ci: share image and release actions
This commit is contained in:
1 parent
8dc7ad3d90
commit
b76d612d55
4 files changed
+140
-114
No files matched your search
@@ -0,0 +1,73 @@
|
||||
name: Create Gitea release
|
||||
description: Create or update a stable release or prerelease for the current commit
|
||||
inputs:
|
||||
token:
|
||||
required: true
|
||||
description: Gitea API token
|
||||
prerelease:
|
||||
required: true
|
||||
description: Whether to publish a prerelease
|
||||
runs:
|
||||
using: composite
|
||||
steps:
|
||||
- name: Create or update Gitea release
|
||||
shell: bash
|
||||
env:
|
||||
GITEA_TOKEN: ${{ inputs.token }}
|
||||
GITEA_API_URL: ${{ gitea.api_url }}
|
||||
GITEA_REPOSITORY: ${{ gitea.repository }}
|
||||
GITEA_SERVER_URL: ${{ gitea.server_url }}
|
||||
GITEA_SHA: ${{ gitea.sha }}
|
||||
RELEASE_IS_PRERELEASE: ${{ inputs.prerelease }}
|
||||
run: |
|
||||
set -euo pipefail
|
||||
|
||||
version="$(git rev-parse --short=12 "$GITEA_SHA")"
|
||||
if [[ ! "$version" =~ ^[0-9a-f]{12}$ ]]; then
|
||||
echo "Invalid git hash version: $version" >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
release_tag="v$version"
|
||||
if [ "$RELEASE_IS_PRERELEASE" = true ]; then
|
||||
release_tag="$release_tag-dev"
|
||||
fi
|
||||
|
||||
releases_url="$GITEA_API_URL/repos/$GITEA_REPOSITORY/releases"
|
||||
auth_header="Authorization: token $GITEA_TOKEN"
|
||||
previous_tag="$(curl --fail --silent --show-error --header "$auth_header" "$releases_url?limit=100" | jq -r --arg tag "$release_tag" --argjson prerelease "$RELEASE_IS_PRERELEASE" '[.[] | select(.draft == false and .prerelease == $prerelease and .tag_name != $tag)][0].tag_name // empty')"
|
||||
|
||||
if [ -n "$previous_tag" ]; then
|
||||
commit_messages="$(git log --reverse --format='- %s' "${previous_tag}..${GITEA_SHA}")"
|
||||
full_changelog="$GITEA_SERVER_URL/$GITEA_REPOSITORY/compare/${previous_tag}...$release_tag"
|
||||
else
|
||||
commit_messages="$(git log --reverse --format='- %s' "$GITEA_SHA")"
|
||||
full_changelog=""
|
||||
fi
|
||||
|
||||
if [ -z "$commit_messages" ]; then
|
||||
commit_messages="- No commits since the previous release"
|
||||
fi
|
||||
|
||||
{
|
||||
echo '## Changes'
|
||||
echo
|
||||
printf '%s\n' "$commit_messages"
|
||||
echo
|
||||
if [ -n "$full_changelog" ]; then
|
||||
echo "**Full Changelog**: $full_changelog"
|
||||
fi
|
||||
} > release-notes.md
|
||||
|
||||
payload="$(jq -Rs --arg tag "$release_tag" --arg target "$GITEA_SHA" --argjson prerelease "$RELEASE_IS_PRERELEASE" '{tag_name: $tag, target_commitish: $target, name: $tag, body: ., draft: false, prerelease: $prerelease}' release-notes.md)"
|
||||
status="$(curl --silent --show-error --output release.json --write-out '%{http_code}' --header "$auth_header" "$releases_url/tags/$release_tag")"
|
||||
|
||||
if [ "$status" = 200 ]; then
|
||||
release_id="$(jq -r '.id' release.json)"
|
||||
curl --fail-with-body --silent --show-error --request PATCH --header "$auth_header" --header 'Content-Type: application/json' --data "$payload" "$releases_url/$release_id"
|
||||
elif [ "$status" = 404 ]; then
|
||||
curl --fail-with-body --silent --show-error --request POST --header "$auth_header" --header 'Content-Type: application/json' --data "$payload" "$releases_url"
|
||||
else
|
||||
cat release.json
|
||||
exit 1
|
||||
fi
|
||||
@@ -0,0 +1,39 @@
|
||||
name: Publish Docker image
|
||||
description: Build and push the maintenance image
|
||||
inputs:
|
||||
tag:
|
||||
required: true
|
||||
description: Docker image tag
|
||||
username:
|
||||
required: true
|
||||
description: Registry username
|
||||
password:
|
||||
required: true
|
||||
description: Registry password
|
||||
runs:
|
||||
using: composite
|
||||
steps:
|
||||
- name: Set up Docker Buildx
|
||||
uses: docker/setup-buildx-action@v4.4.1
|
||||
|
||||
- name: Log in to registry
|
||||
shell: bash
|
||||
env:
|
||||
REGISTRY_USERNAME: ${{ inputs.username }}
|
||||
REGISTRY_PASSWORD: ${{ inputs.password }}
|
||||
run: printf '%s' "$REGISTRY_PASSWORD" | docker login "$REGISTRY" --username "$REGISTRY_USERNAME" --password-stdin
|
||||
|
||||
- name: Build and push image
|
||||
uses: docker/build-push-action@v7.4.0
|
||||
with:
|
||||
context: .
