test

2025-07-13 06:35:09 -07:00
parent 7912392de0
commit 4147419d83
1 changed files with 322 additions and 111 deletions
--- a/.gitea/workflows/base-build.yml
+++ b/.gitea/workflows/base-build.yml
@@ -1,4 +1,4 @@
-name: Build Alpine RootFS and Docker Image (latest)
+name: Build and Push Alpine RootFS and Docker Images

 on:
  push:
@@ -6,162 +6,373 @@ on:
      - main
    paths:
      - '.gitea/workflows/*.yml'
+      - 'alpine/**'
      - '!**/CHANGES.md'
      - '!**/build-info.json'
  schedule:
    - cron: '0 12 * * 0'  # Sunday at noon UTC

 env:
-  ALPINE_VERSION: v3.20
-  TAG_NAME: latest
-  IMAGE_NAME: gitea.fithwum.tech/fithwum/alpine-base
-  OUTPUT_DIR: latest
-  OUTPUT_TAR: latest/alpine-base.tar.gz
+  ALPINE_VERSIONS: "v3.18 v3.19 v3.20"
+  IMAGE_REGISTRY: gitea.fithwum.tech
+  IMAGE_ORG: fithwum
+  IMAGE_REPO: alpine-base

 jobs:
-  build-and-push:
+
+  build-and-upload-rootfs:
    runs-on: vm-docker-build2
-    outputs:
-      tarball-updated: ${{ steps.set-output.outputs.tarball_updated }}
    steps:
      - name: Checkout repo
        uses: actions/checkout@v3

-      - name: Build Alpine Base Image
+      - name: Build and export Alpine rootfs archives
        run: |
-          docker build -t alpine-builder .
-          mkdir -p latest
-          container_id=$(docker create alpine-builder)
-          docker cp "$container_id":/output/alpine-base.tar.gz ./latest/alpine-base.tar.gz
-          docker rm "$container_id"
+          mkdir -p output
+          for version in $ALPINE_VERSIONS; do
+            echo "[INFO] Building Alpine $version rootfs"
+            docker build --build-arg ALPINE_VERSION=$version -t alpine-builder:$version -f alpine/Dockerfile .

-      - name: Show tarball
-        run: ls -lh ${{ env.OUTPUT_TAR }}
+            mkdir -p output/$version
+            cid=$(docker create alpine-builder:$version)
+            docker cp "$cid":/output/alpine-rootfs.tar.gz output/$version/
+            docker rm "$cid"
+          done

-      - name: Clone repo with token auth
-        run: git clone https://${{ secrets.GIT_USERNAME }}:${{ secrets.GIT_TOKEN }}@gitea.fithwum.tech/fithwum/alpine-base.git upload-repo
-
-      - name: Copy and push tarball
+      - name: Clone upload repo
+        run: |
+          git clone https://${{ secrets.GIT_USERNAME }}:${{ secrets.GIT_TOKEN }}@gitea.fithwum.tech/fithwum/alpine-base.git upload-repo
+
+      - name: Copy archives to upload repo
+        run: |
+          for version in $ALPINE_VERSIONS; do
+            mkdir -p upload-repo/$version
+            cp output/$version/alpine-rootfs.tar.gz upload-repo/$version/
+          done
+
+      - name: Commit and push updated archives
        run: |
-          cp ${{ env.OUTPUT_TAR }} upload-repo/${{ env.OUTPUT_TAR }}
          cd upload-repo
-
          git config user.name "${{ secrets.GIT_USERNAME }}"
          git config user.email "${{ secrets.GIT_EMAIL }}"

-          git remote set-url origin https://$GIT_USERNAME:${{ secrets.GIT_TOKEN }}@gitea.fithwum.tech/fithwum/alpine-base.git
-
          if git status --porcelain | grep .; then
-            git add ${{ env.OUTPUT_TAR }}
-            git commit -m "Update latest rootfs on $(date -u +'%Y-%m-%dT%H:%M:%SZ')"
+            git add */alpine-rootfs.tar.gz
+            git commit -m "Update Alpine rootfs $(date -u +'%Y-%m-%dT%H:%M:%SZ')"
            git push
-            echo "tarball_updated=true" >> $GITHUB_ENV
          else
-            echo "tarball_updated=false" >> $GITHUB_ENV
+            echo "[INFO] No rootfs changes to commit."
          fi

-  push-docker:
-    needs: build-and-push
-    if: needs.build-and-push-rootfs.outputs.tarball-updated == 'true'
-    runs-on: vm-docker-build2
-
-    steps:
-      - name: Build and push Docker image
-        run: echo "${{ secrets.DOCKER_PASSWORD }}" | docker login gitea.fithwum.tech -u "${{ secrets.DOCKER_USERNAME }}" --password-stdin
-
-      - name: Clone repo with token auth
-        run: git clone https://${{ secrets.GIT_USERNAME }}:${{ secrets.GIT_TOKEN }}@gitea.fithwum.tech/fithwum/alpine-base.git upload-repo
-
-      - name: Build and push Docker image
-        run: |
-          cd upload-repo
-          docker buildx build \
-            --file latest/Dockerfile \
-            --platform linux/amd64 \
-            -t "${{ env.IMAGE_NAME }}:${{ env.TAG_NAME }}" \
-            --push .
-
-  update-changelog:
-    needs: push-docker
+  build-and-push-docker-images:
+    needs: build-and-upload-rootfs
    runs-on: vm-docker-build2
    steps:
-      - name: Clone repo with token auth
+      - name: Clone upload repo
        run: git clone https://${{ secrets.GIT_USERNAME }}:${{ secrets.GIT_TOKEN }}@gitea.fithwum.tech/fithwum/alpine-base.git upload-repo

-      - name: Update CHANGES.md
+      - name: Generate Dockerfiles per version (if missing)
+        run: |
+          for version in $ALPINE_VERSIONS; do
+            mkdir -p "upload-repo/$version"
+            DOCKERFILE_PATH="upload-repo/$version/Dockerfile"
+
+            if [[ -f "$DOCKERFILE_PATH" ]]; then
+              echo "[INFO] Skipping existing $DOCKERFILE_PATH"
+              continue
+            fi
+
+            printf '%s\n' \
+              "FROM scratch" \
+              "LABEL maintainer=\"fithwum\"" \
+              "ADD alpine-$ALPINE_VERSIONS.tar.gz /" \
+              "CMD [\"/bin/sh\"]" > "$DOCKERFILE_PATH"
+
+            echo "[INFO] Created $DOCKERFILE_PATH"
+          done
+
+      - name: Log in to Docker registry
+        run: echo "${{ secrets.DOCKER_PASSWORD }}" | docker login ${{ env.IMAGE_REGISTRY }} -u "${{ secrets.DOCKER_USERNAME }}" --password-stdin
+
+      - name: Build and push Docker images
+        run: |
+          for version in $ALPINE_VERSIONS; do
+            IMAGE="${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_ORG }}/${{ env.IMAGE_REPO }}:$version"
+            echo "[INFO] Building and pushing $IMAGE"
+            docker buildx build --platform linux/amd64 -t "$IMAGE" -f upload-repo/$version/Dockerfile --push upload-repo/$version
+          done
+
+  generate-changelogs:
+    needs: build-and-push-docker-images
+    runs-on: vm-docker-build2
+    steps:
+      - name: Clone upload repo
+        run: git clone https://${{ secrets.GIT_USERNAME }}:${{ secrets.GIT_TOKEN }}@gitea.fithwum.tech/fithwum/alpine-base.git upload-repo
+
+      - name: Generate and push changelogs
        run: |
          cd upload-repo
-          changelog="${{ env.OUTPUT_DIR }}/CHANGES.md"
-          mkdir -p "$(dirname "$changelog")"
-          touch "$changelog"
+          for version in $ALPINE_VERSIONS; do
+            mkdir -p "$version"
+            changelog="$version/CHANGES.md"
+            touch "$changelog"

-          last_commit=""
-          if [ -f "${{ env.OUTPUT_DIR }}/build-info.json" ]; then
-            last_commit=$(jq -r '.commit' "${{ env.OUTPUT_DIR }}/build-info.json")
+            last_commit=""
+            if [ -f "$version/build-info.json" ]; then
+              last_commit=$(jq -r '.commit' "$version/build-info.json")
+            fi
+
+            echo -e "\n## $(date -u +'%Y-%m-%dT%H:%M:%SZ')" >> "$changelog"
+            if [ -n "$last_commit" ]; then
+              git log "$last_commit"..HEAD --pretty=format:"- %s (%an)" | head -n 10 >> "$changelog"
+            else
+              git log -n 10 --pretty=format:"- %s (%an)" >> "$changelog"
+            fi
+          done
+
+          git config user.name "${{ secrets.GIT_USERNAME }}"
+          git config user.email "${{ secrets.GIT_EMAIL }}"
+          if git status --porcelain | grep .; then
+            git add */CHANGES.md
+            git commit -m "Update changelogs $(date -u +'%Y-%m-%dT%H:%M:%SZ')"
+            git push
          fi

