This repository has been archived by the owner on Nov 5, 2024. It is now read-only.
CD improvements #206
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CD | |
| on: | |
| push: | |
| branches: [master] | |
| schedule: | |
| - cron: '30 4 */3 * *' | |
| workflow_dispatch: | |
| inputs: | |
| force_rebuild: | |
| description: 'Force container rebuild' | |
| required: true | |
| type: choice | |
| options: [yes, no] | |
| permissions: | |
| packages: write | |
| contents: read | |
| env: | |
| IMAGE_NAME: ${{ github.repository }} | |
| jobs: | |
| Hadolint: | |
| name: Hadolint | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| - name: Check dockerfiles with Hadolint | |
| uses: essentialkaos/hadolint-action@v1 | |
| with: | |
| files: jruby.docker ruby.docker ruby-jemalloc.docker | |
| Ruby: | |
| name: Ruby | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 10 | |
| needs: Hadolint | |
| strategy: | |
| fail-fast: false | |
| max-parallel: 1 | |
| matrix: | |
| version: [ | |
| '2.7.7', | |
| '2.7.8', | |
| '3.0.5', | |
| '3.0.6', | |
| '3.1.3', | |
| '3.1.4', | |
| '3.2.0', | |
| '3.2.1', | |
| '3.2.2', | |
| '3.2.3', | |
| '3.2.4', | |
| '3.3.0', | |
| '3.3.1' | |
| ] | |
| steps: | |
| - name: Login to DockerHub | |
| uses: docker/login-action@v2 | |
| with: | |
| username: ${{ secrets.DOCKERHUB_USERNAME }} | |
| password: ${{ secrets.DOCKERHUB_TOKEN }} | |
| - name: Login to GitHub Container Registry | |
| uses: docker/login-action@v2 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| - name: Prepare metadata for build | |
| id: metadata | |
| run: | | |
| docker_file="ruby.docker" | |
| base_image=$(grep 'FROM ' $docker_file | grep -v 'builder' | sed 's#${REGISTRY}/##' | tail -1 | cut -f2 -d' ') | |
| if [[ -z "$base_image" ]] ; then | |
| echo "::error::Can't extract base image info" | |
| exit 1 | |
| fi | |
| echo "dockerfile=$docker_file" >> $GITHUB_OUTPUT | |
| echo "baseimage=$base_image" >> $GITHUB_OUTPUT | |
| echo -e "\033[34mVersion:\033[0m $version" | |
| echo -e "\033[34mDockerfile:\033[0m $docker_file" | |
| echo -e "\033[34mBase image:\033[0m $base_image" | |
| - name: Check if build/rebuild is required | |
| id: build_check | |
| continue-on-error: true | |
| run : | | |
| # [build-check] | |
| if [[ "${{github.event.inputs.force_rebuild}}" == "true" ]] ; then | |
| echo "::warning::Rebuild ${{matrix.version}} (reason: forced rebuild)" | |
| echo "build=true" >> $GITHUB_OUTPUT | |
| exit 0 | |
| fi | |
| echo -e "::group::\033[34mDownloading built image…\033[0m" | |
| if ! docker pull ghcr.io/${{env.IMAGE_NAME}}:${{matrix.version}} ; then | |
| echo "::warning::Rebuild ${{matrix.version}} (reason: new image)" | |
| echo "build=true" >> $GITHUB_OUTPUT | |
| exit 0 | |
| fi | |
| echo "::endgroup::" | |
| echo -e "::group::\033[34mDownloading base image…\033[0m" | |
| if ! docker pull ${{steps.metadata.outputs.baseimage}} ; then | |
| echo "::error::Can't download image ${{steps.metadata.outputs.baseimage}}" | |
| exit 1 | |
| fi | |
| echo "::endgroup::" | |
| base_layer=$(docker inspect "${{steps.metadata.outputs.baseimage}}" | jq -r '.[0].RootFS.Layers[-1]') | |
| if [[ -z "$base_layer" ]] ; then | |
| echo "::error::Can't extract layers info from base image" | |
| exit 1 | |
| fi | |
| if ! docker inspect "ghcr.io/${{env.IMAGE_NAME}}:${{matrix.version}}" | jq -r '.[0].RootFS.Layers' | grep -q "$base_layer" ; then | |
| echo "::warning::Rebuild image (reason: base image rebuilt)" | |
| echo "build=true" >> $GITHUB_OUTPUT | |
| exit 0 | |
| fi | |
| - name: Setup Docker BuildX | |
| if: ${{ steps.build_check.outputs.build == 'true' }} | |
| uses: docker/setup-buildx-action@v3 | |
| - name: Build and push Docker images (Docker) | |
| if: ${{ steps.build_check.outputs.build == 'true' }} | |
| uses: docker/build-push-action@v5 | |
| with: | |
| push: true | |
| context: . | |
| cache-from: type=gha | |
| cache-to: type=gha,mode=max | |
| file: ${{steps.metadata.outputs.dockerfile}} | |
| build-args: | | |
| REGISTRY=docker.io | |
| RUBY_VERSION=${{matrix.version}} | |
| tags: ${{github.repository}}:${{matrix.version}} | |
| - name: Build and push Docker images (GHCR) | |
| if: ${{ steps.build_check.outputs.build == 'true' }} | |
| uses: docker/build-push-action@v5 | |
| with: | |
| push: true | |
| context: . | |
| cache-from: type=gha | |
| cache-to: type=gha,mode=max | |
| file: ${{steps.metadata.outputs.dockerfile}} | |
| build-args: | | |
| REGISTRY=ghcr.io | |
| RUBY_VERSION=${{matrix.version}} | |
| tags: ghcr.io/${{github.repository}}:${{matrix.version}} | |
| - name: Show info about images | |
| uses: essentialkaos/docker-info-action@v1 | |
| with: | |
| image: ghcr.io/${{github.repository}}:${{matrix.version}} | |
| RubyJemalloc: | |
| name: Ruby+Jemalloc | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 10 | |
| needs: Hadolint | |
| strategy: | |
| fail-fast: false | |
| max-parallel: 1 | |
| matrix: | |
| version: [ | |
| '2.7.7', | |
| '2.7.8', | |
| '3.0.5', | |
| '3.0.6', | |
| '3.1.3', | |
| '3.1.4', | |
| '3.2.0', | |
| '3.2.1', | |
| '3.2.2', | |
| '3.2.3', | |
| '3.2.4', | |
| '3.3.0', | |
| '3.3.1' | |
| ] | |
| steps: | |
| - name: Login to DockerHub | |
| uses: docker/login-action@v2 | |
| with: | |
| username: ${{ secrets.DOCKERHUB_USERNAME }} | |
| password: ${{ secrets.DOCKERHUB_TOKEN }} | |
| - name: Login to GitHub Container Registry | |
| uses: docker/login-action@v2 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| - name: Prepare metadata for build | |
| id: metadata | |
| run: | | |
| docker_file="ruby-jemalloc.docker" | |
| base_image=$(grep 'FROM ' $docker_file | grep -v 'builder' | sed 's#${REGISTRY}/##' | tail -1 | cut -f2 -d' ') | |
| if [[ -z "$base_image" ]] ; then | |
| echo "::error::Can't extract base image info" | |
| exit 1 | |
| fi | |
| echo "dockerfile=$docker_file" >> $GITHUB_OUTPUT | |
| echo "baseimage=$base_image" >> $GITHUB_OUTPUT | |
| echo -e "\033[34mVersion:\033[0m $version" | |
| echo -e "\033[34mDockerfile:\033[0m $docker_file" | |
| echo -e "\033[34mBase image:\033[0m $base_image" | |
| - name: Check if build/rebuild is required | |
| id: build_check | |
| continue-on-error: true | |
| run : | | |
| # [build-check] | |
| if [[ "${{github.event.inputs.force_rebuild}}" == "true" ]] ; then | |
