WIP
This commit is contained in:
parent
12122870c3
commit
ec70398266
43
.github/unused/actions-base.Dockerfile
vendored
43
.github/unused/actions-base.Dockerfile
vendored
@ -1,43 +0,0 @@
|
||||
FROM node:22-bookworm-slim
|
||||
|
||||
#Use an entrypoint that simply lists out all commands sent to it
|
||||
COPY entryPoint.sh /src/fab/entryPoint.sh
|
||||
ENTRYPOINT ["/src/fab/entryPoint.sh"]
|
||||
|
||||
#node:18 image already has a user node with uid:gid 1000:1000
|
||||
#We add it to sudo list
|
||||
RUN export DEBIAN_FRONTEND="noninteractive" \
|
||||
&& apt-get update \
|
||||
&& apt-get install -y \
|
||||
# sudo \
|
||||
less \
|
||||
#Neededd for git commits during builds
|
||||
# git \
|
||||
#Needed for triggering next step of builds
|
||||
# curl \
|
||||
&& rm -rf /var/lib/apt/lists/* \
|
||||
# && usermod -aG sudo node \
|
||||
# && echo '%sudo ALL=(ALL) NOPASSWD:ALL' >> /etc/sudoers \
|
||||
#Creating a few base folders that child dockers may need
|
||||
&& mkdir -p /src && chown node /src \
|
||||
&& mkdir -p /cloud && chown node /cloud \
|
||||
&& mkdir -p /build && chown node /build \
|
||||
# && npm install -g npm@10.8.2 \
|
||||
&& npm install -g pnpm
|
||||
|
||||
USER node
|
||||
|
||||
# upgrade pnpm to latest version
|
||||
#&& source ~/.bashrc \ #doesn't work
|
||||
#Also, "pnpm add -g pnpm" needs be in "~" to work - it doesn't work from "/" dir (not sure why).
|
||||
RUN SHELL=bash pnpm setup \
|
||||
&& export PNPM_HOME="~/.local/share/pnpm" && export PATH="$PNPM_HOME:$PATH" \
|
||||
&& cd ~ && pnpm add -g pnpm
|
||||
|
||||
RUN echo '\nalias p="pnpm"' >> ~/.bashrc
|
||||
|
||||
WORKDIR /src
|
||||
|
||||
#Allow image to be used standalone without any commands:
|
||||
CMD ["tail", "-f", "/dev/null"]
|
||||
#CMD ["sleep", "inf"]
|
||||
43
.github/unused/build-base-image.yml
vendored
43
.github/unused/build-base-image.yml
vendored
@ -1,43 +0,0 @@
|
||||
name: Build the docker base image weekly
|
||||
# on: [push]
|
||||
|
||||
on:
|
||||
push:
|
||||
# branches:
|
||||
# - main
|
||||
schedule:
|
||||
- cron: "0 6 * * 5" #Every Friday@11:30 AM IST (6:00 GMT)
|
||||
# Cron: Minute(0-59) Hour(0-23) DayOfMonth(1-31) MonthOfYear(1-12) DayOfWeek(0-6)
|
||||
|
||||
env:
|
||||
DOCKER_REGISTRY: ${{ vars.docker_repo2_registry }}
|
||||
REPO: ${{ github.repository }}
|
||||
DOCKER_IMAGE: ${{ vars.docker_repo2_registry }}/${{ github.repository }}:base-v2
|
||||
|
||||
jobs:
|
||||
|
||||
docker-build-and-push:
|
||||
runs-on: ubuntu-22.04 #ubuntu-latest
|
||||
# if: ${{ github.event_name == 'push' }}
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
|
||||
- name: Login to Docker Container Registry
|
||||
# if: ${{ github.event_name == 'push' }}
|
||||
uses: docker/login-action@v3
|
||||
with:
|
||||
registry: ${{ vars.docker_repo2_registry }}
|
||||
username: ${{ vars.docker_repo2_username }}
|
||||
password: ${{ vars.docker_repo2_password }}
|
||||
|
||||
- name: Build the Base Docker image
|
||||
run: |
|
||||
docker build \
|
||||
--file fab/d/actions-base.Dockerfile \
|
||||
--tag $DOCKER_IMAGE \
|
||||
./fab/context/;
|
||||
|
||||
- name: Push the Docker image
|
||||
# if: ${{ github.event_name == 'push' }}
|
||||
run: |
|
||||
docker push $DOCKER_IMAGE
|
||||
32
.github/unused/demo.yml
vendored
32
.github/unused/demo.yml
vendored
@ -1,32 +0,0 @@
|
||||
name: Gitea Actions Demo
|
||||
run-name: ${{ github.actor }} is testing out Gitea Actions 🚀
|
||||
on: [push]
|
||||
|
||||
jobs:
|
||||
Explore-Gitea-Actions:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- run: echo "🎉 The job was automatically triggered by a ${{ github.event_name }} event."