-          echo -e "\n## $(date -u +'%Y-%m-%dT%H:%M:%SZ')" >> "$changelog"
+  generate-build-info:
+    needs: generate-changelogs
+    runs-on: vm-docker-build2
+    steps:
+      - name: Clone upload repo
+        run: git clone https://${{ secrets.GIT_USERNAME }}:${{ secrets.GIT_TOKEN }}@gitea.fithwum.tech/fithwum/alpine-base.git upload-repo

-          if [ -n "$last_commit" ]; then
-            git log "${last_commit}..HEAD" --pretty=format:"- %s (%an)" | head -n 10 >> "$changelog"
-          else
-            git log -n 10 --pretty=format:"- %s (%an)" >> "$changelog"
-          fi
+      - name: Generate and commit build-info.json
+        run: |
+          cd upload-repo
+          for version in $ALPINE_VERSIONS; do
+            IMAGE="${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_ORG }}/${{ env.IMAGE_REPO }}:$version"
+            digest=$(docker inspect --format='{{index .RepoDigests 0}}' "$IMAGE" 2>/dev/null || echo "unknown")
+            size_bytes=$(docker image inspect "$IMAGE" --format='{{.Size}}' 2>/dev/null || echo "0")
+
+            human_size=$(numfmt --to=iec-i --suffix=B $size_bytes)
+
+            mkdir -p "$version"
+            jq -n \
+              --arg commit "$(git rev-parse HEAD)" \
+              --arg image_tag "$IMAGE" \
+              --arg digest "$digest" \
+              --arg image_size "$human_size" \
+              --argjson image_size_bytes "$size_bytes" \
+              --arg build_time "$(date -u +'%Y-%m-%dT%H:%M:%SZ')" \
+              '{
+                commit: $commit,
+                image_tag: $image_tag,
+                digest: $digest,
+                image_size: $image_size,
+                image_size_bytes: $image_size_bytes,
+                build_time: $build_time
+              }' > "$version/build-info.json"
+          done

          git config user.name "${{ secrets.GIT_USERNAME }}"
          git config user.email "${{ secrets.GIT_EMAIL }}"

          if git status --porcelain | grep .; then
-            git add "$changelog"
-            git commit -m "Update changelog for latest"
-            git push https://${{ secrets.GIT_USERNAME }}:${{ secrets.GIT_TOKEN }}@gitea.fithwum.tech/fithwum/alpine-base.git
+            git add */build-info.json
+            git commit -m "Update build-info $(date -u +'%Y-%m-%dT%H:%M:%SZ')"
+            git push
+
+            for version in $ALPINE_VERSIONS; do
+              tag="build-$version"
+              git tag -d "$tag" 2>/dev/null || true
+              git tag "$tag"
+              git push origin "$tag" --force
+            done
          fi

-  update-build-info:
-    needs: update-changelog
-    runs-on: vm-docker-build2

-    steps:
-      - name: Clone repo with token auth
-        run: git clone https://${{ secrets.GIT_USERNAME }}:${{ secrets.GIT_TOKEN }}@gitea.fithwum.tech/fithwum/alpine-base.git upload-repo

-      - name: Generate build-info.json
-        run: |
-          cd upload-repo
-          mkdir -p "${{ env.OUTPUT_DIR }}"

-          image="${{ env.IMAGE_NAME }}:${{ env.TAG_NAME }}"
-          size_bytes=$(docker image inspect "$image" --format='{{.Size}}')
-          digest=$(docker inspect --format='{{index .RepoDigests 0}}' "$image")

-          jq -n \
-            --arg commit "$(git rev-parse HEAD)" \
-            --arg tag "$image" \
-            --arg digest "$digest" \
-            --arg size "$(numfmt --to=iec-i --suffix=B $size_bytes)" \
-            --argjson size_bytes "$size_bytes" \
-            --arg time "$(date -u +'%Y-%m-%dT%H:%M:%SZ')" \
-            '{
-              commit: $commit,
-              image_tag: $tag,
-              digest: $digest,
-              image_size: $size,
-              image_size_bytes: $size_bytes,
-              build_time: $time
-            }' > "${{ env.OUTPUT_DIR }}/build-info.json"

