Compare commits
5 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| cdfa02214a | |||
| fdc6c86ee6 | |||
| 4caea581f0 | |||
| 5e716e2635 | |||
| 24db920e7d |
@@ -187,7 +187,10 @@ jobs:
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# amd64 build
|
||||
# Cache-Definitionen für bessere Übersicht
|
||||
CACHE_REF="${REGISTRY_HOST}/${IMAGE_BASE}-cache"
|
||||
|
||||
# amd64 build mit Registry-Cache (mode=min für weniger Fragmente)
|
||||
docker buildx build \
|
||||
--platform linux/amd64 \
|
||||
-f ${AMD64_DOCKERFILE} \
|
||||
@@ -195,10 +198,12 @@ jobs:
|
||||
--build-arg APP_VERSION="$APP_VERSION" \
|
||||
--label org.opencontainers.image.version="$APP_VERSION" \
|
||||
--label org.opencontainers.image.created="$BUILD_DATE" \
|
||||
--cache-from type=registry,ref=${CACHE_REF}:amd64 \
|
||||
--cache-to type=registry,ref=${CACHE_REF}:amd64,mode=min \
|
||||
-t ${CACHE_IMAGE_NAME}:${VERSION}-amd64 \
|
||||
--push .
|
||||
|
||||
# arm64 build
|
||||
# arm64 build mit Registry-Cache (mode=min für weniger Fragmente)
|
||||
docker buildx build \
|
||||
--platform linux/arm64 \
|
||||
-f ${ARM64_DOCKERFILE} \
|
||||
@@ -206,10 +211,14 @@ jobs:
|
||||
--build-arg APP_VERSION="$APP_VERSION" \
|
||||
--label org.opencontainers.image.version="$APP_VERSION" \
|
||||
--label org.opencontainers.image.created="$BUILD_DATE" \
|
||||
--cache-from type=registry,ref=${CACHE_REF}:arm64 \
|
||||
--cache-to type=registry,ref=${CACHE_REF}:arm64,mode=min \
|
||||
-t ${CACHE_IMAGE_NAME}:${VERSION}-arm64 \
|
||||
--push .
|
||||
|
||||
# Manifest-Erstellung (verbindet die Architekturen zu den finalen Tags)
|
||||
for TAG in $(echo $DOCKER_TAGS | tr ',' ' '); do
|
||||
echo "Creating manifest for tag: $TAG"
|
||||
docker buildx imagetools create -t $TAG \
|
||||
${CACHE_IMAGE_NAME}:${VERSION}-amd64 \
|
||||
${CACHE_IMAGE_NAME}:${VERSION}-arm64
|
||||
@@ -217,8 +226,6 @@ jobs:
|
||||
|
||||
echo "== Multiarch Build Complete =="
|
||||
|
||||
|
||||
|
||||
- name: Install syft
|
||||
run: |
|
||||
curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh \
|
||||
@@ -241,31 +248,3 @@ jobs:
|
||||
with:
|
||||
name: sbom
|
||||
path: sbom.spdx.json
|
||||
|
||||
- name: Install cosign
|
||||
shell: bash
|
||||
run: |
|
||||
curl -sSfL https://github.com/sigstore/cosign/releases/latest/download/cosign-linux-amd64 \
|
||||
-o cosign
|
||||
chmod +x cosign
|
||||
mv cosign /usr/local/bin/
|
||||
cosign version
|
||||
|
||||
- name: Sign image
|
||||
shell: bash
|
||||
env:
|
||||
COSIGN_PRIVATE_KEY: ${{ secrets.COSIGN_PRIVATE_KEY }}
|
||||
COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }}
|
||||
# Diese Variable ist der wichtigste Hebel:
|
||||
COSIGN_SKIP_REKOR_UPLOAD: "true"
|
||||
COSIGN_REPOSITORY: ${{ env.REGISTRY_HOST }}/${{ env.IMAGE_BASE }}/signatures
|
||||
run: |
|
||||
echo "$COSIGN_PRIVATE_KEY" > cosign.key
|
||||
|
||||
# Wir lassen NUR NOCH die absolut notwendigen Flags stehen.
|
||||
# Keine Erwähnung von tlog oder configs mehr.
|
||||
cosign sign --yes --key cosign.key \
|
||||
--registry-referrers-mode legacy \
|
||||
"${REGISTRY_HOST}/${IMAGE_BASE}:main"
|
||||
|
||||
rm -f cosign.key
|
||||
64
CHANGELOG.md
64
CHANGELOG.md
@@ -1,3 +1,67 @@
|
||||
## 1.2.0 - 2026-02-10
|
||||
- changed build workflow
|
||||
## 1.1.0 - 2026-02-10
|
||||
- fix indentation
|
||||
- remove signing in workflow
|
||||
- release: 1.1.0
|
||||
- neuer fix
|
||||
- fix signature-tags
|
||||
- release: 1.2.0
|
||||
- fix signature-tags
|
||||
- release: 1.1.0
|
||||
- fix
|
||||
- fix
|
||||
- fix cosign
|
||||
- new cosign fix
|
||||
- fix cosign
|
||||
- cosign experimental=1
|
||||
- fix cosign sha256-tags
|
||||
- release: 1.1.0
|
||||
- fix sign error
|
||||
- release: 1.1.0
|
||||
- fix cosign failure
|
||||
- release: 1.1.0
|
||||
- fix sign key
|
||||
- release: 1.1.0
|
||||
- fix cosign key
|
||||
- release: 1.1.0
|
||||
- fix sign step
|
||||
- fix again
|
||||
- release: 1.1.0
|
||||
- fix signing step
|
||||
- release: 1.1.0
|
||||
- fix signing
|
||||
- release: 1.1.0
|
||||
- fix signing
|
||||
- release: 1.1.0
|
||||
- fix sign-step
|
||||
- release: 1.1.0
|
||||
- fix sign-step for version-tags
|
||||
- release: 1.3.0
|
||||
- fix SBOM
|
||||
- siplify workflow
|
||||
- release: 1.1.0
|
||||
- fix release.sh
|
||||
- release: 1.2.0
|
||||
- rebuild release.sh
|
||||
- make release.sh executable
|
||||
- remove Dockerfile.aarch64
|
||||
- fix signing
|
||||
- fix SBOM
|
||||
- reorder Dockerfile
|
||||
- add multi-watch.sh
|
||||
- another fix
|
||||
- rebuild workflow
|
||||
- new fix
|
||||
- fix workflow
|
||||
- fix workflow
|
||||
- fix workflow
|
||||
- set shell to bash in workflow
|
||||
- changed workflow for use build-args from versions.env in buildx builder
|
||||
- changed relevant files for project test2
|
||||
- docs: fix template placeholders [skip ci]
|
||||
- versions.env aktualisiert
|
||||
- Initial commit
|
||||
## 1.1.0 - 2026-02-10
|
||||
- neuer fix
|
||||
- fix signature-tags
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
APP_NAME=test2
|
||||
APP_VERSION=1.1.0
|
||||
APP_VERSION=1.2.0
|
||||
APP_DESCRIPTION=Watchdog for notify on updates on dockerhub, github and other git-sources
|
||||
|
||||
BASE_IMAGE=alpine:3.22
|
||||
|
||||
Reference in New Issue
Block a user