|
||||
- run: echo "🐧 This job is now running on a ${{ runner.os }} server hosted by Gitea!"
|
||||
- run: echo "🔎 The name of your branch is ${{ github.ref }} and your repository is ${{ github.repository }}."
|
||||
- name: Check out repository code
|
||||
uses: actions/checkout@v4
|
||||
- run: echo "💡 The ${{ github.repository }} repository has been cloned to the runner."
|
||||
- run: echo "🖥️ The workflow is now ready to test your code on the runner."
|
||||
- name: List files in the repository
|
||||
run: |
|
||||
ls ${{ github.workspace }}
|
||||
echo "var.DOCKER_REPO2_REGISTRY" repo2.hub.gmetri.io
|
||||
echo "github.repository" ${{ github.repository }}
|
||||
echo "github.ref_name" ${{ github.ref_name }}
|
||||
|
||||
- run: echo "🍏 This job's status is ${{ job.status }}."
|
||||
|
||||
# Gitea action runners
|
||||
|
||||
# - "ubuntu-latest:docker://repo2.hub.gmetri.io/gitea/runner-images:ubuntu-latest"
|
||||
# - "ubuntu-22.04:docker://repo2.hub.gmetri.io/gitea/runner-images:ubuntu-22.04"
|
||||
# - "ubuntu-20.04:docker://repo2.hub.gmetri.io/gitea/runner-images:ubuntu-20.04"
|
||||
# - "ubuntu-latest-slim:docker://repo2.hub.gmetri.io/gitea/runner-images:ubuntu-latest-slim"
|
||||
# - "ubuntu-22.04-slim:docker://repo2.hub.gmetri.io/gitea/runner-images:ubuntu-22.04-slim"
|
||||
# - "ubuntu-20.04-slim:docker://repo2.hub.gmetri.io/gitea/runner-images:ubuntu-20.04-slim"
|
||||
91
.github/unused/docker-publish.yml
vendored
91
.github/unused/docker-publish.yml
vendored
@ -1,91 +0,0 @@
|
||||
name: Docker
|
||||
|
||||
# This workflow uses actions that are not certified by GitHub.
|
||||
# They are provided by a third-party and are governed by
|
||||
# separate terms of service, privacy policy, and support
|
||||
# documentation.
|
||||
|
||||
on:
|
||||
schedule:
|
||||
- cron: $cron-daily
|
||||
push:
|
||||
branches: [ $default-branch ]
|
||||
# Publish semver tags as releases.
|
||||
tags: [ 'v*.*.*' ]
|
||||
pull_request:
|
||||
branches: [ $default-branch ]
|
||||
|
||||
env:
|
||||
# Use docker.io for Docker Hub if empty
|
||||
REGISTRY: ${{ vars.docker_repo2_registry }}
|
||||
# github.repository as <account>/<repo>
|
||||
IMAGE_NAME: ${{ github.repository }}
|
||||
|
||||
jobs:
|
||||
build:
|
||||
|
||||
runs-on: ubuntu-latest
|
||||
|
||||
steps:
|
||||
- name: Checkout repository
|
||||
uses: actions/checkout@v4
|
||||
|
||||
# Install the cosign tool except on PR
|
||||
# https://github.com/sigstore/cosign-installer
|
||||
- name: Install cosign
|
||||
if: github.event_name != 'pull_request'
|
||||
uses: sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20 #v3.5.0
|
||||
with:
|
||||
cosign-release: 'v2.2.4'
|
||||
|
||||
# Set up BuildKit Docker container builder to be able to build
|
||||
# multi-platform images and export cache
|
||||
# https://github.com/docker/setup-buildx-action
|
||||
- name: Set up Docker Buildx
|
||||
uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
|
||||
|
||||
# Login against a Docker registry except on PR
|
||||
# https://github.com/docker/login-action
|
||||
- name: Log into registry ${{ env.REGISTRY }}
|
||||
if: github.event_name != 'pull_request'
|
||||
uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
|
||||
with:
|
||||
registry: ${{ env.REGISTRY }}
|
||||
username: ${{ secrets.docker_repo2_username }}
|
||||
password: ${{ secrets.docker_repo2_password }}
|
||||
|
||||
# Extract metadata (tags, labels) for Docker
|
||||
# https://github.com/docker/metadata-action
|
||||
- name: Extract Docker metadata
|
||||
id: meta
|
||||
uses: docker/metadata-action@96383f45573cb7f253c731d3b3ab81c87ef81934 # v5.0.0
|
||||
with:
|
||||
images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
|
||||
|
||||
# Build and push Docker image with Buildx (don't push on PR)
|
||||
# https://github.com/docker/build-push-action
|
||||
- name: Build and push Docker image
|
||||
id: build-and-push
|
||||
uses: docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0.0
|
||||
with:
|
||||
context: .
