a3101c860b
All checks were successful
CICD Start / Sanity and Base Decision (pull_request) Successful in 1m10s
Signed-off-by: copilotcoder <copilotcoder@darkhelm.org>
105 lines
3.6 KiB
YAML
105 lines
3.6 KiB
YAML
name: CICD Start
|
|
|
|
on:
|
|
push:
|
|
branches: [ main, develop, feature/* ]
|
|
pull_request:
|
|
branches: [ main, develop ]
|
|
workflow_dispatch:
|
|
|
|
env:
|
|
GITEA_SSH_HOST: kankali.darkhelm.lan
|
|
GITEA_SSH_PORT: "2222"
|
|
GITEA_REPO_SSH_URL: ssh://git@kankali.darkhelm.lan:2222/DarkHelm.org/plex-playlist.git
|
|
GITEA_REGISTRY: kankali.darkhelm.lan:3001
|
|
GITEA_REGISTRY_IP: 10.18.75.2
|
|
GITEA_REGISTRY_HOST: kankali.darkhelm.lan
|
|
|
|
concurrency:
|
|
group: start-${{ github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
jobs:
|
|
sanity-and-routing:
|
|
name: Sanity and Base Decision
|
|
runs-on: ubuntu-act-8gb
|
|
|
|
steps:
|
|
- name: Configure registry host resolution
|
|
run: |
|
|
if ! grep -q "${GITEA_REGISTRY_HOST}" /etc/hosts; then
|
|
echo "${GITEA_REGISTRY_IP} ${GITEA_REGISTRY_HOST}" >> /etc/hosts
|
|
fi
|
|
|
|
- name: Registry sanity login
|
|
env:
|
|
PACKAGE_ACCESS_TOKEN: ${{ secrets.PACKAGE_ACCESS_TOKEN }}
|
|
REGISTRY_USER: ${{ secrets.REGISTRY_USER || github.actor }}
|
|
run: |
|
|
echo "${PACKAGE_ACCESS_TOKEN}" | docker login "http://${GITEA_REGISTRY}" -u "${REGISTRY_USER}" --password-stdin
|
|
|
|
- name: Registry sanity push and pull
|
|
env:
|
|
REGISTRY_USER: ${{ secrets.REGISTRY_USER || github.actor }}
|
|
run: |
|
|
PREFLIGHT_TAG="${GITHUB_SHA:-manual}"
|
|
PREFLIGHT_REF="${GITEA_REGISTRY}/darkhelm.org/plex-playlist-ci-preflight:${PREFLIGHT_TAG}"
|
|
|
|
cat <<'EOF' > /tmp/Dockerfile.preflight
|
|
FROM scratch
|
|
LABEL org.opencontainers.image.title="plex-playlist registry preflight"
|
|
LABEL org.opencontainers.image.description="Minimal image used to verify registry push/pull access"
|
|
EOF
|
|
|
|
docker build -f /tmp/Dockerfile.preflight -t registry-preflight:latest /tmp
|
|
docker tag registry-preflight:latest "${PREFLIGHT_REF}"
|
|
docker push "${PREFLIGHT_REF}"
|
|
docker pull "${PREFLIGHT_REF}"
|
|
|
|
- name: Compute base hash and base-needed signal
|
|
env:
|
|
SSH_PRIVATE_KEY: ${{ secrets.SSH_PRIVATE_KEY }}
|
|
run: |
|
|
set -e
|
|
umask 077
|
|
trap 'rm -f ~/.ssh/id_rsa' EXIT
|
|
|
|
if [ -z "${SSH_PRIVATE_KEY}" ]; then
|
|
echo "❌ SSH_PRIVATE_KEY is empty"
|
|
exit 1
|
|
fi
|
|
|
|
mkdir -p ~/.ssh
|
|
echo "${SSH_PRIVATE_KEY}" > ~/.ssh/id_rsa
|
|
chmod 600 ~/.ssh/id_rsa
|
|
ssh-keyscan -p "${GITEA_SSH_PORT}" "${GITEA_SSH_HOST}" >> ~/.ssh/known_hosts 2>/dev/null
|
|
|
|
GIT_SSH_COMMAND="ssh -i ~/.ssh/id_rsa -o IdentitiesOnly=yes -o StrictHostKeyChecking=no" \
|
|
git clone --depth 1 --no-checkout "${GITEA_REPO_SSH_URL}" .
|
|
|
|
GIT_SSH_COMMAND="ssh -i ~/.ssh/id_rsa -o IdentitiesOnly=yes -o StrictHostKeyChecking=no" \
|
|
git fetch --depth 1 origin "${GITHUB_SHA}" >/dev/null 2>&1 || true
|
|
|
|
git checkout FETCH_HEAD -- Dockerfile.cicd-base .dockerignore scripts/compute-cicd-base-hash.sh
|
|
chmod +x scripts/compute-cicd-base-hash.sh
|
|
|
|
BASE_HASH=$(./scripts/compute-cicd-base-hash.sh)
|
|
BASE_REF_HASH="${GITEA_REGISTRY}/darkhelm.org/plex-playlist-cicd-base:${BASE_HASH}"
|
|
|
|
echo "Base hash: ${BASE_HASH}"
|
|
echo "Base ref: ${BASE_REF_HASH}"
|
|
|
|
for i in 1 2 3; do
|
|
if timeout 30 docker manifest inspect "${BASE_REF_HASH}" >/dev/null 2>&1 && \
|
|
timeout 60 docker pull "${BASE_REF_HASH}" >/dev/null 2>&1; then
|
|
echo "Base rebuild needed: false"
|
|
exit 0
|
|
fi
|
|
|
|
if [ "${i}" -lt 3 ]; then
|
|
sleep 20
|
|
fi
|
|
done
|
|
|
|
echo "Base rebuild needed: true"
|