ver4a/oci-builder
1
0
Fork 0
Code Activity Actions

Compare commits

base: ver4a:318cc844fb6c446dd780572e80ba57835a93318f
Branches Tags
ver4a:main
..
compare: ver4a:94939ccbb9d3244d71e15fef513a64a872de0e3c
Branches Tags
ver4a:main

No commits in common. "318cc844fb6c446dd780572e80ba57835a93318f" and "94939ccbb9d3244d71e15fef513a64a872de0e3c" have entirely different histories.
318cc844fb ... 94939ccbb9

1 changed files with 46 additions and 38 deletions
Download patch file Download diff file Expand all files Collapse all files

84
.forgejo/workflows/build-image.yaml
View file

@ -16,31 +16,35 @@ jobs:
uses: 'actions/checkout@v4'
- name: 'Build image'
run: >
buildah bud
-f oci-builder/Containerfile
-t '${{ vars.REGISTRY_DOMAIN }}/${{ vars.NAMESPACE }}/oci-builder:ci-dev'
--userns=container
--security-opt=no-new-privileges
--annotation=quay.expires-after=
--build-arg REGISTRY_DOMAIN='${{ vars.REGISTRY_DOMAIN }}'
--build-arg NAMESPACE='${{ vars.NAMESPACE }}'
--build-arg GITHUB_RUN_ID='${{ env.GITHUB_RUN_ID }}'
oci-builder
uses: 'https://git.uncontrol.me/ver4a-actions/buildah-build@v2-compat'
with:
image: 'registry.uncontrol.me/ver4a/oci-builder'
tags: 'ci-dev'
context: 'oci-builder'
containerfiles: 'oci-builder/Containerfile'
oci: true
extra-args: |
--userns=container
--security-opt=no-new-privileges
--annotation=quay.expires-after=
build-args: |
REGISTRY_DOMAIN=${{ vars.REGISTRY_DOMAIN }}
NAMESPACE=${{ vars.NAMESPACE }}
GITHUB_RUN_ID=${{ env.GITHUB_RUN_ID }}
- name: 'Log in to registry'
run: >
buildah login
-u '${{ vars.REGISTRY_USERNAME }}'
-p '${{ secrets.REGISTRY_PASSWORD }}'
'${{ vars.REGISTRY_DOMAIN }}'
uses: 'actions/podman-login@v1'
with:
registry: ${{ vars.REGISTRY_DOMAIN }}
username: ${{ vars.REGISTRY_USERNAME }}
password: ${{ secrets.REGISTRY_PASSWORD }}
- name: 'Push :ci-dev to registry'
run: >
buildah push
--compression-format=zstd
--compression-level='${{ vars.COMPRESSION_LEVEL }}'
'${{ vars.REGISTRY_DOMAIN }}/${{ vars.NAMESPACE }}/oci-builder:ci-dev'
uses: 'actions/push-to-registry@v2'
with:
image: 'ver4a/oci-builder'
tags: 'ci-dev'
registry: 'registry.uncontrol.me'
test-oci-builder:
name: 'Test oci-builder'
@ -55,17 +59,21 @@ jobs:
uses: 'actions/checkout@v4'
- name: 'Build image'
run: >
buildah bud
-f oci-builder/Containerfile
-t '${{ vars.REGISTRY_DOMAIN }}/${{ vars.NAMESPACE }}/oci-builder:throwaway'
--userns=container
--security-opt=no-new-privileges
--annotation=quay.expires-after=
--build-arg REGISTRY_DOMAIN='${{ vars.REGISTRY_DOMAIN }}'
--build-arg NAMESPACE='${{ vars.NAMESPACE }}'
--build-arg GITHUB_RUN_ID='${{ env.GITHUB_RUN_ID }}'
oci-builder
uses: 'https://git.uncontrol.me/ver4a-actions/buildah-build@v2-compat'
with:
image: 'registry.uncontrol.me/ver4a/oci-builder'
tags: 'throwaway'
context: 'oci-builder'
containerfiles: 'oci-builder/Containerfile'
oci: true
extra-args: |
--userns=container
--security-opt=no-new-privileges
--annotation=quay.expires-after=
build-args: |
REGISTRY_DOMAIN=${{ vars.REGISTRY_DOMAIN }}
NAMESPACE=${{ vars.NAMESPACE }}
GITHUB_RUN_ID=${{ env.GITHUB_RUN_ID }}
release-oci-builder:
name: 'Release oci-builder'
@ -77,11 +85,11 @@ jobs:
run: 'diff <(echo $GITHUB_RUN_ID) /.github_run_id'
- name: 'Log in to registry'
run: >
buildah login
-u '${{ vars.REGISTRY_USERNAME }}'
-p '${{ secrets.REGISTRY_PASSWORD }}'
'${{ vars.REGISTRY_DOMAIN }}'
uses: 'actions/podman-login@v1'
with:
registry: '${{ vars.REGISTRY_DOMAIN }}'
username: '${{ vars.REGISTRY_USERNAME }}'
password: '${{ secrets.REGISTRY_PASSWORD }}'
- name: 'Move :ci-dev to :stable'
run: 'skopeo copy docker://${{ vars.REGISTRY_DOMAIN }}/${{ vars.NAMESPACE }}/oci-builder:ci-dev docker://${{ vars.REGISTRY_DOMAIN }}/${{ vars.NAMESPACE }}/oci-builder:stable'
run: 'skopeo copy docker://registry.uncontrol.me/ver4a/oci-builder:ci-dev docker://registry.uncontrol.me/ver4a/oci-builder:stable'