From b76d612d55aecf923b3123b6fc2b8e1d463e41db Mon Sep 17 00:00:00 2001 From: Julian Lechner Date: Fri, 2 Oct 2026 15:08:27 +0200 Subject: [PATCH] ci: share image and release actions --- .gitea/actions/create-release/action.yml | 73 +++++++++++++++++ .gitea/actions/publish-image/action.yml | 39 ++++++++++ .gitea/workflows/CD Development.yml | 43 ++++------ .gitea/workflows/CD Production.yml | 99 +++--------------------- 4 files changed, 140 insertions(+), 114 deletions(-) create mode 100644 .gitea/actions/create-release/action.yml create mode 100644 .gitea/actions/publish-image/action.yml diff --git a/.gitea/actions/create-release/action.yml b/.gitea/actions/create-release/action.yml new file mode 100644 index 0000000..be91d11 --- /dev/null +++ b/.gitea/actions/create-release/action.yml @@ -0,0 +1,73 @@ +name: Create Gitea release +description: Create or update a stable release or prerelease for the current commit +inputs: + token: + required: true + description: Gitea API token + prerelease: + required: true + description: Whether to publish a prerelease +runs: + using: composite + steps: + - name: Create or update Gitea release + shell: bash + env: + GITEA_TOKEN: ${{ inputs.token }} + GITEA_API_URL: ${{ gitea.api_url }} + GITEA_REPOSITORY: ${{ gitea.repository }} + GITEA_SERVER_URL: ${{ gitea.server_url }} + GITEA_SHA: ${{ gitea.sha }} + RELEASE_IS_PRERELEASE: ${{ inputs.prerelease }} + run: | + set -euo pipefail + + version="$(git rev-parse --short=12 "$GITEA_SHA")" + if [[ ! "$version" =~ ^[0-9a-f]{12}$ ]]; then + echo "Invalid git hash version: $version" >&2 + exit 1 + fi + + release_tag="v$version" + if [ "$RELEASE_IS_PRERELEASE" = true ]; then + release_tag="$release_tag-dev" + fi + + releases_url="$GITEA_API_URL/repos/$GITEA_REPOSITORY/releases" + auth_header="Authorization: token $GITEA_TOKEN" + previous_tag="$(curl --fail --silent --show-error --header "$auth_header" "$releases_url?limit=100" | jq -r --arg tag "$release_tag" --argjson prerelease "$RELEASE_IS_PRERELEASE" '[.[] | select(.draft == false and .prerelease == $prerelease and .tag_name != $tag)][0].tag_name // empty')" + + if [ -n "$previous_tag" ]; then + commit_messages="$(git log --reverse --format='- %s' "${previous_tag}..${GITEA_SHA}")" + full_changelog="$GITEA_SERVER_URL/$GITEA_REPOSITORY/compare/${previous_tag}...$release_tag" + else + commit_messages="$(git log --reverse --format='- %s' "$GITEA_SHA")" + full_changelog="" + fi + + if [ -z "$commit_messages" ]; then + commit_messages="- No commits since the previous release" + fi + + { + echo '## Changes' + echo + printf '%s\n' "$commit_messages" + echo + if [ -n "$full_changelog" ]; then + echo "**Full Changelog**: $full_changelog" + fi + } > release-notes.md + + payload="$(jq -Rs --arg tag "$release_tag" --arg target "$GITEA_SHA" --argjson prerelease "$RELEASE_IS_PRERELEASE" '{tag_name: $tag, target_commitish: $target, name: $tag, body: ., draft: false, prerelease: $prerelease}' release-notes.md)" + status="$(curl --silent --show-error --output release.json --write-out '%{http_code}' --header "$auth_header" "$releases_url/tags/$release_tag")" + + if [ "$status" = 200 ]; then + release_id="$(jq -r '.id' release.json)" + curl --fail-with-body --silent --show-error --request PATCH --header "$auth_header" --header 'Content-Type: application/json' --data "$payload" "$releases_url/$release_id" + elif [ "$status" = 404 ]; then + curl --fail-with-body --silent --show-error --request POST --header "$auth_header" --header 'Content-Type: application/json' --data "$payload" "$releases_url" + else + cat release.json + exit 1 + fi diff --git a/.gitea/actions/publish-image/action.yml b/.gitea/actions/publish-image/action.yml new file mode 100644 index 0000000..faa1672 --- /dev/null +++ b/.gitea/actions/publish-image/action.yml @@ -0,0 +1,39 @@ +name: Publish Docker image +description: Build and push the maintenance image +inputs: + tag: + required: true + description: Docker image tag + username: + required: true + description: Registry username + password: + required: true + description: Registry password +runs: + using: composite + steps: + - name: Set up Docker Buildx + uses: docker/setup-buildx-action@v4.4.1 + + - name: Log in to registry + shell: bash + env: + REGISTRY_USERNAME: ${{ inputs.username }} + REGISTRY_PASSWORD: ${{ inputs.password }} + run: printf '%s' "$REGISTRY_PASSWORD" | docker login "$REGISTRY" --username "$REGISTRY_USERNAME" --password-stdin + + - name: Build and push image + uses: docker/build-push-action@v7.4.0 + with: + context: . + push: true + provenance: false + build-args: | + APP_VERSION=${{ gitea.sha }} + VCS_REF=${{ gitea.sha }} + tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ inputs.tag }} + labels: | + org.opencontainers.image.version=${{ gitea.sha }} + org.opencontainers.image.revision=${{ gitea.sha }} + org.opencontainers.image.source=${{ gitea.repositoryUrl }} diff --git a/.gitea/workflows/CD Development.yml b/.gitea/workflows/CD Development.yml index b168de5..e9ef193 100644 --- a/.gitea/workflows/CD Development.yml +++ b/.gitea/workflows/CD Development.yml @@ -6,7 +6,7 @@ on: workflow_dispatch: permissions: - contents: read + contents: write actions: read env: @@ -40,36 +40,25 @@ jobs: echo 'Changes found; development release will run.' fi - image: + publish: needs: changes if: needs.changes.outputs.changed == 'true' runs-on: ubuntu-latest steps: - name: Checkout repository uses: actions/checkout@v7.0.1 - - - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v4.4.1 - - - name: Log in to registry - env: - REGISTRY_USERNAME: ${{ secrets.DOCKER_REGISTRY_USERNAME }} - REGISTRY_PASSWORD: ${{ secrets.DOCKER_REGISTRY_PASSWORD }} - run: printf '%s' "$REGISTRY_PASSWORD" | docker login "$REGISTRY" --username "$REGISTRY_USERNAME" --password-stdin - - - name: Build and push development image - uses: docker/build-push-action@v7.4.0 with: - context: . - push: true - provenance: false - build-args: | - APP_VERSION=${{ gitea.sha }} - VCS_REF=${{ gitea.sha }} - tags: | - ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:dev - ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:PreRelease - labels: | - org.opencontainers.image.version=${{ gitea.sha }} - org.opencontainers.image.revision=${{ gitea.sha }} - org.opencontainers.image.source=${{ gitea.repositoryUrl }} + fetch-depth: 0 + + - name: Publish Docker image + uses: ./.gitea/actions/publish-image + with: + tag: dev + username: ${{ secrets.DOCKER_REGISTRY_USERNAME }} + password: ${{ secrets.DOCKER_REGISTRY_PASSWORD }} + + - name: Create Gitea prerelease + uses: ./.gitea/actions/create-release + with: + token: ${{ secrets.GITEA_TOKEN }} + prerelease: 'true' diff --git a/.gitea/workflows/CD Production.yml b/.gitea/workflows/CD Production.yml index 977f397..9698343 100644 --- a/.gitea/workflows/CD Production.yml +++ b/.gitea/workflows/CD Production.yml @@ -11,40 +11,7 @@ env: IMAGE_NAME: lechnersystems/maintenance jobs: - image: - runs-on: ubuntu-latest - steps: - - name: Checkout repository - uses: actions/checkout@v7.0.1 - - - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v4.4.1 - - - name: Log in to registry - env: - REGISTRY_USERNAME: ${{ secrets.DOCKER_REGISTRY_USERNAME }} - REGISTRY_PASSWORD: ${{ secrets.DOCKER_REGISTRY_PASSWORD }} - run: printf '%s' "$REGISTRY_PASSWORD" | docker login "$REGISTRY" --username "$REGISTRY_USERNAME" --password-stdin - - - name: Build and push production image - uses: docker/build-push-action@v7.4.0 - with: - context: . - push: true - provenance: false - build-args: | - APP_VERSION=${{ gitea.sha }} - VCS_REF=${{ gitea.sha }} - tags: | - ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest - ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:Release - labels: | - org.opencontainers.image.version=${{ gitea.sha }} - org.opencontainers.image.revision=${{ gitea.sha }} - org.opencontainers.image.source=${{ gitea.repositoryUrl }} - - release: - needs: image + publish: runs-on: ubuntu-latest steps: - name: Checkout repository @@ -52,57 +19,15 @@ jobs: with: fetch-depth: 0 - - name: Create or update Gitea release - env: - GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }} - GITEA_API_URL: ${{ gitea.api_url }} - GITEA_REPOSITORY: ${{ gitea.repository }} - GITEA_SERVER_URL: ${{ gitea.server_url }} - GITEA_SHA: ${{ gitea.sha }} - shell: bash - run: | - version="$(git rev-parse --short=12 "$GITEA_SHA")" - if [[ ! "$version" =~ ^[0-9a-f]{12}$ ]]; then - echo "Invalid git hash version: $version" >&2 - exit 1 - fi + - name: Publish Docker image + uses: ./.gitea/actions/publish-image + with: + tag: latest + username: ${{ secrets.DOCKER_REGISTRY_USERNAME }} + password: ${{ secrets.DOCKER_REGISTRY_PASSWORD }} - release_tag="v$version" - releases_url="$GITEA_API_URL/repos/$GITEA_REPOSITORY/releases" - auth_header="Authorization: token $GITEA_TOKEN" - previous_tag="$(curl --fail --silent --show-error --header "$auth_header" "$releases_url?limit=100" | jq -r --arg tag "$release_tag" '[.[] | select(.draft == false and .prerelease == false and .tag_name != $tag)][0].tag_name // empty')" - - if [ -n "$previous_tag" ]; then - commit_messages="$(git log --reverse --format='- %s' "${previous_tag}..${GITEA_SHA}")" - full_changelog="$GITEA_SERVER_URL/$GITEA_REPOSITORY/compare/${previous_tag}...$release_tag" - else - commit_messages="$(git log --reverse --format='- %s' "$GITEA_SHA")" - full_changelog="" - fi - - if [ -z "$commit_messages" ]; then - commit_messages="- No commits since the previous release" - fi - - { - echo '## Changes' - echo - printf '%s\n' "$commit_messages" - echo - if [ -n "$full_changelog" ]; then - echo "**Full Changelog**: $full_changelog" - fi - } > release-notes.md - - payload="$(jq -Rs --arg tag "$release_tag" --arg target "$GITEA_SHA" '{tag_name: $tag, target_commitish: $target, name: $tag, body: ., draft: false, prerelease: false}' release-notes.md)" - status="$(curl --silent --show-error --output release.json --write-out '%{http_code}' --header "$auth_header" "$releases_url/tags/$release_tag")" - - if [ "$status" = 200 ]; then - release_id="$(jq -r '.id' release.json)" - curl --fail-with-body --silent --show-error --request PATCH --header "$auth_header" --header 'Content-Type: application/json' --data "$payload" "$releases_url/$release_id" - elif [ "$status" = 404 ]; then - curl --fail-with-body --silent --show-error --request POST --header "$auth_header" --header 'Content-Type: application/json' --data "$payload" "$releases_url" - else - cat release.json - exit 1 - fi + - name: Create Gitea stable release + uses: ./.gitea/actions/create-release + with: + token: ${{ secrets.GITEA_TOKEN }} + prerelease: 'false'