ci: publish latest and version tags without sha tags
CI / Test and publish (push) Successful in 25s

This commit is contained in:
2026-09-10 20:47:55 +04:00
parent 1f2fdba24e
commit 8015a4b1f0
3 changed files with 20 additions and 20 deletions
+9 -9
View File
@@ -22,6 +22,7 @@ jobs:
env: env:
IMAGE: code.popov.link/valentineus/vacationplanner2ics IMAGE: code.popov.link/valentineus/vacationplanner2ics
TEST_IMAGE: vacationplanner2ics-test:ci-${{ gitea.run_id }} TEST_IMAGE: vacationplanner2ics-test:ci-${{ gitea.run_id }}
RUNTIME_IMAGE: vacationplanner2ics-runtime:ci-${{ gitea.run_id }}
SMOKE_CONTAINER: vacationplanner2ics-ci-${{ gitea.run_id }} SMOKE_CONTAINER: vacationplanner2ics-ci-${{ gitea.run_id }}
REVISION: ${{ gitea.sha }} REVISION: ${{ gitea.sha }}
REF: ${{ gitea.ref }} REF: ${{ gitea.ref }}
@@ -47,14 +48,14 @@ jobs:
run: >- run: >-
docker build --target runtime docker build --target runtime
--label "org.opencontainers.image.revision=$REVISION" --label "org.opencontainers.image.revision=$REVISION"
--tag "$IMAGE:sha-$REVISION" . --tag "$RUNTIME_IMAGE" .
- name: Smoke-test the runtime image - name: Smoke-test the runtime image
run: | run: |
set -eu set -eu
docker run -d --name "$SMOKE_CONTAINER" --network none --read-only \ docker run -d --name "$SMOKE_CONTAINER" --network none --read-only \
--cap-drop ALL --security-opt no-new-privileges \ --cap-drop ALL --security-opt no-new-privileges \
--memory 32m --cpus 1 --pids-limit 64 "$IMAGE:sha-$REVISION" --memory 32m --cpus 1 --pids-limit 64 "$RUNTIME_IMAGE"
docker run --rm --network "container:$SMOKE_CONTAINER" --read-only \ docker run --rm --network "container:$SMOKE_CONTAINER" --read-only \
--cap-drop ALL --security-opt no-new-privileges "$TEST_IMAGE" python -c ' --cap-drop ALL --security-opt no-new-privileges "$TEST_IMAGE" python -c '
import time, urllib.request import time, urllib.request
@@ -68,7 +69,7 @@ jobs:
raise raise
time.sleep(0.1) time.sleep(0.1)
print("Runtime HTTP smoke test passed")' print("Runtime HTTP smoke test passed")'
docker image inspect --format 'Image size: {{.Size}} bytes' "$IMAGE:sha-$REVISION" docker image inspect --format 'Image size: {{.Size}} bytes' "$RUNTIME_IMAGE"
docker stats --no-stream --format 'Memory: {{.MemUsage}}; CPU: {{.CPUPerc}}' "$SMOKE_CONTAINER" docker stats --no-stream --format 'Memory: {{.MemUsage}}; CPU: {{.CPUPerc}}' "$SMOKE_CONTAINER"
docker stop --time 5 "$SMOKE_CONTAINER" docker stop --time 5 "$SMOKE_CONTAINER"
test "$(docker inspect --format '{{.State.ExitCode}}' "$SMOKE_CONTAINER")" = 0 test "$(docker inspect --format '{{.State.ExitCode}}' "$SMOKE_CONTAINER")" = 0
@@ -89,17 +90,16 @@ jobs:
DOCKER_CONFIG="$(mktemp -d)" DOCKER_CONFIG="$(mktemp -d)"
trap 'rm -rf "$DOCKER_CONFIG"' EXIT trap 'rm -rf "$DOCKER_CONFIG"' EXIT
printf '%s' "$REGISTRY_TOKEN" | docker login code.popov.link --username valentineus --password-stdin printf '%s' "$REGISTRY_TOKEN" | docker login code.popov.link --username valentineus --password-stdin
docker push "$IMAGE:sha-$REVISION"
if [ "$REF" = refs/heads/master ]; then if [ "$REF" = refs/heads/master ]; then
docker tag "$IMAGE:sha-$REVISION" "$IMAGE:latest" TAG=latest
docker push "$IMAGE:latest"
else else
docker tag "$IMAGE:sha-$REVISION" "$IMAGE:${REF#refs/tags/}" TAG="${REF#refs/tags/v}"
docker push "$IMAGE:${REF#refs/tags/}"
fi fi
docker tag "$RUNTIME_IMAGE" "$IMAGE:$TAG"
docker push "$IMAGE:$TAG"
- name: Remove temporary containers and image tags - name: Remove temporary containers and image tags
if: always() if: always()
run: | run: |
docker rm -f "$SMOKE_CONTAINER" 2>/dev/null || true docker rm -f "$SMOKE_CONTAINER" 2>/dev/null || true
docker image rm "$TEST_IMAGE" "$IMAGE:sha-$REVISION" 2>/dev/null || true docker image rm "$TEST_IMAGE" "$RUNTIME_IMAGE" 2>/dev/null || true
+9 -9
View File
@@ -24,6 +24,7 @@ jobs:
env: env:
IMAGE: ghcr.io/valentineus/vacationplanner2ics IMAGE: ghcr.io/valentineus/vacationplanner2ics
TEST_IMAGE: vacationplanner2ics-test:ci-${{ github.run_id }} TEST_IMAGE: vacationplanner2ics-test:ci-${{ github.run_id }}
RUNTIME_IMAGE: vacationplanner2ics-runtime:ci-${{ github.run_id }}
SMOKE_CONTAINER: vacationplanner2ics-ci-${{ github.run_id }} SMOKE_CONTAINER: vacationplanner2ics-ci-${{ github.run_id }}
REVISION: ${{ github.sha }} REVISION: ${{ github.sha }}
REF: ${{ github.ref }} REF: ${{ github.ref }}
@@ -60,7 +61,7 @@ jobs:
with: with:
context: . context: .
