chore(release): 1.2.0 [skip ci]

# [1.2.0](http://gitea.gitea.svc.cluster.local:3000/djpbessems/ContainerImage.PackerExtended/compare/v1.1.0...v1.2.0) (2024-06-06)

### Features

* Add unzip (required for packer action) ([3134776](31347764ae))

.drone.yml

@@ -1,51 +0,0 @@
-kind: pipeline
-type: kubernetes
-name: Harbor
-
-steps:
-- name: build & publish
-  image: plugins/docker
-  context: .
-  settings:
-    repo: bv11-cr01.bessems.eu/library/packer-extended
-    registry: bv11-cr01.bessems.eu
-    tags: latest
-    mtu: 1450
-    username:
-      from_secret: harbor_username
-    password:
-      from_secret: harbor_password
-    build_args_from_env:
-    - REPO_USERNAME
-    - REPO_PASSWORD
-  environment:
-    REPO_USERNAME:
-      from_secret: repo_username
-    REPO_PASSWORD:
-      from_secret: repo_password
-
----
-kind: pipeline
-type: kubernetes
-name: Dockerhub
-
-steps:
-- name: build & publish
-  image: plugins/docker
-  context: .
-  settings:
-    repo: djpbessems/packer-extended
-    tags: latest
-    mtu: 1450
-    username:
-      from_secret: docker_username
-    password:
-      from_secret: docker_password
-    build_args_from_env:
-    - REPO_USERNAME
-    - REPO_PASSWORD
-  environment:
-    REPO_USERNAME:
-      from_secret: repo_username
-    REPO_PASSWORD:
-      from_secret: repo_password

.gitea/workflows/actions.yaml

@@ -0,0 +1,128 @@
+name: build-image
+on: [push]
+
+jobs:
+  semrel_dryrun:
+    name: Semantic Release (Dry-run)
+    runs-on: dind-rootless
+    outputs:
+      version: ${{ steps.sem_rel.outputs.version }}
+    steps:
+      - name: Check out repository code
+        uses: actions/checkout@v3
+      - name: Set up Node
+        uses: actions/setup-node@v3
+        with:
+          node-version: 20
+      - name: Install dependencies
+        run: |
+          npm install \
+            semantic-release \
+            @semantic-release/commit-analyzer \
+            @semantic-release/exec
+      - name: Semantic Release (dry-run)
+        id: sem_rel
+        run: |
+          npx semantic-release \
+            --package @semantic-release/exec \
+            --package semantic-release \
+            --branches ${{ gitea.refname }} \
+            --tag-format 'v${version}' \
+            --dry-run \
+            --plugins @semantic-release/commit-analyzer,@semantic-release/exec \
+            --analyzeCommits @semantic-release/commit-analyzer \
+            --verifyRelease @semantic-release/exec \
+            --verifyReleaseCmd 'echo "version=${nextRelease.version}" >> $GITHUB_OUTPUT'
+        env:
+          GIT_CREDENTIALS: ${{ secrets.GIT_USERNAME }}:${{ secrets.GIT_APIKEY }}
+      - name: Assert semantic release output
+        run: |
+          [[ -z "${{ steps.sem_rel.outputs.version }}" ]] && {
+            echo 'No release tag - exiting'; exit 1
+          } || {
+            echo 'Release tag set correctly: ${{ steps.sem_rel.outputs.version }}'; exit 0
+          }
+
+  build_image:
+    name: Container image
+    runs-on: dind
+    needs: semrel_dryrun
+    container: ghcr.io/catthehacker/ubuntu:act-latest
+    steps:
+      - name: Check out repository code
+        uses: actions/checkout@v4
+      - name: Set up qemu
+        # Will not work out of the box; instead using dind
+        # uses: docker/setup-qemu-action@v3
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y qemu-user-static
+      - name: Create builder context
+        id: buildx-context
+        run: |
+          docker context create builders
+        env:
+          DOCKER_HOST: tcp://docker:2376/
+          DOCKER_TLS_CERTDIR: /certs
+          DOCKER_TLS_VERIFY: 1
+          DOCKER_CERT_PATH: "/certs/client"
+      - name: Set up buildx
+        id: buildx
+        uses: docker/setup-buildx-action@v3
+        with:
+          # buildkitd-flags: --debug
+          endpoint: builders
+        env:
+          DOCKER_HOST: "tcp://docker:2376/"
+          DOCKER_TLS_CERTDIR: "/certs"
+          DOCKER_TLS_VERIFY: 1
+          DOCKER_CERT_PATH: "/certs/client"
+      - name: Login to target repository
+        uses: docker/login-action@v3
+        with:
+          registry: code.spamasaurus.com
+          username: ${{ secrets.GIT_USERNAME }}
+          password: ${{ secrets.GIT_APIKEY }}
+      - name: Build & push container image
+        uses: docker/build-push-action@v5
+        with:
+          build-args: |
+            REPO_USERNAME=${{ secrets.REPO_USERNAME }}
+            REPO_PASSWORD=${{ secrets.REPO_PASSWORD }}
+          context: .
+          tags: code.spamasaurus.com/djpbessems/packer-extended:${{ needs.semrel_dryrun.outputs.version }}
+          provenance: false
+          push: true
+        env:
+          DOCKER_HOST: "tcp://docker:2376/"
+          DOCKER_TLS_CERTDIR: "/certs"
+          DOCKER_TLS_VERIFY: 1
+          DOCKER_CERT_PATH: "/certs/client"
+
+  semrel:
+    name: Semantic Release
+    runs-on: dind-rootless
+    needs: build_image
+    steps:
+      - name: Check out repository code
+        uses: actions/checkout@v3
+      - name: Set up Node
+        uses: actions/setup-node@v3
+        with:
+          node-version: 20
+      - name: Install dependencies
+        run: |
+          npm install \
+            semantic-release \
+            @semantic-release/changelog \
+            @semantic-release/commit-analyzer \
+            @semantic-release/git \
+            @semantic-release/release-notes-generator
+      - name: Semantic Release
+        run: |
+          npx semantic-release \
+            --branches ${{ gitea.refname }} \
+            --tag-format 'v${version}' \
+            --plugins @semantic-release/commit-analyzer,@semantic-release/release-notes-generator,@semantic-release/changelog,@semantic-release/git
+        env:
+          GIT_CREDENTIALS: ${{ secrets.GIT_USERNAME }}:${{ secrets.GIT_APIKEY }}

