Update base image digests (2025-11-02T01:01:22Z)

.cache/alpine-base.digest

@@ -0,0 +1 @@
+alpine@sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412

.cache/alpine.digest

@@ -1 +0,0 @@
-alpine@sha256:8a1f59ffb675680d47db6337b49d22281a139e9d709335b492be023728e11715

.cache/basic-base.digest

@@ -0,0 +1 @@
+gitea.fithwum.tech/fithwum/debian-base@sha256:0ec40453757ece2e2ebcc6af59ead694497c6c0eebb974073de55fcd7fbf95dc

.cache/debian-base.digest

@@ -1 +1 @@
-gitea.fithwum.tech/fithwum/debian-base@sha256:16c677d72657174954fab4d618bd994ff0fb6ee0bcca5f0cbaf28bae85e107c9
+gitea.fithwum.tech/fithwum/debian-base@sha256:0ec40453757ece2e2ebcc6af59ead694497c6c0eebb974073de55fcd7fbf95dc

.gitea/workflows/pipeline.yml

@@ -4,14 +4,18 @@ on:
   push:
     branches:
       - main
-    paths-ignore:
+    paths:
-      - '**/CHANGES.md'
+      - '.gitea/workflows/*.yml'
-      - '**/build-info.json'
+      - '**/Dockerfile'
+      - '**/*.sh'
+      - '!.cache/*'
+      - '!**/CHANGES.md'
+      - '!**/build-info.json'
   schedule:
     - cron: '0 1 * * 0'
 
 env:
-  IMAGE_REGISTRY: gitea.fithwum.tech
+  IMAGE_REGISTRY: ${{ secrets.REPO_URL }}
   IMAGE_ORG: ${{ secrets.GIT_USERNAME }}
   IMAGE_REPO_TS: teamspeak-server
   CACHE_DIR: .cache
@@ -23,15 +27,18 @@ jobs:
       should_build_alpine: ${{ steps.check.outputs.should_build_alpine }}
       should_build_debian: ${{ steps.check.outputs.should_build_debian }}
       should_build_basic: ${{ steps.check.outputs.should_build_basic }}
-      alpine_digest: ${{ steps.get_digest.outputs.alpine_digest }}
+      alpine_digest: ${{ steps.check.outputs.alpine_digest }}
-      debian_digest: ${{ steps.get_digest.outputs.debian_digest }}
+      debian_digest: ${{ steps.check.outputs.debian_digest }}
-      basic_digest: ${{ steps.get_digest.outputs.basic_digest }}
+      basic_digest: ${{ steps.check.outputs.basic_digest }}
     steps:
       - name: Checkout code
         uses: actions/checkout@v3
         with:
           fetch-depth: 0
 
+      - name: Ensure .cache directory
+        run: mkdir -p .cache
+
       - name: Pull latest base images
         run: |
           docker pull alpine:latest
@@ -42,36 +49,75 @@ jobs:
         run: |
           alpine_digest=$(docker inspect --format='{{index .RepoDigests 0}}' alpine:latest || echo "unknown")
           debian_digest=$(docker inspect --format='{{index .RepoDigests 0}}' gitea.fithwum.tech/${{ secrets.GIT_USERNAME }}/debian-base:bookworm || echo "unknown")
-          basic_digest=$(docker inspect --format='{{index .RepoDigests 0}}' gitea.fithwum.tech/${{ secrets.GIT_USERNAME }}/debian-base:bookworm || echo "unknown")
+          basic_digest=$debian_digest  # basic uses debian-base
+
           echo "alpine_digest=$alpine_digest" >> $GITHUB_OUTPUT
           echo "debian_digest=$debian_digest" >> $GITHUB_OUTPUT
           echo "basic_digest=$basic_digest" >> $GITHUB_OUTPUT
 
+      - name: Commit and push updated base digests if changed
+        run: |
+          git config user.name "${{ secrets.GIT_USERNAME }}"
+          git config user.email "${{ secrets.GIT_EMAIL }}"
+
+          changed=false
+
+          check_and_update() {
+            name="$1"
+            digest="$2"
+            file=".cache/${name}-base.digest"
+            if [[ ! -f "$file" ]] || [[ "$(cat "$file")" != "$digest" ]]; then
+              echo "$digest" > "$file"
+              echo "[INFO] $name digest changed"
+              changed=true
+            else
+              echo "[INFO] $name digest unchanged"
+            fi
+          }
+
+          check_and_update alpine "${{ steps.get_digest.outputs.alpine_digest }}"
+          check_and_update debian "${{ steps.get_digest.outputs.debian_digest }}"
+          check_and_update basic "${{ steps.get_digest.outputs.basic_digest }}"
+
+          if [ "$changed" = true ]; then
+            git stash push --include-untracked -m "temp-stash-before-rebase"
+            git fetch origin main
+            git rebase origin/main
+            git stash pop || true
+
+            git add .cache/*-base.digest
+            git commit -m "Update base image digests ($(date -u +'%Y-%m-%dT%H:%M:%SZ'))"
+            git push origin HEAD:main
+          else
+            echo "[INFO] No base digest changes to commit."
+          fi
+
       - name: Compare digests and detect changes
         id: check
         run: |
           check_variant() {
             variant=$1
             new_digest=$2
-            infofile="$variant/build-info.json"
+            digest_file=".cache/${variant}-base.digest"
             last_digest=""
             base_changed=false
             code_changed=false
 
