MNT: Use conda-lock lock file for reproducible environment (#32)

* Add lock.sh which uses the same Docker image used for deployment to
  install conda-lock and then build the conda-lock lock file from the
  high level environment.yml.

* Add high level environment.yml and use conda-lock v2.x to create a
  hash level conda-lock.yml lock file of the environment.

  ```
  conda-lock lock --micromamba --platform linux-64 --file environment.yml
  ```

* COPY conda-lock.yml lock file to Dockerfile during build.
* Use the conda-lock.yml lock file to create an upload-nightly-action
  micromamba environment and activate it to have access to
  anaconda-client.

Author: matthewfeickert

.github/workflows/remove-wheels.yml

@@ -36,7 +36,7 @@ jobs:
           environment-name: remove-wheels
           create-args: >-
             python=3.11
-            anaconda-client=1.12.0
+            anaconda-client=1.12.1
             curl
             jq
 

Dockerfile

@@ -8,6 +8,8 @@ SHELL [ "/bin/bash", "-c" ]
 ENV LC_ALL=C.UTF-8
 ENV LANG=C.UTF-8
 
+# lock file created by running lock.sh in the top level of the repository
+COPY --chown=mambauser conda-lock.yml /conda-lock.yml
 COPY --chown=mambauser cmd.sh /cmd.sh
 RUN chmod +x /cmd.sh
 

cmd.sh

@@ -24,15 +24,17 @@ if [ -z "${ANACONDA_TOKEN}" ]; then
   exit -1
 fi
 
-export ANACONDA_CLIENT_VERSION="1.12.0"
-
-# install anaconda-client
-echo "Installing anaconda-client v${ANACONDA_CLIENT_VERSION}..."
-
-micromamba install \
+# Install anaconda-client from lock file
+echo "Installing anaconda-client from upload-nightly-action conda-lock lock file..."
+micromamba create \
   --yes \
-  --channel conda-forge \
-  "anaconda-client==${ANACONDA_CLIENT_VERSION}"
+  --name upload-nightly-action \
+  --file /conda-lock.yml
+
+# 'micromamba' is running as a subprocess and can't modify the parent shell.
+# Thus you must initialize your shell before using activate and deactivate.
+eval "$(micromamba shell hook --shell bash)"
+micromamba activate upload-nightly-action
 
 # trim trailing slashes from $INPUT_ARTIFACTS_PATH
 INPUT_ARTIFACTS_PATH="${INPUT_ARTIFACTS_PATH%/}"