changed workflow for testing
This commit is contained in:
@@ -8,7 +8,6 @@ on:
|
|||||||
- 'v*'
|
- 'v*'
|
||||||
workflow_dispatch:
|
workflow_dispatch:
|
||||||
|
|
||||||
|
|
||||||
env:
|
env:
|
||||||
REGISTRY_HOST: git.pi-farm.de
|
REGISTRY_HOST: git.pi-farm.de
|
||||||
IMAGE_BASE: ${{ gitea.repository }}
|
IMAGE_BASE: ${{ gitea.repository }}
|
||||||
@@ -19,28 +18,17 @@ jobs:
|
|||||||
runs-on: buildx-multiarch
|
runs-on: buildx-multiarch
|
||||||
|
|
||||||
steps:
|
steps:
|
||||||
|
|
||||||
- name: Checkout repository
|
- name: Checkout repository
|
||||||
uses: http://git.pi-farm.de/pi-farm/checkout@v4
|
uses: http://git.pi-farm.de/pi-farm/checkout@v4
|
||||||
with:
|
with:
|
||||||
fetch-depth: 0
|
fetch-depth: 0
|
||||||
fetch-tags: true
|
fetch-tags: true
|
||||||
|
|
||||||
- name: Dump context
|
|
||||||
run: env | sort
|
|
||||||
|
|
||||||
- name: Show ref info
|
|
||||||
run: |
|
|
||||||
echo "REF=$GITHUB_REF"
|
|
||||||
echo "REF_TYPE=$GITHUB_REF_TYPE"
|
|
||||||
echo "REF_NAME=$GITHUB_REF_NAME"
|
|
||||||
|
|
||||||
- name: Dynamic Template Fix
|
- name: Dynamic Template Fix
|
||||||
id: template_fix
|
id: template_fix
|
||||||
run: |
|
run: |
|
||||||
if grep -q "{{.RepoName}}" README.md 2>/dev/null; then
|
if grep -q "{{.RepoName}}" README.md 2>/dev/null; then
|
||||||
echo "Ersetze Platzhalter in README, docker-compose und LICENSE..."
|
echo "Ersetze Platzhalter..."
|
||||||
|
|
||||||
REPO_NAME=$(echo "${{ gitea.repository }}" | cut -d'/' -f2)
|
REPO_NAME=$(echo "${{ gitea.repository }}" | cut -d'/' -f2)
|
||||||
OWNER_NAME=$(echo "${{ gitea.repository }}" | cut -d'/' -f1)
|
OWNER_NAME=$(echo "${{ gitea.repository }}" | cut -d'/' -f1)
|
||||||
BRANCH_NAME="${{ gitea.ref_name }}"
|
BRANCH_NAME="${{ gitea.ref_name }}"
|
||||||
@@ -52,198 +40,122 @@ jobs:
|
|||||||
git config user.name "Gitea Bot"
|
git config user.name "Gitea Bot"
|
||||||
git config user.email "bot@gitea.local"
|
git config user.email "bot@gitea.local"
|
||||||
git add README.md docker-compose.yml LICENSE
|
git add README.md docker-compose.yml LICENSE
|
||||||
|
if ! git diff --staged --quiet; then
|
||||||
if git diff --staged --quiet; then
|
|
||||||
echo "Keine Änderungen zum Committen."
|
|
||||||
else
|
|
||||||
git commit -m "docs: fix template placeholders [skip ci]"
|
git commit -m "docs: fix template placeholders [skip ci]"
|
||||||
git push origin HEAD:${{ gitea.ref_name }}
|
git push origin HEAD:${{ gitea.ref_name }}
|
||||||
fi
|
fi
|
||||||
else
|
|
||||||
echo "Platzhalter bereits ersetzt."
