on: push: jobs: oci-builder: name: 'Build oci-builder' runs-on: 'oci-builder' steps: - uses: actions/checkout@v4 - name: 'Build image rn-vanilla' uses: 'https://github.com/redhat-actions/buildah-build@v2' with: image: 'registry.uncontrol.me/ver4a/oci-builder' containerfiles: 'Dockerfile' oci: true extra-args: | userns=container security-opt=no-new-privileges annotation=quay.expires-after= build-args: | REGISTRY_DOMAIN=${{ vars.REGISTRY_DOMAIN }} NAMESPACE=${{ vars.NAMESPACE }} oci-builder-ver4aactions: name: 'Build oci-builder ver4a-vanilla' runs-on: 'oci-builder' steps: - uses: actions/checkout@v4 - name: 'Build image' uses: 'https://git.uncontrol.me/ver4a-actions/buildah-build@v2' with: image: 'registry.uncontrol.me/ver4a/oci-builder' containerfiles: 'Dockerfile' oci: true extra-args: | userns=container security-opt=no-new-privileges annotation=quay.expires-after= build-args: | REGISTRY_DOMAIN=${{ vars.REGISTRY_DOMAIN }} NAMESPACE=${{ vars.NAMESPACE }} oci-builder-ver4aactionscompat: name: 'Build oci-builder ver4a-compat' runs-on: 'oci-builder' steps: - uses: actions/checkout@v4 - name: 'Build image ver4a-compat' uses: 'https://git.uncontrol.me/ver4a-actions/buildah-build@v2-compat' with: image: 'registry.uncontrol.me/ver4a/oci-builder' containerfiles: 'Dockerfile' oci: true extra-args: | userns=container security-opt=no-new-privileges annotation=quay.expires-after= build-args: | REGISTRY_DOMAIN=${{ vars.REGISTRY_DOMAIN }} NAMESPACE=${{ vars.NAMESPACE }}