CHANGELOG.md

@@ -0,0 +1,20 @@
+# [1.2.0](http://gitea.gitea.svc.cluster.local:3000/djpbessems/ContainerImage.PackerExtended/compare/v1.1.0...v1.2.0) (2024-06-06)
+
+
+### Features
+
+* Add unzip (required for packer action) ([3134776](http://gitea.gitea.svc.cluster.local:3000/djpbessems/ContainerImage.PackerExtended/commit/31347764ae36478ddbb89735656cb044e6931276))
+
+# [1.1.0](http://gitea.gitea.svc.cluster.local:3000/djpbessems/ContainerImage.PackerExtended/compare/v1.0.0...v1.1.0) (2024-06-06)
+
+
+### Features
+
+* Add nodejs (prereq for majority of actions) ([29e242c](http://gitea.gitea.svc.cluster.local:3000/djpbessems/ContainerImage.PackerExtended/commit/29e242c30c037a4e1f7102370b97b25d7f926c34))
+
+# 1.0.0 (2024-06-05)
+
+
+### Features
+
+* Initial release w/ semantic release ([dda78b7](http://gitea.gitea.svc.cluster.local:3000/djpbessems/ContainerImage.PackerExtended/commit/dda78b733498b8cc1d48e96dc5630554828e6d62))

Dockerfile

@@ -11,55 +11,81 @@ ARG REPO_PASSWORD
 ADD https://${REPO_USERNAME}:${REPO_PASSWORD}@sn.itch.fyi/Repository/bin/VMware/ovftool/4.4.x/${OVFTOOL_INSTALLER} /tmp/ovftool-installer
 
 RUN apk --update add --no-cache \
-      curl && \
-    curl -L https://packages.microsoft.com/config/debian/10/packages-microsoft-prod.deb -o /tmp/packages-microsoft-prod.deb
+      curl \
+      jq && \
+    curl -L https://api.github.com/repos/mikefarah/yq/releases/latest | \
+      jq -r '.assets[] | select(.name | endswith("yq_linux_amd64")) | .browser_download_url' | \
+      xargs -I {} curl -L -o /tmp/yq {} && \
+    chmod +x /tmp/yq
 
