381 lines
17 KiB
YAML
381 lines
17 KiB
YAML
on:
|
|
push:
|
|
branches:
|
|
- 'main'
|
|
tags:
|
|
- '*'
|
|
schedule:
|
|
- cron: '0 5 * * 0'
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
release-and-build:
|
|
runs-on: buildx-multiarch
|
|
if: "!contains(gitea.event.head_commit.message, '[skip ci]')"
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- name: Prepare Environment and Read Config
|
|
id: prep
|
|
run: |
|
|
export TZ=Europe/Berlin
|
|
|
|
# 1. Env laden
|
|
set -a
|
|
source <(grep -v '^#' buildargs.env | sed 's/\r$//')
|
|
set +a
|
|
|
|
# WICHTIG: PUSH Variable für nachfolgende Steps verfügbar machen
|
|
echo "push_targets=$PUSH" >> $GITHUB_OUTPUT
|
|
|
|
# 2. Hash der BUILD_ Variablen berechnen
|
|
ARGS_HASH=$(grep "^BUILD_" buildargs.env | sha256sum | cut -d' ' -f1)
|
|
echo "build_args_hash=$ARGS_HASH" >> $GITHUB_OUTPUT
|
|
|
|
# ... (Tags & Repo Logic) ...
|
|
echo "event_name=${{ gitea.event_name }}" >> $GITHUB_OUTPUT
|
|
|
|
if [[ "${{ gitea.ref }}" == refs/tags/* ]]; then
|
|
CLEAN_TAG=${{ gitea.ref_name }}
|
|
echo "docker_tag=${CLEAN_TAG#v}" >> $GITHUB_OUTPUT
|
|
else
|
|
echo "docker_tag=${BUILD_TAG:-latest}" >> $GITHUB_OUTPUT
|
|
fi
|
|
|
|
OWNER=$(echo "${{ gitea.repository }}" | cut -d'/' -f1 | tr '[:upper:]' '[:lower:]')
|
|
REPO_NAME=$(echo "${{ gitea.repository }}" | cut -d'/' -f2 | tr '[:upper:]' '[:lower:]')
|
|
|
|
echo "repo_pure=$REPO_NAME" >> $GITHUB_OUTPUT
|
|
echo "image_name=git.pi-farm.de/$OWNER/$REPO_NAME" >> $GITHUB_OUTPUT
|
|
echo "base_image=$BUILD_BASE_IMAGE" >> $GITHUB_OUTPUT
|
|
|
|
- name: Login to Gitea Registry
|
|
run: |
|
|
echo "${{ secrets.REGISTRY_PASSWORD }}" | docker login \
|
|
git.pi-farm.de -u ${{ secrets.REGISTRY_USER }} --password-stdin
|
|
|
|
- name: Check for Real Changes
|
|
id: check_changes
|
|
shell: bash
|
|
run: |
|
|
SHOULD_BUILD="true"
|
|
IMAGE="${{ steps.prep.outputs.image_name }}"
|
|
TAG="${{ steps.prep.outputs.docker_tag }}"
|
|
BASE="${{ steps.prep.outputs.base_image }}"
|
|
LOCAL_ARGS_HASH="${{ steps.prep.outputs.build_args_hash }}"
|
|
|
|
echo "🔍 Prüfe Remote-Registry..."
|
|
|
|
if [[ "${{ steps.prep.outputs.event_name }}" != "schedule" ]]; then
|
|
echo "🚀 Manueller Start: Build erzwungen."
|
|
else
|
|
REMOTE_BASE_SHA=$(docker buildx imagetools inspect "$BASE" --format '{{json .Manifest.Digest}}' 2>/dev/null | tr -d '"' || echo "")
|
|
|
|
if [ -z "$REMOTE_BASE_SHA" ]; then
|
|
echo "⚠️ Base-Image SHA nicht lesbar. Build wird gestartet."
