Harmonize GHA workflows a little, add nix-bincache.rory.gay to trusted list to make github go brr

1 files changed, 5 insertions, 1 deletions

diff --git a/.github/workflows/build-docker.yml b/.github/workflows/build-docker.yml

index 39bacd07..82a02843 100644
--- a/.github/workflows/build-docker.yml
+++ b/.github/workflows/build-docker.yml
@@ -26,7 +26,11 @@ jobs:
       - uses: actions/checkout@v6
       - uses: cachix/install-nix-action@v31
         with:
-          nix_path: nixpkgs=channel:nixos-unstable
+          extra_nix_config: |
+            system-features = nixos-test benchmark big-parallel kvm
+            trusted-public-keys = cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY= nix-bincache.rory.gay:663PIW8xxgIImxLcsokODWI2PHFWXvzJEfjX6TaIjxQ=
+            trusted-substituters = https://cache.nixos.org https://nix-bincache.rory.gay
+
       - name: Build the docker image
         run: nix build .#containers.x86_64-linux.docker.${{ matrix.package }}
       - run: docker load < result