updated workflow location
This commit is contained in:
@@ -1,90 +0,0 @@
|
||||
# docker-build-push
|
||||
|
||||
This GitHub Actions workflow builds and pushes Docker images to a container registry.
|
||||
It serves as a base workflow and is usable this way, but it may be customized depending on the exact use case.
|
||||
|
||||
## Use cases
|
||||
|
||||
### Build and push Docker images for CI/CD
|
||||
|
||||
This workflow can be used in CI/CD pipelines to automate the process of building and pushing Docker images whenever code is pushed to the repository or a pull request is created.
|
||||
|
||||
I use it with [watchtower](https://github.com/containrrr/watchtower) to automatically update running containers with the latest images.
|
||||
|
||||
### Build an upstream
|
||||
|
||||
You may want to build an upstream image from another repository and push it to your own container registry.
|
||||
You can do this this by modifying the checkout step to pull from the external repository and pass the correct build context to the Docker build step.
|
||||
|
||||
```yaml
|
||||
- name: Checkout external repository to ./external-src
|
||||
uses: actions/checkout@v5
|
||||
with:
|
||||
repository: owner/repo-name
|
||||
ref: main
|
||||
server-url: ${{ github.server_url }}
|
||||
path: external-src
|
||||
fetch-depth: 0 # Fetch all history for all branches and tags
|
||||
|
||||
# ...
|
||||
|
||||
- name: Build and push Docker image
|
||||
uses: docker/build-push-action@v5
|
||||
with:
|
||||
context: ./external-src
|
||||
|
||||
# ...
|
||||
|
||||
```
|
||||
|
||||
### When SSH access is needed during build
|
||||
|
||||
If your Docker build process requires SSH access (for example, to clone private repositories), you can enable SSH agent, and configure the Docker build step to use it.
|
||||
You will also need to change the Dockerfile to use the SSH mount.
|
||||
|
||||
```yaml
|
||||
- name: Start ssh-agent
|
||||
uses: https://github.com/webfactory/ssh-agent@v0.9.0
|
||||
with:
|
||||
ssh-private-key: ${{ secrets.CI_SSH_PRIVATE_KEY }}
|
||||
|
||||
# ...
|
||||
|
||||
- name: Build & push
|
||||
uses: docker/build-push-action@v5
|
||||
with:
|
||||
ssh: default
|
||||
build-args: |
|
||||
GITEA_HOSTKEY=${{ secrets.SSH_GITEA_HOSTKEY }} # Pass host key as build-arg
|
||||
```
|
||||
|
||||
And modify your Dockerfile like this:
|
||||
|
||||
```Dockerfile
|
||||
# Install dependencies
|
||||
RUN apt-get update && \
|
||||
apt-get install -y --no-install-recommends \
|
||||
git \
|
||||
openssh-client \
|
||||
ca-certificates \
|
||||
libnss3 \
|
||||
nss-plugin-pem \
|
||||
libbrotli1 && \
|
||||
rm -rf /var/lib/apt/lists/*
|
||||
|
||||
# Add Gitea host key to known_hosts
|
||||
ARG GITEA_HOSTKEY
|
||||
RUN set -eux; \
|
||||
mkdir -p /etc/ssh; \
|
||||
printf '%s\n' "$GITEA_HOSTKEY" > /etc/ssh/ssh_known_hosts; \
|
||||
chmod 644 /etc/ssh/ssh_known_hosts; \
|
||||
ssh-keygen -l -E sha256 -f /etc/ssh/ssh_known_hosts
|
||||
|
||||
# Clone private repository using SSH during build
|
||||
RUN --mount=type=ssh git clone git@your-gitea-server:your-repo.git /path/to/destination
|
||||
|
||||
# You can do whatever you need with SSH by using the --mount=type=ssh flag
|
||||
# RUN --mount=type=ssh \
|
||||
# GIT_SSH_COMMAND='ssh -o StrictHostKeyChecking=yes -o UserKnownHostsFile=/etc/ssh/ssh_known_hosts' \
|
||||
# pip install --no-cache-dir -r requirements.txt
|
||||
```
|
||||
Reference in New Issue
Block a user