|
|
||||||
fi
|
fi
|
||||||
|
|
||||||
- name: Detect version
|
- name: Detect version and Prepare Files
|
||||||
id: detect_version
|
id: prepare
|
||||||
run: |
|
run: |
|
||||||
echo "== Detect version =="
|
# Versionierung
|
||||||
# Prüfen, ob wir auf einem Tag oder main-Branch sind
|
|
||||||
if [ "$GITHUB_REF_TYPE" = "tag" ]; then
|
if [ "$GITHUB_REF_TYPE" = "tag" ]; then
|
||||||
VERSION="$GITHUB_REF_NAME"
|
VERSION="$GITHUB_REF_NAME"
|
||||||
CLEAN_VERSION="${VERSION#v}" # entfernt führendes 'v'
|
|
||||||
IS_TAG=true
|
IS_TAG=true
|
||||||
else
|
else
|
||||||
VERSION="main"
|
VERSION="main"
|
||||||
CLEAN_VERSION="main"
|
|
||||||
IS_TAG=false
|
IS_TAG=false
|
||||||
fi
|
fi
|
||||||
|
|
||||||
echo "VERSION=$VERSION"
|
# Dockerfile Auswahl
|
||||||
echo "CLEAN_VERSION=$CLEAN_VERSION"
|
if [ ! -s "Dockerfile" ]; then
|
||||||
echo "IS_TAG=$IS_TAG"
|
|
||||||
|
|
||||||
# Env für alle weiteren Steps exportieren
|
|
||||||
echo "VERSION=$VERSION" >> $GITHUB_ENV
|
|
||||||
echo "CLEAN_VERSION=$CLEAN_VERSION" >> $GITHUB_ENV
|
|
||||||
echo "IS_TAG=$IS_TAG" >> $GITHUB_ENV
|
|
||||||
|
|
||||||
|
|
||||||
- name: Set dynamic variables and check Dockerfiles
|
|
||||||
id: check_files
|
|
||||||
run: |
|
|
||||||
if [ -s "Dockerfile" ]; then
|
|
||||||
echo "Dockerfile gefunden und nicht leer. Build wird vorbereitet."
|
|
||||||
echo "should_build=true" >> $GITEA_OUTPUT
|
|
||||||
else
|
|
||||||
echo "Dockerfile ist leer oder fehlt. Build wird übersprungen."
|
|
||||||
echo "should_build=false" >> $GITEA_OUTPUT
|
echo "should_build=false" >> $GITEA_OUTPUT
|
||||||
exit 0
|
exit 0
|
||||||
fi
|
fi
|
||||||
|
echo "should_build=true" >> $GITEA_OUTPUT
|
||||||
|
|
||||||
AMD64_FILE="Dockerfile"
|
# Multiarch Files
|
||||||
if [ -s "Dockerfile.aarch64" ]; then
|
echo "AMD64_DOCKERFILE=Dockerfile" >> $GITEA_ENV
|
||||||
echo "Spezielles Dockerfile.aarch64 erkannt."
|
echo "ARM64_DOCKERFILE=$([ -s Dockerfile.aarch64 ] && echo Dockerfile.aarch64 || echo Dockerfile)" >> $GITEA_ENV
|
||||||
ARM64_FILE="Dockerfile.aarch64"
|
|
||||||
else
|
# Global Env
|
||||||
ARM64_FILE="Dockerfile"
|
echo "VERSION=$VERSION" >> $GITEA_ENV
|
||||||
fi
|
echo "IS_TAG=$IS_TAG" >> $GITEA_ENV
|
||||||
|
echo "IMAGE_NAME=${REGISTRY_HOST}/${IMAGE_BASE}" >> $GITEA_ENV
|
||||||
echo "IMAGE_NAME=${{ env.REGISTRY_HOST }}/${{ env.IMAGE_BASE }}" >> $GITEA_ENV
|
echo "CACHE_IMAGE_NAME=${REGISTRY_HOST}/${IMAGE_BASE}-cache" >> $GITEA_ENV
|
||||||
echo "CACHE_IMAGE_NAME=${{ env.REGISTRY_HOST }}/${{ env.IMAGE_BASE }}-cache" >> $GITEA_ENV
|
|
||||||
echo "AMD64_DOCKERFILE=$AMD64_FILE" >> $GITEA_ENV
|
|
||||||
echo "ARM64_DOCKERFILE=$ARM64_FILE" >> $GITEA_ENV