-      - name: Commit build-info.json
-        run: |
-          cd upload-repo
-          git config user.name "${{ secrets.GIT_USERNAME }}"
-          git config user.email "${{ secrets.GIT_EMAIL }}"
-          git add "${{ env.OUTPUT_DIR }}/build-info.json"

-          if git status --porcelain | grep .; then
-            git commit -m "Update build-info for latest"
-            git push https://${{ secrets.GIT_USERNAME }}:${{ secrets.GIT_TOKEN }}@gitea.fithwum.tech/fithwum/alpine-base.git

-            git tag -d "build-latest" 2>/dev/null || true
-            git tag "build-latest"
-            git push https://${{ secrets.GIT_USERNAME }}:${{ secrets.GIT_TOKEN }}@gitea.fithwum.tech/fithwum/alpine-base.git --tags
-          fi
+
+
+
+
+
+
+
+
+
+
+
+
+
+# name: Build Alpine RootFS and Docker Image (latest)
+
+# on:
+#   push:
+#     branches: 
+#       - main
+#     paths:
+#       - '.gitea/workflows/*.yml'
+#       - '!**/CHANGES.md'
+#       - '!**/build-info.json'
+#   schedule:
+#     - cron: '0 12 * * 0'  # Sunday at noon UTC
+
+# env:
+#   ALPINE_VERSION: v3.20
+#   TAG_NAME: latest
+#   IMAGE_NAME: gitea.fithwum.tech/fithwum/alpine-base
+#   OUTPUT_DIR: latest
+#   OUTPUT_TAR: latest/alpine-base.tar.gz
+
+# jobs:
+#   build-and-push:
+#     runs-on: vm-docker-build2
+#     outputs:
+#       tarball-updated: ${{ steps.set-output.outputs.tarball_updated }}
+#     steps:
+#       - name: Checkout repo
+#         uses: actions/checkout@v3
+
+#       - name: Build Alpine Base Image
+#         run: |
+#           docker build -t alpine-builder .
+#           mkdir -p latest
+#           container_id=$(docker create alpine-builder)
+#           docker cp "$container_id":/output/alpine-base.tar.gz ./latest/alpine-base.tar.gz
+#           docker rm "$container_id"
+
+#       - name: Show tarball
+#         run: ls -lh ${{ env.OUTPUT_TAR }}
+
+#       - name: Clone repo with token auth
+#         run: git clone https://${{ secrets.GIT_USERNAME }}:${{ secrets.GIT_TOKEN }}@gitea.fithwum.tech/fithwum/alpine-base.git upload-repo
+
+#       - name: Copy and push tarball
+#         run: |
+#           cp ${{ env.OUTPUT_TAR }} upload-repo/${{ env.OUTPUT_TAR }}
+#           cd upload-repo
+
+#           git config user.name "${{ secrets.GIT_USERNAME }}"
+#           git config user.email "${{ secrets.GIT_EMAIL }}"
+
+#           git remote set-url origin https://$GIT_USERNAME:${{ secrets.GIT_TOKEN }}@gitea.fithwum.tech/fithwum/alpine-base.git
+
+#           if git status --porcelain | grep .; then
+#             git add ${{ env.OUTPUT_TAR }}
+#             git commit -m "Update latest rootfs on $(date -u +'%Y-%m-%dT%H:%M:%SZ')"
+#             git push
+#             echo "tarball_updated=true" >> $GITHUB_ENV
+#           else
+#             echo "tarball_updated=false" >> $GITHUB_ENV
+#           fi
+
+#   push-docker:
+#     needs: build-and-push
+#     if: needs.build-and-push-rootfs.outputs.tarball-updated == 'true'
+#     runs-on: vm-docker-build2
+
+#     steps:
+#       - name: Build and push Docker image
+#         run: echo "${{ secrets.DOCKER_PASSWORD }}" | docker login gitea.fithwum.tech -u "${{ secrets.DOCKER_USERNAME }}" --password-stdin
+
+#       - name: Clone repo with token auth
+#         run: git clone https://${{ secrets.GIT_USERNAME }}:${{ secrets.GIT_TOKEN }}@gitea.fithwum.tech/fithwum/alpine-base.git upload-repo
+
+#       - name: Build and push Docker image
+#         run: |
+#           cd upload-repo
+#           docker buildx build \
+#             --file latest/Dockerfile \
+#             --platform linux/amd64 \