| echo "::warning::Rebuild ${{matrix.version}} (reason: forced rebuild)" | |
| echo "build=true" >> $GITHUB_OUTPUT | |
| exit 0 | |
| fi | |
| echo -e "::group::\033[34mDownloading built image…\033[0m" | |
| if ! docker pull ghcr.io/${{env.IMAGE_NAME}}:${{matrix.version}}-jemalloc ; then | |
| echo "::warning::Rebuild ${{matrix.version}} (reason: new image)" | |
| echo "build=true" >> $GITHUB_OUTPUT | |
| exit 0 | |
| fi | |
| echo "::endgroup::" | |
| echo -e "::group::\033[34mDownloading base image…\033[0m" | |
| if ! docker pull ${{steps.metadata.outputs.baseimage}} ; then | |
| echo "::error::Can't download image ${{steps.metadata.outputs.baseimage}}" | |
| exit 1 | |
| fi | |
| echo "::endgroup::" | |
| base_layer=$(docker inspect "${{steps.metadata.outputs.baseimage}}" | jq -r '.[0].RootFS.Layers[-1]') | |
| if [[ -z "$base_layer" ]] ; then | |
| echo "::error::Can't extract layers info from base image" | |
| exit 1 | |
| fi | |
| if ! docker inspect "ghcr.io/${{env.IMAGE_NAME}}:${{matrix.version}}-jemalloc" | jq -r '.[0].RootFS.Layers' | grep -q "$base_layer" ; then | |
| echo "::warning::Rebuild image (reason: base image rebuilt)" | |
| echo "build=true" >> $GITHUB_OUTPUT | |
| exit 0 | |
| fi | |
| - name: Setup Docker BuildX | |
| if: ${{ steps.build_check.outputs.build == 'true' }} | |
| uses: docker/setup-buildx-action@v3 | |
| - name: Build and push Docker images (Docker) | |
| if: ${{ steps.build_check.outputs.build == 'true' }} | |
| uses: docker/build-push-action@v5 | |
| with: | |
| push: true | |
| context: . | |
| cache-from: type=gha | |
| cache-to: type=gha,mode=max | |
| file: ${{steps.metadata.outputs.dockerfile}} | |
| build-args: | | |
| REGISTRY=docker.io | |
| RUBY_VERSION=${{matrix.version}} | |
| tags: ${{github.repository}}:${{matrix.version}}-jemalloc | |
| - name: Build and push Docker images (GHCR) | |
| if: ${{ steps.build_check.outputs.build == 'true' }} | |
| uses: docker/build-push-action@v5 | |
| with: | |
| push: true | |
| context: . | |
| cache-from: type=gha | |
| cache-to: type=gha,mode=max | |
| file: ${{steps.metadata.outputs.dockerfile}} | |
| build-args: | | |
| REGISTRY=ghcr.io | |
| RUBY_VERSION=${{matrix.version}} | |
| tags: ghcr.io/${{github.repository}}:${{matrix.version}}-jemalloc | |
| - name: Show info about images | |
| uses: essentialkaos/docker-info-action@v1 | |
| with: | |
| image: ghcr.io/${{github.repository}}:${{matrix.version}}-jemalloc | |
| JRuby: | |
| name: JRuby | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 10 | |
| needs: Hadolint | |
| strategy: | |
| fail-fast: false | |
| max-parallel: 1 | |
| matrix: | |
| version: [ | |
| '9.3.9.0', | |
| '9.3.10.0', | |
| '9.4.0.0', | |
| '9.4.1.0', | |
| '9.4.2.0', | |
| '9.4.3.0', | |
| '9.4.4.0', | |
| '9.4.5.0', | |
| '9.4.6.0' | |
| ] | |
| steps: | |
| - name: Login to DockerHub | |
| uses: docker/login-action@v2 | |
| with: | |
| username: ${{ secrets.DOCKERHUB_USERNAME }} | |
| password: ${{ secrets.DOCKERHUB_TOKEN }} | |
| - name: Login to GitHub Container Registry | |
| uses: docker/login-action@v2 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| - name: Prepare metadata for build | |
| id: metadata | |
| run: | | |
