ci: share image and release actions

.gitea/actions/create-release/action.yml

@@ -0,0 +1,73 @@
+name: Create Gitea release
+description: Create or update a stable release or prerelease for the current commit
+inputs:
+  token:
+    required: true
+    description: Gitea API token
+  prerelease:
+    required: true
+    description: Whether to publish a prerelease
+runs:
+  using: composite
+  steps:
+    - name: Create or update Gitea release
+      shell: bash
+      env:
+        GITEA_TOKEN: ${{ inputs.token }}
+        GITEA_API_URL: ${{ gitea.api_url }}
+        GITEA_REPOSITORY: ${{ gitea.repository }}
+        GITEA_SERVER_URL: ${{ gitea.server_url }}
+        GITEA_SHA: ${{ gitea.sha }}
+        RELEASE_IS_PRERELEASE: ${{ inputs.prerelease }}
+      run: |
+        set -euo pipefail
+
+        version="$(git rev-parse --short=12 "$GITEA_SHA")"
+        if [[ ! "$version" =~ ^[0-9a-f]{12}$ ]]; then
+          echo "Invalid git hash version: $version" >&2
+          exit 1
+        fi
+
+        release_tag="v$version"
+        if [ "$RELEASE_IS_PRERELEASE" = true ]; then
+          release_tag="$release_tag-dev"
+        fi
+
+        releases_url="$GITEA_API_URL/repos/$GITEA_REPOSITORY/releases"
+        auth_header="Authorization: token $GITEA_TOKEN"
+        previous_tag="$(curl --fail --silent --show-error --header "$auth_header" "$releases_url?limit=100" | jq -r --arg tag "$release_tag" --argjson prerelease "$RELEASE_IS_PRERELEASE" '[.[] | select(.draft == false and .prerelease == $prerelease and .tag_name != $tag)][0].tag_name // empty')"
+
+        if [ -n "$previous_tag" ]; then
+          commit_messages="$(git log --reverse --format='- %s' "${previous_tag}..${GITEA_SHA}")"
+          full_changelog="$GITEA_SERVER_URL/$GITEA_REPOSITORY/compare/${previous_tag}...$release_tag"
+        else
+          commit_messages="$(git log --reverse --format='- %s' "$GITEA_SHA")"
+          full_changelog=""
+        fi
+
+        if [ -z "$commit_messages" ]; then
+          commit_messages="- No commits since the previous release"
+        fi
+
+        {
+          echo '## Changes'
+          echo
+          printf '%s\n' "$commit_messages"
+          echo
+          if [ -n "$full_changelog" ]; then
+            echo "**Full Changelog**: $full_changelog"
+          fi
+        } > release-notes.md
+
+        payload="$(jq -Rs --arg tag "$release_tag" --arg target "$GITEA_SHA" --argjson prerelease "$RELEASE_IS_PRERELEASE" '{tag_name: $tag, target_commitish: $target, name: $tag, body: ., draft: false, prerelease: $prerelease}' release-notes.md)"
+        status="$(curl --silent --show-error --output release.json --write-out '%{http_code}' --header "$auth_header" "$releases_url/tags/$release_tag")"
+
+        if [ "$status" = 200 ]; then
+          release_id="$(jq -r '.id' release.json)"
+          curl --fail-with-body --silent --show-error --request PATCH --header "$auth_header" --header 'Content-Type: application/json' --data "$payload" "$releases_url/$release_id"
+        elif [ "$status" = 404 ]; then
+          curl --fail-with-body --silent --show-error --request POST --header "$auth_header" --header 'Content-Type: application/json' --data "$payload" "$releases_url"
+        else
+          cat release.json
+          exit 1
+        fi

