ci: use self-hosted runners

.github/workflows/build.yml

@@ -15,7 +15,7 @@ jobs:
     if: "!startsWith(github.ref, 'refs/tags/') && github.ref != 'refs/heads/master'"
 
   build:
-    runs-on: ubuntu-cpu16-ram64
+    runs-on: [self-hosted, ubuntu]
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-go@v5
@@ -33,28 +33,22 @@ jobs:
       - run: |
           make build
         if: "env.GIT_DIFF != ''"
+
   build-nix:
-    runs-on: ubuntu-cpu16-ram64
+    runs-on: [self-hosted, nixos]
     steps:
       - uses: actions/checkout@v4
-      - uses: haqq-network/nix-action@master
-        with:
-          signingKey: '${{ secrets.CACHIX_SIGNING_KEY }}'
-          cacheKeyPostfix: ${{ hashFiles('**/go.sum') }}
       - name: Build nix package
         run: |
           nix build .#haqq --print-build-logs
+
   check-nix:
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, nixos]
     steps:
       - uses: actions/checkout@v4
-      - uses: haqq-network/nix-action@master
-        with:
-          signingKey: '${{ secrets.CACHIX_SIGNING_KEY }}'
-          cacheKeyPostfix: ${{ hashFiles('**/go.sum') }}
-      - name: Check if nix package and Makefile versions match
+      - name: Check if Nix package and Makefile versions match
         run: |
           nix develop --impure .#ci --command ci-check-version
-      - name: Check if gomod2nix is up to date
+      - name: Check if gomod2nix file is up to date
         run: |
           nix develop --impure .#ci --command ci-check-gomod2nix

.github/workflows/codeql-analysis.yml

@@ -23,7 +23,7 @@ on:
 jobs:
   analyze:
     name: Analyze
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, ubuntu]
     permissions:
       actions: read
       contents: read

.github/workflows/lint.yml

@@ -10,7 +10,7 @@ on:
 jobs:
   golangci:
     name: Run golangci-lint
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, ubuntu]
     timeout-minutes: 10
     steps:
       - uses: actions/setup-go@v5

.github/workflows/proto-registry.yml

@@ -10,7 +10,7 @@ on:
 
 jobs:
   push:
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, ubuntu]
     steps:
       - uses: actions/checkout@v4
       - uses: bufbuild/[email protected]

.github/workflows/proto.yml

@@ -8,7 +8,7 @@ on:
 jobs:
   proto-pass:
     name: Proto Pass
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, ubuntu]
     needs:
       - build
       - lint
@@ -18,18 +18,15 @@ jobs:
 
   build:
     name: Check that proto builds and committed
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, nixos]
     steps:
       - uses: actions/checkout@v4
-      - uses: haqq-network/nix-action@master
-        with:
-          signingKey: '${{ secrets.CACHIX_SIGNING_KEY }}'
       - run: |
           nix develop --impure #ci --command ci-proto
 
   lint:
     name: Proto lint
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, ubuntu]
     timeout-minutes: 5
     steps:
       - uses: actions/checkout@v4
@@ -41,7 +38,7 @@ jobs:
   # NOTE: This is disabled only for this merge request, it will be enabled in master branch
   # break-check:
   #   name: Proto break-check
-  #   runs-on: ubuntu-latest
+  #   runs-on: [self-hosted, ubuntu]
   #   steps:
   #     - uses: actions/checkout@v4
   #     - uses: bufbuild/[email protected]

.github/workflows/snyk.yml

@@ -5,7 +5,7 @@ on: push
 
 jobs:
   security:
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, ubuntu]
     steps:
       - uses: actions/checkout@v4
       - uses: snyk/actions/setup@master

.github/workflows/stale.yml

@@ -5,7 +5,7 @@ on:
 
 jobs:
   stale:
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, ubuntu]
     steps:
       - uses: actions/stale@v4
         with:

.github/workflows/test-node-bootstrap.yml

@@ -6,7 +6,7 @@ on:
 
 jobs:
   lockfile:
-    runs-on: ubuntu-cpu16-ram64
+    runs-on: [self-hosted, nixos]
     steps:
       - name: Test node bootstrap
         run: |

.github/workflows/test.yml

@@ -16,7 +16,7 @@ jobs:
     if: "!startsWith(github.ref, 'refs/tags/') && github.ref != 'refs/heads/master'"
 
   install-tparse:
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, ubuntu]
     steps:
       - uses: actions/setup-go@v5
         with:
@@ -32,7 +32,7 @@ jobs:
           key: ${{ runner.os }}-go-tparse-binary
 
   test-unit:
-    runs-on: ubuntu-cpu16-ram64
+    runs-on: [self-hosted, ubuntu]
     steps:
       - name: Set up go
         uses: actions/setup-go@v5
@@ -64,14 +64,11 @@ jobs:
         uses: codecov/codecov-action@v3
         env:
           CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+
   test-nix:
-    runs-on: ubuntu-cpu16-ram64
+    runs-on: [self-hosted, nixos]
     steps:
       - uses: actions/checkout@v4
-      - uses: haqq-network/nix-action@master
-        with:
-          signingKey: '${{ secrets.CACHIX_SIGNING_KEY }}'
-          cacheKeyPostfix: ${{ hashFiles('**/go.sum') }}
-      - name: Run nix package tests
+      - name: Run Nix package tests
         run: |
           nix build .#haqq-with-tests --print-build-logs

.github/workflows/update-flake-lock.yml

@@ -6,12 +6,10 @@ on:
 
 jobs:
   lockfile:
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, nixos]
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
-      - name: Install Nix
-        uses: DeterminateSystems/nix-installer-action@main
       - name: Update flake.lock
         uses: DeterminateSystems/update-flake-lock@main
         with: