dev volatile #444

	concurrency:
	cancel-in-progress: true
	group: ${{ github.workflow }}-${{ github.event.pull_request.number \|\| github.sha }}

	defaults:
	run:
	shell: bash

	jobs:
	check_container:
	env:
	IMAGE: ${{ matrix.image }}
	REMOTE_USER: random_user
	runs-on: ubuntu-22.04
	steps:
	- name: Checkout repository
	uses: actions/checkout@v3
	- name: Check bootstrap control node
	run: make check_bootstrap_control_node
	- name: Check config
	run: make check_host
	- name: Check idempotence
	run: make VERIFY_UNCHANGED=true
	strategy:
	matrix:
	image: ["ubuntu:22.04", "ubuntu:23.04", "ubuntu:23.10", "ubuntu:24.04"]

	check_locahost:
	runs-on: ubuntu-22.04
	steps:
	- name: Checkout repository
	uses: actions/checkout@v3
	- name: Config
	run: make
	- name: Check idempotence
	run: make VERIFY_UNCHANGED=true
	# All format checks only available after complete machine setup
	- name: Check format
	run: \|
	make format
	if [[ -n "$(git diff)" ]]; then
	echo "Code is not formatted."
	git diff
	exit 1
	fi

	lint:
	runs-on: ubuntu-22.04
	steps:
	# Checkout must be onto the original commit, not a single PR
	# Otherwise lint will not see full history and diagnose secrets leakage
	- name: Checkout repository
	uses: actions/checkout@v3
	with:
	fetch-depth: 0
	ref: ${{ github.event.pull_request.head.sha }}
	- name: Lint
	run: make lint

	scripts:
	runs-on: ubuntu-22.04
	steps:
	- name: Checkout repository
	uses: actions/checkout@v3
	- name: Generate roles graph
	run: make graph
	- name: Check update works
	run: make update
	- name: Show diff
	run: git diff

	name: dotfiles workflow

	on:
	pull_request:
	branches:
	- main
	push:
	branches:
	- main

Provide feedback