|
||||
push: ${{ github.event_name != 'pull_request' }}
|
||||
tags: ${{ steps.meta.outputs.tags }}
|
||||
labels: ${{ steps.meta.outputs.labels }}
|
||||
cache-from: type=gha
|
||||
cache-to: type=gha,mode=max
|
||||
|
||||
# Sign the resulting Docker image digest except on PRs.
|
||||
# This will only write to the public Rekor transparency log when the Docker
|
||||
# repository is public to avoid leaking data. If you would like to publish
|
||||
# transparency data even for private images, pass --force to cosign below.
|
||||
# https://github.com/sigstore/cosign
|
||||
- name: Sign the published Docker image
|
||||
if: ${{ github.event_name != 'pull_request' }}
|
||||
env:
|
||||
# https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-an-intermediate-environment-variable
|
||||
TAGS: ${{ steps.meta.outputs.tags }}
|
||||
DIGEST: ${{ steps.build-and-push.outputs.digest }}
|
||||
# This step uses the identity token to provision an ephemeral certificate
|
||||
# against the sigstore community Fulcio instance.
|
||||
run: echo "${TAGS}" | xargs -I {} cosign sign --yes {}@${DIGEST}
|
||||
54
.github/unused/docker-push.yml
vendored
54
.github/unused/docker-push.yml
vendored
@ -1,54 +0,0 @@
|
||||
name: Docker Image CI
|
||||
on: [push]
|
||||
|
||||
# on:
|
||||
# push:
|
||||
# branches: [ $default-branch ]
|
||||
# pull_request:
|
||||
# branches: [ $default-branch ]
|
||||
env:
|
||||
IMAGE_NAME: repo2.hub.gmetri.io/${{ github.repository }}:${{ github.ref_name }}-v9
|
||||
|
||||
jobs:
|
||||
|
||||
docker-build-and-push:
|
||||
|
||||
runs-on: ubuntu-22.04
|
||||
|
||||
steps:
|
||||
- name: Debug
|
||||
run: |
|
||||
ls ${{ github.workspace }}
|
||||
echo "VARS"
|
||||
echo "vars.docker_repo2_username" ${{vars.docker_repo2_username}}
|
||||
echo "SECRETS"
|
||||
echo "secrets.docker_repo2_password2" ${{ secrets.docker_repo2_password2 }}
|
||||
echo "CONTEXT"
|
||||
echo "github.repository" ${{ github.repository }}
|
||||
echo "github.ref_name" ${{ github.ref_name }}
|
||||
|
||||
- uses: docker/login-action@v3
|
||||
name: Login to GitHub Container Registry
|
||||
with:
|
||||
registry: repo2.hub.gmetri.io
|
||||
username: ${{ vars.docker_repo2_username }}
|
||||
password: ${{ secrets.docker_repo2_password }}
|
||||
|
||||
- uses: actions/checkout@v4
|
||||
|
||||
- name: List files in the repository
|
||||
run: |
|
||||
ls ${{ github.workspace }} && \
|
||||
echo "VARS"
|
||||
echo "var.DOCKER_REPO2_REGISTRY" ${{ vars.DOCKER_REPO2_REGISTRY }}
|
||||
echo "CONTEXT"
|
||||
echo "github.repository" ${{ github.repository }}
|
||||
echo "github.ref_name" ${{ github.ref_name }}
|
||||
|
||||
- name: Build the Docker image
|
||||
run: |
|
||||
docker build ./context --file context/Dockerfile --tag $IMAGE_NAME && \
|
||||
docker push $IMAGE_NAME
|
||||
|
||||
# my-image-name:$(date +%s)
|
||||
# ${DRONE_BRANCH//\//-}-v8
|
||||
42
.github/unused/update-repo-version.yml
vendored
42
.github/unused/update-repo-version.yml
vendored
@ -1,42 +0,0 @@
|
||||
name: Update Repo Version Workflow
|
||||
|
||||
on:
|
||||
workflow_call:
|
||||
inputs:
|
||||
branch:
|
||||
description: "Branch getting released. (branch 'release' might update a different image)"
|
||||
default: main
|
||||
required: false
|
||||
type: string
|
||||
image:
|
||||
description: "Name of the image"
|
||||
required: true
|
||||
type: string
|
||||
tag:
|
||||
description: "Tag of the image"
|
||||
required: true
|
||||
type: string
|
||||
|
||||
env:
|
||||
REPO: ${{ github.repository }}
|
||||
|
||||
jobs:
|
||||
|
||||
npm-push:
|
||||
runs-on: ubuntu-22.04
|
||||
permissions:
|
||||
# Give the default GITHUB_TOKEN write permission to commit and push the
|
||||
# added or changed files to the repository.
|
||||
contents: write
|
||||
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
|
||||
- name: Increment package version and push
|
||||
env:
|
||||
GITHUB_TOKEN: ${{ github.token }}
|
||||
run: |
|
||||
pwd; ls -al;
|
||||
echo ./drone/repo_to_cs.sh -m ${{ inputs.image }} -t ${{ inputs.tag }} -b ${{ inputs.branch }}
|
||||
# git push origin main
|
||||
# git push --tags origin main
|
||||
149
.github/unused/v1-lint-and-build.yml
vendored
149
.github/unused/v1-lint-and-build.yml
vendored
@ -1,149 +0,0 @@
|
||||
name: Docker Image CI
|
||||
# on: [push]
|
||||
|
||||
on:
|
||||
push:
|
||||
branches:
|
||||
- main
|
||||
pull_request:
|
||||
branches:
|
||||
- main
|
||||
|
||||
env:
|
||||
DOCKER_REGISTRY: ${{ vars.docker_repo2_registry }}
|
||||
REPO: ${{ github.repository }}
|
||||
|
||||
jobs:
|
||||
|
||||
image-vulnerability-scan:
|
||||
runs-on: ubuntu-22.04 #ubuntu-latest
|
||||
|
||||
steps:
|
||||
- id: get-id
|
||||
name: Get a unique tag for this build
|
||||
run: |
|
||||
SHA=${{github.sha}};
|
||||
ID=${SHA:0:8};
|
||||
echo "ID=$ID" >> "$GITHUB_OUTPUT";
|
||||
echo "DOCKER_IMAGE=$DOCKER_REGISTRY/$REPO:temp-$ID" >> "$GITHUB_OUTPUT";
|
||||
|
||||
- name: Print build id and image name
|
||||
run: |
|
||||
echo "${{ steps.get-id.outputs.ID }}";
|
||||
echo "${{ steps.get-id.outputs.DOCKER_IMAGE }}";
|
||||
|
||||
- uses: actions/checkout@v4
|
||||
|
||||
- name: Login to Docker Container Registry
|
||||
# if: ${{ github.event_name == 'push' }}
|
||||
uses: docker/login-action@v3
|
||||
with:
|
||||
registry: ${{ vars.docker_repo2_registry }}
|
||||
username: ${{ vars.docker_repo2_username }}
|
||||
password: ${{ vars.docker_repo2_password }}
|
||||
|
||||
- name: Build the Docker image
|
||||
# Commenting this from docker build for speed: --build-arg PUBLIC_BUILD_VERSION=${{ steps.get-id.outputs.ID }} \
|
||||
run: |
|
||||
docker build \
|
||||
--file fab/d/actions-build.Dockerfile \
|
||||
--tag ${{ steps.get-id.outputs.DOCKER_IMAGE }} \
|
||||
.;
|
||||
|
||||
- name: Scan Docker Image for vulnerabilities with Grype
|
||||
uses: anchore/scan-action@v6
|
||||
with:
|
||||
image: ${{ steps.get-id.outputs.DOCKER_IMAGE }}
|
||||
cache-db: true #Cache Grype DB in Github Actions
|
||||
output-format: table
|
||||
only-fixed: true
|
||||
severity-cutoff: critical
|
||||
fail-build: true
|
||||
|
||||
npm-push:
|
||||
runs-on: ubuntu-22.04 #ubuntu-latest
|
||||
if: ${{ github.event_name == 'push' }}
|
||||
permissions:
|
||||
# Give the default GITHUB_TOKEN write permission to commit and push the
|
||||
# added or changed files to the repository.
|
||||
contents: write
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
|
||||
- uses: actions/setup-node@v4
|
||||
with:
|
||||
node-version: 22
|
||||
registry-url: ${{ vars.NPM_REGISTRY }}
|
||||
token: ${{ secrets.NPM_TOKEN }}
|
||||
|
||||
- name: Install NPM Dependencies
|
||||
run: |
|
||||
npm install -g pnpm
|
||||
pnpm install
|
||||
|
||||
- name: Lint & Check
|
||||
run: |
|
||||
pnpm lint
|
||||
pnpm check
|
||||
|
||||
- run: pnpm build
|
||||
|
||||
#If this is a merge of a pull request, GITHUB_BASE_REF will contain main.