target: runtime target: runtime
tags: ${{ env.IMAGE }}:sha-${{ env.REVISION }} tags: ${{ env.RUNTIME_IMAGE }}
labels: | labels: |
org.opencontainers.image.revision=${{ env.REVISION }} org.opencontainers.image.revision=${{ env.REVISION }}
org.opencontainers.image.source=${{ env.SOURCE }} org.opencontainers.image.source=${{ env.SOURCE }}
@@ -72,7 +73,7 @@ jobs:
set -eu set -eu
docker run -d --name "$SMOKE_CONTAINER" --network none --read-only \ docker run -d --name "$SMOKE_CONTAINER" --network none --read-only \
--cap-drop ALL --security-opt no-new-privileges \ --cap-drop ALL --security-opt no-new-privileges \
--memory 32m --cpus 1 --pids-limit 64 "$IMAGE:sha-$REVISION" --memory 32m --cpus 1 --pids-limit 64 "$RUNTIME_IMAGE"
docker run --rm --network "container:$SMOKE_CONTAINER" --read-only \ docker run --rm --network "container:$SMOKE_CONTAINER" --read-only \
--cap-drop ALL --security-opt no-new-privileges "$TEST_IMAGE" python -c ' --cap-drop ALL --security-opt no-new-privileges "$TEST_IMAGE" python -c '
import time, urllib.request import time, urllib.request
@@ -86,7 +87,7 @@ jobs:
raise raise
time.sleep(0.1) time.sleep(0.1)
print("Runtime HTTP smoke test passed")' print("Runtime HTTP smoke test passed")'
docker image inspect --format 'Image size: {{.Size}} bytes' "$IMAGE:sha-$REVISION" docker image inspect --format 'Image size: {{.Size}} bytes' "$RUNTIME_IMAGE"
docker stats --no-stream --format 'Memory: {{.MemUsage}}; CPU: {{.CPUPerc}}' "$SMOKE_CONTAINER" docker stats --no-stream --format 'Memory: {{.MemUsage}}; CPU: {{.CPUPerc}}' "$SMOKE_CONTAINER"
docker stop --time 5 "$SMOKE_CONTAINER" docker stop --time 5 "$SMOKE_CONTAINER"
test "$(docker inspect --format '{{.State.ExitCode}}' "$SMOKE_CONTAINER")" = 0 test "$(docker inspect --format '{{.State.ExitCode}}' "$SMOKE_CONTAINER")" = 0
@@ -104,17 +105,16 @@ jobs:
DOCKER_CONFIG="$(mktemp -d)" DOCKER_CONFIG="$(mktemp -d)"
trap 'rm -rf "$DOCKER_CONFIG"' EXIT trap 'rm -rf "$DOCKER_CONFIG"' EXIT
printf '%s' "$GITHUB_TOKEN" | docker login ghcr.io --username "$REGISTRY_USER" --password-stdin printf '%s' "$GITHUB_TOKEN" | docker login ghcr.io --username "$REGISTRY_USER" --password-stdin
docker push "$IMAGE:sha-$REVISION"
if [ "$REF" = refs/heads/master ]; then if [ "$REF" = refs/heads/master ]; then
docker tag "$IMAGE:sha-$REVISION" "$IMAGE:latest" TAG=latest
docker push "$IMAGE:latest"
else else
docker tag "$IMAGE:sha-$REVISION" "$IMAGE:${REF#refs/tags/}" TAG="${REF#refs/tags/v}"
docker push "$IMAGE:${REF#refs/tags/}"
fi fi
docker tag "$RUNTIME_IMAGE" "$IMAGE:$TAG"
docker push "$IMAGE:$TAG"
- name: Remove temporary containers and image tags - name: Remove temporary containers and image tags
if: always() if: always()
run: | run: |
docker rm -f "$SMOKE_CONTAINER" 2>/dev/null || true docker rm -f "$SMOKE_CONTAINER" 2>/dev/null || true
docker image rm "$TEST_IMAGE" "$IMAGE:sha-$REVISION" 2>/dev/null || true docker image rm "$TEST_IMAGE" "$RUNTIME_IMAGE" 2>/dev/null || true
+2 -2
View File
@@ -17,8 +17,8 @@ builds and publishes its own image:
Available tags: Available tags:
- `latest`: the latest successful `master` build on that platform. - `latest`: the latest successful `master` build on that platform.
- `sha-<full-commit-sha>`: the tested commit. - Git tags starting with `v` publish without that prefix: `v2026.01.02``2026.01.02`.
- `v*`: the corresponding Git tag; does not overwrite `latest`. Versioned builds do not overwrite `latest`.
Pull from GitHub: Pull from GitHub: