Skip to content

feat: move all images from old repo #54

feat: move all images from old repo

feat: move all images from old repo #54

# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
name: Build & Publish Containers
on:
workflow_dispatch:
push:
branches:
- main
pull_request:
env:
REGISTRY: ghcr.io
USER: alwatr
jobs:
build:
if: github.repository_owner == 'Alwatr'
name: Build & Publish Containers
runs-on: ubuntu-latest
strategy:
fail-fast: false
matrix:
include:
- name: traefik
path: traefik/1
version:
short: 1
full: 1.7.34
- name: traefik
path: traefik/3
version:
short: 3
full: 3.0.0-beta4
- name: alpine
path: alpine
version:
short: 3
full: 3.17
- name: nocodb
path: nocodb
version:
short: 0.202
full: 0.202.5
- name: php
path: php/7.4-apache
version:
short: 7-apache
full: 7.4-apache
- name: php
path: php/7.4-fpm
version:
short: 7
full: 7.4
- name: php
path: php/8.2-fpm
version:
short: 8
full: 8.2
- name: adminer
path: adminer
version:
short: 4
full: 4.8-3.24.4
- name: mariadb
path: mariadb/10.11
version:
short: 10
full: 10.9-3.26.4
- name: wordpress
path: wordpress/php7.4
version:
short: 6-php7
full: 6.1-php7.4-fpm
- name: wordpress
path: wordpress/php8.2
version:
short: 6
full: 6.3-php8.2-fpm
- name: tdlib
path: tdlib
version:
short: 1
full: 1.8.0
permissions:
contents: read
packages: write
id-token: write
steps:
- name: ⤵️ Checkout repository
uses: actions/[email protected]
- name: ❔ Check Container files changed
id: file_change
uses: dorny/[email protected]
with:
filters: |
container_folder:
./${{ matrix.path }}/*
- name: 🏗 Install cosign
if: ${{ github.event_name != 'pull_request' && steps.file_change.outputs.container_folder == 'true' }}
uses: sigstore/[email protected]
- name: 🏗 Setup Docker Buildx
if: ${{ steps.file_change.outputs.container_folder == 'true' }}
uses: docker/[email protected]
- name: 🏗 Cache Docker Layers
if: ${{ steps.file_change.outputs.container_folder == 'true' }}
uses: actions/cache@v3
with:
path: /tmp/.buildx-cache
key: container-${{ matrix.name }}
- name: 🏗 Log into registry ${{env.REGISTRY}}
if: ${{ github.event_name != 'pull_request' && steps.file_change.outputs.container_folder == 'true' }}
uses: docker/[email protected]
with:
registry: ${{env.REGISTRY}}
username: ${{github.repository_owner}}
password: ${{secrets.GITHUB_TOKEN}}
- name: 🚀 Build and push container image
if: ${{ steps.file_change.outputs.container_folder == 'true' }}
id: build_and_push
uses: docker/[email protected]
with:
context: ./${{matrix.path}}
push: ${{github.event_name != 'pull_request'}}
tags: |
${{env.REGISTRY}}/${{env.USER}}/${{matrix.name}}:${{matrix.version.short}}
${{env.REGISTRY}}/${{env.USER}}/${{matrix.name}}:${{matrix.version.full}}
cache-from: type=local,src=/tmp/.buildx-cache
cache-to: type=local,dest=/tmp/.buildx-cache
build-args: |
BUILD_DATE=${{github.event.repository.updated_at}}
BUILD_REV=${{github.sha}}
- name: 🏗 Sign the image with GitHub OIDC Token
if: ${{ github.event_name != 'pull_request' && steps.file_change.outputs.container_folder == 'true' }}
env:
COSIGN_EXPERIMENTAL: 'true'
run: |
cosign sign --yes "${{env.REGISTRY}}/${{env.USER}}/${{matrix.name}}:${{matrix.version.short}}@${{steps.build_and_push.outputs.digest}}"
cosign sign --yes "${{env.REGISTRY}}/${{env.USER}}/${{matrix.name}}:${{matrix.version.full}}@${{steps.build_and_push.outputs.digest}}"