create .internal directory with 0777 instead of 0700 (to allow aler…
#881
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| name: Deploy | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| reason: | |
| required: false | |
| description: "Reason for running this workflow" | |
| use_test_image: | |
| required: false | |
| type: boolean | |
| description: "Use base image testpr" | |
| default: false | |
| push: | |
| branches: | |
| - main | |
| # Don't trigger if it's just a documentation update | |
| paths: | |
| - "rust/**" | |
| - "Dockerfile**" | |
| - "rootfs/**" | |
| # Set workflow-wide environment variables | |
| # - REPO: repo name on dockerhub | |
| # - IMAGE: image name on dockerhub | |
| env: | |
| DOCKERHUB_REPO: kx1t | |
| DOCKERHUB_IMAGE: planefence | |
| GHCR_IMAGE: sdr-enthusiasts/docker-planefence | |
| GHCR_REGISTRY: ghcr.io | |
| GH_LABEL: main | |
| GHCR_TAG: latest | |
| jobs: | |
| workflow-dispatch: | |
| name: Triggered via Workflow Dispatch? | |
| # only run this step if workflow dispatch triggered | |
| # log the reason the workflow dispatch was triggered | |
| if: | | |
| github.event_name == 'workflow_dispatch' && | |
| github.event.inputs.reason != '' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Log dispatch reason | |
| env: | |
| INPUTS_REASON: ${{ github.event.inputs.reason }} | |
| INPUTS_USE_TEST_IMAGE: ${{ github.event.inputs.use_test_image }} | |
| run: | | |
| echo "Workflow dispatch reason: $INPUTS_REASON" | |
| echo "Use test image: $INPUTS_USE_TEST_IMAGE" | |
| hadolint: | |
| name: Run hadolint against docker files | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Pull hadolint/hadolint:latest Image | |
| run: docker pull hadolint/hadolint:latest | |
| - name: Run hadolint against Dockerfiles | |
| run: docker run --rm -i -v "$PWD":/workdir --workdir /workdir --entrypoint hadolint hadolint/hadolint --ignore DL3015 --ignore DL3003 --ignore DL3006 --ignore DL3010 --ignore DL4001 --ignore DL3007 --ignore DL3008 --ignore SC2068 --ignore DL3007 --ignore SC1091 --ignore DL3013 --ignore DL3010 --ignore DL3028 --ignore SC3054 --ignore DL4006 --ignore SC3044 $(find . -type f -iname "Dockerfile*") | |
| build_and_push: | |
| name: Image Build & Push | |
| uses: sdr-enthusiasts/common-github-workflows/.github/workflows/build_and_push_image.yml@main | |
| needs: [hadolint] | |
| with: | |
| push_enabled: true | |
| push_destinations: ghcr.io | |
| ghcr_repo_owner: ${{ github.repository_owner }} | |
| ghcr_repo: ${{ github.repository }} | |
| platform_linux_arm32v6_enabled: false | |
| platform_linux_i386_enabled: false | |
| # set build_latest to true if github.event.inputs.use_test_image is false | |
| build_latest: ${{ github.event.inputs.use_test_image == 'false' || github.event.inputs.use_test_image == '' }} | |
| build_baseimage_test: ${{ github.event.inputs.use_test_image == 'true' }} | |
| # only build the entire stack if we are not using the test image | |
| build_version_specific: false | |
| build_platform_specific: false | |
| build_nohealthcheck: false | |
| build_baseimage_url: :python/:python-test-pr | |
| secrets: | |
| ghcr_token: ${{ secrets.GITHUB_TOKEN }} | |
| dockerhub_token: ${{ secrets.DOCKERHUB_TOKEN }} | |
| # deploy_ghcr_multiarch: | |
| # name: Deploy ghcr.io (Multi-Arch) | |
| # # needs: [hadolint] | |
| # runs-on: ubuntu-latest | |
| # permissions: | |
| # packages: write | |
| # steps: | |
| # # Check out our code | |
| # - name: Checkout | |
| # uses: actions/checkout@v3 | |
| # with: | |
| # fetch-depth: 0 | |
| # ref: ${{ env.GH_LABEL }} | |
| # # Log into ghcr (so we can push images) | |
| # - name: Login to ghcr.io | |
| # uses: docker/login-action@v2 | |
| # with: | |
| # registry: ${{ env.GHCR_REGISTRY }} | |
| # username: ${{ github.repository_owner }} | |
| # password: ${{ secrets.GITHUB_TOKEN }} | |
| # # Get metadata from repo | |
| # - name: Extract metadata (tags, labels) for Docker | |
| # id: meta | |
| # uses: docker/metadata-action@v4 | |
| # with: | |
| # images: ${{ env.GHCR_REGISTRY }}/${{ env.IMAGE_NAME }} | |
| # # Set up QEMU for multi-arch builds | |
| # - name: Set up QEMU | |
| # uses: docker/setup-qemu-action@v2 | |
| # # Set up buildx for multi platform builds | |
| # - name: Set up Docker Buildx | |
| # id: buildx | |
| # uses: docker/setup-buildx-action@v2 | |
| # with: | |
| # driver-opts: image=moby/buildkit:v0.10.6 | |
| # # Build "latest" | |
| # - name: Build & Push - latest | |
| # uses: docker/build-push-action@v3 | |
| # with: | |
| # context: . | |
| # file: ./Dockerfile | |
| # no-cache: true | |
| # platforms: linux/amd64,linux/arm/v7,linux/arm64 | |
| # push: true | |
| # tags: ghcr.io/${{ env.GHCR_IMAGE }}:${{ env.GHCR_TAG }} | |
| # labels: ${{ steps.meta.outputs.labels }} |