|
|
else
|
|
RAW_INDEX=$(docker buildx imagetools inspect "$IMAGE:$TAG" --raw 2>/dev/null || echo "")
|
|
|
|
if [ -z "$RAW_INDEX" ]; then
|
|
echo "🆕 Image existiert noch nicht. Build erforderlich."
|
|
else
|
|
USED_BASE_SHA=$(echo "$RAW_INDEX" | grep "\"pi_farm.base_digest\":" | sed -E 's/.*: "([^"]+)".*/\1/' || echo "none")
|
|
USED_ARGS_HASH=$(echo "$RAW_INDEX" | grep "\"pi_farm.args_hash\":" | sed -E 's/.*: "([^"]+)".*/\1/' || echo "none")
|
|
|
|
if [ "$REMOTE_BASE_SHA" == "$USED_BASE_SHA" ] && [ "$LOCAL_ARGS_HASH" == "$USED_ARGS_HASH" ]; then
|
|
echo "😴 Alles identisch. Kein Build nötig."
|
|
SHOULD_BUILD="false"
|
|
else
|
|
echo "✅ Update nötig."
|
|
SHOULD_BUILD="true"
|
|
fi
|
|
fi
|
|
fi
|
|
fi
|
|
echo "should_build=$SHOULD_BUILD" >> $GITHUB_OUTPUT
|
|
|
|
- name: Set up QEMU
|
|
if: steps.check_changes.outputs.should_build == 'true'
|
|
uses: docker/setup-qemu-action@v3
|
|
|
|
- name: Set up Docker Buildx
|
|
if: steps.check_changes.outputs.should_build == 'true'
|
|
uses: docker/setup-buildx-action@v3
|
|
|
|
- name: Login to Docker Hub
|
|
# Login immer versuchen, falls Push aktiv ist
|
|
if: contains(steps.prep.outputs.push_targets, 'dockerhub')
|
|
uses: https://github.com/docker/login-action@v3
|
|
with:
|
|
username: ${{ secrets.DOCKERHUB_USERNAME }}
|
|
password: ${{ secrets.DOCKERHUB_TOKEN }}
|
|
|
|
- name: Build and Push Docker Image
|
|
if: steps.check_changes.outputs.should_build == 'true'
|
|
run: |
|
|
IMAGE_GITEA=${{ steps.prep.outputs.image_name }}
|
|
TAG=${{ steps.prep.outputs.docker_tag }}
|
|
ARGS_HASH=${{ steps.prep.outputs.build_args_hash }}
|
|
BASE=${{ steps.prep.outputs.base_image }}
|
|
REPO_PURE=${{ steps.prep.outputs.repo_pure }}
|
|
|
|
set -a
|
|
source <(grep -v '^#' buildargs.env | sed 's/\r$//')
|
|
set +a
|
|
|
|
DOCKER_ARGS=()
|
|
keys=$(grep -v '^#' buildargs.env | cut -d'=' -f1 | tr -d '\r')
|
|
for k in $keys; do
|
|
DOCKER_ARGS+=("--build-arg" "$k=${!k}")
|
|
done
|
|
|
|
BASE_SHA=$(docker buildx imagetools inspect $BASE --format '{{json .Manifest.Digest}}' 2>/dev/null | tr -d '"' || echo "unknown")
|
|
|
|
AMD_TAGS=("-t" "$IMAGE_GITEA:tmp-amd64")
|
|
ARM_TAGS=("-t" "$IMAGE_GITEA:tmp-arm64")
|
|
|
|
if [[ "$PUSH" == *"dockerhub"* ]]; then
|
|
DOCKERHUB_REPO="${{ secrets.DOCKERHUB_USERNAME }}/$REPO_PURE"
|
|
AMD_TAGS+=("-t" "$DOCKERHUB_REPO:tmp-amd64")
|
|
ARM_TAGS+=("-t" "$DOCKERHUB_REPO:tmp-arm64")
|
|
fi
|
|
|
|
docker buildx build "${DOCKER_ARGS[@]}" "${AMD_TAGS[@]}" \
|
|
--pull --platform linux/amd64 -f Dockerfile \
|
|
--label "pi_farm.base_digest=$BASE_SHA" --label "pi_farm.args_hash=$ARGS_HASH" --push .
