1
0
Fork 0
Commit graph

71 commits

Author SHA1 Message Date
9c4574808f feat: pass password to buildah login through stdin
All checks were successful
/ Test oci-builder (push) Successful in 33s
/ Release oci-builder (push) Successful in 1s
/ Build oci-builder (push) Successful in 36s
This config makes it so that the registry password isn't passed as a command line
argument to an external command (buildah login), but only to an internal
command (echo). Thus the password can't be visible in process tree.
(e.g. by using ps).
2026-01-09 00:27:22 +01:00
ae456716c5 fix: symlink node to node-24
All checks were successful
/ Test oci-builder (push) Successful in 32s
/ Release oci-builder (push) Successful in 1s
/ Build oci-builder (push) Successful in 38s
The checkout action looks for "node" in PATH.
2026-01-08 22:14:45 +01:00
107e6eba3c fix: add back nodejs24 (action dependency)
Some checks failed
/ Release oci-builder (push) Has been skipped
/ Test oci-builder (push) Failing after 6s
/ Build oci-builder (push) Successful in 38s
This package was also required for the checkout action and I erroneously
removed it in 3c6d8f587d.

Previous version was nodejs22, that was only because of unmaintained
actions, current actions are maintained so nodejs24 is used.
2026-01-08 21:58:23 +01:00
3c6d8f587d feat: remove unused nodejs22 package
Some checks failed
/ Test oci-builder (push) Failing after 6s
/ Release oci-builder (push) Has been skipped
/ Build oci-builder (push) Successful in 35s
This package is a dependency for previously used redhat-actions, those
were removed and it's no longer necessary.
2026-01-08 21:41:52 +01:00
50e2413d85 feat: remove unused workaround
All checks were successful
/ Test oci-builder (push) Successful in 37s
/ Release oci-builder (push) Successful in 0s
/ Build oci-builder (push) Successful in 41s
This workaround was for a bug in the buildah-build action, that action was
removed from build in 2cd0f54c20, so this
workaround is no longer needed.
2026-01-08 20:44:34 +01:00
318cc844fb build: use variables for push instead of hardcoded URLs
All checks were successful
/ Test oci-builder (push) Successful in 50s
/ Release oci-builder (push) Successful in 1s
/ Build oci-builder (push) Successful in 45s
2026-01-08 20:05:04 +01:00
decebdcdbe build: Enable zstd compression on image 2026-01-08 20:02:53 +01:00
2cd0f54c20 build: Migrate from actions to shell
This commit removes the use of actions, replacing them with shell.

