.gitea/workflows/build-and-push.yaml aktualisiert
build-and-push.yaml / release-and-build (push) Successful in 25m5s

This commit is contained in:
pi-farm committed 2026-10-06 15:59:13 +00:00
1 parent 2be18e6fd2
commit a2f1c987f8
1 file changed
+200 -175
+200 -175
View File
@@ -189,216 +189,241 @@ jobs:
id: update_doc id: update_doc
if: steps.check_changes.outputs.should_build == 'true' if: steps.check_changes.outputs.should_build == 'true'
run: | run: |
set -x set -x
export TZ=Europe/Berlin export TZ=Europe/Berlin
CURRENT_TIME=$(date '+%d.%m.%Y %H:%M') CURRENT_TIME=$(date '+%d.%m.%Y %H:%M')
BUILD_TAG="${{ steps.prep.outputs.docker_tag }}" BUILD_TAG="${{ steps.prep.outputs.docker_tag }}"
FULL_URL="${{ steps.prep.outputs.image_name }}" FULL_URL="${{ steps.prep.outputs.image_name }}"
REPO_PURE="${{ steps.prep.outputs.repo_pure }}" REPO_PURE="${{ steps.prep.outputs.repo_pure }}"
BASE_IMAGE="${{ steps.prep.outputs.base_image }}" BASE_IMAGE="${{ steps.prep.outputs.base_image }}"
if [ ! -f "buildargs.env" ]; then echo "❌ buildargs.env missing!"; exit 1; fi if [ ! -f "buildargs.env" ]; then echo "❌ buildargs.env missing!"; exit 1; fi
grep -v '^#' buildargs.env | sed 's/\r$//' > cleaned_env.sh grep -v '^#' buildargs.env | sed 's/\r$//' > cleaned_env.sh
set -a set -a
source ./cleaned_env.sh source ./cleaned_env.sh
set +a set +a
if [ -f "Dockerfile.aarch64" ]; then ARM_STATUS="✅ Active"; else ARM_STATUS="❌ Not supported"; fi if [ -f "Dockerfile.aarch64" ]; then ARM_STATUS="✅ Active"; else ARM_STATUS="❌ Not supported"; fi
cat << 'EOF' > commit_msg.txt cat << 'EOF' > commit_msg.txt
${{ gitea.event.head_commit.message }} ${{ gitea.event.head_commit.message }}
EOF EOF
COMMIT_MSG=$(sed 's/\[skip ci\]//g' commit_msg.txt | xargs) COMMIT_MSG=$(sed 's/\[skip ci\]//g' commit_msg.txt | xargs)
wget -q https://git.pi-farm.de/pi-farm/templates/raw/branch/main/README.template -O README.template || echo "Warnung: README Template fehlt" # 1. Authentifizierter Download der Templates via curl (-f bricht bei HTTP-Fehlern ab)
wget -q https://git.pi-farm.de/pi-farm/templates/raw/branch/main/docker-compose.template -O docker-compose.template || echo "Warnung: Compose Template fehlt" TOKEN="${{ secrets.RUNNER_TOKEN }}"
curl -sSLf -H "Authorization: token $TOKEN" \
"https://git.pi-farm.de/pi-farm/templates/raw/branch/main/README.template" \
-o README.template || echo "Warnung: README Template konnte nicht geladen werden"
NEW_ROW="| **$BUILD_TAG** | $CURRENT_TIME | $COMMIT_MSG ✅ |" curl -sSLf -H "Authorization: token $TOKEN" \
if [ -f "VERSION.history" ]; then "https://git.pi-farm.de/pi-farm/templates/raw/branch/main/docker-compose.template" \
grep -v "| **$BUILD_TAG** |" VERSION.history > VERSION.history.tmp || true -o docker-compose.template || echo "Warnung: Compose Template konnte nicht geladen werden"
echo "$NEW_ROW" > VERSION.history
cat VERSION.history.tmp >> VERSION.history
rm VERSION.history.tmp
else
echo "$NEW_ROW" > VERSION.history
fi
HISTORY_CONTENT=$(cat VERSION.history)
ENV_BLOCK_CONTENT="" # 2. Sicherheitsprüfung: Falls Gitea trotz -f eine HTML-Login-Seite ausgibt, Datei sofort verwerfen
env_vars=$(grep '^ENV_' buildargs.env | grep -v '^#' | tr -d '\r' || true) for t_file in README.template docker-compose.template; do
if [ -n "$env_vars" ]; then if [ -f "$t_file" ] && grep -qi "<!DOCTYPE html>" "$t_file"; then
ENV_BLOCK_CONTENT=" environment:\n" echo "❌ FEHLER: $t_file ist eine HTML-Loginseite! Download verworfen."