|
|
|
|
docker buildx build "${DOCKER_ARGS[@]}" "${ARM_TAGS[@]}" \
|
|
--pull --platform linux/arm64 -f Dockerfile.aarch64 \
|
|
--label "pi_farm.base_digest=$BASE_SHA" --label "pi_farm.args_hash=$ARGS_HASH" --push .
|
|
|
|
# Gitea Manifest
|
|
docker buildx imagetools create \
|
|
--annotation "index:pi_farm.base_digest=$BASE_SHA" --annotation "index:pi_farm.args_hash=$ARGS_HASH" \
|
|
-t $IMAGE_GITEA:$TAG -t $IMAGE_GITEA:latest $IMAGE_GITEA:tmp-amd64 $IMAGE_GITEA:tmp-arm64
|
|
|
|
# Docker Hub Manifest
|
|
if [[ "$PUSH" == *"dockerhub"* ]]; then
|
|
DOCKERHUB_REPO="${{ secrets.DOCKERHUB_USERNAME }}/$REPO_PURE"
|
|
docker buildx imagetools create \
|
|
--annotation "index:pi_farm.base_digest=$BASE_SHA" --annotation "index:pi_farm.args_hash=$ARGS_HASH" \
|
|
-t $DOCKERHUB_REPO:$TAG -t $DOCKERHUB_REPO:latest $IMAGE_GITEA:tmp-amd64 $IMAGE_GITEA:tmp-arm64
|
|
fi
|
|
|
|
- name: Update Documentation and Compose
|
|
id: update_doc
|
|
if: steps.check_changes.outputs.should_build == 'true'
|
|
run: |
|
|
# --- 1. VARIABLEN VORBEREITEN ---
|
|
export TZ=Europe/Berlin
|
|
CURRENT_TIME=$(date '+%d.%m.%Y %H:%M')
|
|
BUILD_TAG=${{ steps.prep.outputs.docker_tag }}
|
|
FULL_URL=${{ steps.prep.outputs.image_name }}
|
|
REPO_PURE=${{ steps.prep.outputs.repo_pure }}
|
|
BASE_IMAGE=${{ steps.prep.outputs.base_image }}
|
|
|
|
# Umgebungsvariablen laden
|
|
set -a
|
|
source <(grep -v '^#' buildargs.env | sed 's/\r$//')
|
|
set +a
|
|
|
|
if [ -f "Dockerfile.aarch64" ]; then ARM_STATUS="✅ Aktiv (eigenes Dockerfile)"; else ARM_STATUS="❌ Nicht unterstützt"; fi
|
|
COMMIT_MSG=$(echo "${{ github.event.head_commit.message }}" | sed 's/\[skip ci\]//g' | xargs)
|
|
|
|
# --- 2. TEMPLATES LADEN ---
|
|
# || true verhindert Abbruch, falls Datei fehlt (sollte aber nicht passieren)
|
|
wget -q https://git.pi-farm.de/pi-farm/templates/raw/branch/main/README.template -O README.template || echo "Warnung: README.template nicht geladen"
|
|
wget -q https://git.pi-farm.de/pi-farm/templates/raw/branch/main/docker-compose.template -O docker-compose.template || echo "Warnung: docker-compose.template nicht geladen"
|
|
|
|
# --- 3. VERSION HISTORY UPDATE ---
|
|
NEW_ROW="| **$BUILD_TAG** | $CURRENT_TIME | $COMMIT_MSG ✅ |"
|
|
if [ -f "VERSION.history" ]; then
|
|
grep -v "| **$BUILD_TAG** |" VERSION.history > VERSION.history.tmp || true
|
|
echo "$NEW_ROW" > VERSION.history
|
|
cat VERSION.history.tmp >> VERSION.history
|
|
rm VERSION.history.tmp
|
|
else
|
|
echo "$NEW_ROW" > VERSION.history
|
|
fi
|
|
