116 lines
2.8 KiB
Bash
116 lines
2.8 KiB
Bash
|
#!/bin/sh
|
||
|
|
|
||
|
|
set -ex
|
||
|
|
|
||
|
|
: ${DOCKER_HOST:=unix:///var/run/docker.sock}
|
||
|
|
: ${ARCHS:=amd64 arm64}
|
||
|
|
: ${INTEGRATION_USER:=forgejo-integration}
|
||
|
|
: ${INTEGRATION_IMAGE:=codeberg.org/$INTEGRATION_USER/forgejo}
|
||
|
|
: ${TAG:=${CI_COMMIT_TAG##v}}
|
||
|
|
: ${SHORT_TAG=${TAG%.*-*}}
|
||
|
|
: ${DOMAIN:=codeberg.org}
|
||
|
|
|
||
|
|
: ${VERIFY:=true}
|
||
|
|
VERIFY_COMMAND='gitea --version'
|
||
|
|
VERIFY_STRING='built with'
|
||
|
|
|
||
|
|
publish() {
|
||
|
|
for suffix in '' '-rootless' ; do
|
||
|
|
images=""
|
||
|
|
for arch in $ARCHS ; do
|
||
|
|
#
|
||
|
|
# Get the image from the integration user
|
||
|
|
#
|
||
|
|
image=$(image_name $INTEGRATION_USER $suffix)
|
||
|
|
docker pull --platform linux/$arch $image
|
||
|
|
#
|
||
|
|
# Verify it is usable
|
||
|
|
#
|
||
|
|
if $VERIFY ; then
|
||
|
|
docker run --platform linux/$arch --rm $image $VERIFY_COMMAND | grep "$VERIFY_STRING"
|
||
|
|
fi
|
||
|
|
#
|
||
|
|
# Push the image with a tag reflecting the architecture to the repo owner
|
||
|
|
#
|
||
|
|
arch_image=$(arch_image_name $CI_REPO_OWNER $arch $suffix)
|
||
|
|
docker tag $image $arch_image
|
||
|
|
docker push $arch_image
|
||
|
|
images="$images $arch_image"
|
||
|
|
done
|
||
|
|
|
||
|
|
#
|
||
|
|
# Push a manifest with all the architectures to the repo owner
|
||
|
|
#
|
||
|
|
manifest=$(image_name $CI_REPO_OWNER $suffix)
|
||
|
|
docker manifest rm $manifest || true
|
||
|
|
docker manifest create $manifest $images
|
||
|
|
image_put $CI_REPO_OWNER $(image_tag $suffix) $manifest
|
||
|
|
image_put $CI_REPO_OWNER $(short_image_tag $suffix) $manifest
|
||
|
|
#
|
||
|
|
# Sanity check to ensure the manifest that are published can actualy
|
||
|
|
# be used.
|
||
|
|
#
|
||
|
|
for arch in $ARCHS ; do
|
||
|
|
docker pull --platform linux/$arch $(image_name $CI_REPO_OWNER $suffix)
|
||
|
|
docker pull --platform linux/$arch $(short_image_name $CI_REPO_OWNER $suffix)
|
||
|
|
done
|
||
|
|
done
|
||
|
|
}
|
||
|
|
|
||
|
|
boot() {
|
||
|
|
if docker version ; then
|
||
|
|
return
|
||
|
|
fi
|
||
|
|
apk --update --no-cache add coredns jq curl
|
||
|
|
( echo ".:53 {" ; echo " forward . /etc/resolv.conf"; echo "}" ) > /etc/coredns/Corefile
|
||
|
|
coredns -conf /etc/coredns/Corefile &
|
||
|
|
/usr/local/bin/dockerd --data-root /var/lib/docker --host=$DOCKER_HOST --dns 172.17.0.3 &
|
||
|
|
for i in $(seq 60) ; do
|
||
|
|
docker version && break
|
||
|
|
sleep 1
|
||
|
|
done
|
||
|
|
docker version || exit 1
|
||
|
|
}
|
||
|
|
|
||
|
|
authenticate() {
|
||
|
|
echo "$RELEASETEAMTOKEN" | docker login --password-stdin --username "$RELEASETEAMUSER" $DOMAIN
|
||
|
|
token=$(curl -u$RELEASETEAMUSER:$RELEASETEAMTOKEN -sS https://$DOMAIN/v2/token | jq --raw-output .token)
|
||
|
|
}
|
||
|
|
|
||
|
|
image_put() {
|
||
|
|
docker manifest inspect $3 > /tmp/manifest.json
|
||
|
|
curl -sS -H "Authorization: token $token" -X PUT --data-binary @/tmp/manifest.json https://$DOMAIN/v2/$1/forgejo/manifests/$2
|
||
|
|
}
|
||
|
|
|
||
|
|
main() {
|
||
|
|
boot
|
||
|
|
authenticate
|
||
|
|
publish
|
||
|
|
}
|
||
|
|
|
||
|
|
image_name() {
|
||
|
|
echo $DOMAIN/$1/forgejo:$(image_tag $2)
|
||
|
|
}
|
||
|
|
|
||
|
|
image_tag() {
|
||
|
|
echo $TAG$1
|
||
|
|
}
|
||
|
|
|
||
|
|
short_image_name() {
|
||
|
|
echo $DOMAIN/$1/forgejo:$(short_image_tag $2)
|
||
|
|
}
|
||
|
|
|
||
|
|
short_image_tag() {
|
||
|
|
echo $SHORT_TAG$1
|
||
|
|
}
|
||
|
|
|
||
|
|
arch_image_name() {
|
||
|
|
echo $DOMAIN/$1/forgejo:$(arch_image_tag $2 $3)
|
||
|
|
}
|
||
|
|
|
||
|
|
arch_image_tag() {
|
||
|
|
echo $TAG-$1$2
|
||
|
|
}
|
||
|
|
|
||
|
|
${@:-main}
|