-
Notifications
You must be signed in to change notification settings - Fork 3
103 lines (87 loc) · 3.51 KB
/
ostree.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
name: OSTree build
on:
workflow_call:
inputs:
variant:
required: true
type: string
jobs:
build:
# concurrency:
# group: ${{ github.workflow }}-${{ inputs.variant }}
# cancel-in-progress: true
strategy:
fail-fast: false
matrix:
arch:
- x86_64
- aarch64
runs-on: ${{ matrix.arch == 'aarch64' && 'ARM64' || 'x86-64-lg' }}
container:
image: ghcr.io/terrapkg/builder:f40
options: --cap-add=SYS_ADMIN --privileged -v /dev:/dev --memory-swap=-1
steps:
# Thanks GHA for not having a replace expression!
- name: Get variant safe-name
run: echo "VARIANT_SAFE_NAME=$(echo "${{inputs.variant}}" | tr / -)" >> $GITHUB_ENV
- name: Force enable GHA debug
run: echo "ACTIONS_STEP_DEBUG=true" >> $GITHUB_ENV
- name: OSTree Cache
uses: actions/cache@v3
with:
path: cache
key: ostree-${{ inputs.variant }}-${{ matrix.arch }}
- name: Install dependencies
run: |
sudo dnf5 install -y podman moby-engine rpm-ostree melody just python3-pip pkg-config wget ostree ostree-devel rpm-ostree git hfsplus-tools flatpak dbus dbus-daemon rpmdevtools make mock selinux-policy python3-pip jq @development-tools gcc cairo-devel python3-devel 'pkgconfig(gobject-introspection-1.0)' 'pkgconfig(cairo-gobject)' 'dnf-command(config-manager)'
- name: Install python dependencies
run: pip install yq
- name: Checkout
uses: actions/checkout@v3
- name: Build OSTree
uses: nick-fields/[email protected]
with:
command: just build-image ${{ inputs.variant }}
warning_on_retry: true
max_attempts: 3
timeout_minutes: 300
- name: Upload OCI archive as artifact
uses: actions/upload-artifact@v3
with:
name: ${{ env.VARIANT_SAFE_NAME }}-${{ matrix.arch }}-oci
path: images/*
publish:
if: github.ref == 'refs/heads/main' && (github.event_name == 'push' || github.event_name == 'workflow_dispatch' || github.event_name == 'schedule')
needs: build
runs-on: ubuntu-latest
permissions:
contents: read
packages: write
steps:
# Thanks GHA for not having a replace expression!
- name: Get variant safe-name
run: echo "VARIANT_SAFE_NAME=$(echo "${{inputs.variant}}" | tr / -)" >> $GITHUB_ENV
- name: Get image tag
run: echo "IMAGE_TAG=${{ startsWith(inputs.variant, 'ultramarine') && '40' || '1' }}" >> $GITHUB_ENV
- name: Install dependencies
run: sudo apt-get update && sudo apt-get install -y buildah
- name: Log in to ghcr.io
uses: redhat-actions/podman-login@v1
with:
username: ${{ github.repository_owner }}
password: ${{ secrets.GITHUB_TOKEN }}
registry: ghcr.io
- name: Download OCI archive (x86_64)
uses: actions/download-artifact@v3
with:
name: ${{ env.VARIANT_SAFE_NAME }}-x86_64-oci
- name: Download OCI archive (aarch64)
uses: actions/download-artifact@v3
with:
name: ${{ env.VARIANT_SAFE_NAME }}-aarch64-oci
- name: Publish to registry
run: |
buildah manifest create manifest
buildah manifest add manifest oci-archive:$VARIANT_SAFE_NAME-x86_64.tar
buildah manifest add manifest oci-archive:$VARIANT_SAFE_NAME-aarch64.tar
buildah manifest push --all -f v2s2 manifest docker://ghcr.io/ultramarine-linux/$VARIANT_SAFE_NAME:$IMAGE_TAG