HISTORY_CONTENT=$(cat VERSION.history)
|
|
|
|
# --- 4. ENV / PORTS / VOL BLÖCKE GENERIEREN ---
|
|
# WICHTIG: "|| true" am Ende der greps verhindert exit code 1 bei leeren Ergebnissen
|
|
ENV_BLOCK_CONTENT=""
|
|
env_vars=$(grep '^ENV_' buildargs.env | grep -v '^#' | tr -d '\r' || true)
|
|
if [ ! -z "$env_vars" ]; then
|
|
ENV_BLOCK_CONTENT=" environment:\n"
|
|
for line in $env_vars; do
|
|
key=$(echo $line | cut -d= -f1); val=$(echo $line | cut -d= -f2-); clean_key=${key#ENV_}
|
|
ENV_BLOCK_CONTENT="${ENV_BLOCK_CONTENT} - ${clean_key}=${val}\n"
|
|
done
|
|
fi
|
|
|
|
PORTS_BLOCK_CONTENT=""
|
|
port_vars=$(grep '^PORT_' buildargs.env | grep -v '^#' | tr -d '\r' || true)
|
|
if [ ! -z "$port_vars" ]; then
|
|
PORTS_BLOCK_CONTENT=" ports:\n"
|
|
for line in $port_vars; do
|
|
val=$(echo $line | cut -d= -f2-); PORTS_BLOCK_CONTENT="${PORTS_BLOCK_CONTENT} - ${val}\n"
|
|
done
|
|
fi
|
|
|
|
VOL_BLOCK_CONTENT=""
|
|
vol_vars=$(grep '^VOL_' buildargs.env | grep -v '^#' | tr -d '\r' || true)
|
|
if [ ! -z "$vol_vars" ]; then
|
|
VOL_BLOCK_CONTENT=" volumes:\n"
|
|
for line in $vol_vars; do
|
|
val=$(echo $line | cut -d= -f2-); VOL_BLOCK_CONTENT="${VOL_BLOCK_CONTENT} - ${val}\n"
|
|
done
|
|
fi
|
|
|
|
# --- 5. DOCKER RUN BEFEHL GENERIEREN ---
|
|
RUN_CMD="docker run -d \\ \n --name $REPO_PURE \\ \n --restart unless-stopped"
|
|
|
|
# Hier || true im grep, damit die Pipe nicht platzt
|
|
while read -r line; do
|
|
if [[ "$line" =~ ^PORT_ ]]; then
|
|
val=$(echo $line | cut -d= -f2-)
|
|
RUN_CMD="${RUN_CMD} \\ \n -p ${val}"
|
|
elif [[ "$line" =~ ^ENV_ ]]; then
|
|
key=$(echo $line | cut -d= -f1); clean_key=${key#ENV_}; val=$(echo $line | cut -d= -f2-)
|
|
RUN_CMD="${RUN_CMD} \\ \n -e ${clean_key}=${val}"
|
|
elif [[ "$line" =~ ^VOL_ ]]; then
|
|
val=$(echo $line | cut -d= -f2-)
|
|
RUN_CMD="${RUN_CMD} \\ \n -v ${val}"
|
|
fi
|
|
done < <(grep -E '^(PORT_|ENV_|VOL_)' buildargs.env | grep -v '^#' | sed 's/\r$//' || true)
|
|
|
|
RUN_CMD="${RUN_CMD} \\ \n $FULL_URL:$BUILD_TAG"
|
|
DOCKER_RUN_FINAL=$(echo -e "$RUN_CMD")
|
|
|
|
# --- 6. DOCKER HUB LINK ---
|
|
DOCKERHUB_LINK_CONTENT=""
|
|
if [[ "$PUSH" == *"dockerhub"* ]]; then
|
|
DH_USER="${{ secrets.DOCKERHUB_USERNAME }}"
|
|
DOCKERHUB_LINK_CONTENT="[](https://hub.docker.com/r/${DH_USER}/${REPO_PURE})"
|
|
fi
|
|
|
|
# --- 7. TEMPLATE ENGINE ---
|
|
process_template() {
|
|
local template=$1; local output=$2
|
|
if [ -f "$template" ]; then
|
|
> "$output"
|
|
while IFS= read -r line || [ -n "$line" ]; do
|
|
line="${line//__REPO_NAME__/$REPO_PURE}"
