Move registry to quay.io
Build and push Almalinux 9 container images / Build almalinux9 container images (default, 9.5) (push) Failing after 3s Details
Build and push Almalinux 9 container images / Build almalinux9 container images (micro, 9.5) (push) Failing after 3s Details
Build and push Almalinux 9 container images / Build latest almalinux9 container images (push) Has been skipped Details
Build and push Almalinux 8 container images / Build almalinux8 container images (default, 8.10) (push) Failing after 3s Details
Build and push Almalinux 8 container images / Build almalinux8 container images (micro, 8.10) (push) Failing after 2s Details
Build and push Almalinux 8 container images / Build latest almalinux8 container images (push) Has been skipped Details

This commit is contained in:
Muhamad Aditya Prima 2024-12-16 02:29:40 +07:00
parent 792a8c2700
commit d93c165972
8 changed files with 140 additions and 126 deletions

View File

@ -18,53 +18,59 @@ jobs:
steps: steps:
- name: Check out repository code - name: Check out repository code
uses: actions/checkout@v4 uses: actions/checkout@v4
- name: Login to docker.io
uses: docker/login-action@v3
with:
username: ${{ vars.DOCKERHUB_USERNAME }}
password: ${{ secrets.DOCKERHUB_TOKEN }}
# - name: Set up QEMU
# uses: docker/setup-qemu-action@v3
- name: Setup Docker buildx
uses: docker/setup-buildx-action@v3
- if: ${{ matrix.flavor == 'default' }} - if: ${{ matrix.flavor == 'default' }}
name: Build and push almalinux base name: Build almalinux default image
uses: docker/build-push-action@v5 uses: redhat-actions/build-push-action@v5
with: with:
# platforms: linux/amd64,linux/arm64
push: true
context: . context: .
file: ./8/Dockerfile.${{ matrix.flavor }} containerfiles: |
8/Containerfile.${{ matrix.flavor }}
build-args: | build-args: |
ALMALINUX_VERSION=${{ matrix.version }} ALMALINUX_VERSION=${{ matrix.version }}
tags: | tags: |
${{ vars.DOCKERHUB_USERNAME }}/almalinux:${{ matrix.version }} quay.io/sindigilive/almalinux:${{ matrix.version }}
- if: ${{ matrix.flavor == 'micro' }} - if: ${{ matrix.flavor == 'default' }}
name: Push To quay.io
uses: redhat-actions/push-to-registry@v2
with:
tags: quay.io/sindigilive/almalinux:${{ matrix.version }}
registry: quay.io
username: ${{ vars.QUAY_USERNAME }}
password: ${{ secrets.QUAY_SECRET }}
- if: ${{ matrix.flavor == 'default' }}
name: Scan almalinux image with Trivy
uses: aquasecurity/trivy-action@0.20.0
with:
image-ref: 'quay.io/sindigilive/almalinux:${{ matrix.version }}'
format: 'sarif'
output: 'trivy-results.sarif'
- if: ${{ matrix.flavor != 'default' }}
name: Build and push almalinux flavor name: Build and push almalinux flavor
uses: docker/build-push-action@v5 uses: redhat-actions/build-push-action@v5
with: with:
# platforms: linux/amd64,linux/arm64
push: true
context: . context: .
file: ./8/Dockerfile.${{ matrix.flavor }} containerfiles: |
8/Dockerfile.${{ matrix.flavor }}
build-args: | build-args: |
