evan.jarrett.net
+1
-1
.tangled/workflows/release-credential-helper.yml
+1
-1
.tangled/workflows/release-credential-helper.yml
+22
-19
.tangled/workflows/release.yml
+22
-19
.tangled/workflows/release.yml
···
2
2
# Triggers on version tags and builds cross-platform binaries using buildah
3
3
4
4
when:
5
-
- event: ["manual"]
5
+
- event: ["push"]
6
6
tag: ["v*"]
7
7
8
-
engine: "nixery"
9
-
10
-
dependencies:
11
-
nixpkgs:
12
-
- buildah
13
-
- gnugrep # Required for tag detection
8
+
engine: "buildah"
14
9
15
10
environment:
16
11
IMAGE_REGISTRY: atcr.io
···
37
32
echo "Building version: $TAG"
38
33
echo "$TAG" > .version
39
34
40
-
- name: Setup build environment
35
+
- name: Setup registry credentials
41
36
command: |
42
-
if ! grep -q "^root:" /etc/passwd 2>/dev/null; then
43
-
echo "root:x:0:0:root:/root:/bin/sh" >> /etc/passwd
44
-
fi
45
-
46
-
- name: Login to registry
47
-
command: |
48
-
echo "${APP_PASSWORD}" | buildah login \
49
-
--storage-driver vfs \
50
-
-u "${IMAGE_USER}" \
51
-
--password-stdin \
52
-
${IMAGE_REGISTRY}
37
+
mkdir -p ~/.docker
38
+
cat > ~/.docker/config.json <<EOF
39
+
{
40
+
"auths": {
41
+
"${IMAGE_REGISTRY}": {
42
+
"auth": "$(echo -n "${IMAGE_USER}:${APP_PASSWORD}" | base64)"
43
+
}
44
+
}
45
+
}
46
+
EOF
47
+
chmod 600 ~/.docker/config.json
53
48
54
49
- name: Build and push AppView image
55
50
command: |
···
64
59
65
60
buildah push \
66
61
--storage-driver vfs \
62
+
${IMAGE_REGISTRY}/${IMAGE_USER}/atcr-appview:${TAG}
63
+
64
+
buildah push \
65
+
--storage-driver vfs \
67
66
${IMAGE_REGISTRY}/${IMAGE_USER}/atcr-appview:latest
68
67
69
68
- name: Build and push Hold image
···
76
75
--tag ${IMAGE_REGISTRY}/${IMAGE_USER}/atcr-hold:latest \
77
76
--file ./Dockerfile.hold \
78
77
.
78
+
79
+
buildah push \
80
+
--storage-driver vfs \
81
+
${IMAGE_REGISTRY}/${IMAGE_USER}/atcr-hold:${TAG}
79
82
80
83
buildah push \
81
84
--storage-driver vfs \