mirror of
https://github.com/henrygd/beszel.git
synced 2026-10-11 21:59:57 +00:00
henrygd
7748651f5c
Previously the matrix had separate entries for Docker Hub and GHCR, so every image was built twice. Each entry now pushes to both registries from a single build. Docker Hub is skipped when DOCKERHUB_TOKEN is unset (e.g. forks). Also drops the explicit latest tag on the GHCR agent image so latest comes only from latest=auto, and lowers max-parallel to 3.
146 lines
4.9 KiB
YAML
146 lines
4.9 KiB
YAML
name: Make docker images
|
|
|
|
on:
|
|
push:
|
|
tags:
|
|
- "v*"
|
|
|
|
jobs:
|
|
build:
|
|
runs-on: ubuntu-latest
|
|
strategy:
|
|
fail-fast: false
|
|
max-parallel: 3
|
|
matrix:
|
|
include:
|
|
# beszel
|
|
- image: beszel
|
|
dockerfile: ./internal/dockerfile_hub
|
|
tags: |
|
|
type=raw,value=edge
|
|
type=semver,pattern={{version}}
|
|
type=semver,pattern={{major}}.{{minor}}
|
|
type=semver,pattern={{major}}
|
|
type=raw,value={{sha}},enable=${{ github.ref_type != 'tag' }}
|
|
|
|
# beszel-agent
|
|
- image: beszel-agent
|
|
dockerfile: ./internal/dockerfile_agent
|
|
tags: |
|
|
type=raw,value=edge
|
|
type=semver,pattern={{version}}
|
|
type=semver,pattern={{major}}.{{minor}}
|
|
type=semver,pattern={{major}}
|
|
type=raw,value={{sha}},enable=${{ github.ref_type != 'tag' }}
|
|
|
|
# beszel-agent:alpine
|
|
- image: beszel-agent
|
|
dockerfile: ./internal/dockerfile_agent_alpine
|
|
flavor: latest=false
|
|
tags: |
|
|
type=raw,value=alpine
|
|
type=semver,pattern={{version}}-alpine
|
|
type=semver,pattern={{major}}.{{minor}}-alpine
|
|
type=semver,pattern={{major}}-alpine
|
|
|
|
# beszel-agent-nvidia
|
|
- image: beszel-agent-nvidia
|
|
dockerfile: ./internal/dockerfile_agent_nvidia
|
|
platforms: linux/amd64,linux/arm64
|
|
tags: |
|
|
type=raw,value=edge
|
|
type=semver,pattern={{version}}
|
|
type=semver,pattern={{major}}.{{minor}}
|
|
type=semver,pattern={{major}}
|
|
type=raw,value={{sha}},enable=${{ github.ref_type != 'tag' }}
|
|
|
|
# beszel-agent-nvidia:slim
|
|
- image: beszel-agent-nvidia
|
|
dockerfile: ./internal/dockerfile_agent_nvidia_slim
|
|
flavor: latest=false
|
|
platforms: linux/amd64,linux/arm64
|
|
tags: |
|
|
type=raw,value=slim
|
|
type=semver,pattern={{version}}-slim
|
|
type=semver,pattern={{major}}.{{minor}}-slim
|
|
type=semver,pattern={{major}}-slim
|
|
|
|
# beszel-agent-intel
|
|
- image: beszel-agent-intel
|
|
dockerfile: ./internal/dockerfile_agent_intel
|
|
platforms: linux/amd64
|
|
tags: |
|
|
type=raw,value=edge
|
|
type=semver,pattern={{version}}
|
|
type=semver,pattern={{major}}.{{minor}}
|
|
type=semver,pattern={{major}}
|
|
type=raw,value={{sha}},enable=${{ github.ref_type != 'tag' }}
|
|
|
|
permissions:
|
|
contents: read
|
|
packages: write
|
|
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v7
|
|
|
|
- name: Set up bun
|
|
uses: oven-sh/setup-bun@v2
|
|
|
|
- name: Install dependencies
|
|
run: bun install --no-save --cwd ./internal/site
|
|
|
|
- name: Build site
|
|
run: bun run --cwd ./internal/site build
|
|
|
|
- name: Set up QEMU
|
|
uses: docker/setup-qemu-action@v4
|
|
|
|
- name: Set up Docker Buildx
|
|
uses: docker/setup-buildx-action@v4
|
|
|
|
- name: Docker metadata
|
|
id: metadata
|
|
uses: docker/metadata-action@v6
|
|
with:
|
|
# Each image is built once and pushed to both registries.
|
|
# Docker Hub is skipped when its token is missing (e.g. forks).
|
|
images: |
|
|
name=henrygd/${{ matrix.image }},enable=${{ secrets.DOCKERHUB_TOKEN != '' }}
|
|
name=ghcr.io/${{ github.repository }}/${{ matrix.image }}
|
|
# Variant images must not overwrite the standard image's latest tag.
|
|
flavor: ${{ matrix.flavor || 'latest=auto' }}
|
|
tags: ${{ matrix.tags }}
|
|
|
|
# https://github.com/docker/login-action
|
|
- name: Login to Docker Hub
|
|
env:
|
|
password_secret_exists: ${{ secrets.DOCKERHUB_TOKEN != '' && 'true' || 'false' }}
|
|
if: github.event_name != 'pull_request' && env.password_secret_exists == 'true'
|
|
uses: docker/login-action@v4
|
|
with:
|
|
username: ${{ secrets.DOCKERHUB_USERNAME }}
|
|
password: ${{ secrets.DOCKERHUB_TOKEN }}
|
|
|
|
- name: Login to GitHub Container Registry
|
|
if: github.event_name != 'pull_request'
|
|
uses: docker/login-action@v4
|
|
with:
|
|
registry: ghcr.io
|
|
username: ${{ github.actor }}
|
|
password: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
# Build and push Docker image with Buildx (don't push on PR)
|
|
# https://github.com/docker/build-push-action
|
|
- name: Build and push Docker image
|
|
uses: docker/build-push-action@v7
|
|
with:
|
|
context: ./
|
|
file: ${{ matrix.dockerfile }}
|
|
platforms: ${{ matrix.platforms || 'linux/amd64,linux/arm64,linux/arm/v6,linux/arm/v7' }}
|
|
push: ${{ github.ref_type == 'tag' }}
|
|
provenance: mode=max
|
|
sbom: true
|
|
tags: ${{ steps.metadata.outputs.tags }}
|
|
labels: ${{ steps.metadata.outputs.labels }}
|