ALMALINUX_VERSION=${{ matrix.version }} ALMALINUX_VERSION=${{ matrix.version }}
tags: | tags: |
${{ vars.DOCKERHUB_USERNAME }}/almalinux:${{ matrix.version }}-${{ matrix.flavor }} quay.io/sindigilive/almalinux:${{ matrix.version }}-${{ matrix.flavor }}
- if: ${{ matrix.flavor == 'default' }} - if: ${{ matrix.flavor != 'default' }}
name: Scan almalinux image with Trivy name: Push almalinux flavor image to quay.io
uses: redhat-actions/push-to-registry@v2
with:
tags: quay.io/sindigilive/almalinux:${{ matrix.version }}-${{ matrix.flavor }}
registry: quay.io
username: ${{ vars.QUAY_USERNAME }}
password: ${{ secrets.QUAY_SECRET }}
- if: ${{ matrix.flavor != 'default' }}
name: Scan almalinux flavor image with Trivy
uses: aquasecurity/trivy-action@0.20.0 uses: aquasecurity/trivy-action@0.20.0
with: with:
image-ref: '${{ vars.DOCKERHUB_USERNAME }}/almalinux:${{ matrix.version }}' image-ref: 'quay.io/sindigilive/almalinux:${{ matrix.version }}-${{ matrix.flavor }}'
format: 'sarif'
output: 'trivy-results.sarif'
- if: ${{ matrix.flavor == 'micro' }}
name: Scan almalinux image with Trivy
uses: aquasecurity/trivy-action@0.20.0
with:
image-ref: '${{ vars.DOCKERHUB_USERNAME }}/almalinux:${{ matrix.version }}-${{ matrix.flavor }}'
format: 'sarif' format: 'sarif'
output: 'trivy-results.sarif' output: 'trivy-results.sarif'
build-latest: build-latest:
name: Build latest almalinux8 container images name: Build latest almalinux8 container images
runs-on: ubuntu-latest runs-on: ubuntu-latest
@ -75,30 +81,28 @@ jobs:
steps: steps:
- name: Check out repository code - name: Check out repository code
uses: actions/checkout@v4 uses: actions/checkout@v4
- name: Login to docker.io - name: Build and push latest almalinux8-micro
uses: docker/login-action@v3 uses: redhat-actions/build-push-action@v5
with: with:
username: ${{ vars.DOCKERHUB_USERNAME }}
password: ${{ secrets.DOCKERHUB_TOKEN }}
# - name: Set up QEMU
# uses: docker/setup-qemu-action@v3
- name: Setup Docker buildx
uses: docker/setup-buildx-action@v3
- name: Build and push latest almalinux9-micro
uses: docker/build-push-action@v5
with:
# platforms: linux/amd64,linux/arm64
push: true
context: . context: .
file: ./8/Dockerfile.micro containerfiles: |
8/Dockerfile.micro
tags: | tags: |
${{ vars.DOCKERHUB_USERNAME }}/almalinux:8-micro quay.io/sindigilive/almalinux:8-micro
- name: Build and push latest almalinux9 - name: Build and push latest-almalinux8
uses: docker/build-push-action@v5 uses: redhat-actions/build-push-action@v5
with: with:
# platforms: linux/amd64,linux/arm64
push: true
context: . context: .
file: ./8/Dockerfile.default containerfiles: |
8/Dockerfile.micro
tags: | tags: |
${{ vars.DOCKERHUB_USERNAME }}/almalinux:8 quay.io/sindigilive/almalinux:8
- name: Push latest almalinux image to quay.io
uses: redhat-actions/push-to-registry@v2
with:
registry: quay.io
username: ${{ vars.QUAY_USERNAME }}
password: ${{ secrets.QUAY_SECRET }}
tags: |
quay.io/sindigilive/almalinux:8-micro
quay.io/sindigilive/almalinux:8

