Use GH Action to build new container images upon push

This commit is contained in:
Jauder Ho 2021-08-09 10:21:10 +00:00
parent f15da8d15d
commit 4df60052af
3 changed files with 159 additions and 0 deletions

67
.github/workflows/docker-3.0.yml vendored Normal file
View File

@ -0,0 +1,67 @@
name: docker-3.0
on:
push:
branches:
- 3.0
workflow_dispatch:
schedule:
- cron: "0 8 * * 1"
env:
BUILD_VERSION: "3.0"
DOCKER_CLI_EXPERIMENTAL: enabled
#REPOSITORY: ${{ github.actor }}/${{ github.workflow }}
REPOSITORY: ${{ github.actor }}/testssl.sh
jobs:
deploy:
runs-on: ubuntu-20.04
steps:
- name: Source checkout
uses: actions/checkout@v2.3.4
- name: Setup QEMU
id: qemu
uses: docker/setup-qemu-action@v1.2.0
- name: Setup Buildx
id: buildx
uses: docker/setup-buildx-action@v1
- name: Set Docker metadata
id: docker_meta
uses: docker/metadata-action@v3
with:
images: ${{ env.REPOSITORY }}
labels: |
org.opencontainers.image.version=${{ env.BUILD_VERSION }}
org.opencontainers.image.revision=${{ github.sha }}
org.opencontainers.image.title=${{ env.REPOSITORY }}
- name: GitHub login
if: ${{ github.event_name != 'pull_request' }}
uses: docker/login-action@v1.10.0
with:
registry: ghcr.io
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Build and push
uses: docker/build-push-action@v2.6.1
with:
push: ${{ github.event_name != 'pull_request' }}
#context: ${{ github.workflow }}
#context: docker
context: .
file: Dockerfile.git
#platforms: linux/amd64,linux/arm64,linux/386,linux/arm/v7,linux/arm/v6
platforms: linux/amd64,linux/386,linux/arm64,linux/arm/v7,linux/arm/v6,linux/ppc64le
build-args: BUILD_VERSION
cache-from: type=gha, scope=${{ github.workflow }}
cache-to: type=gha, scope=${{ github.workflow }}
labels: ${{ steps.docker_meta.outputs.labels }}
tags: |
ghcr.io/${{ env.REPOSITORY }}:${{ env.BUILD_VERSION }}

68
.github/workflows/docker-3.1dev.yml vendored Normal file
View File

@ -0,0 +1,68 @@
name: docker-3.1dev
on:
push:
branches:
- 3.1dev
workflow_dispatch:
schedule:
- cron: "0 8 * * 1"
env:
BUILD_VERSION: "3.1dev"
DOCKER_CLI_EXPERIMENTAL: enabled
#REPOSITORY: ${{ github.actor }}/${{ github.workflow }}
REPOSITORY: ${{ github.actor }}/testssl.sh
jobs:
deploy:
runs-on: ubuntu-20.04
steps:
- name: Source checkout
uses: actions/checkout@v2.3.4
- name: Setup QEMU
id: qemu
uses: docker/setup-qemu-action@v1.2.0
- name: Setup Buildx
id: buildx
uses: docker/setup-buildx-action@v1
- name: Set Docker metadata
id: docker_meta
uses: docker/metadata-action@v3
with:
images: ${{ env.REPOSITORY }}
labels: |
org.opencontainers.image.version=${{ env.BUILD_VERSION }}
org.opencontainers.image.revision=${{ github.sha }}
org.opencontainers.image.title=${{ env.REPOSITORY }}
- name: GitHub login
if: ${{ github.event_name != 'pull_request' }}
uses: docker/login-action@v1.10.0
with:
registry: ghcr.io
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Build and push
uses: docker/build-push-action@v2.6.1
with:
push: ${{ github.event_name != 'pull_request' }}
#context: ${{ github.workflow }}
#context: docker
#context: .
file: Dockerfile.git
#platforms: linux/amd64,linux/arm64,linux/386,linux/arm/v7,linux/arm/v6
platforms: linux/amd64,linux/386,linux/arm64,linux/arm/v7,linux/arm/v6,linux/ppc64le
build-args: BUILD_VERSION
cache-from: type=gha, scope=${{ github.workflow }}
cache-to: type=gha, scope=${{ github.workflow }}
labels: ${{ steps.docker_meta.outputs.labels }}
tags: |
ghcr.io/${{ env.REPOSITORY }}:${{ env.BUILD_VERSION }}
ghcr.io/${{ env.REPOSITORY }}:latest

24
Dockerfile.git Normal file
View File

@ -0,0 +1,24 @@
# Build using git repo
FROM alpine:3.14
WORKDIR /home/testssl
ARG BUILD_VERSION
ARG ARCHIVE_URL=https://github.com/drwetter/testssl.sh/archive/
ARG URL=https://github.com/drwetter/testssl.sh.git
RUN test -n "${BUILD_VERSION}" \
&& apk update \
&& apk add --no-cache bash procps drill git coreutils libidn curl socat openssl xxd \
&& git clone --depth 1 --branch ${BUILD_VERSION} $URL /home/testssl \
&& addgroup testssl \
&& adduser -G testssl -g "testssl user" -s /bin/bash -D testssl \
&& ln -s /home/testssl/testssl.sh /usr/local/bin/ \
&& mkdir -m 755 -p /home/testssl/etc /home/testssl/bin
USER testssl
ENTRYPOINT ["testssl.sh"]
CMD ["--help"]