while read -r line; do rm -f "$t_file"
[ -z "$line" ] && continue
key=$(echo "$line" | cut -d= -f1); val=$(echo "$line" | cut -d= -f2-); clean_key=${key#ENV_}
ENV_BLOCK_CONTENT="${ENV_BLOCK_CONTENT} - ${clean_key}=${val}\n"
done <<< "$env_vars"
fi
PORTS_BLOCK_CONTENT=""
port_vars=$(grep '^PORT_' buildargs.env | grep -v '^#' | tr -d '\r' || true)
if [ -n "$port_vars" ]; then
PORTS_BLOCK_CONTENT=" ports:\n"
while read -r line; do
[ -z "$line" ] && continue
val=$(echo "$line" | cut -d= -f2-); PORTS_BLOCK_CONTENT="${PORTS_BLOCK_CONTENT} - ${val}\n"
done <<< "$port_vars"
fi
VOL_BLOCK_CONTENT=""
vol_vars=$(grep '^VOL_' buildargs.env | grep -v '^#' | tr -d '\r' || true)
if [ -n "$vol_vars" ]; then
VOL_BLOCK_CONTENT=" volumes:\n"
while read -r line; do
[ -z "$line" ] && continue
val=$(echo "$line" | cut -d= -f2-); VOL_BLOCK_CONTENT="${VOL_BLOCK_CONTENT} - ${val}\n"
done <<< "$vol_vars"
fi
{
echo "docker run -d \\"
echo " --name $REPO_PURE \\"
echo " --restart unless-stopped \\"
all_params=$(grep -E '^(PORT_|ENV_|VOL_)' buildargs.env | grep -v '^#' | sed 's/\r$//' || true)
if [ -n "$all_params" ]; then
while read -r line; do
[ -z "$line" ] && continue
if [[ "$line" =~ ^PORT_ ]]; then
val=$(echo "$line" | cut -d= -f2-)
echo " -p ${val} \\"
elif [[ "$line" =~ ^ENV_ ]]; then
key=$(echo "$line" | cut -d= -f1); clean_key=${key#ENV_}; val=$(echo "$line" | cut -d= -f2-)
echo " -e ${clean_key}=${val} \\"
elif [[ "$line" =~ ^VOL_ ]]; then
val=$(echo "$line" | cut -d= -f2-)
echo " -v ${val} \\"
fi fi
done <<< "$all_params" done
fi
echo " $FULL_URL:$BUILD_TAG"
} > docker_run_block.txt
DOCKERHUB_LINK_CONTENT="" NEW_ROW="| **$BUILD_TAG** | $CURRENT_TIME | $COMMIT_MSG ✅ |"
if [[ "${{ steps.prep.outputs.push_targets }}" == *"dockerhub"* ]]; then if [ -f "VERSION.history" ]; then
DH_USER="${{ secrets.DOCKERHUB_USERNAME }}" grep -v "| **$BUILD_TAG** |" VERSION.history > VERSION.history.tmp || true
DOCKERHUB_LINK_CONTENT="[![Docker Hub](https://img.shields.io/badge/docker-hub-blue?logo=docker&logoColor=white)](https://hub.docker.com/r/${DH_USER}/${REPO_PURE})" echo "$NEW_ROW" > VERSION.history
fi cat VERSION.history.tmp >> VERSION.history
rm VERSION.history.tmp
else
echo "$NEW_ROW" > VERSION.history
fi
HISTORY_CONTENT=$(cat VERSION.history)
process_template() { ENV_BLOCK_CONTENT=""
local template=$1; local output=$2 env_vars=$(grep '^ENV_' buildargs.env | grep -v '^#' | tr -d '\r' || true)
[ ! -f "$template" ] && return if [ -n "$env_vars" ]; then
cp "$template" "$output" ENV_BLOCK_CONTENT=" environment:\n"
while read -r line; do
[ -z "$line" ] && continue
key=$(echo "$line" | cut -d= -f1); val=$(echo "$line" | cut -d= -f2-); clean_key=${key#ENV_}
ENV_BLOCK_CONTENT="${ENV_BLOCK_CONTENT} - ${clean_key}=${val}\n"
done <<< "$env_vars"
fi