|
||||
#But if this is a direct commit on the main branch, then GITHUB_REF_NAME will contain main
|
||||
- name: Increment package version and push
|
||||
env:
|
||||
GITHUB_TOKEN: ${{ github.token }}
|
||||
# BRANCH_NAME: ${{ github.base_ref || github.ref_name }}
|
||||
run: |
|
||||
git config --global user.name 'bot-build'
|
||||
git config --global user.email 'techbots+build@gmetri.com'
|
||||
|
||||
export N=`node -p require\(\'./package.json\'\).name` && echo $N
|
||||
pnpm version patch --message "v%s: $N [CI SKIP]"
|
||||
|
||||
git push origin
|
||||
git push --tags origin
|
||||
|
||||
docker-build-and-push:
|
||||
runs-on: ubuntu-22.04 #ubuntu-latest
|
||||
# if: ${{ github.event_name == 'push' }}
|
||||
steps:
|
||||
- id: get-id
|
||||
name: Get a unique tag for this build
|
||||
run: |
|
||||
SHA=${{github.sha}};
|
||||
ID=${SHA:0:8};
|
||||
echo "ID=$ID" >> "$GITHUB_OUTPUT";
|
||||
echo "DOCKER_IMAGE=$DOCKER_REGISTRY/$REPO:$ID" >> "$GITHUB_OUTPUT";
|
||||
|
||||
- name: Print build id and image name
|
||||
run: |
|
||||
echo "${{ steps.get-id.outputs.ID }}";
|
||||
echo "${{ steps.get-id.outputs.DOCKER_IMAGE }}";
|
||||
|
||||
- uses: actions/checkout@v4
|
||||
|
||||
- name: Login to Docker Container Registry
|
||||
# if: ${{ github.event_name == 'push' }}
|
||||
uses: docker/login-action@v3
|
||||
with:
|
||||
registry: ${{ vars.docker_repo2_registry }}
|
||||
username: ${{ vars.docker_repo2_username }}
|
||||
password: ${{ vars.docker_repo2_password }}
|
||||
|
||||
- name: Build the Docker image
|
||||
run: |
|
||||
docker build \
|
||||
--build-arg PUBLIC_BUILD_VERSION=${{ steps.get-id.outputs.ID }} \
|
||||
--file fab/d/actions-build.Dockerfile \
|
||||
--tag ${{ steps.get-id.outputs.DOCKER_IMAGE }} \
|
||||
.;
|
||||
IMAGE_SIZE=`docker inspect -f "{{ .Size }}" ${{ steps.get-id.outputs.DOCKER_IMAGE }} | numfmt --to=si`;
|
||||
echo "Image size $IMAGE_SIZE";
|
||||
|
||||
- name: Push the Docker image
|
||||
if: ${{ github.event_name == 'push' }}
|
||||
run: |
|
||||
docker push ${{ steps.get-id.outputs.DOCKER_IMAGE }};
|
||||
IMAGE_SIZE=`docker inspect -f "{{ .Size }}" ${{ steps.get-id.outputs.DOCKER_IMAGE }} | numfmt --to=si`;
|
||||
echo "Pushed $IMAGE_SIZE image ${{ steps.get-id.outputs.DOCKER_IMAGE }}";
|
||||
80
.github/unused/v2-pr-workflow.yml
vendored
80
.github/unused/v2-pr-workflow.yml
vendored
@ -1,80 +0,0 @@
|
||||
name: Docker Image CI
|
||||
|
||||
on:
|
||||
pull_request:
|
||||
branches:
|
||||
- main
|
||||
|
||||
env:
|
||||
REPO: ${{ github.repository }}/temp #Add /temp for PR workflow
|
||||
|
||||
jobs:
|
||||
|
||||
lint-and-compile:
|
||||
runs-on: ubuntu-22.04
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
|
||||
- uses: actions/setup-node@v4
|
||||
with:
|
||||
node-version: 22
|
||||
registry-url: ${{ vars.NPM_REGISTRY }}
|
||||
token: ${{ secrets.NPM_TOKEN }}
|
||||
|
||||
- name: Install npm dependencies
|
||||
run: |
|
||||
npm install -g pnpm
|
||||
pnpm install
|
||||
|
||||
- run: pnpm lint
|
||||
- run: pnpm check
|
||||
|
||||
image-vulnerability-scan:
|
||||
runs-on: ubuntu-22.04
|
||||
|
||||
steps:
|
||||
- id: get-id
|
||||
name: Get a unique tag for this build
|
||||
run: |
|
||||
SHA=${{ github.sha }}; BRANCH_NAME=${{ github.base_ref || github.ref_name }};
|
||||
BUILD_ID=$BRANCH_NAME-${SHA:0:8};
|
||||
DOCKER_IMAGE=${{ vars.docker_repo2_registry }}/$REPO:$BUILD_ID;
|
||||
echo "BUILD_ID=$BUILD_ID" >> "$GITHUB_OUTPUT";
