MaddoScientisto
6341aa84f4
All checks were successful
Publish Container / publish (push) Successful in 7m48s
125 lines
4.4 KiB
YAML
125 lines
4.4 KiB
YAML
name: Publish Container
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- master
|
|
workflow_dispatch:
|
|
|
|
env:
|
|
DOTNET_VERSION: 10.0.x
|
|
REGISTRY: ${{ vars.FORGEJO_REGISTRY }}
|
|
IMAGE_NAMESPACE: ${{ vars.IMAGE_NAMESPACE }}
|
|
IMAGE_NAME: ${{ vars.IMAGE_NAME }}
|
|
|
|
jobs:
|
|
publish:
|
|
runs-on: docker
|
|
env:
|
|
# Allow explicit override from Forgejo variables.
|
|
DOCKER_HOST: ${{ vars.DOCKER_HOST }}
|
|
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Setup .NET
|
|
uses: actions/setup-dotnet@v4
|
|
with:
|
|
dotnet-version: ${{ env.DOTNET_VERSION }}
|
|
|
|
- name: Validate workflow variables
|
|
run: |
|
|
set -eu
|
|
if [ -z "${REGISTRY}" ]; then echo "vars.FORGEJO_REGISTRY is required"; exit 1; fi
|
|
if [ -z "${IMAGE_NAMESPACE}" ]; then echo "vars.IMAGE_NAMESPACE is required"; exit 1; fi
|
|
if [ -z "${IMAGE_NAME}" ]; then echo "vars.IMAGE_NAME is required"; exit 1; fi
|
|
|
|
- name: Validate registry secrets
|
|
run: |
|
|
set -eu
|
|
if [ -z "${{ secrets.FORGEJO_REGISTRY_USERNAME }}" ]; then echo "secrets.FORGEJO_REGISTRY_USERNAME is required"; exit 1; fi
|
|
if [ -z "${{ secrets.FORGEJO_REGISTRY_TOKEN }}" ]; then echo "secrets.FORGEJO_REGISTRY_TOKEN is required"; exit 1; fi
|
|
|
|
- name: Ensure Docker CLI exists
|
|
run: |
|
|
set -eu
|
|
if command -v docker >/dev/null 2>&1; then
|
|
docker --version
|
|
exit 0
|
|
fi
|
|
|
|
ARCH="$(uname -m)"
|
|
case "${ARCH}" in
|
|
x86_64) DOCKER_ARCH="x86_64" ;;
|
|
aarch64|arm64) DOCKER_ARCH="aarch64" ;;
|
|
*) echo "Unsupported architecture for Docker CLI bootstrap: ${ARCH}"; exit 1 ;;
|
|
esac
|
|
|
|
DOCKER_CLI_VERSION="27.5.1"
|
|
curl -fsSL "https://download.docker.com/linux/static/stable/${DOCKER_ARCH}/docker-${DOCKER_CLI_VERSION}.tgz" -o docker.tgz
|
|
tar -xzf docker.tgz
|
|
mkdir -p "${HOME}/.local/bin"
|
|
mv docker/docker "${HOME}/.local/bin/docker"
|
|
chmod +x "${HOME}/.local/bin/docker"
|
|
echo "${HOME}/.local/bin" >> "${GITHUB_PATH}"
|
|
"${HOME}/.local/bin/docker" --version
|
|
|
|
- name: Resolve Docker daemon endpoint
|
|
run: |
|
|
set -eu
|
|
|
|
if [ -n "${DOCKER_HOST:-}" ]; then
|
|
echo "Using configured DOCKER_HOST=${DOCKER_HOST}"
|
|
echo "DOCKER_HOST=${DOCKER_HOST}" >> "${GITHUB_ENV}"
|
|
exit 0
|
|
fi
|
|
|
|
if [ -S /var/run/docker.sock ]; then
|
|
echo "DOCKER_HOST=unix:///var/run/docker.sock" >> "${GITHUB_ENV}"
|
|
echo "Resolved DOCKER_HOST from local docker socket"
|
|
exit 0
|
|
fi
|
|
|
|
# Try a set of common candidate endpoints reachable from inside job containers.
|
|
CANDIDATES="forgejo-docker-in-docker host.docker.internal 172.17.0.1 172.18.0.1 10.0.2.2"
|
|
for c in $CANDIDATES; do
|
|
echo "Testing http://${c}:2375/_ping ..."
|
|
if curl --silent --max-time 2 "http://${c}:2375/_ping" >/dev/null 2>&1 || curl --silent --max-time 2 "http://${c}:2375/version" >/dev/null 2>&1; then
|
|
echo "DOCKER_HOST=tcp://${c}:2375" >> "${GITHUB_ENV}"
|
|
echo "Resolved DOCKER_HOST to tcp://${c}:2375"
|
|
exit 0
|
|
fi
|
|
done
|
|
|
|
echo "Could not determine a reachable Docker daemon endpoint from candidates. Set vars.DOCKER_HOST explicitly."
|
|
exit 1
|
|
|
|
- name: Check Docker daemon connectivity
|
|
run: |
|
|
set -eu
|
|
echo "Using DOCKER_HOST=${DOCKER_HOST}"
|
|
docker version
|
|
docker info >/dev/null
|
|
|
|
- name: Restore and publish app
|
|
run: dotnet publish src/MaddoScientisto.Web/MaddoScientisto.Web.csproj -c Release -o ./artifacts/publish
|
|
|
|
- name: Login to Forgejo registry
|
|
run: |
|
|
echo "${{ secrets.FORGEJO_REGISTRY_TOKEN }}" | docker login "${REGISTRY}" -u "${{ secrets.FORGEJO_REGISTRY_USERNAME }}" --password-stdin
|
|
|
|
- name: Build image
|
|
run: |
|
|
set -eu
|
|
IMAGE_REF="${REGISTRY}/${IMAGE_NAMESPACE}/${IMAGE_NAME}"
|
|
SHORT_SHA="$(echo "${GITHUB_SHA}" | cut -c1-12)"
|
|
docker build -t "${IMAGE_REF}:sha-${SHORT_SHA}" -t "${IMAGE_REF}:latest" .
|
|
|
|
- name: Push image tags
|
|
run: |
|
|
set -eu
|
|
IMAGE_REF="${REGISTRY}/${IMAGE_NAMESPACE}/${IMAGE_NAME}"
|
|
SHORT_SHA="$(echo "${GITHUB_SHA}" | cut -c1-12)"
|
|
docker push "${IMAGE_REF}:sha-${SHORT_SHA}"
|
|
docker push "${IMAGE_REF}:latest"
|