View File

@ -14,57 +14,63 @@ jobs:
strategy: strategy:
matrix: matrix:
flavor: ["default", "micro"] flavor: ["default", "micro"]
version: ["9.3", "9.4", "9.5"] version: ["9.5"]
steps: steps:
- name: Check out repository code - name: Check out repository code
uses: actions/checkout@v4 uses: actions/checkout@v4
- name: Login to docker.io
uses: docker/login-action@v3
with:
username: ${{ vars.DOCKERHUB_USERNAME }}
password: ${{ secrets.DOCKERHUB_TOKEN }}
# - name: Set up QEMU
# uses: docker/setup-qemu-action@v3
- name: Setup Docker buildx
uses: docker/setup-buildx-action@v3
- if: ${{ matrix.flavor == 'default' }}
name: Build and push almalinux
uses: docker/build-push-action@v5
with:
# platforms: linux/amd64,linux/arm64
push: true
context: .
file: ./9/Dockerfile.${{ matrix.flavor }}
build-args: |
ALMALINUX_VERSION=${{ matrix.version }}
tags: |
${{ vars.DOCKERHUB_USERNAME }}/almalinux:${{ matrix.version }}
- if: ${{ matrix.flavor == 'micro' }}
name: Build and push almalinux
uses: docker/build-push-action@v5
with:
# platforms: linux/amd64,linux/arm64
push: true
context: .
file: ./9/Dockerfile.${{ matrix.flavor }}
build-args: |
ALMALINUX_VERSION=${{ matrix.version }}
tags: |
${{ vars.DOCKERHUB_USERNAME }}/almalinux:${{ matrix.version }}-${{ matrix.flavor }}
- if: ${{ matrix.flavor == 'default' }} - if: ${{ matrix.flavor == 'default' }}
name: Scan almalinux9 image with Trivy name: Build almalinux default image
uses: redhat-actions/build-push-action@v5
with:
context: .
containerfiles: |
9/Containerfile.${{ matrix.flavor }}
build-args: |
ALMALINUX_VERSION=${{ matrix.version }}
tags: |
quay.io/sindigilive/almalinux:${{ matrix.version }}
- if: ${{ matrix.flavor == 'default' }}
name: Push To quay.io
uses: redhat-actions/push-to-registry@v2
with:
tags: quay.io/sindigilive/almalinux:${{ matrix.version }}
registry: quay.io
username: ${{ vars.QUAY_USERNAME }}
password: ${{ secrets.QUAY_SECRET }}
- if: ${{ matrix.flavor == 'default' }}
name: Scan almalinux image with Trivy
uses: aquasecurity/trivy-action@0.20.0 uses: aquasecurity/trivy-action@0.20.0
with: with:
image-ref: '${{ vars.DOCKERHUB_USERNAME }}/almalinux:${{ matrix.version }}' image-ref: 'quay.io/sindigilive/almalinux:${{ matrix.version }}'
format: 'sarif' format: 'sarif'
output: 'trivy-results.sarif' output: 'trivy-results.sarif'
- if: ${{ matrix.flavor == 'micro' }} - if: ${{ matrix.flavor != 'default' }}
name: Scan almalinux9 image with Trivy name: Build and push almalinux flavor
uses: redhat-actions/build-push-action@v5
with:
context: .
containerfiles: |
9/Dockerfile.${{ matrix.flavor }}
build-args: |
ALMALINUX_VERSION=${{ matrix.version }}
tags: |
quay.io/sindigilive/almalinux:${{ matrix.version }}-${{ matrix.flavor }}
- if: ${{ matrix.flavor != 'default' }}
name: Push almalinux flavor image to quay.io
uses: redhat-actions/push-to-registry@v2
with:
tags: quay.io/sindigilive/almalinux:${{ matrix.version }}-${{ matrix.flavor }}
registry: quay.io
username: ${{ vars.QUAY_USERNAME }}
password: ${{ secrets.QUAY_SECRET }}
- if: ${{ matrix.flavor != 'default' }}
name: Scan almalinux flavor image with Trivy
uses: aquasecurity/trivy-action@0.20.0 uses: aquasecurity/trivy-action@0.20.0
with: with:
image-ref: '${{ vars.DOCKERHUB_USERNAME }}/almalinux:${{ matrix.version }}-${{ matrix.flavor }}' image-ref: 'quay.io/sindigilive/almalinux:${{ matrix.version }}-${{ matrix.flavor }}'
format: 'sarif' format: 'sarif'
output: 'trivy-results.sarif' output: 'trivy-results.sarif'
build-latest: build-latest:
name: Build latest almalinux9 container images name: Build latest almalinux9 container images
runs-on: ubuntu-latest runs-on: ubuntu-latest
@ -75,32 +81,32 @@ jobs:
steps: steps:
- name: Check out repository code - name: Check out repository code
uses: actions/checkout@v4 uses: actions/checkout@v4
- name: Login to docker.io
uses: docker/login-action@v3
with:
username: ${{ vars.DOCKERHUB_USERNAME }}
password: ${{ secrets.DOCKERHUB_TOKEN }}
# - name: Set up QEMU
# uses: docker/setup-qemu-action@v3
- name: Setup Docker buildx
uses: docker/setup-buildx-action@v3
- name: Build and push latest almalinux9-micro - name: Build and push latest almalinux9-micro
uses: docker/build-push-action@v5 uses: redhat-actions/build-push-action@v5
with: with:
# platforms: linux/amd64,linux/arm64
push: true
context: . context: .
file: ./9/Dockerfile.micro containerfiles: |
9/Dockerfile.micro
tags: | tags: |
${{ vars.DOCKERHUB_USERNAME }}/almalinux:9-micro quay.io/sindigilive/almalinux:9-micro
${{ vars.DOCKERHUB_USERNAME }}/almalinux:micro quay.io/sindigilive/almalinux:micro
- name: Build and push latest almalinux9 - name: Build and push latest-almalinux9
uses: docker/build-push-action@v5 uses: redhat-actions/build-push-action@v5
with: with:
# platforms: linux/amd64,linux/arm64
push: true
context: . context: .
file: ./9/Dockerfile.default containerfiles: |
9/Dockerfile.micro
tags: | tags: |
${{ vars.DOCKERHUB_USERNAME }}/almalinux:9 quay.io/sindigilive/almalinux:9
${{ vars.DOCKERHUB_USERNAME }}/almalinux:latest quay.io/sindigilive/almalinux:latest
- name: Push latest almalinux image to quay.io
uses: redhat-actions/push-to-registry@v2
with:
registry: quay.io
username: ${{ vars.QUAY_USERNAME }}
password: ${{ secrets.QUAY_SECRET }}
tags: |
quay.io/sindigilive/almalinux:9-micro
quay.io/sindigilive/almalinux:micro
quay.io/sindigilive/almalinux:9
quay.io/sindigilive/almalinux:latest