-            if [ -f "$infofile" ]; then
+            if [ -f "$digest_file" ]; then
-              last_digest=$(jq -r '.base_digest // empty' "$infofile")
+              last_digest=$(cat "$digest_file")
             fi
 
             if [ "$last_digest" != "$new_digest" ]; then
               base_changed=true
+              echo "[INFO] $variant base image changed: $last_digest -> $new_digest"
             fi
 
-            # Detect changes in variant folder
+            # Check if code in the variant directory changed
-            code_changed=$(git diff --name-only origin/main | grep "^$variant/" || true)
+            git fetch origin main
-            if [[ -n "$code_changed" ]]; then
+            code_diff=$(git diff --name-only origin/main...HEAD | grep "^$variant/" || true)
+            if [[ -n "$code_diff" ]]; then
               code_changed=true
-            else
+              echo "[INFO] $variant code changed: $code_diff"
-              code_changed=false
             fi
 
             should_build=false
@@ -80,6 +126,7 @@ jobs:
             fi
 
             echo "should_build_${variant}=$should_build" >> $GITHUB_OUTPUT
+            echo "${variant}_digest=$new_digest" >> $GITHUB_OUTPUT
           }
 
           check_variant "alpine" "${{ steps.get_digest.outputs.alpine_digest }}"
@@ -95,6 +142,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
 
       - name: Login to Docker registry
         run: |
@@ -117,6 +166,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
 
       - name: Login to Docker registry
         run: |
@@ -139,6 +190,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
 
       - name: Login to Docker registry
         run: |
@@ -168,22 +221,30 @@ jobs:
         with:
           fetch-depth: 0
 
-      - name: Prepare temporary build-info workspace
+      - name: Load digests from cache
-        run: mkdir -p upload-repo
+        id: base_digests
-
-      - name: Clone Minecraft repo
         run: |
-          GIT_CREDENTIAL="${{ secrets.GIT_TOKEN || secrets.GIT_PASSWORD }}"
+          load_digest() {
-          git clone --depth=1 "https://${{ secrets.GIT_USERNAME }}:${GIT_CREDENTIAL}@gitea.fithwum.tech/fithwum/teamspeak-server.git" upload-repo
+            file=".cache/$1-base.digest"
-          cd upload-repo
+            if [ -f "$file" ]; then
+              cat "$file"
+            else
+              echo "unknown"
+            fi
+          }
 
-      - name: Generate build-info.json only for updated variants
+          echo "alpine=$(load_digest alpine)" >> $GITHUB_OUTPUT
+          echo "debian=$(load_digest debian)" >> $GITHUB_OUTPUT
+          echo "basic=$(load_digest basic)" >> $GITHUB_OUTPUT
+
+      - name: Generate build-info.json for each variant
         env:
           IMAGE_REGISTRY: ${{ env.IMAGE_REGISTRY }}
           IMAGE_ORG: ${{ env.IMAGE_ORG }}
           IMAGE_REPO_TS: ${{ env.IMAGE_REPO_TS }}
-          CACHE_DIR: ${{ env.CACHE_DIR }}
         run: |
+          variants=(alpine debian basic)
+
           human_size() {
             local b=$1
             local d=''
@@ -197,53 +258,27 @@ jobs:
             printf "%s%s\n" "$b" "${S[$s]}"
           }
 
-          versions=()
+          variants=()
-          if [[ "${{ needs.check-for-changes.outputs.should_build_alpine }}" == "true" ]]; then
+          [[ "${{ needs.build-alpine.outputs.built }}" == "true" ]] && variants+=("alpine")
-            versions+=("alpine")
+          [[ "${{ needs.build-debian.outputs.built }}" == "true" ]] && variants+=("debian")
-          fi
+          [[ "${{ needs.build-basic.outputs.built }}" == "true" ]] && variants+=("basic")
-          if [[ "${{ needs.check-for-changes.outputs.should_build_debian }}" == "true" ]]; then
-            versions+=("debian")
-          fi
-          if [[ "${{ needs.check-for-changes.outputs.should_build_basic }}" == "true" ]]; then
-            versions+=("basic")
-          fi
 
