e66e880857
I noticed that making changes to the exports script before a release could cause modules to not build properly if breaking changes got pushed out. To prevent this, I'm making it so that the hash of the commit is put in the tag for the exports script image and that the CLI tool will use that hash when building the `Containerfile`.
150 lines
3.9 KiB
YAML
150 lines
3.9 KiB
YAML
name: Earthly main branch +all
|
|
|
|
concurrency:
|
|
group: ${{ github.workflow }}-main
|
|
cancel-in-progress: true
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
push:
|
|
branches:
|
|
- main
|
|
|
|
env:
|
|
FORCE_COLOR: 1
|
|
|
|
jobs:
|
|
build:
|
|
permissions:
|
|
packages: write
|
|
timeout-minutes: 60
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- name: Maximize build space
|
|
uses: ublue-os/remove-unwanted-software@v6
|
|
env:
|
|
EARTHLY_SAT_TOKEN: ${{ secrets.EARTHLY_SAT_TOKEN }}
|
|
if: env.EARTHLY_SAT_TOKEN == null
|
|
|
|
- uses: earthly/actions-setup@v1
|
|
|
|
- name: Earthly login
|
|
env:
|
|
EARTHLY_SAT_TOKEN: ${{ secrets.EARTHLY_SAT_TOKEN }}
|
|
if: env.EARTHLY_SAT_TOKEN != null
|
|
run: |
|
|
earthly account login --token ${{ secrets.EARTHLY_SAT_TOKEN }} >> /dev/null
|
|
earthly org s blue-build
|
|
earthly sat s blue-build-main
|
|
|
|
# Setup repo and add caching
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
ref: main
|
|
|
|
- name: Login to GitHub Container Registry
|
|
uses: docker/login-action@v3
|
|
with:
|
|
registry: ghcr.io
|
|
username: ${{ github.actor }}
|
|
password: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
- name: Run build
|
|
if: github.repository == 'blue-build/cli'
|
|
run: earthly --push --ci +build
|
|
|
|
- name: Run build fork
|
|
if: github.repository != 'blue-build/cli'
|
|
run: earthly --ci +build
|
|
|
|
integration-tests:
|
|
permissions:
|
|
packages: write
|
|
timeout-minutes: 60
|
|
runs-on: ubuntu-latest
|
|
if: github.repository == 'blue-build/cli'
|
|
needs:
|
|
- build
|
|
|
|
steps:
|
|
- name: Maximize build space
|
|
uses: ublue-os/remove-unwanted-software@v6
|
|
env:
|
|
EARTHLY_SAT_TOKEN: ${{ secrets.EARTHLY_SAT_TOKEN }}
|
|
if: env.EARTHLY_SAT_TOKEN == null
|
|
|
|
- uses: earthly/actions-setup@v1
|
|
|
|
- name: Earthly login
|
|
env:
|
|
EARTHLY_SAT_TOKEN: ${{ secrets.EARTHLY_SAT_TOKEN }}
|
|
if: env.EARTHLY_SAT_TOKEN != null
|
|
run: |
|
|
earthly account login --token ${{ secrets.EARTHLY_SAT_TOKEN }} >> /dev/null
|
|
earthly org s blue-build
|
|
earthly sat s blue-build-integration-tests
|
|
|
|
# Setup repo and add caching
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
ref: main
|
|
|
|
- name: Run integration tests
|
|
if: github.repository == 'blue-build/cli'
|
|
run: earthly --ci -P ./integration-tests+all
|
|
|
|
docker-build:
|
|
timeout-minutes: 60
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
contents: read
|
|
packages: write
|
|
id-token: write
|
|
if: github.repository == 'blue-build/cli'
|
|
needs:
|
|
- build
|
|
|
|
steps:
|
|
- name: Maximize build space
|
|
uses: ublue-os/remove-unwanted-software@v6
|
|
|
|
- uses: sigstore/cosign-installer@v3.3.0
|
|
- uses: earthly/actions-setup@v1
|
|
|
|
- name: Set up Docker Buildx
|
|
uses: docker/setup-buildx-action@v3
|
|
with:
|
|
install: true
|
|
|
|
- name: Earthly login
|
|
env:
|
|
EARTHLY_SAT_TOKEN: ${{ secrets.EARTHLY_SAT_TOKEN }}
|
|
if: env.EARTHLY_SAT_TOKEN != null
|
|
run: |
|
|
earthly account login --token ${{ secrets.EARTHLY_SAT_TOKEN }} >> /dev/null
|
|
earthly org s blue-build
|
|
earthly sat s blue-build-main
|
|
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
ref: main
|
|
|
|
- name: Install bluebuild
|
|
run: |
|
|
earthly -a +installer/bluebuild /usr/local/bin/bluebuild
|
|
|
|
- name: Expose GitHub Runtime
|
|
uses: crazy-max/ghaction-github-runtime@v3
|
|
|
|
- name: Run Build
|
|
env:
|
|
GH_TOKEN: ${{ github.token }}
|
|
GH_PR_EVENT_NUMBER: ${{ github.event.number }}
|
|
COSIGN_PRIVATE_KEY: ${{ secrets.TEST_SIGNING_SECRET }}
|
|
BB_BUILDKIT_CACHE_GHA: true
|
|
run: |
|
|
cd integration-tests/test-repo
|
|
bluebuild template -vv | tee Containerfile
|
|
grep -q 'ARG IMAGE_REGISTRY=ghcr.io/blue-build' Containerfile || exit 1
|
|
bluebuild build --push -vv
|