portainer-updater #28
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: portainer-updater | |
| on: | |
| workflow_dispatch: | |
| push: | |
| branches: | |
| - 'develop' | |
| - 'release/*' | |
| pull_request: | |
| types: | |
| - opened | |
| - reopened | |
| - synchronize | |
| - ready_for_review | |
| branches: | |
| - 'develop' | |
| - 'release/*' | |
| - 'feat/*' | |
| - 'fix/*' | |
| - 'refactor/*' | |
| env: | |
| DOCKER_HUB_REPO: portainerci/portainer-updater | |
| jobs: | |
| build_images: | |
| if: github.event.pull_request.draft == false | |
| runs-on: ubuntu-latest | |
| strategy: | |
| fail-fast: true | |
| matrix: | |
| config: | |
| - { platform: linux, arch: amd64, version: "" } | |
| - { platform: linux, arch: arm64, version: "" } | |
| - { platform: linux, arch: arm, version: "" } | |
| - { platform: linux, arch: ppc64le, version: "" } | |
| - { platform: windows, arch: amd64, version: 1809 } | |
| - { platform: windows, arch: amd64, version: ltsc2022 } | |
| steps: | |
| - name: "[preparation] checkout" | |
| uses: actions/checkout@v4.1.1 | |
| - name: "[preparation] set up qemu" | |
| uses: docker/setup-qemu-action@v3.2.0 | |
| - name: "[preparation] set up docker context for buildx" | |
| run: docker context create builders | |
| - name: "[preparation] set up docker buildx" | |
| uses: docker/setup-buildx-action@v3.6.1 | |
| with: | |
| endpoint: builders | |
| driver-opts: image=moby/buildkit:v0.16.0 | |
| - name: "[preparation] docker login" | |
| uses: docker/login-action@v3.3.0 | |
| with: | |
| username: ${{ secrets.DOCKER_HUB_USERNAME }} | |
| password: ${{ secrets.DOCKER_HUB_PASSWORD }} | |
| - name: "[metadata] generate image tags" | |
| id: meta | |
| uses: docker/metadata-action@v5.5.1 | |
| with: | |
| images: ${{ env.DOCKER_HUB_REPO }} | |
| tags: | | |
| # Tag for branches that match 'release/*', extract the part after 'release/' as the tag | |
| type=ref,event=branch,pattern=refs/heads/chore/*,group=release,format={{trimPrefix refs/heads/chore/ .RefName}} | |
| # Tag for all other branches (e.g., main, develop) using the branch name directly | |
| type=ref,event=branch,pattern=*,group=branch,format={{ .RefName }} | |
| # Tag for pull requests using the PR number (e.g., pr123) | |
| type=ref,event=pr,format=pr{{ .RefNum } | |
| - name: "[build] build and push by digest" | |
| id: build | |
| uses: docker/build-push-action@v6.7.0 | |
| with: | |
| platforms: ${{ matrix.config.platform }}/${{ matrix.config.arch }} | |
| file: build/${{ matrix.config.platform }}/Dockerfile | |
| build-args: | | |
| GIT_COMMIT=$(git log -1 --format=%h) | |
| OSVERSION=${{ matrix.config.version }} | |
| labels: ${{ steps.meta.outputs.labels }} | |
| outputs: type=image,name=${{ env.DOCKER_HUB_REPO }},push-by-digest=true,name-canonical=true,push=true | |
| cache-from: type=gha | |
| cache-to: type=gha,mode=max | |
| sbom: true | |
| provenance: true | |
| - name: "[build] export digest" | |
| run: | | |
| mkdir -p /tmp/digests | |
| digest="${{ steps.build.outputs.digest }}" | |
| touch "/tmp/digests/${digest#sha256:}" | |
| - name: "[build] upload digest" | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: digests-${{ matrix.config.platform }}${{ matrix.config.version }}-${{ matrix.config.arch }} | |
| path: /tmp/digests/* | |
| if-no-files-found: error | |
| retention-days: 1 | |
| build_manifests: | |
| if: github.event.pull_request.draft == false | |
| runs-on: ubuntu-latest | |
| needs: [build_images] | |
| steps: | |
| - name: "[preparation] download digests" | |
| uses: actions/download-artifact@v4 | |
| with: | |
| path: /tmp/digests | |
| pattern: digests-* | |
| merge-multiple: true | |
| - name: "[metadata] generate image tags" | |
| id: meta | |
| uses: docker/metadata-action@v5.5.1 | |
| with: | |
| images: ${{ env.DOCKER_HUB_REPO }} | |
| - name: "[preparation] set up docker context for buildx" | |
| run: docker context create builders | |
| - name: "[preparation] set up docker buildx" | |
| uses: docker/setup-buildx-action@v3.0.0 | |
| with: | |
| endpoint: builders | |
| driver-opts: image=moby/buildkit:v0.16.0 | |
| - name: "[preparation] docker login" | |
| uses: docker/login-action@v3.0.0 | |
| with: | |
| username: ${{ secrets.DOCKER_HUB_USERNAME }} | |
| password: ${{ secrets.DOCKER_HUB_PASSWORD }} | |
| - name: "[build] create manifest list and push" | |
| working-directory: /tmp/digests | |
| run: | | |
| docker buildx imagetools create $(jq -cr '.tags | map("-t " + .) | join(" ")' <<< "$DOCKER_METADATA_OUTPUT_JSON") \ | |
| $(printf '${{ env.DOCKER_HUB_REPO }}@sha256:%s ' *) | |
| - name: "[validate] inspect image" | |
| run: | | |
| docker buildx imagetools inspect ${{ env.DOCKER_HUB_REPO }}:${{ steps.meta.outputs.version }} |