gunnar
6acee4ce1f
- build.yml: determine image tag from branch (main=stable, other=test-<branch>) - build.yml: allow push on workflow_dispatch from any branch - build.yml: only sign images from main branch - build-installer-iso.yml: add image_tag input (default: stable)
82 lines
2.5 KiB
YAML
82 lines
2.5 KiB
YAML
name: Build Installer ISO
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.ref || github.run_id }}
|
|
cancel-in-progress: true
|
|
|
|
env:
|
|
IMAGE_REGISTRY: "ghcr.io/${{ github.repository_owner }}"
|
|
IMAGE_NAME: "${{ github.event.repository.name }}"
|
|
|
|
jobs:
|
|
build-iso:
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
contents: read
|
|
packages: read
|
|
|
|
steps:
|
|
- name: Prepare environment
|
|
run: |
|
|
echo "IMAGE_REGISTRY=${IMAGE_REGISTRY,,}" >> ${GITHUB_ENV}
|
|
echo "IMAGE_NAME=${IMAGE_NAME,,}" >> ${GITHUB_ENV}
|
|
|
|
- name: Determine image tag
|
|
run: |
|
|
BRANCH="${GITHUB_REF_NAME}"
|
|
if [[ "$BRANCH" == "main" ]]; then
|
|
echo "IMAGE_TAG=stable" >> ${GITHUB_ENV}
|
|
else
|
|
SANITIZED=$(echo "$BRANCH" | sed 's/[^a-zA-Z0-9._-]/-/g' | head -c 50)
|
|
echo "IMAGE_TAG=test-${SANITIZED}" >> ${GITHUB_ENV}
|
|
fi
|
|
echo "Building from tag: ${IMAGE_TAG}"
|
|
|
|
- name: Checkout repository
|
|
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
|
|
|
|
- name: Free disk space
|
|
run: |
|
|
sudo rm -rf /usr/share/dotnet
|
|
sudo rm -rf /usr/local/lib/android
|
|
sudo rm -rf /opt/ghc
|
|
sudo rm -rf /opt/hostedtoolcache
|
|
sudo docker image prune -af
|
|
df -h
|
|
|
|
- name: Prepare output directory
|
|
run: mkdir -p output
|
|
|
|
- name: Login to GHCR
|
|
run: |
|
|
echo "${{ secrets.GITHUB_TOKEN }}" | sudo podman login ghcr.io \
|
|
-u ${{ github.actor }} --password-stdin
|
|
|
|
- name: Pull base image
|
|
run: |
|
|
sudo podman pull ${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }}
|
|
|
|
- name: Build ISO
|
|
run: |
|
|
sudo podman run --rm --privileged \
|
|
-v ${{ github.workspace }}/iso/config.toml:/config.toml:ro \
|
|
-v ${{ github.workspace }}/output:/output \
|
|
-v /var/lib/containers/storage:/var/lib/containers/storage \
|
|
ghcr.io/osbuild/bootc-image-builder:latest \
|
|
--type anaconda-iso \
|
|
--rootfs btrfs \
|
|
--config /config.toml \
|
|
--output /output/ \
|
|
${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }}
|
|
|
|
- name: Upload ISO artifact
|
|
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
|
|
with:
|
|
name: installer-iso
|
|
# Wir suchen rekursiv nach jeder .iso Datei im output Ordner
|
|
path: output/**/*.iso
|
|
if-no-files-found: error
|