ci: use self-hosted runners

.github/workflows/build.yml

@@ -7,15 +7,15 @@ on:
 
 jobs:
   cleanup-runs:
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, nixos]
     steps:
       - uses: rokroskar/workflow-run-cleanup-action@master
         env:
           GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
     if: "!startsWith(github.ref, 'refs/tags/') && github.ref != 'refs/heads/master'"
 
   build:
-    runs-on: ubuntu-cpu16-ram64
+    runs-on: [self-hosted, ubuntu]
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-go@v5
@@ -33,28 +33,22 @@ jobs:
       - run: |
           make build
         if: "env.GIT_DIFF != ''"
+
   build-nix:
-    runs-on: ubuntu-cpu16-ram64
+    runs-on: [self-hosted, nixos]
     steps:
       - uses: actions/checkout@v4
-      - uses: haqq-network/nix-action@master
-        with:
-          signingKey: '${{ secrets.CACHIX_SIGNING_KEY }}'
-          cacheKeyPostfix: ${{ hashFiles('**/go.sum') }}
       - name: Build nix package
         run: |
           nix build .#haqq --print-build-logs
+
   check-nix:
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, nixos]
     steps:
       - uses: actions/checkout@v4
-      - uses: haqq-network/nix-action@master
-        with:
-          signingKey: '${{ secrets.CACHIX_SIGNING_KEY }}'
-          cacheKeyPostfix: ${{ hashFiles('**/go.sum') }}
-      - name: Check if nix package and Makefile versions match
+      - name: Check if Nix package and Makefile versions match
         run: |
           nix develop --impure .#ci --command ci-check-version
-      - name: Check if gomod2nix is up to date
+      - name: Check if gomod2nix file is up to date
         run: |
           nix develop --impure .#ci --command ci-check-gomod2nix

.github/workflows/codeql-analysis.yml

@@ -23,7 +23,7 @@ on:
 jobs:
   analyze:
     name: Analyze
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, ubuntu]
     permissions:
       actions: read
       contents: read

.github/workflows/docker-build.yml

@@ -2,24 +2,18 @@ name: Build docker image
 
 on:
   push:
-
   workflow_dispatch:
 
 jobs:
   docker:
-    runs-on: ubuntu-cpu16-ram64
+    runs-on: [self-hosted, ubuntu]
     steps:
-      -
-        name: Checkout
+      - name: Checkout
         uses: actions/checkout@v4
-      -
-        name: Git fetch everything
+      - name: Git fetch everything
         run: git fetch --prune --unshallow
-      -
-        name: Pull LFS files
+      - name: Pull LFS files
         run: git lfs pull
-      -
-        name: Build docker
+      - name: Build docker
         run:
           docker build . --file docker/build.Dockerfile
-

.github/workflows/docker-push.yml

@@ -9,7 +9,7 @@ on:
 
 jobs:
   docker:
-    runs-on: ubuntu-cpu16-ram64
+    runs-on: [self-hosted, ubuntu]
     steps:
       -
         name: Checkout

.github/workflows/dry-run-release.yml

@@ -8,7 +8,7 @@ on:
 
 jobs:
   dry-run-goreleaser:
-    runs-on: ubuntu-cpu16-ram64
+    runs-on: [self-hosted, ubuntu]
     environment: release
     steps:
       - uses: actions/checkout@v4

.github/workflows/goreleaser.yml

@@ -6,7 +6,7 @@ on:
       - "v*.*.*"
 jobs:
   goreleaser:
-    runs-on: ubuntu-cpu16-ram64
+    runs-on: [self-hosted, ubuntu]
     environment: release
     steps:
       - uses: actions/checkout@v4

.github/workflows/lint.yml

@@ -10,7 +10,7 @@ on:
 jobs:
   golangci:
     name: Run golangci-lint
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, unbuntu]
     timeout-minutes: 10
     steps:
       - uses: actions/setup-go@v5

.github/workflows/proto-registry.yml

@@ -10,7 +10,7 @@ on:
 
 jobs:
   push:
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, ubuntu]
     steps:
       - uses: actions/checkout@v4
       - uses: bufbuild/buf-setup-action@v1.28.1

.github/workflows/proto.yml

@@ -8,7 +8,7 @@ on:
 jobs:
   proto-pass:
     name: Proto Pass
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, ubuntu]
     needs:
       - build
       - lint
@@ -18,7 +18,7 @@ jobs:
 
   build:
     name: Check that proto builds and committed
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, ubuntu]
     steps:
       - uses: actions/checkout@v4
       - uses: haqq-network/nix-action@master
@@ -29,7 +29,7 @@ jobs:
 
   lint:
     name: Proto lint
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, ubuntu]
     timeout-minutes: 5
     steps:
       - uses: actions/checkout@v4
@@ -41,7 +41,7 @@ jobs:
   # NOTE: This is disabled only for this merge request, it will be enabled in master branch
   # break-check:
   #   name: Proto break-check
-  #   runs-on: ubuntu-latest
+  #   runs-on: [self-hosted, ubuntu]
   #   steps:
   #     - uses: actions/checkout@v4
   #     - uses: bufbuild/buf-setup-action@v1.28.1

.github/workflows/snyk.yml

@@ -5,7 +5,7 @@ on: push
 
 jobs:
   security:
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, ubuntu]
     steps:
       - uses: actions/checkout@v4
       - uses: snyk/actions/setup@master

.github/workflows/stale.yml

@@ -5,7 +5,7 @@ on:
 
 jobs:
   stale:
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, ubuntu]
     steps:
       - uses: actions/stale@v4
         with:

.github/workflows/test-node-bootstrap.yml

@@ -6,7 +6,7 @@ on:
 
 jobs:
   lockfile:
-    runs-on: ubuntu-cpu16-ram64
+    runs-on: [self-hosted, nixos]
     steps:
       - name: Test node bootstrap
         run: |

.github/workflows/test.yml

@@ -8,15 +8,15 @@ on:
 
 jobs:
   cleanup-runs:
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, nixos]
     steps:
       - uses: rokroskar/workflow-run-cleanup-action@master
         env:
           GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
     if: "!startsWith(github.ref, 'refs/tags/') && github.ref != 'refs/heads/master'"
 
   install-tparse:
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, ubuntu]
     steps:
       - uses: actions/setup-go@v5
         with:
@@ -32,7 +32,7 @@ jobs:
           key: ${{ runner.os }}-go-tparse-binary
 
   test-unit:
-    runs-on: ubuntu-cpu16-ram64
+    runs-on: [self-hosted, ubuntu]
     steps:
       - name: Set up go
         uses: actions/setup-go@v5
@@ -64,14 +64,11 @@ jobs:
         uses: codecov/codecov-action@v3
         env:
           CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+
   test-nix:
-    runs-on: ubuntu-cpu16-ram64
+    runs-on: [self-hosted, nixos]
     steps:
       - uses: actions/checkout@v4
-      - uses: haqq-network/nix-action@master
-        with:
-          signingKey: '${{ secrets.CACHIX_SIGNING_KEY }}'
-          cacheKeyPostfix: ${{ hashFiles('**/go.sum') }}
-      - name: Run nix package tests
+      - name: Run Nix package tests
         run: |
           nix build .#haqq-with-tests --print-build-logs

.github/workflows/update-flake-lock.yml

@@ -6,12 +6,10 @@ on:
 
 jobs:
   lockfile:
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, nixos]
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
-      - name: Install Nix
-        uses: DeterminateSystems/nix-installer-action@main
       - name: Update flake.lock
         uses: DeterminateSystems/update-flake-lock@main
         with: