nix build -L -j4 --accept-flake-config --override-input rockchip ..

.github/workflows/packages.yaml

@@ -1,10 +1,12 @@
 name: "Build Packages"
 on:
   workflow_dispatch: {}
+  pull_request:
+    branches:
+    - main
 
 jobs:
   build_packages:
-    continue-on-error: true
     strategy:
       matrix:
         package:
@@ -36,6 +38,5 @@ jobs:
     - uses: cachix/cachix-action@v12
       with:
         name: nabam-nixos-rockchip
-        authToken: '${{ secrets.CACHIX_TOKEN }}'
     - run: |
         nix build -L -j4 .#${{ matrix.package }}