Skip to content

Commit

Permalink
Update build_master_multi.yml
Browse files Browse the repository at this point in the history
  • Loading branch information
reaver-flomesh authored May 22, 2024
1 parent ca4497e commit afa5f66
Showing 1 changed file with 9 additions and 42 deletions.
51 changes: 9 additions & 42 deletions .github/workflows/build_master_multi.yml
Original file line number Diff line number Diff line change
Expand Up @@ -5,11 +5,8 @@ on:
push:
branches:
- main

env:
REGISTRY_USER: ${{ github.actor }}
REGISTRY_PASSWORD: ${{ github.token }}
IMAGE_REGISTRY: ghcr.io/${{ github.repository_owner }}
workflow_dispatch:


jobs:
build_multi_master:
Expand All @@ -27,47 +24,17 @@ jobs:
uses: actions/checkout@v3
with:
ref: "main"
- name: Log in to ghcr.io
uses: redhat-actions/podman-login@v1
with:
username: ${{ env.REGISTRY_USER }}
password: ${{ env.REGISTRY_PASSWORD }}
registry: ${{ env.IMAGE_REGISTRY }}
- name: "login docker hub"
run: |
podman login -u ${{secrets.DOCKER_HUB_USER}} -p ${{secrets.DOCKER_HUB_TOKEN}} docker.io
docker login -u ${{secrets.DOCKER_HUB_USER}} -p ${{secrets.DOCKER_HUB_TOKEN}}
- name: "login quay.io"
- name: 'install dev deps'
run: |
podman login -u ${{secrets.QUAY_USER}} -p ${{secrets.QUAY_TOKEN}} quay.io
docker login -u ${{secrets.QUAY_USER}} -p ${{secrets.QUAY_TOKEN}} quay.io
- run: |
sudo apt-get update
sudo apt-get -y install buildah less git make podman qemu qemu-user-static clamav clamav-freshclam
name: 'install dev deps'
- run: buildah unshare make branch_or_ref=master release_tag=master multibuild
name: 'build multi image'
- run: buildah unshare make dist_name=localhost/curl-multi release_tag=master test
name: 'test image'
- run: make image_name=localhost/curl-multi:master scan
name: 'security scan image'
- run: |
buildah manifest push --all --format v2s2 localhost/curl-base-multi:master "docker://ghcr.io/curl/curl-container/curl-base-multi:master"
buildah manifest push --all --format v2s2 localhost/curl-multi:master "docker://ghcr.io/curl/curl-container/curl-multi:master"
name: 'push multi images to github registry'
- name: Install Cosign
uses: sigstore/cosign-installer@main
- name: Write signing key to disk (only needed for `cosign sign --key`)
run: echo "${{ secrets.COSIGN_PRIVATE_KEY }}" > cosign.key
- name: Sign image with a key
run: |
cosign sign -y --key cosign.key ghcr.io/curl/curl-container/curl-multi:master
cosign sign -y --key cosign.key ghcr.io/curl/curl-container/curl-base-multi:master
env:
COSIGN_PASSWORD: ${{secrets.COSIGN_PASSWORD}}
- name: Write public key to disk
run: echo "${{ secrets.COSIGN_PUBLIC_KEY }}" > cosign.pub
- name: Verify image with public key
sudo apt-get -y install buildah less git make podman qemu qemu-user-static clamav clamav-freshclam
- name: 'build multi image'
run: buildah unshare make branch_or_ref=master release_tag=latest multibuild
- name: 'push release to docker hub'
run: |
cosign verify --key cosign.pub ghcr.io/curl/curl-container/curl-multi:master
cosign verify --key cosign.pub ghcr.io/curl/curl-container/curl-base-multi:master
buildah manifest push --format v2s2 --all localhost/curl-multi:latest "docker://docker.io/flomesh/curl:latest"
buildah manifest push --format v2s2 --all localhost/curl-base-multi:latest "docker://docker.io/flomesh/curl-base:latest"

0 comments on commit afa5f66

Please sign in to comment.