feat(nix/docker)Cli docker image size reduce

[samrose]

1. latestOnly Parameter Support (d20cab0)

• Added a latestOnly parameter that flows through makeOurPostgresPkgs → makePostgresBin → makePostgres
• When latestOnly=true, only the latest version of each extension is built (instead of all historical versions)
• Creates new psql_17_slim package using this parameter

2. Extension Updates (db96c62)

• Updated ~28 extension files in nix/ext/ to support the latestOnly parameter
• Notable: wrappers alone has 13 versions → 1 when slim, saving significant space

3. Supporting Files

• Added nix/packages/image-size-analyzer.nix - tool to analyze image sizes
• Added docs/plans/2026-01-21-psql-slim-latest-only.md - implementation plan
• Added nix/docs/image-size-analyzer-usage.md - usage documentation
• Updated Dockerfiles (Dockerfile-15, Dockerfile-17, Dockerfile-orioledb-17)
• Various ansible config cleanups and renames

Expected Impact

• Estimated size reduction: ~1GB+ (~40-60% smaller images)
• Primary savings from multi-version extensions like wrappers (13→1 versions) + alpine vs ubuntu base image

Refactors Docker image testing and CLI smoke testing into reusable Nix packages that work both locally and in CI, while consolidating duplicated workflow logic.

Changes

New Nix Packages:

• supabase-cli - Supabase CLI v2.75.0 fetched from GitHub releases (x86_64-linux, aarch64-linux, aarch64-darwin)
• docker-image-test - Runs pg_regress tests against Docker images (replaces test-docker-image.sh usage)
• cli-smoke-test - Runs Supabase CLI smoke tests against locally built images

New Shared GitHub Action:

• .github/actions/check-docker-image-changes - Extracts duplicated change detection logic from both workflows

Updated Workflows:

• docker-image-test.yml - Uses shared action and nix run .#docker-image-test
• cli-smoke-test.yml - Uses shared action and nix run .#cli-smoke-test

Added to Nix Checks:

• cli-smoke-test, docker-image-inputs, docker-image-test, supabase-cli added to flake checks for build validation

Usage

Run Docker image tests locally

nix run .#docker-image-test -- Dockerfile-17
nix run .#docker-image-test -- --no-build Dockerfile-15

Run CLI smoke tests locally

nix run .#cli-smoke-test -- 17
nix run .#cli-smoke-test -- --no-build 15

Benefits

• Local development: Developers can run the same tests locally that CI runs
• Single source of truth: Test logic defined once in Nix packages
• Reduced duplication: Shared action for change detection
• Better validation: Tooling packages included in nix checks/build matrix

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

• 🔍 Trigger a full review

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch cli-image-reduce

Tip

🧪 Unit Test Generation v2 is now available!

We have significantly improved our unit test generation capabilities.

To enable: Add this to your .coderabbit.yaml configuration:

reviews:
  finishing_touches:
    unit_tests:
      enabled: true

Try it out by using the @coderabbitai generate unit tests command on your code files or under ✨ Finishing Touches on the walkthrough!

Have feedback? Share your thoughts on our Discord thread!

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}