Compare commits
3 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| 4caea581f0 | |||
| 5e716e2635 | |||
| 24db920e7d |
@@ -187,7 +187,10 @@ jobs:
|
|||||||
exit 1
|
exit 1
|
||||||
fi
|
fi
|
||||||
|
|
||||||
# amd64 build
|
# Cache-Definitionen für bessere Übersicht
|
||||||
|
CACHE_REF="${REGISTRY_HOST}/${IMAGE_BASE}-cache"
|
||||||
|
|
||||||
|
# amd64 build mit Registry-Cache (mode=min für weniger Fragmente)
|
||||||
docker buildx build \
|
docker buildx build \
|
||||||
--platform linux/amd64 \
|
--platform linux/amd64 \
|
||||||
-f ${AMD64_DOCKERFILE} \
|
-f ${AMD64_DOCKERFILE} \
|
||||||
@@ -195,10 +198,12 @@ jobs:
|
|||||||
--build-arg APP_VERSION="$APP_VERSION" \
|
--build-arg APP_VERSION="$APP_VERSION" \
|
||||||
--label org.opencontainers.image.version="$APP_VERSION" \
|
--label org.opencontainers.image.version="$APP_VERSION" \
|
||||||
--label org.opencontainers.image.created="$BUILD_DATE" \
|
--label org.opencontainers.image.created="$BUILD_DATE" \
|
||||||
|
--cache-from type=registry,ref=${CACHE_REF}:amd64 \
|
||||||
|
--cache-to type=registry,ref=${CACHE_REF}:amd64,mode=min \
|
||||||
-t ${CACHE_IMAGE_NAME}:${VERSION}-amd64 \
|
-t ${CACHE_IMAGE_NAME}:${VERSION}-amd64 \
|
||||||
--push .
|
--push .
|
||||||
|
|
||||||
# arm64 build
|
# arm64 build mit Registry-Cache (mode=min für weniger Fragmente)
|
||||||
docker buildx build \
|
docker buildx build \
|
||||||
--platform linux/arm64 \
|
--platform linux/arm64 \
|
||||||
-f ${ARM64_DOCKERFILE} \
|
-f ${ARM64_DOCKERFILE} \
|
||||||
@@ -206,10 +211,14 @@ jobs:
|
|||||||
--build-arg APP_VERSION="$APP_VERSION" \
|
--build-arg APP_VERSION="$APP_VERSION" \
|
||||||
--label org.opencontainers.image.version="$APP_VERSION" \
|
--label org.opencontainers.image.version="$APP_VERSION" \
|
||||||
--label org.opencontainers.image.created="$BUILD_DATE" \
|
--label org.opencontainers.image.created="$BUILD_DATE" \
|
||||||
|
--cache-from type=registry,ref=${CACHE_REF}:arm64 \
|
||||||
|
--cache-to type=registry,ref=${CACHE_REF}:arm64,mode=min \
|
||||||
-t ${CACHE_IMAGE_NAME}:${VERSION}-arm64 \
|
-t ${CACHE_IMAGE_NAME}:${VERSION}-arm64 \
|
||||||
--push .
|
--push .
|
||||||
|
|
||||||
|
# Manifest-Erstellung (verbindet die Architekturen zu den finalen Tags)
|
||||||
for TAG in $(echo $DOCKER_TAGS | tr ',' ' '); do
|
for TAG in $(echo $DOCKER_TAGS | tr ',' ' '); do
|
||||||
|
echo "Creating manifest for tag: $TAG"
|
||||||
docker buildx imagetools create -t $TAG \
|
docker buildx imagetools create -t $TAG \
|
||||||
${CACHE_IMAGE_NAME}:${VERSION}-amd64 \
|
${CACHE_IMAGE_NAME}:${VERSION}-amd64 \
|
||||||
${CACHE_IMAGE_NAME}:${VERSION}-arm64
|
${CACHE_IMAGE_NAME}:${VERSION}-arm64
|
||||||
@@ -240,32 +249,4 @@ jobs:
|
|||||||
uses: actions/upload-artifact@v3
|
uses: actions/upload-artifact@v3
|
||||||
with:
|
with:
|
||||||
name: sbom
|
name: sbom
|
||||||
path: sbom.spdx.json
|
path: sbom.spdx.json
|
||||||
|
|
||||||
- name: Install cosign
|
|
||||||
shell: bash
|
|
||||||
run: |
|
|
||||||
curl -sSfL https://github.com/sigstore/cosign/releases/latest/download/cosign-linux-amd64 \
|
|
||||||
-o cosign
|
|
||||||
chmod +x cosign
|
|
||||||
mv cosign /usr/local/bin/
|
|
||||||
cosign version
|
|
||||||
|
|
||||||
- name: Sign image
|
|
||||||
shell: bash
|
|
||||||
env:
|
|
||||||
COSIGN_PRIVATE_KEY: ${{ secrets.COSIGN_PRIVATE_KEY }}
|
|
||||||
COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }}
|
|
||||||
# Diese Variable ist der wichtigste Hebel:
|
|
||||||
COSIGN_SKIP_REKOR_UPLOAD: "true"
