mirror of https://github.com/vector-im/riot-web
95 lines
3.5 KiB
YAML
95 lines
3.5 KiB
YAML
name: Dockerhub
|
|
on:
|
|
workflow_dispatch: {}
|
|
push:
|
|
tags: [v*]
|
|
schedule:
|
|
# This job can take a while, and we have usage limits, so just publish develop only twice a day
|
|
- cron: "0 7/12 * * *"
|
|
concurrency: ${{ github.workflow }}-${{ github.ref_name }}
|
|
|
|
permissions:
|
|
id-token: write # needed for signing the images with GitHub OIDC Token
|
|
jobs:
|
|
buildx:
|
|
name: Docker Buildx
|
|
runs-on: ubuntu-latest
|
|
environment: dockerhub
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
include:
|
|
- variant: vanilla
|
|
# Variant we ship to aid ESS in providing a build on the OpenCoDE platform including specific modules
|
|
- variant: opendesk
|
|
flavor: suffix=-opendesk,onlatest=true
|
|
prepare: mv variants/openDesk/* .
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0 # needed for docker-package to be able to calculate the version
|
|
|
|
- name: Install Cosign
|
|
uses: sigstore/cosign-installer@v3.3.0
|
|
|
|
- name: Prepare
|
|
if: matrix.prepare
|
|
run: ${{ matrix.prepare }}
|
|
|
|
- name: Set up QEMU
|
|
uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v3
|
|
|
|
- name: Set up Docker Buildx
|
|
uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3
|
|
with:
|
|
install: true
|
|
|
|
- name: Login to Docker Hub
|
|
uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3
|
|
with:
|
|
username: ${{ secrets.DOCKERHUB_USERNAME }}
|
|
password: ${{ secrets.DOCKERHUB_TOKEN }}
|
|
|
|
- name: Docker meta
|
|
id: meta
|
|
uses: docker/metadata-action@31cebacef4805868f9ce9a0cb03ee36c32df2ac4 # v5
|
|
with:
|
|
images: |
|
|
vectorim/element-web
|
|
tags: |
|
|
type=ref,event=branch
|
|
type=ref,event=tag
|
|
flavor: |
|
|
latest=${{ contains(github.ref_name, '-rc.') && 'false' || 'auto' }}
|
|
${{ matrix.flavor }}
|
|
|
|
- name: Build and push
|
|
id: build-and-push
|
|
uses: docker/build-push-action@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56 # v5
|
|
with:
|
|
context: .
|
|
push: true
|
|
platforms: linux/amd64,linux/arm64
|
|
tags: ${{ steps.meta.outputs.tags }}
|
|
labels: ${{ steps.meta.outputs.labels }}
|
|
|
|
- name: Sign the images with GitHub OIDC Token
|
|
env:
|
|
DIGEST: ${{ steps.build-and-push.outputs.digest }}
|
|
TAGS: ${{ steps.meta.outputs.tags }}
|
|
run: |
|
|
images=""
|
|
for tag in ${TAGS}; do
|
|
images+="${tag}@${DIGEST} "
|
|
done
|
|
cosign sign --yes ${images}
|
|
|
|
- name: Update repo description
|
|
if: matrix.variant == 'vanilla'
|
|
uses: peter-evans/dockerhub-description@dc67fad7001ef9e8e3c124cb7a64e16d0a63d864 # v3
|
|
continue-on-error: true
|
|
with:
|
|
username: ${{ secrets.DOCKERHUB_USERNAME }}
|
|
password: ${{ secrets.DOCKERHUB_TOKEN }}
|
|
repository: vectorim/element-web
|