|
||||
push: true
|
||||
provenance: false
|
||||
build-args: |
|
||||
APP_VERSION=${{ gitea.sha }}
|
||||
VCS_REF=${{ gitea.sha }}
|
||||
tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ inputs.tag }}
|
||||
labels: |
|
||||
org.opencontainers.image.version=${{ gitea.sha }}
|
||||
org.opencontainers.image.revision=${{ gitea.sha }}
|
||||
org.opencontainers.image.source=${{ gitea.repositoryUrl }}
|
||||
@@ -6,7 +6,7 @@ on:
|
||||
workflow_dispatch:
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
contents: write
|
||||
actions: read
|
||||
|
||||
env:
|
||||
@@ -40,36 +40,25 @@ jobs:
|
||||
echo 'Changes found; development release will run.'
|
||||
fi
|
||||
|
||||
image:
|
||||
publish:
|
||||
needs: changes
|
||||
if: needs.changes.outputs.changed == 'true'
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout repository
|
||||
uses: actions/checkout@v7.0.1
|
||||
|
||||
- name: Set up Docker Buildx
|
||||
uses: docker/setup-buildx-action@v4.4.1
|
||||
|
||||
- name: Log in to registry
|
||||
env:
|
||||
REGISTRY_USERNAME: ${{ secrets.DOCKER_REGISTRY_USERNAME }}
|
||||
REGISTRY_PASSWORD: ${{ secrets.DOCKER_REGISTRY_PASSWORD }}
|
||||
run: printf '%s' "$REGISTRY_PASSWORD" | docker login "$REGISTRY" --username "$REGISTRY_USERNAME" --password-stdin
|
||||
|
||||
- name: Build and push development image
|
||||
uses: docker/build-push-action@v7.4.0
|
||||
with:
|
||||
context: .
|
||||
push: true
|
||||
provenance: false
|
||||
build-args: |
|
||||
APP_VERSION=${{ gitea.sha }}
|
||||
VCS_REF=${{ gitea.sha }}
|
||||
tags: |
|
||||
${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:dev
|
||||
${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:PreRelease
|
||||
labels: |
|
||||
org.opencontainers.image.version=${{ gitea.sha }}
|
||||
org.opencontainers.image.revision=${{ gitea.sha }}
|
||||
org.opencontainers.image.source=${{ gitea.repositoryUrl }}
|
||||
fetch-depth: 0
|
||||
|
||||
- name: Publish Docker image
|
||||
uses: ./.gitea/actions/publish-image
|
||||
with:
|
||||
tag: dev
|
||||
username: ${{ secrets.DOCKER_REGISTRY_USERNAME }}
|
||||
password: ${{ secrets.DOCKER_REGISTRY_PASSWORD }}
|
||||
|
||||
- name: Create Gitea prerelease
|
||||
uses: ./.gitea/actions/create-release
|
||||
with:
|
||||
token: ${{ secrets.GITEA_TOKEN }}
|
||||
prerelease: 'true'
|
||||
@@ -11,40 +11,7 @@ env:
|
||||
IMAGE_NAME: lechnersystems/maintenance
|
||||
|
||||
jobs:
|
||||
image:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout repository
|
||||
uses: actions/checkout@v7.0.1
|
||||
|
||||
- name: Set up Docker Buildx
|
||||
uses: docker/setup-buildx-action@v4.4.1
|
||||
|
||||
- name: Log in to registry
|
||||
env:
|
||||
REGISTRY_USERNAME: ${{ secrets.DOCKER_REGISTRY_USERNAME }}
|
||||
REGISTRY_PASSWORD: ${{ secrets.DOCKER_REGISTRY_PASSWORD }}
|
||||
run: printf '%s' "$REGISTRY_PASSWORD" | docker login "$REGISTRY" --username "$REGISTRY_USERNAME" --password-stdin
|
||||
|
||||
- name: Build and push production image
|
||||
uses: docker/build-push-action@v7.4.0
|
||||
with:
|
||||
context: .
