Docker Push #557
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "Docker Push" | |
| on: | |
| release: | |
| types: [published] | |
| workflow_dispatch: | |
| inputs: | |
| force_rebuild: | |
| description: 'Force container rebuild' | |
| required: true | |
| type: choice | |
| options: [yes, no] | |
| schedule: | |
| - cron: '30 12 * * *' | |
| permissions: | |
| packages: write | |
| contents: read | |
| env: | |
| IMAGE_NAME: ${{ github.repository }} | |
| LATEST_IMAGE: ol8 | |
| jobs: | |
| Docker: | |
| name: Docker Build & Publish | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| image: [ 'ol8', 'ol9', 'node-ol8', 'node-ol9' ] | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| - name: Login to DockerHub | |
| uses: docker/login-action@v3 | |
| with: | |
| username: ${{ secrets.DOCKERHUB_USERNAME }} | |
| password: ${{ secrets.DOCKERHUB_TOKEN }} | |
| - name: Login to GitHub Container Registry | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Login to Yandex Container Registry | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: cr.yandex | |
| username: oauth | |
| password: ${{ secrets.YC_TOKEN }} | |
| - name: Checkout the latest tag | |
| run: | | |
| rev=$(git rev-list --tags --max-count=1) | |
| tag=$(git describe --tags "$rev") | |
| if [[ -z "$tag" ]] ; then | |
| echo "::error::Can't find the latest tag" | |
| exit 1 | |
| fi | |
| echo -e "\033[34mRev:\033[0m $rev" | |
| echo -e "\033[34mTag:\033[0m $tag" | |
| git checkout "$tag" | |
| - name: Prepare metadata for build | |
| id: metadata | |
| run: | | |
| rev=$(git rev-list --tags --max-count=1) | |
| version=$(git describe --tags "$rev" | tr -d 'v') | |
| if [[ -z "$version" ]] ; then | |
| echo "::error::Can't find version info" | |
| exit 1 | |
| fi | |
| docker_file=".docker/${{matrix.image}}.docker" | |
| base_image=$(grep 'FROM ' $docker_file | grep -v 'builder' | sed 's#${REGISTRY}/##' | tail -1 | cut -f2 -d' ') | |
| if [[ -z "$base_image" ]] ; then | |
| echo "::error::Can't extract base image info" | |
| exit 1 | |
| fi | |
| dh_tags="${{env.IMAGE_NAME}}:${{matrix.image}}-$version,${{env.IMAGE_NAME}}:${{matrix.image}}" | |
| gh_tags="ghcr.io/${{env.IMAGE_NAME}}:${{matrix.image}}-$version,ghcr.io/${{env.IMAGE_NAME}}:${{matrix.image}}" | |
| yc_tags="cr.yandex/${{secrets.YC_REGISTRY_ID}}/${{github.event.repository.name}}:${{matrix.image}}-$version,cr.yandex/${{secrets.YC_REGISTRY_ID}}/${{github.event.repository.name}}:${{matrix.image}}" | |
| if [[ -n "${{env.LATEST_IMAGE}}" && "${{env.LATEST_IMAGE}}" == "${{matrix.image}}" ]] ; then | |
| dh_tags="$dh_tags,${{env.IMAGE_NAME}}:latest" | |
| gh_tags="$gh_tags,ghcr.io/${{env.IMAGE_NAME}}:latest" | |
| yc_tags="$yc_tags,cr.yandex/${{secrets.YC_REGISTRY_ID}}/${{github.event.repository.name}}:latest" | |
| fi | |
| echo "version=$version" >> $GITHUB_OUTPUT | |
| echo "dockerfile=$docker_file" >> $GITHUB_OUTPUT | |
| echo "baseimage=$base_image" >> $GITHUB_OUTPUT | |
| echo "dh_tags=$dh_tags" >> $GITHUB_OUTPUT | |
| echo "gh_tags=$gh_tags" >> $GITHUB_OUTPUT | |
| echo "yc_tags=$yc_tags" >> $GITHUB_OUTPUT | |
| echo -e "\033[34mVersion:\033[0m $version" | |
| echo -e "\033[34mDockerfile:\033[0m $docker_file" | |
| echo -e "\033[34mBase image:\033[0m $base_image" | |
| echo -e "\033[34mDH Tags:\033[0m $dh_tags" | |
| echo -e "\033[34mGHCR Tags:\033[0m $gh_tags" | |
| - name: Check if build/rebuild is required | |
| id: build_check | |
| run: | | |
| if [[ "${{github.event_name}}" == "release" ]] ; then | |
| echo "build=true" >> $GITHUB_OUTPUT | |
| exit 0 | |
| fi | |
| if [[ "${{ github.event.inputs.force_rebuild }}" == "true" ]] ; then | |
| echo "::warning::Rebuild ${{matrix.version}} (reason: forced rebuild)" | |
| echo "build=true" >> $GITHUB_OUTPUT | |
| exit 0 | |
| fi | |
| echo -e "::group::\033[34mDownloading built image…\033[0m" | |
| if ! docker pull ghcr.io/${{env.IMAGE_NAME}}:${{matrix.image}} ; then | |
| echo "::error::Can't download image ghcr.io/${{env.IMAGE_NAME}}:${{matrix.image}}" | |
| exit 1 | |
| fi | |
| echo "::endgroup::" | |
| echo -e "::group::\033[34mDownloading base image…\033[0m" | |
| if ! docker pull ${{steps.metadata.outputs.baseimage}} ; then | |
| echo "::error::Can't download image ${{steps.metadata.outputs.baseimage}}" | |
| exit 1 | |
| fi | |
| echo "::endgroup::" | |
| base_layer=$(docker inspect "${{steps.metadata.outputs.baseimage}}" | jq -r '.[0].RootFS.Layers[-1]') | |
| if [[ -z "$base_layer" ]] ; then | |
| echo "::error::Can't extract layers info from base image" | |
| exit 1 | |
| fi | |
| if ! docker inspect "ghcr.io/${{env.IMAGE_NAME}}:${{matrix.image}}" | jq -r '.[0].RootFS.Layers' | grep -q "$base_layer" ; then | |
| echo "::warning::Rebuild image (reason: base image rebuilt)" | |
| echo "build=true" >> $GITHUB_OUTPUT | |
| exit 0 | |
| fi | |
| - name: Build and push image | |
| if: ${{ steps.build_check.outputs.build == 'true' }} | |
| uses: docker/build-push-action@v6 | |
| with: | |
| push: true | |
| context: . | |
| file: ${{steps.metadata.outputs.dockerfile}} | |
| build-args: | | |
| REGISTRY=ghcr.io | |
| tags: | | |
| ${{ steps.metadata.outputs.dh_tags }} | |
| ${{ steps.metadata.outputs.gh_tags }} | |
| ${{ steps.metadata.outputs.yc_tags }} | |
| - name: Show info about built image | |
| if: ${{ steps.build_check.outputs.build == 'true' }} | |
| uses: essentialkaos/docker-info-action@v1 | |
| with: | |
| image: ghcr.io/${{env.IMAGE_NAME}}:${{matrix.image}} | |
| show-labels: true |