|
|
line="${line//__FULL_URL__/$FULL_URL}"
|
|
line="${line//__BUILD_TAG__/$BUILD_TAG}"
|
|
line="${line//__BASE_IMAGE__/$BASE_IMAGE}"
|
|
line="${line//__ARM_STATUS__/$ARM_STATUS}"
|
|
line="${line//__CURRENT_DATE__/$CURRENT_TIME}"
|
|
line="${line//__HISTORY_CONTENT__/$HISTORY_CONTENT}"
|
|
line="${line//__DOCKER_RUN__/$DOCKER_RUN_FINAL}"
|
|
line="${line//__DOCKERHUB_LINK__/$DOCKERHUB_LINK_CONTENT}"
|
|
# Description
|
|
if [[ "$line" == *"__DESCRIPTION__"* ]]; then
|
|
echo -e "${DESCRIPTION:-Keine Beschreibung.}" >> "$output"
|
|
# Environment
|
|
elif [[ "$line" == *"__ENV_BLOCK__"* ]]; then
|
|
[ -n "$ENV_BLOCK_CONTENT" ] && echo -e "${ENV_BLOCK_CONTENT}" >> "$output"
|
|
# Ports
|
|
elif [[ "$line" == *"__PORTS_BLOCK__"* ]]; then
|
|
[ -n "$PORTS_BLOCK_CONTENT" ] && echo -e "${PORTS_BLOCK_CONTENT}" >> "$output"
|
|
# Volumes
|
|
elif [[ "$line" == *"__VOL_BLOCK__"* ]]; then
|
|
[ -n "$VOL_BLOCK_CONTENT" ] && echo -e "${VOL_BLOCK_CONTENT}" >> "$output"
|
|
# Compose
|
|
elif [[ "$line" == *"__COMPOSE_BLOCK__"* ]]; then
|
|
[ -f "docker-compose.yml" ] && cat docker-compose.yml >> "$output"
|
|
else
|
|
echo "$line" >> "$output"
|
|
fi
|
|
done < "$template"
|
|
fi
|
|
}
|
|
|
|
process_template "docker-compose.template" "docker-compose.yml"
|
|
process_template "README.template" "README.md"
|
|
|
|
# --- 8. EXPORTS ---
|
|
echo "FINAL_MSG=$COMMIT_MSG" >> $GITHUB_ENV
|
|
echo "DESCRIPTION<<EOF" >> $GITHUB_ENV
|
|
echo -e "$DESCRIPTION" >> $GITHUB_ENV
|
|
echo "EOF" >> $GITHUB_ENV
|
|
|
|
- name: Push README to Docker Hub
|
|
# WICHTIG: Verwende jetzt outputs.push_targets statt env.PUSH
|
|
if: steps.check_changes.outputs.should_build == 'true' && contains(steps.prep.outputs.push_targets, 'dockerhub')
|
|
run: |
|
|
TOKEN=$(curl -s -X POST "https://hub.docker.com/v2/users/login/" \
|
|
-H "Content-Type: application/json" \
|
|
-d "{\"username\": \"${{ secrets.DOCKERHUB_USERNAME }}\", \"password\": \"${{ secrets.DOCKERHUB_TOKEN }}\"}" | jq -r .token)
|
|
|
|
if [ "$TOKEN" != "null" ]; then
|
|
REPO_PURE=${{ steps.prep.outputs.repo_pure }}
|
|
DH_USER="${{ secrets.DOCKERHUB_USERNAME }}"
|
|
SHORT_DESC=$(echo -e "${{ env.DESCRIPTION }}" | head -n 1 | cut -c 1-100)
|
|
|
|
curl -s -X PATCH "https://hub.docker.com/v2/repositories/${DH_USER}/${REPO_PURE}/" \
|
|
-H "Authorization: JWT ${TOKEN}" \
|
|
-H "Content-Type: application/json" \
|
|
-d "{ \"description\": \"${SHORT_DESC}\", \"full_description\": $(jq -Rs . < README.md) }"
|
|
echo "✅ Docker Hub erfolgreich aktualisiert."