|
||||
push: true
|
||||
provenance: false
|
||||
build-args: |
|
||||
APP_VERSION=${{ gitea.sha }}
|
||||
VCS_REF=${{ gitea.sha }}
|
||||
tags: |
|
||||
${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
|
||||
${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:Release
|
||||
labels: |
|
||||
org.opencontainers.image.version=${{ gitea.sha }}
|
||||
org.opencontainers.image.revision=${{ gitea.sha }}
|
||||
org.opencontainers.image.source=${{ gitea.repositoryUrl }}
|
||||
|
||||
release:
|
||||
needs: image
|
||||
publish:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout repository
|
||||
@@ -52,57 +19,15 @@ jobs:
|
||||
with:
|
||||
fetch-depth: 0
|
||||
|
||||
- name: Create or update Gitea release
|
||||
env:
|
||||
GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
|
||||
GITEA_API_URL: ${{ gitea.api_url }}
|
||||
GITEA_REPOSITORY: ${{ gitea.repository }}
|
||||
GITEA_SERVER_URL: ${{ gitea.server_url }}
|
||||
GITEA_SHA: ${{ gitea.sha }}
|
||||
shell: bash
|
||||
run: |
|
||||
version="$(git rev-parse --short=12 "$GITEA_SHA")"
|
||||
if [[ ! "$version" =~ ^[0-9a-f]{12}$ ]]; then
|
||||
echo "Invalid git hash version: $version" >&2
|
||||
exit 1
|
||||
fi
|
||||
- name: Publish Docker image
|
||||
uses: ./.gitea/actions/publish-image
|
||||
with:
|
||||
tag: latest
|
||||
username: ${{ secrets.DOCKER_REGISTRY_USERNAME }}
|
||||
password: ${{ secrets.DOCKER_REGISTRY_PASSWORD }}
|
||||
|
||||
release_tag="v$version"
|
||||
releases_url="$GITEA_API_URL/repos/$GITEA_REPOSITORY/releases"
|
||||
auth_header="Authorization: token $GITEA_TOKEN"
|
||||
previous_tag="$(curl --fail --silent --show-error --header "$auth_header" "$releases_url?limit=100" | jq -r --arg tag "$release_tag" '[.[] | select(.draft == false and .prerelease == false and .tag_name != $tag)][0].tag_name // empty')"
|
||||
|
||||
if [ -n "$previous_tag" ]; then
|
||||
commit_messages="$(git log --reverse --format='- %s' "${previous_tag}..${GITEA_SHA}")"
|
||||
full_changelog="$GITEA_SERVER_URL/$GITEA_REPOSITORY/compare/${previous_tag}...$release_tag"
|
||||
else
|
||||
commit_messages="$(git log --reverse --format='- %s' "$GITEA_SHA")"
|
||||
full_changelog=""
|
||||
fi
|
||||
|
||||
if [ -z "$commit_messages" ]; then
|
||||
commit_messages="- No commits since the previous release"
|
||||
fi
|
||||
|
||||
{
|
||||
echo '## Changes'
|
||||
echo
|
||||
printf '%s\n' "$commit_messages"
|
||||
echo
|
||||
if [ -n "$full_changelog" ]; then
|
||||
echo "**Full Changelog**: $full_changelog"
|
||||
fi
|
||||
} > release-notes.md
|
||||
|
||||
payload="$(jq -Rs --arg tag "$release_tag" --arg target "$GITEA_SHA" '{tag_name: $tag, target_commitish: $target, name: $tag, body: ., draft: false, prerelease: false}' release-notes.md)"
|
||||
status="$(curl --silent --show-error --output release.json --write-out '%{http_code}' --header "$auth_header" "$releases_url/tags/$release_tag")"
|
||||
|
||||
if [ "$status" = 200 ]; then
|
||||
release_id="$(jq -r '.id' release.json)"
|
||||
curl --fail-with-body --silent --show-error --request PATCH --header "$auth_header" --header 'Content-Type: application/json' --data "$payload" "$releases_url/$release_id"
|
||||
elif [ "$status" = 404 ]; then
|
||||
curl --fail-with-body --silent --show-error --request POST --header "$auth_header" --header 'Content-Type: application/json' --data "$payload" "$releases_url"
|
||||
else
|
||||
cat release.json
|
||||
exit 1
|
||||
fi
|
||||
- name: Create Gitea stable release
|
||||
uses: ./.gitea/actions/create-release
|
||||
with:
|
||||
token: ${{ secrets.GITEA_TOKEN }}
|
||||
prerelease: 'false'
|
||||
Reference in new issue
Block a user