|
|
||||||
echo "BUILD_DATE=$(date -u +%Y-%m-%dT%H:%M:%SZ)" >> $GITEA_ENV
|
echo "BUILD_DATE=$(date -u +%Y-%m-%dT%H:%M:%SZ)" >> $GITEA_ENV
|
||||||
|
|
||||||
- name: Login to registry
|
- name: Login to registry
|
||||||
if: steps.check_files.outputs.should_build == 'true'
|
if: steps.prepare.outputs.should_build == 'true'
|
||||||
run: |
|
run: |
|
||||||
echo "${{ secrets.REGISTRY_PASSWORD }}" | docker login \
|
echo "${{ secrets.REGISTRY_PASSWORD }}" | docker login \
|
||||||
${{ env.REGISTRY_HOST }} -u ${{ secrets.REGISTRY_USER }} --password-stdin
|
${{ env.REGISTRY_HOST }} -u ${{ secrets.REGISTRY_USER }} --password-stdin
|
||||||
|
|
||||||
- name: Setup buildx
|
- name: Setup buildx
|
||||||
if: steps.check_files.outputs.should_build == 'true'
|
if: steps.prepare.outputs.should_build == 'true'
|
||||||
run: |
|
run: |
|
||||||
docker buildx rm multiarch || true
|
docker buildx rm multiarch || true
|
||||||
docker buildx create --name multiarch --driver docker-container --use
|
docker buildx create --name multiarch --driver docker-container --use
|
||||||
docker buildx inspect --bootstrap
|
docker buildx inspect --bootstrap
|
||||||
|
|
||||||
- name: Compute Docker tags
|
- name: Build & push multiarch
|
||||||
|
if: steps.prepare.outputs.should_build == 'true'
|
||||||
|
shell: bash
|
||||||
run: |
|
run: |
|
||||||
|
echo "== Universeller Multiarch Build Start =="
|
||||||
|
|
||||||
|
# 1. Dynamisches Laden aller Variablen aus versions.env als Build-Args
|
||||||
|
BUILD_ARGS=""
|
||||||
|
while IFS='=' read -r key value || [ -n "$key" ]; do
|
||||||
|
[[ "$key" =~ ^#.*$ || -z "$key" ]] && continue
|
||||||
|
clean_value=$(echo "$value" | xargs)
|
||||||
|
# Exportiere für Script-Nutzung UND baue Build-Args String
|
||||||
|
export "$key=$clean_value"
|
||||||
|
BUILD_ARGS="$BUILD_ARGS --build-arg $key=$clean_value"
|
||||||
|
done < versions.env
|
||||||
|
|
||||||
|
# 2. Zusätzliche System-Args hinzufügen
|
||||||
|
BUILD_ARGS="$BUILD_ARGS --build-arg VERSION=$VERSION --build-arg BUILD_DATE=$BUILD_DATE"
|
||||||
|
|
||||||
|
# 3. Tags berechnen
|
||||||
if [[ "$IS_TAG" == "true" ]]; then
|
if [[ "$IS_TAG" == "true" ]]; then
|
||||||
DOCKER_TAGS="${IMAGE_NAME}:${VERSION},${IMAGE_NAME}:latest"
|
DOCKER_TAGS="${IMAGE_NAME}:${VERSION} ${IMAGE_NAME}:latest"
|
||||||
else
|
else
|
||||||
DOCKER_TAGS="${IMAGE_NAME}:main"
|
DOCKER_TAGS="${IMAGE_NAME}:main"
|
||||||
fi
|
fi
|
||||||
|
|
||||||
echo "DOCKER_TAGS=$DOCKER_TAGS" >> $GITEA_ENV
|
# 4. Builds ausführen
|
||||||
|
CACHE_REF="${CACHE_IMAGE_NAME}"
|
||||||
|
|
||||||
- name: Load versions.env safely
|
echo "Starte AMD64 Build..."