.gitea/actions/publish-image/action.yml

@@ -0,0 +1,39 @@
+name: Publish Docker image
+description: Build and push the maintenance image
+inputs:
+  tag:
+    required: true
+    description: Docker image tag
+  username:
+    required: true
+    description: Registry username
+  password:
+    required: true
+    description: Registry password
+runs:
+  using: composite
+  steps:
+    - name: Set up Docker Buildx
+      uses: docker/setup-buildx-action@v4.4.1
+
+    - name: Log in to registry
+      shell: bash
+      env:
+        REGISTRY_USERNAME: ${{ inputs.username }}
+        REGISTRY_PASSWORD: ${{ inputs.password }}
+      run: printf '%s' "$REGISTRY_PASSWORD" | docker login "$REGISTRY" --username "$REGISTRY_USERNAME" --password-stdin
+
+    - name: Build and push image
+      uses: docker/build-push-action@v7.4.0
+      with:
+        context: .
+        push: true
+        provenance: false
+        build-args: |
+          APP_VERSION=${{ gitea.sha }}
+          VCS_REF=${{ gitea.sha }}
+        tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ inputs.tag }}
+        labels: |
+          org.opencontainers.image.version=${{ gitea.sha }}
+          org.opencontainers.image.revision=${{ gitea.sha }}
+          org.opencontainers.image.source=${{ gitea.repositoryUrl }}

.gitea/workflows/CD Development.yml

@@ -6,7 +6,7 @@ on:
   workflow_dispatch:
 
 permissions:
-  contents: read
+  contents: write
   actions: read
 
 env:
@@ -40,36 +40,25 @@ jobs:
             echo 'Changes found; development release will run.'
           fi
 
-  image:
+  publish:
     needs: changes
     if: needs.changes.outputs.changed == 'true'
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
         uses: actions/checkout@v7.0.1
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4.4.1
-
-      - name: Log in to registry
-        env:
-          REGISTRY_USERNAME: ${{ secrets.DOCKER_REGISTRY_USERNAME }}
-          REGISTRY_PASSWORD: ${{ secrets.DOCKER_REGISTRY_PASSWORD }}
-        run: printf '%s' "$REGISTRY_PASSWORD" | docker login "$REGISTRY" --username "$REGISTRY_USERNAME" --password-stdin
-
-      - name: Build and push development image
-        uses: docker/build-push-action@v7.4.0
         with:
-          context: .
+          fetch-depth: 0
-          push: true
+
-          provenance: false
+      - name: Publish Docker image
-          build-args: |
+        uses: ./.gitea/actions/publish-image
-            APP_VERSION=${{ gitea.sha }}
+        with:
-            VCS_REF=${{ gitea.sha }}
+          tag: dev
-          tags: |
+          username: ${{ secrets.DOCKER_REGISTRY_USERNAME }}
-            ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:dev
+          password: ${{ secrets.DOCKER_REGISTRY_PASSWORD }}
-            ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:PreRelease
+
-          labels: |
+      - name: Create Gitea prerelease
-            org.opencontainers.image.version=${{ gitea.sha }}
+        uses: ./.gitea/actions/create-release
-            org.opencontainers.image.revision=${{ gitea.sha }}
+        with:
-            org.opencontainers.image.source=${{ gitea.repositoryUrl }}
+          token: ${{ secrets.GITEA_TOKEN }}
+          prerelease: 'true'

