WIP: add more notes #3

	name: Build images
	on:
	push:
	pull_request:
	workflow_dispatch:

	# TODO add all-green job
	# TODO add dependabot for this ci file
	# TODO can we fallback to no-fakemachine if running in a fork _OR_ at least add a scheduling timeout ?
	#jobs:
	# build:
	# runs-on: ubuntu-latest
	# if: github.event_name != "pull_request" \|\| github.event.pull_request.head.repo.full_name == github.event.pull_request.base.repo.full_name
	# TODO make this a strategy: matrix to build all images in parallel
	# TODO build ospacks first

	env:
	TMP: '/scratch'

	jobs:
	build_images:
	name: Build images
	runs-on: [self-hosted, Linux, X64, kvm]
	container:
	image: ghcr.io/go-debos/debos:main
	options: >-
	--device=/dev/kvm
	--security-opt label=disable
	--cap-add=SYS_PTRACE
	--tmpfs /scratch:exec
	steps:
	- name: Checkout repository
	uses: actions/checkout@v2

	- name: Create output directory
	run: mkdir out

	- name: Build rpi64 image
	run: debos --artifactdir=out rpi64/debimage-rpi64.yaml

	- name: Publish rpi64 artifacts
	uses: actions/upload-artifact@v2
	with:
	name: rpi64
	path: out/
	if-no-files-found: error

Provide feedback