mirror of
https://github.com/pelican-dev/panel.git
synced 2025-05-19 19:54:45 +02:00
6a4963200c
* Rootless Dockerfile/Optimized build Add unneeded files to .dockerignore Split Dockerfile into more stages to allow Composer/Yarn to run concurrently Don't log supervisord to a file, as file logging in a Docker container makes no sense Redirect process output to container output for log processors Run all processes as non-root Minimize files with write permission for non-root user Move docker folder out of .github, as it has nothing to do with GitHub * Remove install-php-extensions utility after use and name final stage * Test arm64 runner * Allow Docker workflow caching multi-arch separately * Fix Docker publish workflow branches * Move Caddyfile/crontab config into docker directory, remove redundant supervisord user * Further restrict permissions * Supervisord logs
91 lines
3.0 KiB
YAML
91 lines
3.0 KiB
YAML
name: Docker
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
release:
|
|
types:
|
|
- published
|
|
|
|
env:
|
|
REGISTRY: ghcr.io
|
|
IMAGE_NAME: ${{ github.repository }}
|
|
|
|
jobs:
|
|
build-and-push:
|
|
name: Build and Push ${{ matrix.os }}
|
|
runs-on: ${{ matrix.os }}
|
|
permissions:
|
|
contents: read
|
|
packages: write
|
|
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
os: [ubuntu-24.04, ubuntu-24.04-arm]
|
|
# Always run against a tag, even if the commit into the tag has [docker skip] within the commit message.
|
|
if: "!contains(github.ref, 'main') || (!contains(github.event.head_commit.message, 'skip docker') && !contains(github.event.head_commit.message, 'docker skip'))"
|
|
|
|
steps:
|
|
- name: Code checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Docker metadata
|
|
id: docker_meta
|
|
uses: docker/metadata-action@v5
|
|
with:
|
|
images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
|
|
flavor: |
|
|
latest=false
|
|
tags: |
|
|
type=raw,value=latest,enable=${{ github.event_name == 'release' && github.event.action == 'published' && github.event.release.prerelease == false }}
|
|
type=ref,event=tag
|
|
type=ref,event=branch
|
|
|
|
- name: Setup Docker buildx
|
|
uses: docker/setup-buildx-action@v3
|
|
|
|
- name: Login to GitHub Container Registry
|
|
uses: docker/login-action@v3
|
|
with:
|
|
registry: ghcr.io
|
|
username: ${{ github.repository_owner }}
|
|
password: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
- name: Get Build Information
|
|
id: build_info
|
|
run: |
|
|
echo "version_tag=${GITHUB_REF/refs\/tags\/v/}" >> $GITHUB_OUTPUT
|
|
echo "short_sha=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT
|
|
|
|
- name: Build and Push (tag)
|
|
uses: docker/build-push-action@v6
|
|
if: "github.event_name == 'release' && github.event.action == 'published'"
|
|
with:
|
|
context: .
|
|
file: ./Dockerfile
|
|
push: true
|
|
platforms: ${{ matrix.os == 'ubuntu-24.04' && 'linux/amd64' || 'linux/arm64' }}
|
|
build-args: |
|
|
VERSION=${{ steps.build_info.outputs.version_tag }}
|
|
labels: ${{ steps.docker_meta.outputs.labels }}
|
|
tags: ${{ steps.docker_meta.outputs.tags }}
|
|
cache-from: type=gha,scope=tagged${{ matrix.os }}
|
|
cache-to: type=gha,scope=tagged${{ matrix.os }},mode=max
|
|
|
|
- name: Build and Push (main)
|
|
uses: docker/build-push-action@v6
|
|
if: "github.event_name == 'push' && contains(github.ref, 'main')"
|
|
with:
|
|
context: .
|
|
file: ./Dockerfile
|
|
push: ${{ github.event_name != 'pull_request' }}
|
|
platforms: ${{ matrix.os == 'ubuntu-24.04' && 'linux/amd64' || 'linux/arm64' }}
|
|
build-args: |
|
|
VERSION=dev-${{ steps.build_info.outputs.short_sha }}
|
|
labels: ${{ steps.docker_meta.outputs.labels }}
|
|
tags: ${{ steps.docker_meta.outputs.tags }}
|
|
cache-from: type=gha,scope=${{ matrix.os }}
|
|
cache-to: type=gha,scope=${{ matrix.os }},mode=max
|