sed -i "s|__REPO_NAME__|$REPO_PURE|g" "$output" PORTS_BLOCK_CONTENT=""
sed -i "s|__FULL_URL__|$FULL_URL|g" "$output" port_vars=$(grep '^PORT_' buildargs.env | grep -v '^#' | tr -d '\r' || true)
sed -i "s|__BUILD_TAG__|$BUILD_TAG|g" "$output" if [ -n "$port_vars" ]; then
sed -i "s|__BASE_IMAGE__|$BASE_IMAGE|g" "$output" PORTS_BLOCK_CONTENT=" ports:\n"
sed -i "s|__ARM_STATUS__|$ARM_STATUS|g" "$output" while read -r line; do
sed -i "s|__CURRENT_DATE__|$CURRENT_TIME|g" "$output" [ -z "$line" ] && continue
val=$(echo "$line" | cut -d= -f2-); PORTS_BLOCK_CONTENT="${PORTS_BLOCK_CONTENT} - ${val}\n"
done <<< "$port_vars"
fi
awk -v r="$HISTORY_CONTENT" '{gsub(/__HISTORY_CONTENT__/, r)}1' "$output" > "$output.tmp" && mv "$output.tmp" "$output" VOL_BLOCK_CONTENT=""
awk -v r="$DOCKERHUB_LINK_CONTENT" '{gsub(/__DOCKERHUB_LINK__/, r)}1' "$output" > "$output.tmp" && mv "$output.tmp" "$output" vol_vars=$(grep '^VOL_' buildargs.env | grep -v '^#' | tr -d '\r' || true)
if [ -n "$vol_vars" ]; then
VOL_BLOCK_CONTENT=" volumes:\n"
while read -r line; do
[ -z "$line" ] && continue
val=$(echo "$line" | cut -d= -f2-); VOL_BLOCK_CONTENT="${VOL_BLOCK_CONTENT} - ${val}\n"
done <<< "$vol_vars"
fi
if grep -q "__DOCKER_RUN__" "$output" && [ -f "docker_run_block.txt" ]; then {
sed -e '/__DOCKER_RUN__/{r docker_run_block.txt' -e 'd;}' "$output" > "$output.tmp" && mv "$output.tmp" "$output" echo "docker run -d \\"
fi echo " --name $REPO_PURE \\"
echo " --restart unless-stopped \\"
if grep -q "__COMPOSE_BLOCK__" "$output" && [ -f "docker-compose.yml" ]; then all_params=$(grep -E '^(PORT_|ENV_|VOL_)' buildargs.env | grep -v '^#' | sed 's/\r$//' || true)
sed -e '/__COMPOSE_BLOCK__/{r docker-compose.yml' -e 'd;}' "$output" > "$output.tmp" && mv "$output.tmp" "$output" if [ -n "$all_params" ]; then
fi while read -r line; do
[ -z "$line" ] && continue
if [[ "$line" =~ ^PORT_ ]]; then
val=$(echo "$line" | cut -d= -f2-)
echo " -p ${val} \\"
elif [[ "$line" =~ ^ENV_ ]]; then
key=$(echo "$line" | cut -d= -f1); clean_key=${key#ENV_}; val=$(echo "$line" | cut -d= -f2-)
echo " -e ${clean_key}=${val} \\"
elif [[ "$line" =~ ^VOL_ ]]; then
val=$(echo "$line" | cut -d= -f2-)
echo " -v ${val} \\"
fi
done <<< "$all_params"
fi
echo " $FULL_URL:$BUILD_TAG"
} > docker_run_block.txt
if grep -q "__ENV_BLOCK__" "$output"; then DOCKERHUB_LINK_CONTENT=""
awk -v r="$(echo -e "$ENV_BLOCK_CONTENT")" '{gsub(/__ENV_BLOCK__/, r)}1' "$output" > "$output.tmp" && mv "$output.tmp" "$output" if [[ "${{ steps.prep.outputs.push_targets }}" == *"dockerhub"* ]]; then
fi DH_USER="${{ secrets.DOCKERHUB_USERNAME }}"
awk -v r="$(echo -e "$PORTS_BLOCK_CONTENT")" '{gsub(/__PORTS_BLOCK__/, r)}1' "$output" > "$output.tmp" && mv "$output.tmp" "$output" DOCKERHUB_LINK_CONTENT="[![Docker Hub](https://img.shields.io/badge/docker-hub-blue?logo=docker&logoColor=white)](https://hub.docker.com/r/${DH_USER}/${REPO_PURE})"