View File

View File

@ -1,6 +1,6 @@
ARG ALMALINUX_VERSION=8.10 ARG ALMALINUX_VERSION=8.10
FROM docker.io/almalinux:${ALMALINUX_VERSION} AS builder FROM quay.io/almalinuxorg/almalinux:${ALMALINUX_VERSION} AS builder
RUN mkdir -p /mnt/rootfs; \ RUN mkdir -p /mnt/rootfs; \
dnf -y install \ dnf -y install \

View File

@ -1,6 +1,6 @@
ARG ALMALINUX_VERSION=8.10 ARG ALMALINUX_VERSION=8.10
FROM docker.io/almalinux:${ALMALINUX_VERSION} AS builder FROM quay.io/almalinuxorg/almalinux:${ALMALINUX_VERSION} AS builder
RUN mkdir -p /mnt/rootfs; \ RUN mkdir -p /mnt/rootfs; \
dnf install --installroot /mnt/rootfs \ dnf install --installroot /mnt/rootfs \
@ -21,7 +21,9 @@ RUN rm -rf /mnt/rootfs/var/cache/dnf /mnt/rootfs/var/log/dnf* /mnt/rootfs/var/li
touch /mnt/rootfs/etc/resolv.conf; \ touch /mnt/rootfs/etc/resolv.conf; \
touch /mnt/rootfs/etc/hostname; \ touch /mnt/rootfs/etc/hostname; \
chmod 600 /mnt/rootfs/etc/.pwd.lock; \ chmod 600 /mnt/rootfs/etc/.pwd.lock; \
rm -rf /mnt/rootfs/usr/share/locale/en* /mnt/rootfs/boot /mnt/rootfs/dev/null /mnt/rootfs/var/log/hawkey.log; \ rm -rf /mnt/rootfs/usr/share/locale/en* /mnt/rootfs/boot /mnt/rootfs/dev/null /mnt/rootfs/var/log/hawkey.log \
/mnt/rootfs/usr/share/zoneinfo /mnt/rootfs/usr/share/licenses/* \
/mnt/rootfs/etc/yum.repos.d ; \
echo '0.000000 1728971976 0.000000' > /mnt/rootfs/etc/adjtime; \ echo '0.000000 1728971976 0.000000' > /mnt/rootfs/etc/adjtime; \
echo '1728971976' >> /mnt/rootfs/etc/adjtime; \ echo '1728971976' >> /mnt/rootfs/etc/adjtime; \
echo 'LOCAL' >> /mnt/rootfs/etc/adjtime; \ echo 'LOCAL' >> /mnt/rootfs/etc/adjtime; \
@ -30,8 +32,7 @@ RUN rm -rf /mnt/rootfs/var/cache/dnf /mnt/rootfs/var/log/dnf* /mnt/rootfs/var/li
# echo 'PERMITROOTLOGIN="-oPermitRootLogin=yes"' >> /mnt/rootfs/etc/sysconfig/sshd-permitrootlogin ;\ # echo 'PERMITROOTLOGIN="-oPermitRootLogin=yes"' >> /mnt/rootfs/etc/sysconfig/sshd-permitrootlogin ;\
echo 'KEYMAP="us"' > /mnt/rootfs/etc/vconsole.conf; \ echo 'KEYMAP="us"' > /mnt/rootfs/etc/vconsole.conf; \
echo 'FONT="eurlatgr"' >> /mnt/rootfs/etc/vconsole.conf; \ echo 'FONT="eurlatgr"' >> /mnt/rootfs/etc/vconsole.conf; \
cd /mnt/rootfs/etc ; \ cp ../usr/share/zoneinfo/Asia/Jakarta /mnt/rootfs/etc/localtime ;
ln -s ../usr/share/zoneinfo/Asia/Jakarta localtime
FROM scratch FROM scratch