-FROM ruby:slim
+FROM debian:11-slim
 
 COPY --from=packer /bin/packer /bin/packer
 COPY --from=terraform /bin/terraform /bin/terraform
-COPY --from=download /tmp/packages-microsoft-prod.deb /tmp/packages-microsoft-prod.deb
 COPY --from=download /tmp/ovftool-installer /tmp/ovftool-installer
+COPY --from=download /tmp/yq /bin/yq
 
 ENV LANG en_US.UTF-8
 ENV LANGUAGE en_US:en
 ENV LC_ALL en_US.UTF-8
 
-RUN dpkg -i /tmp/packages-microsoft-prod.deb && \
-    rm -f /tmp/packages-microsoft-prod.deb && \
+RUN apt-get update && apt-get install -y --no-install-recommends \
+      apt-transport-https \
+      ca-certificates \
+      curl \
+      gnupg && \
+    curl https://packages.microsoft.com/keys/microsoft.asc | gpg --dearmor -o /usr/share/keyrings/microsoft.gpg && \
+    echo "deb [arch=amd64 signed-by=/usr/share/keyrings/microsoft.gpg] https://packages.microsoft.com/repos/microsoft-debian-bullseye-prod bullseye main" > /etc/apt/sources.list.d/microsoft.list && \
     apt-get update && apt-get upgrade -y && apt-get install -y --no-install-recommends \
       # (build-essential) Dependency for installation of InSpec
       build-essential \
-      curl \
       git \
       jq \
-      # (locales) Dependency for InSpec
       locales \
+      make \
       netcat-openbsd \
+      # (npm) Dependency for Gitea Actions
+      npm \
       openssh-client \
-      powershell \
+      powershell-lts \
       # (python3-*) Dependency for installation of Ansible
       python3-pip \
       python3-setuptools \
       python3-wheel \
+      # (qemu-utils) Dependency for Packer (conversion to raw disk format)
+      qemu-utils \
       # (sshpass) Dependency for Packer (non-interactive password authentication)
       sshpass \
-      # (sshpass,xorriso) Dependency for Packer (generating isofs image)
+      # (unzip) Dependency for Gitea Actions
+      unzip \
+      # (xorriso) Dependency for Packer (generating isofs image)
       xorriso \
       yamllint && \
     sed -i '/en_US.UTF-8/s/^# //g' /etc/locale.gen && \
     locale-gen && \
-    curl https://omnitruck.chef.io/install.sh | bash -s -- -P inspec && \
-    gem update --system && gem update && \
+    npm install npm@latest -g && \
+    npm install n -g && \
+    n latest && \
     pip3 install --upgrade pip && \
-    pip3 install ansible-core && \
-    pwsh -Command "Set-PSRepository -Name 'PSGallery' -InstallationPolicy 'Trusted' -Verbose" && \
-    pwsh -Command "Install-Module -Name 'powershell-yaml','VMware.PowerCLI' -Verbose" && \
+    pip3 install \
+      ansible-core~=2.14.0 \
+      # (jmespath) Dependency for Ansible 'json_query' filter
+      jmespath \
+      # (netaddr) Dependency for Ansible 'ipaddr' filter
+      netaddr \
+      # (pyvmomi & requests) Dependency for Ansible 'vmware_guest' module
+      pyvmomi \
+      requests && \
+    update-ca-certificates --fresh && \
+    pwsh -Command "Set-PSRepository -Name 'PSGallery' -InstallationPolicy 'Trusted'" && \
+    pwsh -Command "Install-Module -Name 'powershell-yaml','VMware.PowerCLI'" && \
     pwsh -Command "Set-PowerCLIConfiguration -Scope User -ParticipateInCEIP \$False -Confirm:\$False" && \
     sh /tmp/ovftool-installer --console --eulas-agreed --required && \
     apt-get remove -y \
+      apt-transport-https \
       build-essential \
-      curl && \
+      # ca-certificates \
+      gnupg && \
     apt-get autoremove -y && \
     rm -rf /var/lib/apt/lists/* && \
     rm -f /tmp/ovftool-installer

package.json

@@ -0,0 +1,9 @@
+{
+  "dependencies": {
+    "@semantic-release/changelog": "^6.0.3",
+    "@semantic-release/commit-analyzer": "^13.0.0",
+    "@semantic-release/git": "^10.0.1",
+    "@semantic-release/release-notes-generator": "^14.0.0",
+    "semantic-release": "^24.0.0"
+  }
+}