Skip to content

Move pipeline to Github Action (#1) #8

Move pipeline to Github Action (#1)

Move pipeline to Github Action (#1) #8

Workflow file for this run

name: Docker
on:
push:
tags: ["*"]
branches:
- "main"
- "master"
schedule:
- cron: '0 5 * * 0'
pull_request:
branches: ["**"]
env:
# Hostname of your registry
REGISTRY: docker.io
# Image repository, without hostname and tag
IMAGE_NAME: alpine/curl-http3
SHA: ${{ github.event.pull_request.head.sha || github.event.after }}
jobs:
build:
runs-on: ubuntu-latest
permissions:
pull-requests: write
steps:
- name: Setup Docker buildx
uses: docker/setup-buildx-action@v3
# Step to fetch the latest curl version
- name: Get latest curl version
id: curl-version
run: |
export CURL_OPTIONS="-sL -H \"Authorization: token ${{ secrets.API_KEY }}\""
#curl -H "Cache-Control: no-cache" -sL "https://raw.githubusercontent.com/alpine-docker/multi-arch-docker-images/stable/functions.sh" -o functions.sh
curl -H "Cache-Control: no-cache" -sL "https://raw.githubusercontent.com/alpine-docker/multi-arch-docker-images/refs/heads/master/functions.sh" -o functions.sh
source functions.sh
CURL_VERSION=$(get_latest_release curl/curl|sed 's/curl-//')
QUICHE_VERSION=$(get_latest_release cloudflare/quiche)
echo "Latest curl version is $CURL_VERSION"
echo "Latest quiche version is $QUICHE_VERSION"
echo "CURL_VERSION=$CURL_VERSION" >> $GITHUB_ENV
echo "QUICHE_VERSION=$QUICHE_VERSION" >> $GITHUB_ENV
# Authenticate to the container registry
- name: Authenticate to registry ${{ env.REGISTRY }}
uses: docker/login-action@v3
with:
registry: ${{ env.REGISTRY }}
username: ${{ secrets.DOCKERHUB_USERNAME }}
password: ${{ secrets.DOCKERHUB_TOKEN }}
# Extract metadata (tags, labels) for Docker
- name: Extract Docker metadata
id: meta
uses: docker/metadata-action@v5
with:
images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
labels: |
org.opencontainers.image.revision=${{ env.SHA }}
tags: |
type=edge,branch=$repo.default_branch
type=semver,pattern=v{{version}}
type=sha,prefix=,suffix=,format=short
# Build and push Docker image with Buildx
# (don't push on PR, load instead)
- name: Build and push Docker image
id: build-and-push
uses: docker/build-push-action@v6
with:
platforms: linux/amd64,linux/arm64
sbom: ${{ github.event_name != 'pull_request' }}
provenance: ${{ github.event_name != 'pull_request' }}
push: ${{ github.event_name != 'pull_request' }}
load: ${{ github.event_name == 'pull_request' }}
tags: ${{ steps.meta.outputs.tags }}
labels: ${{ steps.meta.outputs.labels }}
cache-from: type=gha
cache-to: type=gha,mode=max
build-args: |
CURL_VERSION=${{ env.LATEST_CURL_VERSION }}
QUICHE_VERSION=${{ env.LATEST_QUICHE_VERSION }}
# - name: Checkout code
# uses: actions/checkout@v2
# - name: check the platform in multi-arch images
# run: |
# echo ${{ steps.meta.outputs.tags }}
# bash ./test.sh ${{ steps.meta.outputs.tags }}
- name: set tags
run: |
# install crane
curl -LO https://github.com/google/go-containerregistry/releases/download/v0.20.2/go-containerregistry_Linux_x86_64.tar.gz
tar zxvf go-containerregistry_Linux_x86_64.tar.gz
chmod +x crane
export VERSION=($(docker run -i --rm ${{ steps.meta.outputs.tags }} curl --version|awk '$1=$1' |awk -F "[ -]" 'NR==1{print $2}'))
echo $VERSION
./crane auth login -u ${{ secrets.DOCKERHUB_USERNAME }} -p ${{ secrets.DOCKERHUB_TOKEN }} index.docker.io
./crane copy ${{ steps.meta.outputs.tags }} ${{ env.IMAGE_NAME }}:latest
./crane copy ${{ steps.meta.outputs.tags }} ${{ env.IMAGE_NAME }}:${VERSION}
rm -f /home/runner/.docker/config.json