mirror of
https://github.com/vector-im/element-web.git
synced 2024-11-23 00:28:48 +08:00
95 lines
3.5 KiB
YAML
95 lines
3.5 KiB
YAML
name: Dockerhub
|
|
on:
|
|
workflow_dispatch: {}
|
|
push:
|
|
tags: [v*]
|
|
schedule:
|
|
# This job can take a while, and we have usage limits, so just publish develop only twice a day
|
|
- cron: "0 7/12 * * *"
|
|
concurrency: ${{ github.workflow }}-${{ github.ref_name }}
|
|
|
|
permissions:
|
|
id-token: write # needed for signing the images with GitHub OIDC Token
|
|
jobs:
|
|
buildx:
|
|
name: Docker Buildx
|
|
runs-on: ubuntu-latest
|
|
environment: dockerhub
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
include:
|
|
- variant: vanilla
|
|
# Variant we ship to aid ESS in providing a build on the OpenCoDE platform including specific modules
|
|
- variant: opendesk
|
|
flavor: suffix=-opendesk,onlatest=true
|
|
prepare: mv variants/openDesk/* .
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0 # needed for docker-package to be able to calculate the version
|
|
|
|
- name: Install Cosign
|
|
uses: sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20 # v3
|
|
|
|
- name: Prepare
|
|
if: matrix.prepare
|
|
run: ${{ matrix.prepare }}
|
|
|
|
- name: Set up QEMU
|
|
uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v3
|
|
|
|
- name: Set up Docker Buildx
|
|
uses: docker/setup-buildx-action@d70bba72b1f3fd22344832f00baa16ece964efeb # v3
|
|
with:
|
|
install: true
|
|
|
|
- name: Login to Docker Hub
|
|
uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446 # v3
|
|
with:
|
|
username: ${{ secrets.DOCKERHUB_USERNAME }}
|
|
password: ${{ secrets.DOCKERHUB_TOKEN }}
|
|
|
|
- name: Docker meta
|
|
id: meta
|
|
uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81 # v5
|
|
with:
|
|
images: |
|
|
vectorim/element-web
|
|
tags: |
|
|
type=ref,event=branch
|
|
type=ref,event=tag
|
|
flavor: |
|
|
latest=${{ contains(github.ref_name, '-rc.') && 'false' || 'auto' }}
|
|
${{ matrix.flavor }}
|
|
|
|
- name: Build and push
|
|
id: build-and-push
|
|
uses: docker/build-push-action@31159d49c0d4756269a0940a750801a1ea5d7003 # v6
|
|
with:
|
|
context: .
|
|
push: true
|
|
platforms: linux/amd64,linux/arm64
|
|
tags: ${{ steps.meta.outputs.tags }}
|
|
labels: ${{ steps.meta.outputs.labels }}
|
|
|
|
- name: Sign the images with GitHub OIDC Token
|
|
env:
|
|
DIGEST: ${{ steps.build-and-push.outputs.digest }}
|
|
TAGS: ${{ steps.meta.outputs.tags }}
|
|
run: |
|
|
images=""
|
|
for tag in ${TAGS}; do
|
|
images+="${tag}@${DIGEST} "
|
|
done
|
|
cosign sign --yes ${images}
|
|
|
|
- name: Update repo description
|
|
if: matrix.variant == 'vanilla'
|
|
uses: peter-evans/dockerhub-description@e98e4d1628a5f3be2be7c231e50981aee98723ae # v4
|
|
continue-on-error: true
|
|
with:
|
|
username: ${{ secrets.DOCKERHUB_USERNAME }}
|
|
password: ${{ secrets.DOCKERHUB_TOKEN }}
|
|
repository: vectorim/element-web
|