253 lines
8.1 KiB
Plaintext
253 lines
8.1 KiB
Plaintext
name: 'Docker'
|
|
description: 'Build and publish docker images'
|
|
|
|
inputs:
|
|
docker_image:
|
|
description: docker client image to use for building images
|
|
default: "docker:latest"
|
|
|
|
docker_args:
|
|
description: "Extra arguments to pass to docker invocation"
|
|
default: ""
|
|
|
|
tag_prefix:
|
|
description: "a prefix to add to all docker tags"
|
|
|
|
tag_suffix:
|
|
description: "a suffix to add to all docker tags"
|
|
|
|
tag_commit_enable:
|
|
description: "generate docker tags for git tag if present"
|
|
default: "true"
|
|
|
|
tag_commit_prefix:
|
|
description: "a suffix to add to docker tags that were generated from commit sha"
|
|
default: "commit-"
|
|
|
|
tag_ref_slug_enable:
|
|
description: "generate a tag from the git ref slug"
|
|
default: "false"
|
|
|
|
tag_ref_normalized_enable:
|
|
description: ""
|
|
default: "true"
|
|
|
|
tag_semver_major:
|
|
description: ""
|
|
default: "true"
|
|
|
|
tag_semver_minor:
|
|
description: ""
|
|
default: "true"
|
|
|
|
tag_semver_patch:
|
|
description: ""
|
|
default: "true"
|
|
|
|
additional_registry_destinations:
|
|
description: "a list of --destination registry/orga/repo:tag strings, space separated"
|
|
default: ""
|
|
|
|
squash_layers:
|
|
description: ""
|
|
default: "true"
|
|
|
|
additional_registries:
|
|
description: ""
|
|
default: ""
|
|
|
|
add_ci_registry_auth:
|
|
description: ""
|
|
default: "true"
|
|
|
|
add_ci_registry_target:
|
|
description: ""
|
|
default: "true"
|
|
|
|
registry_auth_json:
|
|
description: ""
|
|
default: ""
|
|
|
|
merge_registry_json:
|
|
description: ""
|
|
default: "true"
|
|
|
|
push_tags:
|
|
description: ""
|
|
default: "true"
|
|
|
|
docker_buildkit:
|
|
description: ""
|
|
default: "1"
|
|
|
|
docker_arch_list:
|
|
description: "if set to true use linux/amd64,linux/arm64, otherwise specifiy arch list manually"
|
|
default: "false"
|
|
|
|
dockerfile:
|
|
description: "Dockerfile used to build images"
|
|
default: "Dockerfile"
|
|
|
|
docker_context_dir:
|
|
description: "${{ github.workspace }}"
|
|
|
|
ci_registry_password:
|
|
description: "password/token for default ci registry, should usually be set to secret value with ${{ secrets.someSecretName }} for gitea"
|
|
default: ""
|
|
required: false
|
|
|
|
outputs:
|
|
published_tags:
|
|
description: "Published tags as csv"
|
|
value: ""
|
|
|
|
runs:
|
|
using: "composite"
|
|
steps:
|
|
- id: information
|
|
uses: https://gitea.dhswt.de/actions/information@master
|
|
|
|
- name: add ci registry to targets
|
|
shell: bash
|
|
if: inputs.add_ci_registry_target == 'true'
|
|
run: |
|
|
