Merge pull request #51 from crowdsecurity/hes-bump-crowdsec-version #73
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Builder | |
| env: | |
| BUILD_ARGS: "--test" | |
| MONITORED_FILES: "build.yaml config.yaml Dockerfile rootfs/etc/services.d/crowdsec/run rootfs/etc/services.d/ttyd/run rootfs/etc/services.d/crowdsec-firewall-bouncer/run" | |
| on: | |
| push: | |
| branches: | |
| - main | |
| jobs: | |
| init: | |
| runs-on: ubuntu-latest | |
| name: Initialize builds | |
| outputs: | |
| changed_addons: ${{ steps.changed_addons.outputs.addons }} | |
| changed: ${{ steps.changed_addons.outputs.changed }} | |
| steps: | |
| - name: Check out the repository | |
| uses: actions/checkout@v2.4.0 | |
| - name: Get changed files | |
| id: changed_files | |
| uses: jitterbit/get-changed-files@v1 | |
| - name: Find add-on directories | |
| id: addons | |
| uses: home-assistant/actions/helpers/find-addons@master | |
| - name: Get changed add-ons | |
| id: changed_addons | |
| run: | | |
| declare -a changed_addons | |
| for addon in ${{ steps.addons.outputs.addons }}; do | |
| if [[ "${{ steps.changed_files.outputs.all }}" =~ $addon ]]; then | |
| for file in ${{ env.MONITORED_FILES }}; do | |
| if [[ "${{ steps.changed_files.outputs.all }}" =~ $addon/$file ]]; then | |
| if [[ ! "${changed_addons[@]}" =~ $addon ]]; then | |
| changed_addons+=("\"${addon}\","); | |
| fi | |
| fi | |
| done | |
| fi | |
| done | |
| changed=$(echo ${changed_addons[@]} | rev | cut -c 2- | rev) | |
| if [[ -n ${changed} ]]; then | |
| echo "Changed add-ons: $changed"; | |
| echo "changed=true" >> $GITHUB_OUTPUT | |
| echo "addons=[$changed]" >> $GITHUB_OUTPUT | |
| else | |
| echo "No add-on had any monitored files changed (${{ env.MONITORED_FILES }})"; | |
| fi | |
| build: | |
| needs: init | |
| runs-on: ubuntu-latest | |
| if: needs.init.outputs.changed == 'true' | |
| name: Build ${{ matrix.arch }} ${{ matrix.addon }} add-on | |
| strategy: | |
| matrix: | |
| addon: ${{ fromJson(needs.init.outputs.changed_addons) }} | |
| arch: ["aarch64", "amd64", "i386", "armhf", "armv7"] | |
| steps: | |
| - name: Check out repository | |
| uses: actions/checkout@v2.4.0 | |
| - name: Get information | |
| id: info | |
| uses: home-assistant/actions/helpers/info@master | |
| with: | |
| path: "./${{ matrix.addon }}" | |
| - name: 🚀 Run Home Assistant Add-on Information | |
| id: information | |
| uses: frenck/action-addon-information@v1 | |
| with: | |
| path: "./${{ matrix.addon }}" | |
| - name: ℹ️ Compose build flags | |
| id: flags | |
| run: | | |
| echo "date=$(date +"%Y-%m-%dT%H:%M:%SZ")" >> $GITHUB_OUTPUT | |
| from=$(yq --no-colors eval ".build_from.${{ matrix.arch }}" "${{ steps.information.outputs.build }}") | |
| echo "from=${from}" >> $GITHUB_OUTPUT | |
| if [[ "${{ matrix.arch}}" = "amd64" ]]; then | |
| echo "platform=linux/amd64" >> $GITHUB_OUTPUT | |
| elif [[ "${{ matrix.arch }}" = "i386" ]]; then | |
| echo "platform=linux/386" >> $GITHUB_OUTPUT | |
| elif [[ "${{ matrix.arch }}" = "armhf" ]]; then | |
| echo "platform=linux/arm/v6" >> $GITHUB_OUTPUT | |
| elif [[ "${{ matrix.arch }}" = "armv7" ]]; then | |
| echo "platform=linux/arm/v7" >> $GITHUB_OUTPUT | |
| elif [[ "${{ matrix.arch }}" = "aarch64" ]]; then | |
| echo "platform=linux/arm64/v8" >> $GITHUB_OUTPUT | |
| else | |
| echo "::error ::Could not determine platform for arch ${{ matrix.arch }}" | |
| exit 1 | |
| fi | |
| - name: Set up QEMU | |
| uses: docker/setup-qemu-action@v1.2.0 | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@v1.6.0 | |
| - name: Check if add-on should be built | |
| id: check | |
| run: | | |
| if [[ "${{ steps.info.outputs.architectures }}" =~ ${{ matrix.arch }} ]]; then | |
| echo "build_arch=true" >> $GITHUB_OUTPUT | |
| echo "image=$(echo ${{ steps.info.outputs.image }} | cut -d'/' -f3)" >> $GITHUB_OUTPUT | |
| if [[ -z "${{ github.head_ref }}" ]] && [[ "${{ github.event_name }}" == "push" ]]; then | |
| echo "BUILD_ARGS=" >> $GITHUB_ENV; | |
| fi | |
| else | |
| echo "${{ matrix.arch }} is not a valid arch for ${{ matrix.addon }}, skipping build"; | |
| echo "build_arch=false" >> $GITHUB_OUTPUT | |
| fi | |
| - name: Login to GitHub Container Registry | |
| if: env.BUILD_ARGS != '--test' | |
| uses: docker/login-action@v1.12.0 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.repository_owner }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Build ${{ matrix.addon }} add-on | |
| if: steps.check.outputs.build_arch == 'true' | |
| uses: docker/build-push-action@v2.9.0 | |
| with: | |
| push: true | |
| context: ./${{ matrix.addon }} | |
| tags: | | |
| ghcr.io/${{ github.repository_owner }}/${{ matrix.arch }}-addon-${{ matrix.addon }}:${{ steps.information.outputs.version }} | |
| platforms: ${{ steps.flags.outputs.platform }} | |
| build-args: | | |
| BUILD_ARCH=${{ matrix.arch }} | |
| BUILD_DATE=${{ steps.flags.outputs.date }} | |
| BUILD_FROM=${{ steps.flags.outputs.from }} | |
| BUILD_REF=${{ github.sha }} | |
| BUILD_REPOSITORY=${{ github.repository }} | |
| BUILD_VERSION=${{ needs.information.outputs.version }} | |
| labels: | | |
| org.opencontainers.image.source=${{ github.event.repository.html_url }} | |
| org.opencontainers.image.revision=${{ github.sha }} |