diff --git a/.forgejo/workflows/docker.yml b/.forgejo/workflows/docker.yml index 278a963..68c0563 100644 --- a/.forgejo/workflows/docker.yml +++ b/.forgejo/workflows/docker.yml @@ -1,36 +1,20 @@ name: docker on: - # workflow_run: - # workflows: [crane] push: branches: [main] - # types: - # - completed - # schedule: - # - cron: 0 0 * * 1 - # # Publish semver tags as releases. - # tags: [ 'v*.*.*' ] - # pull_request: - # branches: [ "main" ] env: - # Use docker.io for Docker Hub if empty REGISTRY: git.nexveridian.com - # github.repository as / IMAGE_NAME: ${{ github.repository }} NIX_CONFIG: "experimental-features = nix-command flakes" jobs: build: runs-on: docker - # https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#running-a-workflow-based-on-the-conclusion-of-another-workflow - # if: ${{ github.event.workflow_run.conclusion == 'success' }} permissions: contents: read packages: write - # This is used to complete the identity challenge - # with sigstore/fulcio when running outside of PRs. id-token: write steps: @@ -48,46 +32,35 @@ jobs: - uses: actions/checkout@v4 - - name: Install Docker + - name: Install Podman run: | mkdir -p ~/.local/bin - nix build -I nixpkgs=channel:nixos-unstable nixpkgs#docker -o ~/.local/docker - ln -sf ~/.local/docker/bin/docker ~/.local/bin/docker + nix build -I nixpkgs=channel:nixos-unstable nixpkgs#podman -o ~/.local/podman + ln -sf ~/.local/podman/bin/podman ~/.local/bin/podman echo "$HOME/.local/bin" >> $GITHUB_PATH - - name: Log into registry ${{ env.REGISTRY }} - if: github.event_name != 'pull_request' - uses: docker/login-action@v3 - with: - registry: ${{ env.REGISTRY }} - username: ${{ env.GITHUB_ACTOR }} - password: ${{ env.GITHUB_TOKEN }} - - - name: Extract Docker metadata - id: meta - uses: docker/metadata-action@v5 - with: - images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} - - name: Build Nix package run: nix build .#my-docker - # https://github.com/orgs/community/discussions/25768#discussioncomment-3249183 - - name: Downcase REPO + - name: Prepare repository variables run: | echo "REPO=${GITHUB_REPOSITORY,,}" >> ${GITHUB_ENV} - - - name: Strip REPO Username - run: | - STRIP_REPO_USERNAME=${REPO#nexveridian/} + STRIP_REPO_USERNAME=${GITHUB_REPOSITORY,,#nexveridian/} echo "STRIP_REPO_USERNAME=${STRIP_REPO_USERNAME}" >> ${GITHUB_ENV} - # https://github.com/docker/build-push-action/issues/538 - - name: Push and tag Docker image + - name: Load, tag and push image with Podman run: | - docker load < result - docker tag ${{ env.STRIP_REPO_USERNAME }}:latest ${{ env.REGISTRY }}/${{ env.REPO }}:latest - docker push ${{ env.REGISTRY }}/${{ env.REPO }}:latest + echo "Loading Docker image into Podman..." + podman load < result + + echo "Logging into registry..." + echo "${{ secrets.GITHUB_TOKEN }}" | podman login ${{ env.REGISTRY }} -u ${{ github.actor }} --password-stdin + + echo "Tagging image..." + podman tag ${{ env.STRIP_REPO_USERNAME }}:latest ${{ env.REGISTRY }}/${{ env.REPO }}:latest + + echo "Pushing image..." + podman push ${{ env.REGISTRY }}/${{ env.REPO }}:latest - name: Push to attic if: always() @@ -100,7 +73,7 @@ jobs: done if [ -n "$valid_paths" ]; then - for i in {1..10}; do - nix run -I nixpkgs=channel:nixos-unstable nixpkgs#attic-client push nexveridian-web $valid_paths && break || [ $i -eq 5 ] || sleep 5 + for i in {1..3}; do + nix run -I nixpkgs=channel:nixos-unstable nixpkgs#attic-client push nexveridian-web $valid_paths && break || [ $i -eq 3 ] || sleep 5 done fi