-          # Clear old build-info.json files
+          for variant in "${variants[@]}"; do
-          echo "🧹 Clearing old build-info.json files"
+            image_tag="${IMAGE_REGISTRY}/${IMAGE_ORG}/${IMAGE_REPO_TS}:${variant}"
-          find . -type f -name build-info.json -exec rm -v {} +
+            digest=$(docker inspect --format='{{index .RepoDigests 0}}' "$image_tag" 2>/dev/null || echo "unknown")
+            size_bytes=$(docker image inspect "$image_tag" --format='{{.Size}}' 2>/dev/null || echo 0)
+            size_human=$(numfmt --to=iec --suffix=B $size_bytes 2>/dev/null || echo "${size_bytes}B")
+            commit_hash=$(git rev-parse HEAD)
+            build_time=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
 
-          for version in "${versions[@]}"; do
+            base_digest="${{ steps.base_digests.outputs[$variant] }}"
-            echo "[INFO] Generating build-info.json for $version"
-            image="${IMAGE_REGISTRY}/${IMAGE_ORG}/${IMAGE_REPO_TS}:${version}"
-            infofile="$version/build-info.json"
-            mkdir -p "$(dirname "$infofile")"
-
-            if ! docker pull "$image"; then
-              echo "[WARN] Failed to pull $image — setting fields to unknown/0"
-              digest="unknown"
-              size_bytes=0
-            else
-              digest=$(docker inspect --format='{{if .RepoDigests}}{{index .RepoDigests 0}}{{else}}unknown{{end}}' "$image" 2>/dev/null || echo "unknown")
-              size_bytes=$(docker image inspect "$image" --format='{{.Size}}' 2>/dev/null || echo "0")
-              size_bytes=${size_bytes//[^0-9]/}
-              if [[ -z "$size_bytes" ]]; then size_bytes=0; fi
-            fi
-
-            size_human=$(human_size "$size_bytes")
-
-            # base digest logic
-            base_digest="unknown"
-            if [ "$version" = "alpine" ]; then
-              base_digest=$(docker inspect --format='{{index .RepoDigests 0}}' alpine:latest 2>/dev/null || echo "unknown")
-            elif [ "$version" = "debian" ] || [ "$version" = "basic" ]; then
-              base_digest=$(docker inspect --format='{{index .RepoDigests 0}}' gitea.fithwum.tech/${{ secrets.GIT_USERNAME }}/debian-base:bookworm 2>/dev/null || echo "unknown")
-            fi
 
+            mkdir -p "$variant"
             jq -n \
-              --arg version "$version" \
+              --arg version "$variant" \
-              --arg commit "$(git rev-parse HEAD)" \
+              --arg commit "$commit_hash" \
-              --arg build_time "$(date -u +'%Y-%m-%dT%H:%M:%SZ')" \
+              --arg build_time "$build_time" \
-              --arg image_tag "$image" \
+              --arg image_tag "$image_tag" \
               --arg digest "$digest" \
               --arg image_size "$size_human" \
               --argjson image_size_bytes "$size_bytes" \
@@ -257,26 +292,19 @@ jobs:
                 image_size: $image_size,
                 image_size_bytes: $image_size_bytes,
                 base_digest: $base_digest
-              }' > "$infofile"
+              }' > "$variant/build-info.json"
           done
 
-      - name: Copy build-info to repo
+      - name: Show generated build-info.json
         run: |
-          for version in alpine debian basic; do
+          find . -name build-info.json -exec echo '--- {} ---' \; -exec cat {} \;
-            if [ -f "$version/build-info.json" ]; then
-              mkdir -p "upload-repo/$version"
-              cp "$version/build-info.json" "upload-repo/$version/"
-            fi
-          done
 
       - name: Commit and push build-info if changed
         run: |
           git config user.name "${{ secrets.GIT_USERNAME }}"
           git config user.email "${{ secrets.GIT_EMAIL }}"
-
+          if git status --porcelain | grep .; then
-          git add */build-info.json
+            git add */build-info.json
-
-          if ! git diff --cached --quiet; then
             git commit -m "Update build-info on $(date -u +'%Y-%m-%dT%H:%M:%SZ')"
             git push
 
@@ -290,20 +318,8 @@ jobs:
             echo "[INFO] No build-info changes to commit."
           fi
 
-          ls -l */build-info.json || echo "❌ build-info not written"
+          ls -l basic/build-info.json || echo "❌ build-info not written"
-          for version in alpine debian basic; do
+          cat basic/build-info.json || echo "❌ empty build-info"
-            echo "$version build-info.json"
-            cat "$version/build-info.json" || echo "❌ empty build-info for $version"
-          done
-
-      - name: Show generated build-info
-        run: |
-          for version in alpine debian basic; do
-            echo "::group::$version build-info.json"
-            ls -l "$version/build-info.json" || echo "❌ missing"
-            cat "$version/build-info.json" || echo "❌ empty"
-            echo "::endgroup::"
-          done
 
   generate-changelogs:
     needs: generate-build-info