Later I want to convert the commands into reusable shell scripts. The actions are currently not maintained (last commit to buildah build action is 2 years old), introduce maintenance burden and have their own bugs.
2026-01-08 19:50:56 +01:00
94939ccbb9 Rebase to F43
All checks were successful
/ Release oci-builder (push) Successful in 3s
/ Build oci-builder (push) Successful in 47s
/ Test oci-builder (push) Successful in 34s
2025-10-31 21:41:36 +01:00
4cd0820789 Update forgejo runner to v11.2.0
All checks were successful
/ Release oci-builder (push) Successful in 2s
/ Build oci-builder (push) Successful in 45s
/ Test oci-builder (push) Successful in 38s
2025-10-26 22:35:27 +01:00
1d9d898045 Make cleanup more concise
All checks were successful
/ Build oci-builder (push) Successful in 55s
/ Test oci-builder (push) Successful in 41s
/ Release oci-builder (push) Successful in 3s
2025-05-12 14:02:48 +02:00
0249fcc192 Make mounting auth.json optional
All checks were successful
/ Build oci-builder (push) Successful in 46s
/ Test oci-builder (push) Successful in 32s
/ Release oci-builder (push) Successful in 2s
It makes sense in some environments and deployments, but there are use
cases that don't need it, so runner shouldn't fail in those cases.
2025-04-30 11:21:41 +02:00
ff5202f0cd ci: Remove auth_file_path
All checks were successful
/ Release oci-builder (push) Successful in 2s
/ Build oci-builder (push) Successful in 52s
/ Test oci-builder (push) Successful in 34s
Not needed since 194c202d60
2025-04-28 14:55:57 +02:00
883ea22a27 Remove logs
All checks were successful
/ Test oci-builder (push) Successful in 36s
/ Build oci-builder (push) Successful in 41s
/ Release oci-builder (push) Successful in 2s
2025-04-25 10:50:17 +02:00
6cb2c960e2 Simplify cleanup of cache and tmp directories
All checks were successful
/ Release oci-builder (push) Successful in 2s
/ Test oci-builder (push) Successful in 53s
/ Build oci-builder (push) Successful in 41s
2025-04-25 10:36:10 +02:00
d2649a5f21 ci: Make formatting more consistent
All checks were successful
/ Build oci-builder (push) Successful in 1m11s
/ Test oci-builder (push) Successful in 31s
/ Release oci-builder (push) Successful in 2s
2025-04-25 09:32:51 +02:00
729c40b48d Remove vim
All checks were successful
/ Build oci-builder (push) Successful in 56s
/ Test oci-builder (push) Successful in 34s
/ Release oci-builder (push) Successful in 2s
2025-04-23 18:40:28 +02:00
f487987dd1 Use "git-core" instead of "git"
All checks were successful
/ Release oci-builder (push) Successful in 3s
/ Build oci-builder (push) Successful in 1m18s
/ Test oci-builder (push) Successful in 52s
Inspired by https://fedoraproject.org/wiki/Changes/ChangeToGitCore
2025-04-23 15:01:47 +02:00
617a58d64a Add README.md 2025-04-22 11:24:14 +02:00
ce36a86d93 Rename Dockerfile to Containerfile
All checks were successful
/ Build oci-builder (push) Successful in 1m13s
/ Release oci-builder (push) Successful in 1s
/ Test oci-builder (push) Successful in 1m1s
2025-04-22 10:37:17 +02:00
b2d6b7adac ci: Fix "containerfiles" paths 2025-04-22 10:35:43 +02:00
41f0f8d322 ci: Fix build context
Some checks failed
/ Test oci-builder (push) Has been skipped
/ Release oci-builder (push) Has been skipped
/ Build oci-builder (push) Failing after 16s
2025-04-22 10:24:07 +02:00
8ad92da922 ci: Rebuild only on changes relevant to build
Some checks failed
/ Test oci-builder (push) Has been skipped
/ Release oci-builder (push) Has been skipped
/ Build oci-builder (push) Failing after 16s
2025-04-22 10:21:23 +02:00
2181a5da53 Fix ignoring of README.md 2025-04-21 20:30:04 +02:00
7f648ae669 ci: Don't build image on README.md change 2025-04-21 20:28:56 +02:00
782465f228 ci: Make quoting consistent
All checks were successful
/ Build oci-builder (push) Successful in 1m1s
/ Test oci-builder (push) Successful in 51s
/ Release oci-builder (push) Successful in 3s
2025-04-21 20:20:30 +02:00
7a63e21525 ci: Rebuild oci-builder weekly 2025-04-21 20:20:22 +02:00
a333c03908 Make Dockerfile friendlier to layer caching
All checks were successful
/ Test oci-builder (push) Successful in 53s
/ Build oci-builder (push) Successful in 1m3s
/ Release oci-builder (push) Successful in 3s
2025-04-21 19:55:33 +02:00
ba44ace584 Install missing awk to fix file capability removal
All checks were successful
/ Build oci-builder (push) Successful in 1m14s
/ Release oci-builder (push) Successful in 3s
/ Test oci-builder (push) Successful in 53s
2025-04-18 01:18:56 +02:00
c1c6b6d48e Make capability removal logic more robust
Some checks failed
/ Test oci-builder (push) Has been skipped
/ Release oci-builder (push) Has been skipped
/ Build oci-builder (push) Failing after 55s
2025-04-18 01:13:58 +02:00
37483da0f5 Refactor file capabilities
All checks were successful
/ Test oci-builder (push) Successful in 55s
/ Release oci-builder (push) Successful in 2s
/ Build oci-builder (push) Successful in 1m5s
Adding capabilities after removing capabilities is more robust and makes
logically more sense, the reverse order was confusing.