CI_REGISTRY="${{ steps.information.outputs.ci_hostname }}"
|
|
|
|
echo "CI_REGISTRY=$CI_REGISTRY" >> $GITHUB_ENV
|
|
echo "::debug::using CI_REGISTRY=$CI_REGISTRY"
|
|
|
|
REGISTRY_TARGETS="$CI_REGISTRY/$GITHUB_REPOSITORY:" # needs to have : suffix
|
|
echo "REGISTRY_TARGETS=$REGISTRY_TARGETS" >> $GITHUB_ENV
|
|
|
|
echo "::debug::adding $CI_REGISTRY/$GITHUB_REPOSITORY to registry targets"
|
|
|
|
- name: add additional registries
|
|
shell: bash
|
|
run: |
|
|
IFS=","
|
|
for REGISTRY in $INPUT_ADDITIONAL_REGISTRIES; do
|
|
# add ":" to registry paths missing it
|
|
if [[ "$REGISTRY" != *":"* ]]; then
|
|
REGISTRY="$REGISTRY:"
|
|
fi
|
|
|
|
echo "::debug::adding $REGISTRY to REGISTRY_TARGETS"
|
|
|
|
REGISTRY_TARGETS="$REGISTRY_TARGETS,$REGISTRY"
|
|
done
|
|
IFS="$OLD_IFS"
|
|
|
|
echo "::debug::REGISTRY_TARGETS=$REGISTRY_TARGETS" >> $GITHUB_ENV
|
|
|
|
- name: add ci registry auth
|
|
shell: bash
|
|
if: inputs.add_ci_registry_auth == 'true'
|
|
run: |
|
|
REGISTRY_AUTH_JSON="$REGISTRY_AUTH_JSON {\"auths\":{\"$CI_REGISTRY\":{\"auth\":\"$(echo -n token:$CI_REGISTRY_PASSWORD | base64)\"}}}"
|
|
echo "REGISTRY_AUTH_JSON=$REGISTRY_AUTH_JSON" >> $GITHUB_ENV
|
|
|
|
- name: merge registry auth json
|
|
shell: bash
|
|
if: inputs.merge_registry_auth_json == 'true'
|
|
run: |
|
|
if [[ ! -z "$REGISTRY_AUTH_JSON" ]]; then
|
|
REGISTRY_AUTH_JSON=$(echo "$REGISTRY_AUTH_JSON" | jq --slurp 'reduce .[] as $item ({}; . * $item)')
|
|
echo "REGISTRY_AUTH_JSON=$REGISTRY_AUTH_JSON" >> $GITHUB_ENV
|
|
fi
|
|
|
|
- name: generate registry auth json file
|
|
shell: bash
|
|
run: |
|
|
if [[ ! -z "$REGISTRY_AUTH_JSON" ]]; then
|
|
mkdir -p /home/runner/.docker
|
|
echo "$REGISTRY_AUTH_JSON" > /home/runner/.docker/config.json
|
|
fi
|
|
|
|
- name: collect tags
|
|
shell: bash
|
|
run: |
|
|
if [[ "$INPUT_TAG_COMMIT_ENABLE" == "true" ]]; then
|
|
IMAGE_TAGS="$IMAGE_TAGS,$INPUT_TAG_PREFIX$INPUT_TAG_COMMIT_PREFIX$GITHUB_SHA$INPUT_TAG_SUFFIX"
|
|
fi
|
|
|
|
# TODO extract semver vars from tag/branch, candidate for refactor to common info gathering action
|
|
# add semver major tag if enabled and available, exclude "0" tag
|
|
# add semver major.minor tag if enabled and available, exclude "0.0" tag
|
|
# add semver major.minor.patch tag if enabled and available, exclude "0.0.0" tag
|
|
if [[ "$INPUT_TAG_SEMVER_MAJOR" == "true" ]] && [[ ! -z $SEMVER_MAJOR ]] && [[ "$SEMVER_MAJOR" != "0" ]]; then
|
|
IMAGE_TAGS="$IMAGE_TAGS,$INPUT_TAG_PREFIX$SEMVER_MAJOR"
|
|
TAG_REF_NORMALIZED_ENABLE=0
|
|
fi
|
|
if [[ "$INPUT_TAG_SEMVER_MINOR" == "true" ]] && [[ ! -z $SEMVER_MINOR ]] && [[ "$SEMVER_MAJOR_MINOR" != "0.0" ]]; then
|
|
IMAGE_TAGS="$IMAGE_TAGS,$INPUT_TAG_PREFIX$SEMVER_MAJOR_MINOR"
