hotfix for anaconda #83
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Build and deploy OSTree image | |
on: | |
push: | |
paths-ignore: | |
- "README.md" | |
workflow_dispatch: | |
schedule: | |
# every sunday at 00:00 | |
- cron: "0 0 * * 0" | |
jobs: | |
build: | |
strategy: | |
fail-fast: false | |
matrix: | |
os: | |
- ubuntu-latest | |
- ARM64 | |
variant: | |
- base | |
- flagship | |
- gnome | |
- pantheon | |
- plasma | |
runs-on: ${{ matrix.os }} | |
permissions: | |
contents: read | |
packages: write | |
container: | |
image: ghcr.io/terrapkg/builder:f38 | |
options: --cap-add=SYS_ADMIN --privileged | |
volumes: | |
- ostree_cache:/var/cache/compose | |
steps: | |
- name: DNF Cache | |
uses: actions/cache@v3 | |
if: always() | |
with: | |
path: /var/cache/dnf | |
key: dnf | |
- name: Install dependencies | |
id: deps | |
run: | | |
sudo dnf install -y podman moby-engine rpm-ostree melody just python3-pip pkg-config wget ostree ostree-devel rpm-ostree git hfsplus-tools flatpak dbus dbus-daemon rpmdevtools make mock selinux-policy python3-pip jq @development-tools gcc cairo-devel python3-devel 'pkgconfig(gobject-introspection-1.0)' 'pkgconfig(cairo-gobject)' 'dnf-command(config-manager)' | |
- name: Install python dependencies | |
id: deps-py | |
run: pip install ostree-push yq | |
- name: Checkout | |
uses: actions/checkout@v3 | |
- name: Login Docker | |
if: always() | |
uses: docker/login-action@v1 | |
with: | |
registry: ghcr.io | |
username: ${{ github.repository_owner }} | |
password: ${{ secrets.GITHUB_TOKEN }} | |
# Set up OCI login credentials | |
# generate containers-auth.json with podman login --authfile containers-auth.json | |
- name: Set up OCI login credentials | |
uses: redhat-actions/[email protected] | |
with: | |
registry: ghcr.io | |
username: ${{ github.repository_owner }} | |
password: ${{ secrets.GITHUB_TOKEN }} | |
auth_file_path: auth.json | |
- name: Build OSTree | |
id: build | |
run: just build-registry ${{ matrix.variant }} | |
# We are going to build OSTree images through OCI now | |
# - name: Import GPG key | |
# run: | | |
# echo "${{ secrets.GPG_SIGNING_KEY }}" | gpg --import | |
# echo "${{ secrets.GPG_KEY }}" | gpg --import | |
# - name: Sign OSTree commit | |
# run: | | |
# ostree --repo=/var/ostree gpg-sign ultramarine/37/x86_64/lapis ${{ secrets.GPG_ID }} -v | |
# ostree --repo=/var/ostree summary -u | |
# - name: Import SSH credentials | |
# uses: shimataro/[email protected] | |
# with: | |
# key: ${{ secrets.REPO_PRIVATE_KEY }} | |
# known_hosts: ${{ secrets.REPO_KNOWN_HOSTS }} | |
# - name: Push OSTree commit | |
# run: ostree-push --repo=/var/ostree repo@${{ secrets.REPO_IP }}:/var/www/repo.fyralabs.com/ostree |