|
||||
echo "DOCKER_IMAGE=$DOCKER_IMAGE" >> "$GITHUB_OUTPUT";
|
||||
|
||||
- name: Print build id and image name
|
||||
run: |
|
||||
echo "BUILD_ID: ${{ steps.get-id.outputs.BUILD_ID }}";
|
||||
echo "DOCKER_IMAGE: ${{ steps.get-id.outputs.DOCKER_IMAGE }}";
|
||||
|
||||
- uses: actions/checkout@v4
|
||||
|
||||
- name: Login to docker container registry
|
||||
uses: docker/login-action@v3
|
||||
with:
|
||||
registry: ${{ vars.docker_repo2_registry }}
|
||||
username: ${{ vars.docker_repo2_username }}
|
||||
password: ${{ vars.docker_repo2_password }}
|
||||
|
||||
- name: Build the container image (quick, without PUBLIC_BUILD_VERSION)
|
||||
# Commenting this from docker build for speed: --build-arg PUBLIC_BUILD_VERSION=${{ steps.get-id.outputs.BUILD_ID }} \
|
||||
run: |
|
||||
docker build \
|
||||
--file fab/d/actions-build.Dockerfile \
|
||||
--tag ${{ steps.get-id.outputs.DOCKER_IMAGE }} \
|
||||
.;
|
||||
|
||||
- name: Container details
|
||||
run: |
|
||||
IMAGE_SIZE=`docker inspect -f "{{ .Size }}" ${{ steps.get-id.outputs.DOCKER_IMAGE }} | numfmt --to=si`;
|
||||
echo "$IMAGE_SIZE container ${{ steps.get-id.outputs.DOCKER_IMAGE }}";
|
||||
|
||||
- name: Scan container image for vulnerabilities with grype
|
||||
uses: anchore/scan-action@v6
|
||||
with:
|
||||
image: ${{ steps.get-id.outputs.DOCKER_IMAGE }}
|
||||
cache-db: true #Cache Grype DB in Github Actions
|
||||
output-format: table
|
||||
only-fixed: true
|
||||
severity-cutoff: critical
|
||||
fail-build: true
|
||||
91
.github/unused/v2-push-workflow.yml
vendored
91
.github/unused/v2-push-workflow.yml
vendored
@ -1,91 +0,0 @@
|
||||
name: Docker Image CI
|
||||
|
||||
on:
|
||||
push:
|
||||
branches:
|
||||
- main
|
||||
|
||||
env:
|
||||
REPO: ${{ github.repository }}
|
||||
|
||||
jobs:
|
||||
|
||||
npm-push:
|
||||
runs-on: ubuntu-22.04
|
||||
permissions:
|
||||
# Give the default GITHUB_TOKEN write permission to commit and push the
|
||||
# added or changed files to the repository.
|
||||
contents: write
|
||||
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
|
||||
- uses: actions/setup-node@v4
|
||||
with:
|
||||
node-version: 22
|
||||
registry-url: ${{ vars.NPM_REGISTRY }}
|
||||
token: ${{ secrets.NPM_TOKEN }}
|
||||
|
||||
- name: Install npm dependencies
|
||||
run: |
|
||||
npm install -g pnpm
|
||||
pnpm install
|
||||
|
||||
- run: pnpm build
|
||||
|
||||
- name: Increment package version and push
|
||||
env:
|
||||
GITHUB_TOKEN: ${{ github.token }}
|
||||
run: |
|
||||
git config --global user.name 'bot-build'
|
||||
git config --global user.email 'techbots+build@gmetri.com'
|
||||
|
||||
export N=`node -p require\(\'./package.json\'\).name` && echo $N
|
||||
pnpm version patch --message "v%s: $N [CI SKIP]"
|
||||
|
||||
npm publish
|
||||
|
||||
git push origin
|
||||
git push --tags origin
|
||||
|
||||
container-push:
|
||||
runs-on: ubuntu-22.04
|
||||
steps:
|
||||
- id: get-id
|
||||
name: Get a unique tag for this build
|
||||
run: |
|
||||
SHA=${{ github.sha }}; BRANCH_NAME=${{ github.base_ref || github.ref_name }};
|
||||
BUILD_ID=$BRANCH_NAME-${SHA:0:8};
|
||||
DOCKER_IMAGE=${{ vars.docker_repo2_registry }}/$REPO:$BUILD_ID;
|
||||
echo "BUILD_ID=$BUILD_ID" >> "$GITHUB_OUTPUT";
|
||||
echo "DOCKER_IMAGE=$DOCKER_IMAGE" >> "$GITHUB_OUTPUT";
|
||||
|
||||
- name: Print build id and image name
|
||||
run: |
|
||||
echo "BUILD_ID: ${{ steps.get-id.outputs.BUILD_ID }}";
|
||||