This also allows dropping the exception from removal.
2025-04-17 01:45:42 +02:00
31ac3096dc Refactor environment variables 2025-04-17 01:45:23 +02:00
8181b54767 Merge subuid/subgid into a single RUN
All checks were successful
/ Build oci-builder (push) Successful in 58s
/ Test oci-builder (push) Successful in 49s
/ Release oci-builder (push) Successful in 3s
2025-04-16 17:49:36 +02:00
9b7b7f9479 Add LICENSE
All checks were successful
/ Build oci-builder (push) Successful in 1m1s
/ Test oci-builder (push) Successful in 50s
/ Release oci-builder (push) Successful in 3s
2025-04-16 17:33:16 +02:00
14537b7c8c ci: Name checkout action steps 2025-04-16 17:07:07 +02:00
01e5d4d9bf Rebase to F42
All checks were successful
/ Build oci-builder (push) Successful in 1m40s
/ Release oci-builder (push) Successful in 2s
/ Test oci-builder (push) Successful in 52s
2025-04-16 11:04:31 +02:00
536401a1bd ci: Add a name to push step
All checks were successful
/ Build oci-builder (push) Successful in 1m16s
/ Release oci-builder (push) Successful in 2s
/ Test oci-builder (push) Successful in 46s
2025-04-16 09:41:12 +02:00
2a8e67ebce Add braces to variable for consistency
All checks were successful
/ Build oci-builder (push) Successful in 1m1s
/ Release oci-builder (push) Successful in 3s
/ Test oci-builder (push) Successful in 44s
2025-04-16 00:16:06 +02:00
7d883a490b fix: Get run id correctly from env
All checks were successful
/ Build oci-builder (push) Successful in 1m0s
/ Release oci-builder (push) Successful in 2s
/ Test oci-builder (push) Successful in 46s
2025-04-16 00:11:07 +02:00
c9fac04cf1 fix: Correct "diff" package name to "diffutils"
Some checks failed
/ Release oci-builder (push) Has been skipped
/ Build oci-builder (push) Successful in 1m5s
/ Test oci-builder (push) Failing after 5s
2025-04-16 00:01:49 +02:00
8daabdc8f9 Add "diff" package
Some checks failed
/ Test oci-builder (push) Has been cancelled
/ Release oci-builder (push) Has been cancelled
/ Build oci-builder (push) Has been cancelled
2025-04-16 00:00:56 +02:00
7a119a9605 Make sure oci-builder originates from current workflow run
Some checks failed
/ Release oci-builder (push) Has been skipped
/ Build oci-builder (push) Successful in 53s
/ Test oci-builder (push) Failing after 6s
2025-04-15 23:58:49 +02:00
b912195021 Stop deleting image during release
All checks were successful
/ Build oci-builder (push) Successful in 54s
/ Test oci-builder (push) Successful in 45s
/ Release oci-builder (push) Successful in 3s
2025-04-15 20:23:03 +02:00
48a38825ea Add skopeo
Some checks failed
/ Build oci-builder (push) Successful in 52s
/ Test oci-builder (push) Successful in 49s
/ Release oci-builder (push) Failing after 3s
2025-04-15 20:19:52 +02:00
dee9d5e5ea Add testing and release jobs
Some checks failed
/ Build oci-builder (push) Successful in 50s
/ Test oci-builder (push) Successful in 56s
/ Release oci-builder (push) Failing after 2s
2025-04-15 20:16:23 +02:00
612cd733b5 Rename job 2025-04-15 18:19:29 +02:00
df475c4b6f ci: Build correct tag
All checks were successful
/ Build oci-builder (push) Successful in 52s
2025-04-15 17:27:29 +02:00
5c305f55d3 Push image under dev tag (used only for ci)
Some checks failed
/ Build oci-builder (push) Failing after 51s
2025-04-15 17:25:07 +02:00
c8acc5dc1b Remove debug
All checks were successful
/ Build oci-builder (push) Successful in 52s
2025-04-15 17:09:31 +02:00
b8bd14dbe1 Fix image name
All checks were successful
/ Build oci-builder ver4a-compat (push) Successful in 50s
2025-04-15 14:42:20 +02:00