awk -v r="$(echo -e "$VOL_BLOCK_CONTENT")" '{gsub(/__VOL_BLOCK__/, r)}1' "$output" > "$output.tmp" && mv "$output.tmp" "$output" fi
if grep -q "__DESCRIPTION__" "$output"; then # Template-Verarbeitung via Python (verhindert awk-Abstürze bei Zeilenumbrüchen)
awk -v r="$(echo -e "${DESCRIPTION:-Keine Beschreibung.}")" '{gsub(/__DESCRIPTION__/, r)}1' "$output" > "$output.tmp" && mv "$output.tmp" "$output" process_template() {
fi local template=$1; local output=$2
} [ ! -f "$template" ] && return
cp "$template" "$output"
process_template "docker-compose.template" "docker-compose.yml" export REPO_PURE FULL_URL BUILD_TAG BASE_IMAGE ARM_STATUS CURRENT_TIME \
process_template "README.template" "README.md" HISTORY_CONTENT DOCKERHUB_LINK_CONTENT ENV_BLOCK_CONTENT \
PORTS_BLOCK_CONTENT VOL_BLOCK_CONTENT DESCRIPTION
echo "FINAL_MSG=$COMMIT_MSG" >> $GITHUB_ENV python3 -c '
echo "DESCRIPTION<<EOF" >> $GITHUB_ENV import os, sys
echo -e "$DESCRIPTION" >> $GITHUB_ENV
echo "EOF" >> $GITHUB_ENV
- name: Push README to Docker Hub output = sys.argv[1]
if: steps.check_changes.outputs.should_build == 'true' && contains(steps.prep.outputs.push_targets, 'dockerhub')
run: |
if ! command -v jq &> /dev/null; then
apt-get update && apt-get install -y jq || apk add --no-cache jq || true
fi
echo "🚀 Starting update README on Docker Hub..." with open(output, "r", encoding="utf-8") as f:
content = f.read()
TOKEN=$(curl -s -X POST "https://hub.docker.com/v2/users/login/" \ content = content.replace("__REPO_NAME__", os.environ.get("REPO_PURE", ""))
-H "Content-Type: application/json" \ content = content.replace("__FULL_URL__", os.environ.get("FULL_URL", ""))
-d "{\"username\": \"${{ secrets.DOCKERHUB_USERNAME }}\", \"password\": \"${{ secrets.DOCKERHUB_TOKEN }}\"}" | jq -r .token) content = content.replace("__BUILD_TAG__", os.environ.get("BUILD_TAG", ""))
content = content.replace("__BASE_IMAGE__", os.environ.get("BASE_IMAGE", ""))
content = content.replace("__ARM_STATUS__", os.environ.get("ARM_STATUS", ""))
content = content.replace("__CURRENT_DATE__", os.environ.get("CURRENT_TIME", ""))
content = content.replace("__HISTORY_CONTENT__", os.environ.get("HISTORY_CONTENT", ""))
content = content.replace("__DOCKERHUB_LINK__", os.environ.get("DOCKERHUB_LINK_CONTENT", ""))
content = content.replace("__ENV_BLOCK__", os.environ.get("ENV_BLOCK_CONTENT", "").replace("\\n", "\n"))
content = content.replace("__PORTS_BLOCK__", os.environ.get("PORTS_BLOCK_CONTENT", "").replace("\\n", "\n"))
content = content.replace("__VOL_BLOCK__", os.environ.get("VOL_BLOCK_CONTENT", "").replace("\\n", "\n"))
content = content.replace("__DESCRIPTION__", os.environ.get("DESCRIPTION", "Keine Beschreibung."))