|
||||||
shell: bash
|
|
||||||
run: |
|
|
||||||
echo "== Load versions.env =="
|
|
||||||
|
|
||||||
# Funktion zum sauberen Parsen
|
|
||||||
parse_env() {
|
|
||||||
grep -v '^#' versions.env | grep -v '^$' | while IFS='=' read -r key value; do
|
|
||||||
# Entferne mögliche Whitespaces
|
|
||||||
key=$(echo $key | xargs)
|
|
||||||
value=$(echo $value | xargs)
|
|
||||||
export $key="$value"
|
|
||||||
done
|
|
||||||
}
|
|
||||||
|
|
||||||
parse_env
|
|
||||||
|
|
||||||
# Fixen von Workflow-Variablen
|
|
||||||
CLEAN_VERSION="${VERSION#v}"
|
|
||||||
BUILD_DATE=$(date -u +%Y-%m-%dT%H:%M:%SZ)
|
|
||||||
|
|
||||||
# Write to Gitea env
|
|
||||||
echo "BASE_IMAGE=$BASE_IMAGE" >> $GITEA_ENV
|
|
||||||
echo "APP_VERSION=$APP_VERSION" >> $GITEA_ENV
|
|
||||||
echo "TARGET_PLATFORMS=$TARGET_PLATFORMS" >> $GITEA_ENV
|
|
||||||
echo "IMAGE_NAME=${REGISTRY_HOST}/$IMAGE_BASE" >> $GITEA_ENV
|
|
||||||
echo "CACHE_IMAGE_NAME=${REGISTRY_HOST}/$IMAGE_BASE-cache" >> $GITEA_ENV
|
|
||||||
echo "VERSION=$VERSION" >> $GITEA_ENV
|
|
||||||
echo "CLEAN_VERSION=$CLEAN_VERSION" >> $GITEA_ENV
|
|
||||||
echo "BUILD_DATE=$BUILD_DATE" >> $GITEA_ENV
|
|
||||||
|
|
||||||
|
|
||||||
- name: Build & push multiarch
|
|
||||||
if: steps.check_files.outputs.should_build == 'true'
|
|
||||||
shell: bash
|
|
||||||
run: |
|
|
||||||
echo "== Multiarch Build Start =="
|
|
||||||
|
|
||||||
# versions.env direkt hier laden
|
|
||||||
BASE_IMAGE=$(grep ^BASE_IMAGE= versions.env | cut -d '=' -f2-)
|
|
||||||
APP_VERSION=$(grep ^APP_VERSION= versions.env | cut -d '=' -f2-)
|
|
||||||
|
|
||||||
echo "BASE_IMAGE=$BASE_IMAGE"
|
|
||||||
echo "APP_VERSION=$APP_VERSION"
|
|
||||||
|
|
||||||
if [ -z "$BASE_IMAGE" ]; then
|
|
||||||
echo "BASE_IMAGE is empty → abort"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
# Cache-Definitionen für bessere Übersicht
|
|
||||||
CACHE_REF="${REGISTRY_HOST}/${IMAGE_BASE}-cache"
|
|
||||||
|
|
||||||
# amd64 build mit Registry-Cache (mode=min für weniger Fragmente)
|
|
||||||
docker buildx build \
|
docker buildx build \
|
||||||
--platform linux/amd64 \
|
--platform linux/amd64 \
|
||||||
-f ${AMD64_DOCKERFILE} \
|
-f ${AMD64_DOCKERFILE} \
|
||||||
--build-arg BASE_IMAGE="$BASE_IMAGE" \
|
${BUILD_ARGS} \
|
||||||
--build-arg APP_VERSION="$APP_VERSION" \
|
|
||||||
--label org.opencontainers.image.version="$APP_VERSION" \
|
|
||||||
--label org.opencontainers.image.created="$BUILD_DATE" \
|
|
||||||
--cache-from type=registry,ref=${CACHE_REF}:amd64 \
|
--cache-from type=registry,ref=${CACHE_REF}:amd64 \
|
||||||
--cache-to type=registry,ref=${CACHE_REF}:amd64,mode=min \
|
--cache-to type=registry,ref=${CACHE_REF}:amd64,mode=min \
|
||||||
-t ${CACHE_IMAGE_NAME}:${VERSION}-amd64 \
|
-t ${CACHE_IMAGE_NAME}:${VERSION}-amd64 \
|
||||||
--push .
