-
Notifications
You must be signed in to change notification settings - Fork 137
175 lines (152 loc) · 6.8 KB
/
docker.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
name: Docker
on:
workflow_call:
workflow_dispatch:
jobs:
docker:
runs-on: ubuntu-latest
timeout-minutes: 120
permissions:
packages: write
strategy:
matrix:
platform: [amd64, arm64]
steps:
- uses: actions/checkout@v4
with:
fetch-depth: 0
- name: Set up QEMU
uses: docker/setup-qemu-action@v3
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
- name: Login to ghcr.io
uses: docker/login-action@v3
with:
registry: ghcr.io
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Cache flatpak build
uses: actions/cache@v4
with:
path: ${{ github.workspace }}/.flatpak-builder
key: fb-${{ matrix.platform }}-${{ hashFiles('poetry.lock') }}
- name: Set up dependencies
run: |
sudo add-apt-repository ppa:flatpak/stable
- name: Build flatpak-builder-lint
run: |
cd docker
bash -x ./build.sh ${{ matrix.platform }}
- name: Build the image
uses: docker/build-push-action@v5
with:
context: docker
file: docker/Dockerfile
platforms: linux/${{ matrix.platform }}
push: false
provenance: false
load: true
tags: |
ghcr.io/${{ github.repository }}:${{ github.sha }}-${{ matrix.platform }}
ghcr.io/${{ github.repository }}:latest-${{ matrix.platform }}
labels: |
org.opencontainers.image.revision=${{ github.sha }}
org.opencontainers.image.source=ssh://[email protected]:${{ github.repository }}.git
org.opencontainers.image.url=https://github.com/${{ github.repository }}
- name: Run a sanity check
run: |
cd tests/repo/min_success_metadata/gui-app
dbus-run-session flatpak run org.flatpak.Builder --verbose --user --force-clean --repo=repo \
--mirror-screenshots-url=https://dl.flathub.org/media \
--install-deps-from=flathub --ccache builddir org.flathub.gui.yaml
mkdir -p builddir/files/share/app-info/media
ostree commit --repo=repo --canonical-permissions --branch=screenshots/$(uname -m) builddir/files/share/app-info/media
docker run -v $(pwd):/mnt --rm ghcr.io/${{ github.repository }}:latest-amd64 manifest /mnt/org.flathub.gui.yaml
docker run -v $(pwd):/mnt --rm ghcr.io/${{ github.repository }}:latest-amd64 repo /mnt/repo
- name: Push the image
uses: docker/build-push-action@v5
if: success() && github.event_name != 'pull_request'
with:
context: docker
file: docker/Dockerfile
platforms: linux/${{ matrix.platform }}
push: ${{ github.event_name != 'pull_request' }}
provenance: false
tags: |
ghcr.io/${{ github.repository }}:${{ github.sha }}-${{ matrix.platform }}
ghcr.io/${{ github.repository }}:latest-${{ matrix.platform }}
labels: |
org.opencontainers.image.revision=${{ github.sha }}
org.opencontainers.image.source=ssh://[email protected]:${{ github.repository }}.git
org.opencontainers.image.url=https://github.com/${{ github.repository }}
- name: Login to ghcr.io using Flathub credentials
uses: docker/login-action@v3
if: github.event_name != 'pull_request' && github.repository == 'flathub-infra/flatpak-builder-lint'
with:
registry: ghcr.io
username: ${{ secrets.FLATHUB_ORG_USER }}
password: ${{ secrets.FLATHUB_ORG_TOKEN }}
- name: Build and push Docker image to the old location
uses: docker/build-push-action@v5
if: success() && github.event_name != 'pull_request' && github.repository == 'flathub-infra/flatpak-builder-lint'
with:
context: docker
file: docker/Dockerfile
push: ${{ github.event_name != 'pull_request' }}
provenance: false
tags: |
ghcr.io/flathub/flatpak-builder-lint:${{ github.sha }}-${{ matrix.platform }}
ghcr.io/flathub/flatpak-builder-lint:latest-${{ matrix.platform }}
labels: |
org.opencontainers.image.revision=${{ github.sha }}
org.opencontainers.image.source=ssh://[email protected]:${{ github.repository }}.git
org.opencontainers.image.url=https://github.com/${{ github.repository }}
cache-from: type=gha
cache-to: type=gha,mode=max
docker-manifest:
if: ${{ github.event_name != 'pull_request' }}
runs-on: ubuntu-latest
timeout-minutes: 30
needs:
- docker
permissions:
packages: write
steps:
- name: Login to ghcr.io
uses: docker/login-action@v3
with:
registry: ghcr.io
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Create and push manifest
run: |
docker manifest create \
ghcr.io/${{ github.repository }}:${{ github.sha }} \
--amend ghcr.io/${{ github.repository }}:${{ github.sha }}-amd64 \
--amend ghcr.io/${{ github.repository }}:${{ github.sha }}-arm64
docker manifest push ghcr.io/${{ github.repository }}:${{ github.sha }}
docker manifest create \
ghcr.io/${{ github.repository }}:latest \
--amend ghcr.io/${{ github.repository }}:${{ github.sha }}-amd64 \
--amend ghcr.io/${{ github.repository }}:${{ github.sha }}-arm64
docker manifest push ghcr.io/${{ github.repository }}:latest
- name: Login to ghcr.io using Flathub credentials
uses: docker/login-action@v3
if: github.event_name != 'pull_request' && github.repository == 'flathub-infra/flatpak-builder-lint'
with:
registry: ghcr.io
username: ${{ secrets.FLATHUB_ORG_USER }}
password: ${{ secrets.FLATHUB_ORG_TOKEN }}
- name: Push manifest to the old location
if: github.event_name != 'pull_request' && github.repository == 'flathub-infra/flatpak-builder-lint'
run: |
docker manifest create \
ghcr.io/flathub/flatpak-builder-lint:${{ github.sha }} \
--amend ghcr.io/flathub-infra/flatpak-builder-lint:${{ github.sha }}-amd64 \
--amend ghcr.io/flathub-infra/flatpak-builder-lint:${{ github.sha }}-arm64
docker manifest push ghcr.io/flathub/flatpak-builder-lint:${{ github.sha }}
docker manifest create \
ghcr.io/flathub/flatpak-builder-lint:latest \
--amend ghcr.io/flathub-infra/flatpak-builder-lint:${{ github.sha }}-amd64 \
--amend ghcr.io/flathub-infra/flatpak-builder-lint:${{ github.sha }}-arm64
docker manifest push ghcr.io/flathub/flatpak-builder-lint:latest