|
|
TAG_REF_NORMALIZED_ENABLE=0
|
|
fi
|
|
if [[ "$INPUT_TAG_SEMVER_PATCH" == "true" ]] && [[ ! -z $SEMVER_PATCH ]] && [[ "$SEMVER_MAJOR_MINOR_PATCH" != "0.0.0" ]]; then
|
|
IMAGE_TAGS="$IMAGE_TAGS,$INPUT_TAG_PREFIX$SEMVER_MAJOR_MINOR_PATCH"
|
|
TAG_REF_NORMALIZED_ENABLE=0
|
|
fi
|
|
|
|
# add tag for reference if available using normalization
|
|
# - dont add tag if semver tags were added
|
|
# - attempt to build tag first
|
|
# - attempt to build branch if not a PR (if not PR for extra security, variable description on drone unclear)
|
|
if [[ "$INPUT_TAG_REF_NORMALIZED_ENABLE" == "true" ]] && [[ ! -z $DRONE_TAG ]]; then
|
|
echo "::debug::adding docker tag for git tag"
|
|
REF_TAG_NORMALIZED=$(echo $DRONE_TAG | sed s:/:-:g)
|
|
IMAGE_TAGS="$IMAGE_TAGS,$INPUT_TAG_PREFIX$REF_TAG_NORMALIZED$INPUT_TAG_SUFFIX"
|
|
elif [[ "$INPUT_TAG_REF_NORMALIZED_ENABLE" == "true" ]] && [[ -z "$DRONE_PULL_REQUEST" ]] && [[ ! -z $DRONE_BRANCH ]]; then
|
|
echo "adding tag for branch"
|
|
REF_TAG_NORMALIZED=$(echo $DRONE_BRANCH | sed s:/:-:g)
|
|
IMAGE_TAGS="$IMAGE_TAGS,$INPUT_TAG_PREFIX$REF_TAG_NORMALIZED$INPUT_TAG_SUFFIX"
|
|
fi
|
|
|
|
# prepare destinations by combining registries + tags
|
|
echo "# preparing destinations:"
|
|
IMAGE_DESTS=""
|
|
IMAGE_DESTS_PUSH=""
|
|
IFS=","
|
|
for REGISTRY in $REGISTRY_TARGETS; do
|
|
if [[ -z "$REGISTRY" ]]; then continue; fi
|
|
|
|
for IMAGE_TAG in $IMAGE_TAGS; do
|
|
if [[ -z "$IMAGE_TAG" ]]; then continue; fi
|
|
echo "::debug::- $REGISTRY$IMAGE_TAG"
|
|
IMAGE_DESTS="$IMAGE_DESTS --tag $REGISTRY$IMAGE_TAG"
|
|
IMAGE_DESTS_PUSH="$IMAGE_DESTS_PUSH $REGISTRY$IMAGE_TAG"
|
|
done
|
|
done
|
|
IMAGE_DESTS=$(echo $IMAGE_DESTS | xargs)
|
|
IMAGE_DESTS_PUSH=$(echo $IMAGE_DESTS_PUSH | xargs)
|
|
IFS="$OLD_IFS"
|
|
|
|
echo "IMAGE_DESTS=$IMAGE_DESTS" >> $GITHUB_ENV
|
|
echo "IMAGE_DESTS_PUSH=$IMAGE_DESTS_PUSH" >> $GITHUB_ENV
|
|
|
|
- name: prepare docker args
|
|
shell: bash
|
|
run: |
|
|
# prepare docker build args
|
|
if [[ -z "$DOCKER_ARGS" ]]; then
|
|
DOCKER_ARGS=""
|
|
fi
|
|
DOCKER_ARGS="$INPUT_CONTEXT_DIR --file $INPUT_DOCKERFILE $INPUT_DOCKER_ARGS $DOCKER_ARGS"
|
|
|
|
if [[ "$INPUT_SQUASH_LAYERS" == "true" ]]; then
|
|
DOCKER_ARGS="$DOCKER_ARGS --squash"
|
|
fi
|
|
if [[ ! -z "$IMAGE_DESTS" ]]; then
|
|
DOCKER_ARGS="$DOCKER_ARGS $IMAGE_DESTS"
|
|
fi
|
|
if [[ ! -z "$INPUT_ADDITIONAL_REGISTRY_DESTINATIONS" ]]; then
|
|
DOCKER_ARGS="$DOCKER_ARGS $INPUT_ADDITIONAL_REGISTRY_DESTINATIONS"
|
|
fi
|
|
|
|
echo "DOCKER_ARGS=$DOCKER_ARGS" >> $GITHUB_ENV
|
|
echo "::debug:: DOCKER_ARGS=$DOCKER_ARGS"
|
|
|
|
- name: debug print env
|
|
shell: bash
|
|
run: |
|
|
echo "::debug::printing env"
|
|
echo "::debug:: $(env)"
|