.gitea/workflows/CD Production.yml

@@ -11,40 +11,7 @@ env:
   IMAGE_NAME: lechnersystems/maintenance
 
 jobs:
-  image:
+  publish:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v7.0.1
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4.4.1
-
-      - name: Log in to registry
-        env:
-          REGISTRY_USERNAME: ${{ secrets.DOCKER_REGISTRY_USERNAME }}
-          REGISTRY_PASSWORD: ${{ secrets.DOCKER_REGISTRY_PASSWORD }}
-        run: printf '%s' "$REGISTRY_PASSWORD" | docker login "$REGISTRY" --username "$REGISTRY_USERNAME" --password-stdin
-
-      - name: Build and push production image
-        uses: docker/build-push-action@v7.4.0
-        with:
-          context: .
-          push: true
-          provenance: false
-          build-args: |
-            APP_VERSION=${{ gitea.sha }}
-            VCS_REF=${{ gitea.sha }}
-          tags: |
-            ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
-            ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:Release
-          labels: |
-            org.opencontainers.image.version=${{ gitea.sha }}
-            org.opencontainers.image.revision=${{ gitea.sha }}
-            org.opencontainers.image.source=${{ gitea.repositoryUrl }}
-
-  release:
-    needs: image
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
@@ -52,57 +19,15 @@ jobs:
         with:
           fetch-depth: 0
 
-      - name: Create or update Gitea release
+      - name: Publish Docker image
-        env:
+        uses: ./.gitea/actions/publish-image
-          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
+        with:
-          GITEA_API_URL: ${{ gitea.api_url }}
+          tag: latest
-          GITEA_REPOSITORY: ${{ gitea.repository }}
+          username: ${{ secrets.DOCKER_REGISTRY_USERNAME }}
-          GITEA_SERVER_URL: ${{ gitea.server_url }}
+          password: ${{ secrets.DOCKER_REGISTRY_PASSWORD }}
-          GITEA_SHA: ${{ gitea.sha }}
-        shell: bash
-        run: |
-          version="$(git rev-parse --short=12 "$GITEA_SHA")"
-          if [[ ! "$version" =~ ^[0-9a-f]{12}$ ]]; then
-            echo "Invalid git hash version: $version" >&2
-            exit 1
-          fi
 
-          release_tag="v$version"
+      - name: Create Gitea stable release
-          releases_url="$GITEA_API_URL/repos/$GITEA_REPOSITORY/releases"
+        uses: ./.gitea/actions/create-release
-          auth_header="Authorization: token $GITEA_TOKEN"
+        with:
-          previous_tag="$(curl --fail --silent --show-error --header "$auth_header" "$releases_url?limit=100" | jq -r --arg tag "$release_tag" '[.[] | select(.draft == false and .prerelease == false and .tag_name != $tag)][0].tag_name // empty')"
+          token: ${{ secrets.GITEA_TOKEN }}
-
+          prerelease: 'false'
-          if [ -n "$previous_tag" ]; then
-            commit_messages="$(git log --reverse --format='- %s' "${previous_tag}..${GITEA_SHA}")"
-            full_changelog="$GITEA_SERVER_URL/$GITEA_REPOSITORY/compare/${previous_tag}...$release_tag"
-          else
-            commit_messages="$(git log --reverse --format='- %s' "$GITEA_SHA")"
-            full_changelog=""
-          fi
-
-          if [ -z "$commit_messages" ]; then
-            commit_messages="- No commits since the previous release"
-          fi
-
-          {
-            echo '## Changes'
-            echo
-            printf '%s\n' "$commit_messages"
-            echo
-            if [ -n "$full_changelog" ]; then
-              echo "**Full Changelog**: $full_changelog"
-            fi
-          } > release-notes.md
-
-          payload="$(jq -Rs --arg tag "$release_tag" --arg target "$GITEA_SHA" '{tag_name: $tag, target_commitish: $target, name: $tag, body: ., draft: false, prerelease: false}' release-notes.md)"
-          status="$(curl --silent --show-error --output release.json --write-out '%{http_code}' --header "$auth_header" "$releases_url/tags/$release_tag")"
-
-          if [ "$status" = 200 ]; then
-            release_id="$(jq -r '.id' release.json)"
-            curl --fail-with-body --silent --show-error --request PATCH --header "$auth_header" --header 'Content-Type: application/json' --data "$payload" "$releases_url/$release_id"
-          elif [ "$status" = 404 ]; then
-            curl --fail-with-body --silent --show-error --request POST --header "$auth_header" --header 'Content-Type: application/json' --data "$payload" "$releases_url"
-          else
-            cat release.json
-            exit 1
-          fi