if [ "$TOKEN" == "null" ] || [ -z "$TOKEN" ]; then if "__DOCKER_RUN__" in content and os.path.exists("docker_run_block.txt"):
echo "❌ Error: No login-token available. Check your credentials!" with open("docker_run_block.txt", "r", encoding="utf-8") as f:
exit 1 content = content.replace("__DOCKER_RUN__", f.read())
fi
REPO_PURE="${{ steps.prep.outputs.repo_pure }}" if "__COMPOSE_BLOCK__" in content and os.path.exists("docker-compose.yml"):
DH_USER="${{ secrets.DOCKERHUB_USERNAME }}" with open("docker-compose.yml", "r", encoding="utf-8") as f:
content = content.replace("__COMPOSE_BLOCK__", f.read())
SHORT_DESC=$(echo -e "${{ env.DESCRIPTION }}" | head -n 1 | cut -c 1-100) with open(output, "w", encoding="utf-8") as f:
[ -z "$SHORT_DESC" ] && SHORT_DESC="Docker Image for $REPO_PURE" f.write(content)
' "$output"
}
echo "📦 Processing README.md (${REPO_PURE})..." process_template "docker-compose.template" "docker-compose.yml"
process_template "README.template" "README.md"
jq -n \ echo "FINAL_MSG=$COMMIT_MSG" >> $GITHUB_ENV
--arg desc "$SHORT_DESC" \ echo "DESCRIPTION<<EOF" >> $GITHUB_ENV
--rawfile full_desc README.md \ echo -e "$DESCRIPTION" >> $GITHUB_ENV
'{description: $desc, full_description: $full_desc}' > payload.json echo "EOF" >> $GITHUB_ENV
echo "📤 Sending data to Docker Hub API..." - name: Push README to Docker Hub
RESPONSE=$(curl -s -w "\n%{http_code}" -X PATCH \ if: steps.check_changes.outputs.should_build == 'true' && contains(steps.prep.outputs.push_targets, 'dockerhub')
"https://hub.docker.com/v2/repositories/${DH_USER}/${REPO_PURE}/" \ run: |
-H "Authorization: JWT ${TOKEN}" \ if ! command -v jq &> /dev/null; then
-H "Content-Type: application/json" \ apt-get update && apt-get install -y jq || apk add --no-cache jq || true
-d @payload.json) fi
HTTP_STATUS=$(echo "$RESPONSE" | tail -n 1) echo "🚀 Starting update README on Docker Hub..."