echo "DOCKER_IMAGE: ${{ steps.get-id.outputs.DOCKER_IMAGE }}";
|
||||
|
||||
- uses: actions/checkout@v4
|
||||
|
||||
- name: Login to docker container registry
|
||||
uses: docker/login-action@v3
|
||||
with:
|
||||
registry: ${{ vars.docker_repo2_registry }}
|
||||
username: ${{ vars.docker_repo2_username }}
|
||||
password: ${{ vars.docker_repo2_password }}
|
||||
|
||||
- name: Build the container image
|
||||
run: |
|
||||
docker build \
|
||||
--build-arg PUBLIC_BUILD_VERSION=${{ steps.get-id.outputs.BUILD_ID }} \
|
||||
--file fab/d/actions-build.Dockerfile \
|
||||
--tag ${{ steps.get-id.outputs.DOCKER_IMAGE }} \
|
||||
.;
|
||||
|
||||
- name: Container details
|
||||
run: |
|
||||
IMAGE_SIZE=`docker inspect -f "{{ .Size }}" ${{ steps.get-id.outputs.DOCKER_IMAGE }} | numfmt --to=si`;
|
||||
echo "$IMAGE_SIZE container ${{ steps.get-id.outputs.DOCKER_IMAGE }}";
|
||||
|
||||
- name: Push the container image
|
||||
run: docker push ${{ steps.get-id.outputs.DOCKER_IMAGE }}
|
||||
38
.github/unused/workflow_inputs.yml
vendored
38
.github/unused/workflow_inputs.yml
vendored
@ -1,38 +0,0 @@
|
||||
# Inputs with workflow_call (triggering from another workflow):
|
||||
on:
|
||||
workflow_call:
|
||||
inputs:
|
||||
username:
|
||||
description: 'A username passed from the caller workflow'
|
||||
default: 'john-doe'
|
||||
required: false
|
||||
type: string
|
||||
|
||||
jobs:
|
||||
print-username:
|
||||
runs-on: ubuntu-latest
|
||||
|
||||
steps:
|
||||
- name: Print the input name to STDOUT
|
||||
run: echo The username is ${{ inputs.username }}
|
||||
|
||||
|
||||
# Inputs with workflow_dispatch (manual trigger):
|
||||
name: Update Repo Version Workflow
|
||||
|
||||
on:
|
||||
workflow_dispatch:
|
||||
inputs:
|
||||
name:
|
||||
type: choice
|
||||
description: Who to greet
|
||||
options:
|
||||
- monalisa
|
||||
- cschleiden
|
||||
message:
|
||||
required: true
|
||||
use-emoji:
|
||||
type: boolean
|
||||
description: Include 🎉🤣 emojis
|
||||
environment:
|
||||
type: environment
|
||||
58
.github/wip/nm-update-push.yml
vendored
Normal file
58
.github/wip/nm-update-push.yml
vendored
Normal file
@ -0,0 +1,58 @@
|
||||
name: Update Repo Version Workflow
|
||||
|
||||
on:
|
||||
workflow_call:
|
||||
|
||||
jobs:
|
||||
|
||||
push-cs-update:
|
||||
runs-on: ubuntu-22.04
|
||||
permissions:
|
||||
# Give the default GITHUB_TOKEN write permission to commit and push the
|
||||
# added or changed files to the repository.
|
||||
contents: write
|
||||
|
||||
steps:
|
||||
|
||||
- id: read-issue
|
||||
name: Read the issue comment
|
||||
run: |
|
||||
ISSUE_COMMENT_STRING='${{ github.event.comment.body }}'
|
||||
DOCKER_BASE=`echo $ISSUE_COMMENT_STRING | jq ".image"`
|
||||
BUILD_ID=`echo $ISSUE_COMMENT_STRING | jq ".tag"`
|
||||
echo "DOCKER_BASE=$DOCKER_BASE" >> "$GITHUB_OUTPUT";
|
||||
echo "BUILD_ID=$BUILD_ID" >> "$GITHUB_OUTPUT";
|
||||
|
||||
- name: Print IMAGE and TAG
|
||||
run: |
|
||||
echo "BUILD_ID: ${{ steps.read-issue.outputs.BUILD_ID }}";
|
||||
echo "DOCKER_BASE: ${{ steps.read-issue.outputs.DOCKER_BASE }}";
|
||||
|
||||
- uses: actions/checkout@v4
|
||||
with:
|
||||
path: cs
|
||||
- name: Checkout deploy-tools
|
||||
uses: actions/checkout@v4
|
||||
with:
|
||||
repository: gmetribin/deploy-tools
|
||||
ref: main
|
||||
path: deploy-tools
|
||||
token: ${{ github.token }}
|
||||
|
||||
- name: Increment package version and push
|
||||
env:
|
||||
