Jon Chery
eadf2cc2c5
New .gitea/workflows/release.yml:
- Triggers on push: tags: ['v*'] (deterministic)
- Job 'ci': checkout + install Go + install coreci binary +
coreci run (executes .coreci.yml: validate, build, test, release)
- Job 'container-orca': kaniko executor:debug with --entrypoint
/bin/sh, builds+pushes orca image (no DinD)
- Job 'container-traefik': same, builds+pushes orca-traefik image
(skips if Dockerfile.traefik absent at that tag)
- Uses PAT_TOKEN secret (Gitea reserves GITEA_ prefix)
.coreci.yml:
- Removed container-publish + container-publish-traefik steps
(moved to Gitea Actions — CoreCI's podman executor appends sh -c
which conflicts with kaniko's /kaniko/executor entrypoint)
- Keeps validate/build/test/release (tarball + Gitea release)
scripts/trigger_coreci.sh:
- Added tag ref handling (refs/tags/*) so pre-push hook triggers
CoreCI for tag pushes too (Gitea Actions webhook is secondary)
---ci---
project: orca
phase: 1
milestone: v0.15
status: execute
---/ci---
90 lines
2.8 KiB
YAML
90 lines
2.8 KiB
YAML
name: Release
|
|
|
|
on:
|
|
push:
|
|
tags:
|
|
- 'v*'
|
|
|
|
jobs:
|
|
ci:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Set up Go
|
|
uses: actions/setup-go@v5
|
|
with:
|
|
go-version: '1.25'
|
|
|
|
- name: Install CoreCI
|
|
run: |
|
|
git clone --depth=1 https://git.cloudinit.dev/coreci/coreci.git /tmp/coreci
|
|
cd /tmp/coreci
|
|
CGO_ENABLED=0 go build -tags sqlite_go,embed -o /usr/local/bin/coreci ./cmd/coreci
|
|
coreci version
|
|
|
|
- name: Run CoreCI pipeline
|
|
env:
|
|
GITEA_TOKEN: ${{ secrets.PAT_TOKEN }}
|
|
run: |
|
|
coreci run
|
|
|
|
container-orca:
|
|
runs-on: ubuntu-latest
|
|
needs: ci
|
|
container:
|
|
image: gcr.io/kaniko-project/executor:debug
|
|
options: --entrypoint /bin/sh
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Build and push orca image
|
|
env:
|
|
GITEA_TOKEN: ${{ secrets.PAT_TOKEN }}
|
|
VERSION: ${{ gitea.ref_name }}
|
|
run: |
|
|
mkdir -p /kaniko/.docker
|
|
AUTH=$(echo -n "cloudinit-bot:${GITEA_TOKEN}" | base64 -w0)
|
|
echo "{\"auths\":{\"git.cloudinit.dev\":{\"auth\":\"${AUTH}\"}}}" > /kaniko/.docker/config.json
|
|
GIT_COMMIT=$(echo -n "${{ gitea.sha }}" | cut -c1-12)
|
|
BUILD_TIME=$(date -u +%Y-%m-%dT%H:%M:%SZ)
|
|
/kaniko/executor \
|
|
--dockerfile=Dockerfile \
|
|
--context=dir://. \
|
|
--destination=git.cloudinit.dev/coreci/orca:${VERSION} \
|
|
--destination=git.cloudinit.dev/coreci/orca:latest \
|
|
--build-arg=VERSION=${VERSION} \
|
|
--build-arg=GIT_COMMIT=${GIT_COMMIT} \
|
|
--build-arg=BUILD_TIME=${BUILD_TIME} \
|
|
--skip-tls-verify-registry
|
|
|
|
container-traefik:
|
|
runs-on: ubuntu-latest
|
|
needs: ci
|
|
container:
|
|
image: gcr.io/kaniko-project/executor:debug
|
|
options: --entrypoint /bin/sh
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Build and push orca-traefik image
|
|
env:
|
|
GITEA_TOKEN: ${{ secrets.PAT_TOKEN }}
|
|
VERSION: ${{ gitea.ref_name }}
|
|
run: |
|
|
if [ ! -f Dockerfile.traefik ]; then
|
|
echo "Dockerfile.traefik not found at this tag — skipping orca-traefik image"
|
|
exit 0
|
|
fi
|
|
mkdir -p /kaniko/.docker
|
|
AUTH=$(echo -n "cloudinit-bot:${GITEA_TOKEN}" | base64 -w0)
|
|
echo "{\"auths\":{\"git.cloudinit.dev\":{\"auth\":\"${AUTH}\"}}}" > /kaniko/.docker/config.json
|
|
/kaniko/executor \
|
|
--dockerfile=Dockerfile.traefik \
|
|
--context=dir://. \
|
|
--destination=git.cloudinit.dev/coreci/orca-traefik:${VERSION} \
|
|
--destination=git.cloudinit.dev/coreci/orca-traefik:latest \
|
|
--skip-tls-verify-registry |