ver4a/oci-builder
1
0
Fork 0
Code Activity Actions

Compare commits

base: ver4a:94939ccbb9d3244d71e15fef513a64a872de0e3c
Branches Tags
ver4a:main
...
compare: ver4a:318cc844fb6c446dd780572e80ba57835a93318f
Branches Tags
ver4a:main

3 commits
94939ccbb9 ... 318cc844fb

Author SHA1 Message Date
ver4a
318cc844fb build: use variables for push instead of hardcoded URLs
All checks were successful
/ Test oci-builder (push) Successful in 50s
Details
/ Release oci-builder (push) Successful in 1s
Details
/ Build oci-builder (push) Successful in 45s
Details
2026-01-08 20:05:04 +01:00
ver4a
decebdcdbe build: Enable zstd compression on image 2026-01-08 20:02:53 +01:00
ver4a
2cd0f54c20 build: Migrate from actions to shell 
This commit removes the use of actions, replacing them with shell.

Later I want to convert the commands into reusable shell scripts. The actions are currently not maintained (last commit to buildah build action is 2 years old), introduce maintenance burden and have their own bugs.
 2026-01-08 19:50:56 +01:00
1 changed files with 38 additions and 46 deletions
Download patch file Download diff file Expand all files Collapse all files

84
.forgejo/workflows/build-image.yaml
View file

@ -16,35 +16,31 @@ jobs:
uses: 'actions/checkout@v4' uses: 'actions/checkout@v4'
- name: 'Build image' - name: 'Build image'
uses: 'https://git.uncontrol.me/ver4a-actions/buildah-build@v2-compat' run: >
with: buildah bud
image: 'registry.uncontrol.me/ver4a/oci-builder' -f oci-builder/Containerfile
tags: 'ci-dev' -t '${{ vars.REGISTRY_DOMAIN }}/${{ vars.NAMESPACE }}/oci-builder:ci-dev'
context: 'oci-builder' --userns=container
containerfiles: 'oci-builder/Containerfile' --security-opt=no-new-privileges
oci: true --annotation=quay.expires-after=
extra-args: | --build-arg REGISTRY_DOMAIN='${{ vars.REGISTRY_DOMAIN }}'
--userns=container --build-arg NAMESPACE='${{ vars.NAMESPACE }}'
--security-opt=no-new-privileges --build-arg GITHUB_RUN_ID='${{ env.GITHUB_RUN_ID }}'
--annotation=quay.expires-after= oci-builder
build-args: |
REGISTRY_DOMAIN=${{ vars.REGISTRY_DOMAIN }}
NAMESPACE=${{ vars.NAMESPACE }}
GITHUB_RUN_ID=${{ env.GITHUB_RUN_ID }}
- name: 'Log in to registry' - name: 'Log in to registry'
uses: 'actions/podman-login@v1' run: >
with: buildah login
registry: ${{ vars.REGISTRY_DOMAIN }} -u '${{ vars.REGISTRY_USERNAME }}'
username: ${{ vars.REGISTRY_USERNAME }} -p '${{ secrets.REGISTRY_PASSWORD }}'
password: ${{ secrets.REGISTRY_PASSWORD }} '${{ vars.REGISTRY_DOMAIN }}'
- name: 'Push :ci-dev to registry' - name: 'Push :ci-dev to registry'
uses: 'actions/push-to-registry@v2' run: >
with: buildah push
image: 'ver4a/oci-builder' --compression-format=zstd
tags: 'ci-dev' --compression-level='${{ vars.COMPRESSION_LEVEL }}'
registry: 'registry.uncontrol.me' '${{ vars.REGISTRY_DOMAIN }}/${{ vars.NAMESPACE }}/oci-builder:ci-dev'
test-oci-builder: test-oci-builder:
name: 'Test oci-builder' name: 'Test oci-builder'
@ -59,21 +55,17 @@ jobs:
uses: 'actions/checkout@v4' uses: 'actions/checkout@v4'
- name: 'Build image' - name: 'Build image'
uses: 'https://git.uncontrol.me/ver4a-actions/buildah-build@v2-compat' run: >
with: buildah bud
image: 'registry.uncontrol.me/ver4a/oci-builder' -f oci-builder/Containerfile
tags: 'throwaway' -t '${{ vars.REGISTRY_DOMAIN }}/${{ vars.NAMESPACE }}/oci-builder:throwaway'
context: 'oci-builder' --userns=container
containerfiles: 'oci-builder/Containerfile' --security-opt=no-new-privileges
oci: true --annotation=quay.expires-after=
extra-args: | --build-arg REGISTRY_DOMAIN='${{ vars.REGISTRY_DOMAIN }}'
--userns=container --build-arg NAMESPACE='${{ vars.NAMESPACE }}'
--security-opt=no-new-privileges --build-arg GITHUB_RUN_ID='${{ env.GITHUB_RUN_ID }}'
--annotation=quay.expires-after= oci-builder
build-args: |
REGISTRY_DOMAIN=${{ vars.REGISTRY_DOMAIN }}
NAMESPACE=${{ vars.NAMESPACE }}
GITHUB_RUN_ID=${{ env.GITHUB_RUN_ID }}
release-oci-builder: release-oci-builder:
name: 'Release oci-builder' name: 'Release oci-builder'
@ -85,11 +77,11 @@ jobs:
run: 'diff <(echo $GITHUB_RUN_ID) /.github_run_id' run: 'diff <(echo $GITHUB_RUN_ID) /.github_run_id'
- name: 'Log in to registry' - name: 'Log in to registry'
uses: 'actions/podman-login@v1' run: >
with: buildah login
registry: '${{ vars.REGISTRY_DOMAIN }}' -u '${{ vars.REGISTRY_USERNAME }}'
username: '${{ vars.REGISTRY_USERNAME }}' -p '${{ secrets.REGISTRY_PASSWORD }}'
password: '${{ secrets.REGISTRY_PASSWORD }}' '${{ vars.REGISTRY_DOMAIN }}'
- name: 'Move :ci-dev to :stable' - name: 'Move :ci-dev to :stable'
run: 'skopeo copy docker://registry.uncontrol.me/ver4a/oci-builder:ci-dev docker://registry.uncontrol.me/ver4a/oci-builder:stable' run: 'skopeo copy docker://${{ vars.REGISTRY_DOMAIN }}/${{ vars.NAMESPACE }}/oci-builder:ci-dev docker://${{ vars.REGISTRY_DOMAIN }}/${{ vars.NAMESPACE }}/oci-builder:stable'