GITHUB_TOKEN: ${{ github.token }}
|
||||
run: |
|
||||
git config --global user.name 'bot-build'
|
||||
git config --global user.email 'techbots+build@gmetri.com'
|
||||
|
||||
BUILD_ID=${{ steps.read-issue.outputs.BUILD_ID }}
|
||||
DOCKER_BASE=${{ steps.read-issue.outputs.DOCKER_BASE }}
|
||||
REPOLIST=./.github/repolist.txt
|
||||
pwd; ls -al;
|
||||
|
||||
cd cs;
|
||||
../deploy-tools/src/repo_to_cs.sh -m $DOCKER_BASE -t $BUILD_ID -r $REPOLIST
|
||||
|
||||
git push origin main
|
||||
git push --tags origin main
|
||||
3
.github/workflows/cs-update-push.yml
vendored
3
.github/workflows/cs-update-push.yml
vendored
@ -5,7 +5,7 @@ on:
|
||||
|
||||
jobs:
|
||||
|
||||
push-cs-update:
|
||||
cs-update-push:
|
||||
runs-on: ubuntu-22.04
|
||||
permissions:
|
||||
# Give the default GITHUB_TOKEN write permission to commit and push the
|
||||
@ -31,6 +31,7 @@ jobs:
|
||||
- uses: actions/checkout@v4
|
||||
with:
|
||||
path: cs
|
||||
|
||||
- name: Checkout deploy-tools
|
||||
uses: actions/checkout@v4
|
||||
with:
|
||||
|
||||
74
src/cs_to_nm.sh
Executable file
74
src/cs_to_nm.sh
Executable file
@ -0,0 +1,74 @@
|
||||
#!/bin/bash
|
||||
# Updates the nm repo's cs version
|
||||
|
||||
### Functions
|
||||
usage()
|
||||
{
|
||||
echo "usage: $0 [-n nm-repo -c cs-repo -v version] | [-h]"
|
||||
}
|
||||
|
||||
main()
|
||||
{
|
||||
local NM_REPO_NAME=$1
|
||||
local CS_REPO_NAME=$2
|
||||
local VERSION=$3
|
||||
|
||||
rm -rf nm-repo
|
||||
git clone https://git.gmetri.io/gmetrivr/$NM_REPO_NAME.git nm-repo
|
||||
cd nm-repo
|
||||
|
||||
#Get list of repos from cslist.txt
|
||||
# Example lines in file:
|
||||
#cs-brx mat81-dev/brx/brx-2jitsi/kustomization.yaml cs-brx.git\/\/brx\/brx-2jitsi?ref=
|
||||
#cs-brx mat81-dev/brx/brx-3main/kustomization.yaml cs-brx.git\/\/brx\/brx-3main?ref=
|
||||
CSLIST_PATH="./c/cslist.txt"
|
||||
CSLIST=$(cat $CSLIST_PATH | grep ^$CS_REPO_NAME | tr -s " " | awk -v FS=' ' -v OFS='\t' '/^[^#]/' )
|
||||
echo "$CSLIST" #doublequote preserves the shape of the input variable, including endlines
|
||||
if [ -z "$CSLIST" ]
|
||||
then
|
||||
echo "Nothing to update";
|
||||
exit;
|
||||
fi
|
||||
#If we use a for loop, it iterates over spaces too instead of just endlines
|
||||
while IFS= read -r CSLIST_LINE; do
|
||||
KUST_PATH=$(echo $CSLIST_LINE | tr -s " " | cut -d " " -f 2)
|
||||
SEARCH_STRING=$(echo $CSLIST_LINE | tr -s " " | cut -d " " -f 3)
|
||||
#Replace repo version in kustomization.yaml
|
||||
echo sed -i -e "s/${SEARCH_STRING}.*/${SEARCH_STRING}${VERSION}/" $KUST_PATH
|
||||
sed -i -e "s/${SEARCH_STRING}.*/${SEARCH_STRING}${VERSION}/" $KUST_PATH
|
||||
git add $KUST_PATH
|
||||
done <<< "$CSLIST"
|
||||
|
||||
git commit -m "$NM_REPO_NAME updated with $CS_REPO_NAME: $VERSION"
|
||||
git push origin master
|
||||
}
|
||||
|
||||
### Starts here
|
||||
while [ "$1" != "" ]; do
|
||||
case $1 in
|
||||
-n | --nm-repo ) shift
|
||||
NM_REPO_NAME=$1
|
||||
;;
|
||||
-c | --cs-repo ) shift
|
||||
CS_REPO_NAME=$1
|
||||
;;
|
||||
-v | --version ) shift
|
||||
VERSION=$1
|
||||
;;
|
||||
-h | --help ) usage
|
||||
exit
|
||||
;;
|
||||
* ) usage
|
||||
exit 1
|
||||
esac
|
||||
shift
|
||||
done
|
||||
|
||||
if [[ -z $NM_REPO_NAME || -z $CS_REPO_NAME || -z $VERSION ]]
|
||||
then
|
||||
echo "Not enough arguments"
|
||||
usage
|
||||
exit
|
||||
fi
|
||||
|
||||
main "$NM_REPO_NAME" "$CS_REPO_NAME" "$VERSION"
|
||||
Loading…
x
Reference in New Issue
Block a user