BODY=$(echo "$RESPONSE" | head -n -1)
if [ "$HTTP_STATUS" -eq 200 ]; then TOKEN=$(curl -s -X POST "https://hub.docker.com/v2/users/login/" \
echo "✅ README update successfull (HTTP 200)." -H "Content-Type: application/json" \
else -d "{\"username\": \"${{ secrets.DOCKERHUB_USERNAME }}\", \"password\": \"${{ secrets.DOCKERHUB_TOKEN }}\"}" | jq -r .token)
echo "❌ Error on update! HTTP Status: $HTTP_STATUS"
echo "Answer from Docker Hub: $BODY"
exit 1
fi
- name: Commit, Tag and Push Changes if [ "$TOKEN" == "null" ] || [ -z "$TOKEN" ]; then
if: steps.check_changes.outputs.should_build == 'true' echo "❌ Error: No login-token available. Check your credentials!"
run: | exit 1
git config --local user.email "action@pi-farm.de" fi
git config --local user.name "Gitea Action"
git add VERSION.history README.md docker-compose.yml REPO_PURE="${{ steps.prep.outputs.repo_pure }}"
DH_USER="${{ secrets.DOCKERHUB_USERNAME }}"
git diff --quiet && git diff --staged --quiet || git commit -m "${{ env.FINAL_MSG }} [skip ci]" SHORT_DESC=$(echo -e "${{ env.DESCRIPTION }}" | head -n 1 | cut -c 1-100)
[ -z "$SHORT_DESC" ] && SHORT_DESC="Docker Image for $REPO_PURE"
TARGET_TAG="${{ steps.prep.outputs.docker_tag }}" echo "📦 Processing README.md (${REPO_PURE})..."
git tag -f "$TARGET_TAG"
if [[ "${{ gitea.ref }}" == refs/tags/* ]]; then jq -n \
echo "🏷️ Build aus Tag getriggert: $TARGET_TAG" --arg desc "$SHORT_DESC" \
git push -f origin "$TARGET_TAG" --rawfile full_desc README.md \
else '{description: $desc, full_description: $full_desc}' > payload.json
echo "🌿 Build aus Branch/Schedule getriggert: ${{ gitea.ref_name }}"
git push origin HEAD:${{ gitea.ref_name }} echo "📤 Sending data to Docker Hub API..."
git push -f origin "$TARGET_TAG" RESPONSE=$(curl -s -w "\n%{http_code}" -X PATCH \
fi "https://hub.docker.com/v2/repositories/${DH_USER}/${REPO_PURE}/" \
-H "Authorization: JWT ${TOKEN}" \
-H "Content-Type: application/json" \
-d @payload.json)
HTTP_STATUS=$(echo "$RESPONSE" | tail -n 1)
BODY=$(echo "$RESPONSE" | head -n -1)
if [ "$HTTP_STATUS" -eq 200 ]; then
echo "✅ README update successfull (HTTP 200)."
else
echo "❌ Error on update! HTTP Status: $HTTP_STATUS"
echo "Answer from Docker Hub: $BODY"
exit 1
fi
- name: Commit, Tag and Push Changes
if: steps.check_changes.outputs.should_build == 'true'
run: |
git config --local user.email "action@pi-farm.de"
git config --local user.name "Gitea Action"
git add VERSION.history README.md docker-compose.yml
git diff --quiet && git diff --staged --quiet || git commit -m "${{ env.FINAL_MSG }} [skip ci]"
TARGET_TAG="${{ steps.prep.outputs.docker_tag }}"
git tag -f "$TARGET_TAG"
if [[ "${{ gitea.ref }}" == refs/tags/* ]]; then
echo "🏷️ Build aus Tag getriggert: $TARGET_TAG"
git push -f origin "$TARGET_TAG"
else
echo "🌿 Build aus Branch/Schedule getriggert: ${{ gitea.ref_name }}"
git push origin HEAD:${{ gitea.ref_name }}
git push -f origin "$TARGET_TAG"
fi
- name: Cleanup Temporary Tags on Docker Hub - name: Cleanup Temporary Tags on Docker Hub
if: steps.check_changes.outputs.should_build == 'true' && contains(steps.prep.outputs.push_targets, 'dockerhub') if: steps.check_changes.outputs.should_build == 'true' && contains(steps.prep.outputs.push_targets, 'dockerhub')