humocs-man/fluffy-pancake
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

.gitea/workflows/redhat_build.yml aktualisiert

Browse Source
This commit is contained in:
humocs-man
2026-08-09 15:22:36 +00:00
parent e789fed11d
commit 6904547550
1 changed files with 23 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/redhat_build.yml
+23 -18
View File
@@ -1,11 +1,11 @@
name: Red Hat Build container image name: RHEL Build container image
on: on:
# pull_request: # pull_request:
# branches: # branches:
# - main # - main
#schedule: schedule:
# - cron: '05 12 * * 2,5' - cron: '05 12 * * 2,5'
workflow_dispatch: workflow_dispatch:
env: env:
@@ -27,19 +27,21 @@ jobs:
id-token: write id-token: write
steps: steps:
# 1. Gitea/OCI-Umgebungsvariablen vorbereiten
- name: Prepare environment - name: Prepare environment
run: | run: |
# Extrahiert den Domain-Host aus der Gitea/GitHub-URL # Extrahiert den Domain-Host aus der Gitea-URL
REGISTRY_HOST=$(echo "${{ github.server_url }}" | awk -F/ '{print $3}') REGISTRY_HOST=$(echo "${{ github.server_url }}" | awk -F/ '{print $3}')
OWNER_LOWER=$(echo "${{ github.repository_owner }}" | tr '[:upper:]' '[:lower:]') OWNER_LOWER=$(echo "${{ github.repository_owner }}" | tr '[:upper:]' '[:lower:]')
# Extrahiert den Repository-Namen sicher aus github.repository (owner/repo) # Extrahiert den Repository-Namen sicher
REPO_NAME=$(echo "${{ github.repository }}" | cut -d'/' -f2 | tr '[:upper:]' '[:lower:]') REPO_NAME=$(echo "${{ github.repository }}" | cut -d'/' -f2 | tr '[:upper:]' '[:lower:]')
echo "REGISTRY_HOST=${REGISTRY_HOST}" >> ${GITHUB_ENV} echo "REGISTRY_HOST=${REGISTRY_HOST}" >> ${GITHUB_ENV}
echo "IMAGE_REGISTRY=${REGISTRY_HOST}/${OWNER_LOWER}" >> ${GITHUB_ENV} echo "IMAGE_REGISTRY=${REGISTRY_HOST}/${OWNER_LOWER}" >> ${GITHUB_ENV}
echo "IMAGE_NAME=${REPO_NAME}" >> ${GITHUB_ENV} echo "IMAGE_NAME=${REPO_NAME}" >> ${GITHUB_ENV}
# 2. Tag-Namen & Branch-Sanitizing
- name: Determine image tag - name: Determine image tag
run: | run: |
BRANCH="${GITHUB_REF_NAME}" BRANCH="${GITHUB_REF_NAME}"
@@ -52,9 +54,11 @@ jobs:
echo "IS_TEST_BUILD=true" >> ${GITHUB_ENV} echo "IS_TEST_BUILD=true" >> ${GITHUB_ENV}
fi fi
# 3. Repository auschecken
- name: Checkout repository - name: Checkout repository
uses: actions/checkout@v7.0.1 uses: actions/checkout@v7.0.1
# 4. Metadata & OCI-Labels erzeugen
- name: Image Metadata - name: Image Metadata
id: metadata id: metadata
uses: docker/metadata-action@v6.2.0 uses: docker/metadata-action@v6.2.0
@@ -78,7 +82,7 @@ jobs:
containers.bootc=1 containers.bootc=1
ostree.bootable=1 ostree.bootable=1
# 1. Image mit Buildah v3 bauen # 5. Image mit Buildah bauen
- name: Build Image with Buildah - name: Build Image with Buildah
id: build_image id: build_image
uses: redhat-actions/buildah-build@v3.0.2 uses: redhat-actions/buildah-build@v3.0.2
@@ -89,22 +93,23 @@ jobs:
labels: ${{ steps.metadata.outputs.labels }} labels: ${{ steps.metadata.outputs.labels }}
oci: true oci: true
# 2. In lokales OCI-Verzeichnis exportieren # 6. In lokales OCI-Verzeichnis exportieren
- name: Export Image to OCI Layout - name: Export Image to OCI Layout
run: | run: |
buildah push ${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }} oci:./oci-image buildah push ${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }} oci:./oci-image
# 3. Chunkah via Action auf das OCI-Verzeichnis anwenden # 7. Chunkah via Project Bluefin Action ausführen
- name: Process OCI Image with Chunkah - name: Process OCI Image with Chunkah
uses: coreos/chunkah@v0.6.0 uses: projectbluefin/actions/bootc-build/chunkah@main
with: with:
target: ./oci-image target: ./oci-image
# 4. Skopeo via Podman-Container-Tools Action bereitstellen # 8. Skopeo nativ installieren (100% Gitea-act_runner kompatibel)
- name: Setup Skopeo - name: Install Skopeo
uses: podman-container-tools/skopeo@v1.24.0 run: |
sudo apt-get update && sudo apt-get install -y skopeo
# 5. Gechunketes Image für ALLE generierten Tags pushen & Digest erfassen # 9. Gechunketes Image für ALLE Tags pushen & Manifest-Digest erfassen
- name: Push Chunked Image to Registry - name: Push Chunked Image to Registry
run: | run: |
echo "${{ secrets.REGISTRY }}" | skopeo login "${{ env.REGISTRY_HOST }}" -u "${{ github.repository_owner }}" --password-stdin echo "${{ secrets.REGISTRY }}" | skopeo login "${{ env.REGISTRY_HOST }}" -u "${{ github.repository_owner }}" --password-stdin
@@ -117,15 +122,15 @@ jobs:
oci:./oci-image "docker://${TAG_REF}" oci:./oci-image "docker://${TAG_REF}"
done done
# Exakten Manifest-Digest für Cosign im GITHUB_ENV speichern # Speichere den exakten Manifest-Digest für Cosign
echo "IMAGE_DIGEST=$(cat /tmp/digest.txt)" >> ${GITHUB_ENV} echo "IMAGE_DIGEST=$(cat /tmp/digest.txt)" >> ${GITHUB_ENV}
# 6. Cosign installieren # 10. Cosign installieren
- name: Install Cosign - name: Install Cosign
if: env.IS_TEST_BUILD == 'false' if: env.IS_TEST_BUILD == 'false'
uses: sigstore/cosign-installer@v4.1.2 uses: sigstore/cosign-installer@v4.1.2
# 7. Container Image signieren # 11. Container Image signieren
- name: Sign container image - name: Sign container image
if: env.IS_TEST_BUILD == 'false' if: env.IS_TEST_BUILD == 'false'
env: env:
@@ -143,10 +148,10 @@ jobs:
--registry-referrers-mode=legacy \ --registry-referrers-mode=legacy \
"${IMAGE_REF}" "${IMAGE_REF}"
# 8. Lokalen OCI-Ordner, temp-Dateien und Buildah-Storage aufräumen # 12. Runner-Speicher aufräumen
- name: Post-Build Cleanup - name: Post-Build Cleanup
if: always() if: always()
run: | run: |
echo "Bereinige temporären OCI-Ordner, temporäre Dateien und Buildah-Storage..." echo "Bereinige temporäre Dateien und Buildah-Storage..."
rm -rf ./oci-image /tmp/digest.txt || true rm -rf ./oci-image /tmp/digest.txt || true
buildah rmi --all --force || true buildah rmi --all --force || true