-
Notifications
You must be signed in to change notification settings - Fork 0
147 lines (128 loc) · 5.12 KB
/
docker-publish.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
name: Docker
# This workflow uses actions that are not certified by GitHub.
# They are provided by a third-party and are governed by
# separate terms of service, privacy policy, and support
# documentation.
on:
schedule:
- cron: '44 0 * * *'
push:
branches: [ "main" ]
# Publish semver tags as releases.
pull_request:
branches: [ "main" ]
release:
types: [published]
env:
# Sets the Docker registry
DOCKER_REGISTRY: docker.io
# Sets the GitHub registry
GITHUB_REGISTRY: ghcr.io
# github.repository as <account>/<repo>
IMAGE_NAME: minionguyjpro/kernelos_buildtools
jobs:
build:
runs-on: ubuntu-latest
permissions:
contents: read
packages: write
# This is used to complete the identity challenge
# with sigstore/fulcio when running outside of PRs.
id-token: write
steps:
- name: Checkout repository
uses: actions/checkout@v3
# Install the cosign tool except on PR
# https://github.com/sigstore/cosign-installer
- name: Install cosign
if: github.event_name != 'pull_request'
uses: sigstore/[email protected]
with:
cosign-release: 'v1.11.0'
# Workaround: https://github.com/docker/build-push-action/issues/461
- name: Setup Docker buildx
uses: docker/[email protected]
# Login against the Docker registry except on PR
# https://github.com/docker/login-action
- name: Log into registry ${{ env.DOCKER_REGISTRY }}
if: github.event_name != 'pull_request'
uses: docker/[email protected]
with:
registry: ${{ env.DOCKER_REGISTRY }}
username: ${{ secrets.DOCKER_USERNAME }}
password: ${{ secrets.DOCKER_PASSWORD }}
# Login against the GitHub registry except on PR
# https://github.com/docker/login-action
- name: Log into registry ${{ env.GITHUB_REGISTRY }}
if: github.event_name != 'pull_request'
uses: docker/[email protected]
with:
registry: ${{ env.GITHUB_REGISTRY }}
username: The-Kernel-Brothers
password: ${{ secrets.GITHUB_TOKEN }}
# Extract metadata (tags, labels) for Docker
# https://github.com/docker/metadata-action
- name: Extract Docker metadata (Docker Registry)
id: meta_docker
uses: docker/[email protected]
with:
images: ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME }}
# Extract metadata (tags, labels) for GitHub
# https://github.com/docker/metadata-action
- name: Extract Docker metadata (GitHub Registry)
id: meta_github
uses: docker/[email protected]
with:
images: ${{ env.GITHUB_REGISTRY }}/the-kernel-brothers/kernelos_buildtools
# Build and push Docker image with Buildx (don't push on PR)
# https://github.com/docker/build-push-action
- name: Build and push Docker image (Docker registry)
id: build-and-push_docker
uses: docker/[email protected]
with:
context: .
push: ${{ github.event_name != 'pull_request' }}
tags: ${{ steps.meta_docker.outputs.tags }}
labels: ${{ steps.meta_docker.outputs.labels }}
cache-from: type=gha
cache-to: type=gha,mode=max
if: ${{ github.event_name != 'release' }}
# Build and push Docker image with Buildx (don't push on PR)
# https://github.com/docker/build-push-action
- name: Build and push Docker image on release (Docker registry)
id: build-and-push_docker_release
uses: docker/[email protected]
with:
context: .
push: ${{ github.event_name != 'pull_request' }}
tags: minionguyjpro/kernelos_buildtools:latest
labels: ${{ steps.meta_docker.outputs.labels }}
cache-from: type=gha
cache-to: type=gha,mode=max
if: ${{ github.event_name == 'release' }}
# Build and push Docker image with Buildx (don't push on PR)
# https://github.com/docker/build-push-action
- name: Build and push Docker image (GitHub registry)
id: build-and-push
uses: docker/[email protected]
with:
context: .
push: ${{ github.event_name != 'pull_request' }}
tags: ${{ steps.meta_github.outputs.tags }}
labels: ${{ steps.meta_github.outputs.labels }}
cache-from: type=gha
cache-to: type=gha,mode=max
if: ${{ github.event_name != 'release' }}
# Build and push Docker image with Buildx (don't push on PR)
# https://github.com/docker/build-push-action
- name: Build and push Docker image on release (GitHub registry)
id: build-and-push_release
uses: docker/[email protected]
with:
context: .
push: ${{ github.event_name != 'pull_request' }}
tags: ghcr.io/the-kernel-brothers/kernelos_buildtools:latest
labels: ${{ steps.meta_github.outputs.labels }}
cache-from: type=gha
cache-to: type=gha,mode=max
if: ${{ github.event_name == 'release' }}