Label Hetzner image import

Author: joshp123

.github/workflows/image-build.yml

@@ -47,4 +47,6 @@ jobs:
         env:
           HCLOUD_TOKEN: ${{ secrets.HCLOUD_TOKEN }}
           HCLOUD_LOCATION: nbg1
+          IMAGE_DESCRIPTION: clawdinator-nixos
+          IMAGE_LABELS: clawdinator=true
         run: scripts/import-image.sh "${IMAGE_URL}"

README.md

@@ -52,7 +52,7 @@ Image-based deploy (Option A, recommended):
    - `zstd dist/nixos.img -o dist/nixos.img.zst`
 3) Upload the image to S3 (private object; use a presigned URL for import).
 4) Import into Hetzner:
-   - Use `hcloud-upload-image` (Hetzner Cloud does not support direct URL imports).
+   - Use `hcloud-upload-image` (creates a snapshot image via a temporary server).
 5) Point OpenTofu at the image name or id and provision.
 6) Re-key agenix secrets to the new host SSH key and sync secrets to `/var/lib/clawd/nix-secrets`.
 7) Run `nixos-rebuild switch --flake /var/lib/clawd/repo#clawdinator-1`.

scripts/import-image.sh

@@ -8,6 +8,8 @@ if [ -z "${image_url}" ]; then
 fi
 
 location="${HCLOUD_LOCATION:-nbg1}"
+description="${IMAGE_DESCRIPTION:-clawdinator-nixos}"
+labels="${IMAGE_LABELS:-clawdinator=true}"
 
 docker run --rm \
   -e HCLOUD_TOKEN="${HCLOUD_TOKEN:?HCLOUD_TOKEN required}" \
@@ -16,4 +18,6 @@ docker run --rm \
   --image-url "${image_url}" \
   --architecture x86 \
   --compression zstd \
-  --location "${location}"
+  --location "${location}" \
+  --description "${description}" \
+  --labels "${labels}"