|
|
||||||
COSIGN_REPOSITORY: ${{ env.REGISTRY_HOST }}/${{ env.IMAGE_BASE }}/signatures
|
|
||||||
run: |
|
|
||||||
echo "$COSIGN_PRIVATE_KEY" > cosign.key
|
|
||||||
|
|
||||||
# Wir lassen NUR NOCH die absolut notwendigen Flags stehen.
|
|
||||||
# Keine Erwähnung von tlog oder configs mehr.
|
|
||||||
cosign sign --yes --key cosign.key \
|
|
||||||
--registry-referrers-mode legacy \
|
|
||||||
"${REGISTRY_HOST}/${IMAGE_BASE}:main"
|
|
||||||
|
|
||||||
rm -f cosign.key
|
|
||||||
62
CHANGELOG.md
62
CHANGELOG.md
@@ -1,4 +1,66 @@
|
|||||||
## 1.1.0 - 2026-02-10
|
## 1.1.0 - 2026-02-10
|
||||||
|
- fix indentation
|
||||||
|
- remove signing in workflow
|
||||||
|
- release: 1.1.0
|
||||||
|
- neuer fix
|
||||||
|
- fix signature-tags
|
||||||
|
- release: 1.2.0
|
||||||
|
- fix signature-tags
|
||||||
|
- release: 1.1.0
|
||||||
|
- fix
|
||||||
|
- fix
|
||||||
|
- fix cosign
|
||||||
|
- new cosign fix
|
||||||
|
- fix cosign
|
||||||
|
- cosign experimental=1
|
||||||
|
- fix cosign sha256-tags
|
||||||
|
- release: 1.1.0
|
||||||
|
- fix sign error
|
||||||
|
- release: 1.1.0
|
||||||
|
- fix cosign failure
|
||||||
|
- release: 1.1.0
|
||||||
|
- fix sign key
|
||||||
|
- release: 1.1.0
|
||||||
|
- fix cosign key
|
||||||
|
- release: 1.1.0
|
||||||
|
- fix sign step
|
||||||
|
- fix again
|
||||||
|
- release: 1.1.0
|
||||||
|
- fix signing step
|
||||||
|
- release: 1.1.0
|
||||||
|
- fix signing
|
||||||
|
- release: 1.1.0
|
||||||
|
- fix signing
|
||||||
|
- release: 1.1.0
|
||||||
|
- fix sign-step
|
||||||
|
- release: 1.1.0
|
||||||
|
- fix sign-step for version-tags
|
||||||
|
- release: 1.3.0
|
||||||
|
- fix SBOM
|
||||||
|
- siplify workflow
|
||||||
|
- release: 1.1.0
|
||||||
|
- fix release.sh
|
||||||
|
- release: 1.2.0
|
||||||
|
- rebuild release.sh
|
||||||
|
- make release.sh executable
|
||||||
|
- remove Dockerfile.aarch64
|
||||||
|
- fix signing
|
||||||
|
- fix SBOM
|
||||||
|
- reorder Dockerfile
|
||||||
|
- add multi-watch.sh
|
||||||
|
- another fix
|
||||||
|
- rebuild workflow
|
||||||
|
- new fix
|
||||||
|
- fix workflow
|
||||||
|
- fix workflow
|
||||||
|
- fix workflow
|
||||||
|
- set shell to bash in workflow
|
||||||
|
- changed workflow for use build-args from versions.env in buildx builder
|
||||||
|
- changed relevant files for project test2
|
||||||
|
- docs: fix template placeholders [skip ci]
|
||||||
|
- versions.env aktualisiert
|
||||||
|
- Initial commit
|
||||||
|
## 1.1.0 - 2026-02-10
|
||||||
- neuer fix
|
- neuer fix
|
||||||
- fix signature-tags
|
- fix signature-tags
|
||||||
- release: 1.2.0
|
- release: 1.2.0
|
||||||
|
|||||||
Reference in New Issue
Block a user