|
|
fi
|
|
|
|
- name: Commit, Tag and Push Changes
|
|
if: steps.check_changes.outputs.should_build == 'true'
|
|
run: |
|
|
git config --local user.email "action@pi-farm.de"
|
|
git config --local user.name "Gitea Action"
|
|
git add VERSION.history README.md docker-compose.yml
|
|
git diff --quiet && git diff --staged --quiet || git commit -m "${{ env.FINAL_MSG }} [skip ci]"
|
|
git tag -f "v${{ steps.prep.outputs.docker_tag }}"
|
|
git push origin main
|
|
git push -f origin "v${{ steps.prep.outputs.docker_tag }}"
|
|
|
|
- name: Cleanup Temporary Tags on Docker Hub
|
|
# WICHTIG: Verwende jetzt outputs.push_targets
|
|
if: steps.check_changes.outputs.should_build == 'true' && contains(steps.prep.outputs.push_targets, 'dockerhub')
|
|
run: |
|
|
TOKEN=$(curl -s -X POST "https://hub.docker.com/v2/users/login/" \
|
|
-H "Content-Type: application/json" \
|
|
-d "{\"username\": \"${{ secrets.DOCKERHUB_USERNAME }}\", \"password\": \"${{ secrets.DOCKERHUB_TOKEN }}\"}" | jq -r .token)
|
|
|
|
if [ "$TOKEN" != "null" ]; then
|
|
REPO_PURE=${{ steps.prep.outputs.repo_pure }}
|
|
DH_USER="${{ secrets.DOCKERHUB_USERNAME }}"
|
|
|
|
for t in tmp-amd64 tmp-arm64; do
|
|
curl -s -X DELETE "https://hub.docker.com/v2/repositories/${DH_USER}/${REPO_PURE}/tags/$t/" \
|
|
-H "Authorization: JWT ${TOKEN}"
|
|
echo "Tag $t bereinigt."
|
|
done
|
|
fi
|
|
|
|
- name: Cleanup Temporary Registry Tags (Gitea)
|
|
if: steps.check_changes.outputs.should_build == 'true'
|
|
run: |
|
|
# (Dein bestehender Gitea Cleanup Code...)
|
|
# Ich habe ihn hier gekürzt, da er in deinem Original schon korrekt war.
|
|
# Kopiere einfach deinen "Cleanup Temporary Registry Tags" Block von oben hier hin.
|
|
TOKEN="${{ secrets.GIT_TOKEN }}"
|
|
ORG_NAME=$(echo "${{ gitea.repository }}" | cut -d'/' -f1)
|
|
REPO_NAME=$(echo "${{ gitea.repository }}" | cut -d'/' -f2)
|
|
|
|
for t in tmp-amd64 tmp-arm64; do
|
|
# Versuch 1
|
|
curl -s -X DELETE "https://git.pi-farm.de/api/v1/packages/$ORG_NAME/container/$REPO_NAME/$t" -H "Authorization: token $TOKEN"
|
|
# Versuch 2 (lowercase)
|
|
curl -s -X DELETE "https://git.pi-farm.de/api/v1/packages/${ORG_NAME,,}/container/${REPO_NAME,,}/$t" -H "Authorization: token $TOKEN"
|
|
done
|
|
|
|
- name: Cleanup Docker Artifacts
|
|
if: always()
|
|
run: docker image prune -f
|
|
|
|
- name: Workflow Summary
|
|
if: always()
|
|
run: |
|
|
echo "Check completed. Build was: ${{ steps.check_changes.outputs.should_build }}" |