test build info update & changelog

.gitea/workflows/base-build.yml

@@ -234,21 +234,19 @@ jobs:
     - name: Checkout source
       uses: actions/checkout@v3
 
-      - name: Clone upload repo
+    - name: Prepare temporary build-info workspace
-        run: |
+      run: mkdir -p buildinfo
-          GIT_CREDENTIAL="${{ secrets.GIT_TOKEN || secrets.GIT_PASSWORD }}"
-          git clone --depth=1 "https://${{ env.GIT_USERNAME }}:${GIT_CREDENTIAL}@gitea.fithwum.tech/fithwum/debian-base.git" upload-repo
 
-      - name: Copy checksum file into workspace
+    - name: Copy sha256sums.txt if available
       run: |
         if [[ -f ../sha256sums.txt ]]; then
-            cp ../sha256sums.txt upload-repo/
+          cp ../sha256sums.txt buildinfo/
         else
           echo "[ERROR] sha256sums.txt missing!"
           exit 1
         fi
 
-      - name: Generate build-info.json per version
+    - name: Generate build-info.json files
       run: |
         human_size() {
           local b=$1
@@ -263,26 +261,24 @@ jobs:
           printf "%s%s\n" "$b" "${S[$s]}"
         }
 
-          cd upload-repo
+        cd buildinfo
         for version in $VERSIONS; do
           echo "[INFO] Generating build-info.json for $version"
           mkdir -p "$version"
           infofile="$version/build-info.json"
 
           image="gitea.fithwum.tech/fithwum/debian-base:$version"
-
           digest=$(docker inspect --format='{{if .RepoDigests}}{{index .RepoDigests 0}}{{else}}unknown{{end}}' "$image" 2>/dev/null || echo "unknown")
           size_bytes=$(docker image inspect "$image" --format='{{.Size}}' 2>/dev/null || echo "0")
 
           size_bytes=${size_bytes//[^0-9]/}
-            if [[ -z "$size_bytes" ]]; then size_bytes=0; fi
+          [[ -z "$size_bytes" ]] && size_bytes=0
-
           size_human=$(human_size "$size_bytes")
 
-            # Load SHA256 from file if available
+          sha256="unknown"
-            SHA256=$(grep "$version/debian-$version.tar.bz2" ../sha256sums.txt | awk '{print $1}')
+          if [[ -f ../sha256sums.txt ]]; then
-            if [[ -z "$SHA256" ]]; then
+            sha256=$(grep "$version/debian-$version.tar.bz2" ../sha256sums.txt | awk '{print $1}')
-              SHA256="unknown"
+            [[ -z "$sha256" ]] && sha256="unknown"
           fi
 
           jq -n \
@@ -293,7 +289,7 @@ jobs:
             --arg digest "$digest" \
             --arg image_size "$size_human" \
             --argjson image_size_bytes "$size_bytes" \
-              --arg sha256 "$SHA256" \
+            --arg sha256 "$sha256" \
             '{
               version: $version,
               commit: $commit,
@@ -304,7 +300,19 @@ jobs:
               image_size_bytes: $image_size_bytes,
               rootfs_sha256: $sha256
             }' > "$infofile"
+        done
 
+    - name: Clone upload repo
+      run: |
+        GIT_CREDENTIAL="${{ secrets.GIT_TOKEN || secrets.GIT_PASSWORD }}"
+        git clone --depth=1 "https://${{ env.GIT_USERNAME }}:${GIT_CREDENTIAL}@gitea.fithwum.tech/fithwum/debian-base.git" upload-repo
+
+    - name: Copy build-info.json into repo
+      run: |
+        for version in $VERSIONS; do
+          mkdir -p "upload-repo/$version"
+          cp "buildinfo/$version/build-info.json" "upload-repo/$version/build-info.json"
+        done
 
     - name: Commit and push build-info if changed
       run: |
@@ -317,14 +325,10 @@ jobs:
           git commit -m "Update build-info on $(date -u +'%Y-%m-%dT%H:%M:%SZ')"
           git push
 
-            # Tag the commit for each version
           for version in $VERSIONS; do
             TAG="build-$version"
-              # Delete local tag if exists
             git tag -d "$TAG" 2>/dev/null || true
-              # Create tag on current HEAD
             git tag "$TAG"
-              # Push tag to remote (force in case tag exists)
             git push origin "$TAG" --force
           done
         else