|
--push .
|
||||||
|
|
||||||
# arm64 build mit Registry-Cache (mode=min für weniger Fragmente)
|
echo "Starte ARM64 Build..."
|
||||||
#docker buildx build \
|
docker buildx build \
|
||||||
# --platform linux/arm64 \
|
--platform linux/arm64 \
|
||||||
# -f ${ARM64_DOCKERFILE} \
|
-f ${ARM64_DOCKERFILE} \
|
||||||
# --build-arg BASE_IMAGE="$BASE_IMAGE" \
|
${BUILD_ARGS} \
|
||||||
# --build-arg APP_VERSION="$APP_VERSION" \
|
--cache-from type=registry,ref=${CACHE_REF}:arm64 \
|
||||||
# --label org.opencontainers.image.version="$APP_VERSION" \
|
--cache-to type=registry,ref=${CACHE_REF}:arm64,mode=min \
|
||||||
# --label org.opencontainers.image.created="$BUILD_DATE" \
|
-t ${CACHE_IMAGE_NAME}:${VERSION}-arm64 \
|
||||||
# --cache-from type=registry,ref=${CACHE_REF}:arm64 \
|
--push .
|
||||||
# --cache-to type=registry,ref=${CACHE_REF}:arm64,mode=min \
|
|
||||||
# -t ${CACHE_IMAGE_NAME}:${VERSION}-arm64 \
|
|
||||||
# --push .
|
|
||||||
|
|
||||||
# Manifest-Erstellung (verbindet die Architekturen zu den finalen Tags)
|
# 5. Manifest Erstellung
|
||||||
for TAG in $(echo $DOCKER_TAGS | tr ',' ' '); do
|
for TAG in $DOCKER_TAGS; do
|
||||||
echo "Creating manifest for tag: $TAG"
|
echo "Creating manifest for: $TAG"
|
||||||
docker buildx imagetools create -t $TAG \
|
docker buildx imagetools create -t $TAG \
|
||||||
${CACHE_IMAGE_NAME}:${VERSION}-amd64 \
|
${CACHE_IMAGE_NAME}:${VERSION}-amd64 \
|
||||||
${CACHE_IMAGE_NAME}:${VERSION}-arm64
|
${CACHE_IMAGE_NAME}:${VERSION}-arm64
|
||||||
done
|
done
|
||||||
|
|
||||||
echo "== Multiarch Build Complete =="
|
|
||||||
|
|
||||||
- name: Install syft
|
|
||||||
run: |
|
|
||||||
curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh \
|
|
||||||
| sh -s -- -b /usr/local/bin
|
|
||||||
|
|
||||||
- name: Generate SBOM
|
- name: Generate SBOM
|
||||||
|
if: steps.prepare.outputs.should_build == 'true'
|
||||||
run: |
|
run: |
|
||||||
# Benutze die Build-Variable DOCKER_TAGS oder IMAGE_NAME + VERSION
|
curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b /usr/local/bin
|
||||||
if [[ "$IS_TAG" == "true" ]]; then
|
TARGET_IMAGE="${IMAGE_NAME}:${VERSION}"
|
||||||
TARGET_IMAGE="${IMAGE_NAME}:${VERSION}"
|
|
||||||
else
|
|
||||||
TARGET_IMAGE="${IMAGE_NAME}:main"
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "Generating SBOM for $TARGET_IMAGE"
|
echo "Generating SBOM for $TARGET_IMAGE"
|
||||||
syft $TARGET_IMAGE -o spdx-json > sbom.spdx.json || true
|
syft $TARGET_IMAGE -o spdx-json > sbom.spdx.json || true
|
||||||
|
|
||||||
- name: Upload SBOM
|
- name: Upload SBOM
|
||||||
|
if: steps.prepare.outputs.should_build == 'true'
|
||||||
uses: actions/upload-artifact@v3
|
uses: actions/upload-artifact@v3
|
||||||
with:
|
with:
|
||||||
name: sbom
|
name: sbom
|
||||||
|
|||||||
Reference in New Issue
Block a user