View File

@ -1,6 +1,6 @@
ARG ALMALINUX_VERSION=9.5 ARG ALMALINUX_VERSION=9.5
FROM docker.io/almalinux:${ALMALINUX_VERSION} AS builder FROM quay.io/almalinuxorg/almalinux:${ALMALINUX_VERSION} AS builder
# Install almalinux-release and required dependencies # Install almalinux-release and required dependencies
RUN mkdir -p /mnt/rootfs; \ RUN mkdir -p /mnt/rootfs; \

View File

@ -1,6 +1,6 @@
ARG ALMALINUX_VERSION=9.5 ARG ALMALINUX_VERSION=9.5
FROM docker.io/almalinux:${ALMALINUX_VERSION} AS builder FROM quay.io/almalinuxorg/almalinux:${ALMALINUX_VERSION} AS builder
RUN mkdir -p /mnt/rootfs; \ RUN mkdir -p /mnt/rootfs; \
dnf install --installroot /mnt/rootfs \ dnf install --installroot /mnt/rootfs \
@ -21,7 +21,9 @@ RUN rm -rf /mnt/rootfs/var/cache/dnf /mnt/rootfs/var/log/dnf* /mnt/rootfs/var/li
touch /mnt/rootfs/etc/hostname; \ touch /mnt/rootfs/etc/hostname; \
touch /mnt/rootfs/etc/.pwd.lock; \ touch /mnt/rootfs/etc/.pwd.lock; \
chmod 600 /mnt/rootfs/etc/.pwd.lock; \ chmod 600 /mnt/rootfs/etc/.pwd.lock; \
rm -rf /mnt/rootfs/usr/share/locale/en* /mnt/rootfs/boot /mnt/rootfs/dev/null /mnt/rootfs/var/log/hawkey.log ; \ rm -rf /mnt/rootfs/usr/share/locale/en* /mnt/rootfs/boot /mnt/rootfs/dev/null /mnt/rootfs/var/log/hawkey.log \
/mnt/rootfs/usr/share/zoneinfo /mnt/rootfs/usr/share/licenses/* \
/mnt/rootfs/etc/yum.repos.d ; \
echo '0.000000 1728971976 0.000000' > /mnt/rootfs/etc/adjtime; \ echo '0.000000 1728971976 0.000000' > /mnt/rootfs/etc/adjtime; \
echo '1728971976' >> /mnt/rootfs/etc/adjtime; \ echo '1728971976' >> /mnt/rootfs/etc/adjtime; \
echo 'LOCAL' >> /mnt/rootfs/etc/adjtime; \ echo 'LOCAL' >> /mnt/rootfs/etc/adjtime; \
@ -31,11 +33,12 @@ RUN rm -rf /mnt/rootfs/var/cache/dnf /mnt/rootfs/var/log/dnf* /mnt/rootfs/var/li
echo 'KEYMAP="us"' > /mnt/rootfs/etc/vconsole.conf; \ echo 'KEYMAP="us"' > /mnt/rootfs/etc/vconsole.conf; \
echo 'FONT="eurlatgr"' >> /mnt/rootfs/etc/vconsole.conf; \ echo 'FONT="eurlatgr"' >> /mnt/rootfs/etc/vconsole.conf; \
mkdir -p /mnt/rootfs/run/lock; \ mkdir -p /mnt/rootfs/run/lock; \
cd /mnt/rootfs/etc ; \ cp ../usr/share/zoneinfo/Asia/Jakarta /mnt/rootfs/etc/localtime ;
ln -s ../usr/share/zoneinfo/Asia/Jakarta localtime
FROM scratch FROM scratch
ARG ALMALINUX_VERSION=9.5
LABEL maintainer="Muhamad Aditya Prima <aprimediet@gmail.com>" LABEL maintainer="Muhamad Aditya Prima <aprimediet@gmail.com>"
LABEL name="almalinux-micro" LABEL name="almalinux-micro"
LABEL version="${ALMALINUX_VERSION}" LABEL version="${ALMALINUX_VERSION}"

View File

@ -1,8 +1,8 @@
# Almalinux Container Images # Almalinux Container Images
Built with docker, contains preinstalled epel-release and timezone changed to Asia/Jakarta Built with buildah, contains preinstalled epel-release and timezone changed to Asia/Jakarta
Build: Build:
Base - Base
Micro - Micro