| docker_file="jruby.docker" | |
| base_image=$(grep 'FROM ' $docker_file | grep -v 'builder' | sed 's#${REGISTRY}/##' | tail -1 | cut -f2 -d' ') | |
| if [[ -z "$base_image" ]] ; then | |
| echo "::error::Can't extract base image info" | |
| exit 1 | |
| fi | |
| echo "dockerfile=$docker_file" >> $GITHUB_OUTPUT | |
| echo "baseimage=$base_image" >> $GITHUB_OUTPUT | |
| echo -e "\033[34mVersion:\033[0m $version" | |
| echo -e "\033[34mDockerfile:\033[0m $docker_file" | |
| echo -e "\033[34mBase image:\033[0m $base_image" | |
| - name: Check if build/rebuild is required | |
| id: build_check | |
| continue-on-error: true | |
| run : | | |
| # [build-check] | |
| if [[ "${{github.event.inputs.force_rebuild}}" == "true" ]] ; then | |
| echo "::warning::Rebuild ${{matrix.version}} (reason: forced rebuild)" | |
| echo "build=true" >> $GITHUB_OUTPUT | |
| exit 0 | |
| fi | |
| echo -e "::group::\033[34mDownloading built image…\033[0m" | |
| if ! docker pull ghcr.io/${{env.IMAGE_NAME}}:jruby-${{matrix.version}} ; then | |
| echo "::warning::Rebuild ${{matrix.version}} (reason: new image)" | |
| echo "build=true" >> $GITHUB_OUTPUT | |
| exit 0 | |
| fi | |
| echo "::endgroup::" | |
| echo -e "::group::\033[34mDownloading base image…\033[0m" | |
| if ! docker pull ${{steps.metadata.outputs.baseimage}} ; then | |
| echo "::error::Can't download image ${{steps.metadata.outputs.baseimage}}" | |
| exit 1 | |
| fi | |
| echo "::endgroup::" | |
| base_layer=$(docker inspect "${{steps.metadata.outputs.baseimage}}" | jq -r '.[0].RootFS.Layers[-1]') | |
| if [[ -z "$base_layer" ]] ; then | |
| echo "::error::Can't extract layers info from base image" | |
| exit 1 | |
| fi | |
| if ! docker inspect "ghcr.io/${{env.IMAGE_NAME}}:jruby-${{matrix.version}}" | jq -r '.[0].RootFS.Layers' | grep -q "$base_layer" ; then | |
| echo "::warning::Rebuild image (reason: base image rebuilt)" | |
| echo "build=true" >> $GITHUB_OUTPUT | |
| exit 0 | |
| fi | |
| - name: Setup Docker BuildX | |
| if: ${{ steps.build_check.outputs.build == 'true' }} | |
| uses: docker/setup-buildx-action@v3 | |
| - name: Build and push Docker images (Docker) | |
| if: ${{ steps.build_check.outputs.build == 'true' }} | |
| uses: docker/build-push-action@v5 | |
| with: | |
| push: true | |
| context: . | |
| cache-from: type=gha | |
| cache-to: type=gha,mode=max | |
| file: ${{steps.metadata.outputs.dockerfile}} | |
| build-args: | | |
| REGISTRY=docker.io | |
| RUBY_VERSION=${{matrix.version}} | |
| tags: ${{github.repository}}:jruby-${{matrix.version}} | |
| - name: Build and push Docker images (GHCR) | |
| if: ${{ steps.build_check.outputs.build == 'true' }} | |
| uses: docker/build-push-action@v5 | |
| with: | |
| push: true | |
| context: . | |
| cache-from: type=gha | |
| cache-to: type=gha,mode=max | |
| file: ${{steps.metadata.outputs.dockerfile}} | |
| build-args: | | |
| REGISTRY=ghcr.io | |
| RUBY_VERSION=${{matrix.version}} | |
| tags: ghcr.io/${{github.repository}}:jruby-${{matrix.version}} | |
| - name: Show info about images | |
| uses: essentialkaos/docker-info-action@v1 | |
| with: | |
| image: ghcr.io/${{github.repository}}:jruby-${{matrix.version}} |