+#             -t "${{ env.IMAGE_NAME }}:${{ env.TAG_NAME }}" \
+#             --push .
+
+#   update-changelog:
+#     needs: push-docker
+#     runs-on: vm-docker-build2
+#     steps:
+#       - name: Clone repo with token auth
+#         run: git clone https://${{ secrets.GIT_USERNAME }}:${{ secrets.GIT_TOKEN }}@gitea.fithwum.tech/fithwum/alpine-base.git upload-repo
+
+#       - name: Update CHANGES.md
+#         run: |
+#           cd upload-repo
+#           changelog="${{ env.OUTPUT_DIR }}/CHANGES.md"
+#           mkdir -p "$(dirname "$changelog")"
+#           touch "$changelog"
+
+#           last_commit=""
+#           if [ -f "${{ env.OUTPUT_DIR }}/build-info.json" ]; then
+#             last_commit=$(jq -r '.commit' "${{ env.OUTPUT_DIR }}/build-info.json")
+#           fi
+
+#           echo -e "\n## $(date -u +'%Y-%m-%dT%H:%M:%SZ')" >> "$changelog"
+
+#           if [ -n "$last_commit" ]; then
+#             git log "${last_commit}..HEAD" --pretty=format:"- %s (%an)" | head -n 10 >> "$changelog"
+#           else
+#             git log -n 10 --pretty=format:"- %s (%an)" >> "$changelog"
+#           fi
+
+#           git config user.name "${{ secrets.GIT_USERNAME }}"
+#           git config user.email "${{ secrets.GIT_EMAIL }}"
+
+#           if git status --porcelain | grep .; then
+#             git add "$changelog"
+#             git commit -m "Update changelog for latest"
+#             git push https://${{ secrets.GIT_USERNAME }}:${{ secrets.GIT_TOKEN }}@gitea.fithwum.tech/fithwum/alpine-base.git
+#           fi
+
+#   update-build-info:
+#     needs: update-changelog
+#     runs-on: vm-docker-build2
+
+#     steps:
+#       - name: Clone repo with token auth
+#         run: git clone https://${{ secrets.GIT_USERNAME }}:${{ secrets.GIT_TOKEN }}@gitea.fithwum.tech/fithwum/alpine-base.git upload-repo
+
+#       - name: Generate build-info.json
+#         run: |
+#           cd upload-repo
+#           mkdir -p "${{ env.OUTPUT_DIR }}"
+
+#           image="${{ env.IMAGE_NAME }}:${{ env.TAG_NAME }}"
+#           size_bytes=$(docker image inspect "$image" --format='{{.Size}}')
+#           digest=$(docker inspect --format='{{index .RepoDigests 0}}' "$image")
+
+#           jq -n \
+#             --arg commit "$(git rev-parse HEAD)" \
+#             --arg tag "$image" \
+#             --arg digest "$digest" \
+#             --arg size "$(numfmt --to=iec-i --suffix=B $size_bytes)" \
+#             --argjson size_bytes "$size_bytes" \
+#             --arg time "$(date -u +'%Y-%m-%dT%H:%M:%SZ')" \
+#             '{
+#               commit: $commit,
+#               image_tag: $tag,
+#               digest: $digest,
+#               image_size: $size,
+#               image_size_bytes: $size_bytes,
+#               build_time: $time
+#             }' > "${{ env.OUTPUT_DIR }}/build-info.json"
+
+#       - name: Commit build-info.json
+#         run: |
+#           cd upload-repo
+#           git config user.name "${{ secrets.GIT_USERNAME }}"
+#           git config user.email "${{ secrets.GIT_EMAIL }}"
+#           git add "${{ env.OUTPUT_DIR }}/build-info.json"
+
+#           if git status --porcelain | grep .; then
+#             git commit -m "Update build-info for latest"
+#             git push https://${{ secrets.GIT_USERNAME }}:${{ secrets.GIT_TOKEN }}@gitea.fithwum.tech/fithwum/alpine-base.git
+
+#             git tag -d "build-latest" 2>/dev/null || true
+#             git tag "build-latest"
+#             git push https://${{ secrets.GIT_USERNAME }}:${{ secrets.GIT_TOKEN }}@gitea.fithwum.tech/fithwum/alpine-base.git --tags
+#           fi