name: build-image on: [push] jobs: semrel_dryrun: name: Semantic Release (Dry-run) runs-on: dind-rootless outputs: version: ${{ steps.sem_rel.outputs.version }} steps: - name: Check out repository code uses: actions/checkout@v3 - name: Set up Node uses: actions/setup-node@v3 with: node-version: 20 - name: Install dependencies run: | npm install \ semantic-release \ @semantic-release/commit-analyzer \ @semantic-release/exec - name: Semantic Release (dry-run) id: sem_rel run: | npx semantic-release \ --package @semantic-release/exec \ --package semantic-release \ --branches ${{ gitea.refname }} \ --tag-format 'v${version}' \ --dry-run \ --plugins @semantic-release/commit-analyzer,@semantic-release/exec \ --analyzeCommits @semantic-release/commit-analyzer \ --verifyRelease @semantic-release/exec \ --verifyReleaseCmd 'echo "version=${nextRelease.version}" >> $GITHUB_OUTPUT' env: GIT_CREDENTIALS: ${{ secrets.GIT_USERNAME }}:${{ secrets.GIT_APIKEY }} - name: Assert semantic release output run: | [[ -z "${{ steps.sem_rel.outputs.version }}" ]] && { echo 'No release tag - exiting'; exit 1 } || { echo 'Release tag set correctly: ${{ steps.sem_rel.outputs.version }}'; exit 0 } build_image: name: Container image runs-on: dind needs: semrel_dryrun container: ghcr.io/catthehacker/ubuntu:act-latest steps: - name: Check out repository code uses: actions/checkout@v4 - name: Set up qemu # Will not work out of the box; instead using dind # uses: docker/setup-qemu-action@v3 run: | sudo apt-get update sudo apt-get install -y qemu-user-static - name: Create builder context id: buildx-context run: | docker context create builders env: DOCKER_HOST: tcp://docker:2376/ DOCKER_TLS_CERTDIR: /certs DOCKER_TLS_VERIFY: 1 DOCKER_CERT_PATH: "/certs/client" - name: Set up buildx id: buildx uses: docker/setup-buildx-action@v3 with: # buildkitd-flags: --debug endpoint: builders env: DOCKER_HOST: "tcp://docker:2376/" DOCKER_TLS_CERTDIR: "/certs" DOCKER_TLS_VERIFY: 1 DOCKER_CERT_PATH: "/certs/client" - name: Login to target repository uses: docker/login-action@v3 with: registry: code.spamasaurus.com username: ${{ secrets.GIT_USERNAME }} password: ${{ secrets.GIT_APIKEY }} - name: Build & push container image uses: docker/build-push-action@v5 with: push: true context: . tags: code.spamasaurus.com/djpbessems/packer-extended:${{ needs.semrel_dryrun.outputs.version }} build-args: | REPO_USERNAME=${{ secrets.REPO_USERNAME }} REPO_PASSWORD=${{ secrets.REPO_PASSWORD }} env: DOCKER_HOST: "tcp://docker:2376/" DOCKER_TLS_CERTDIR: "/certs" DOCKER_TLS_VERIFY: 1 DOCKER_CERT_PATH: "/certs/client" semrel: name: Semantic Release runs-on: dind-rootless needs: build_image steps: - name: Check out repository code uses: actions/checkout@v3 - name: Set up Node uses: actions/setup-node@v3 with: node-version: 20 - name: Install dependencies run: | npm install \ semantic-release \ @semantic-release/changelog \ @semantic-release/commit-analyzer \ @semantic-release/git \ @semantic-release/release-notes-generator - name: Semantic Release run: | npx semantic-release \ --branches ${{ gitea.refname }} \ --tag-format 'v${version}' \ --plugins @semantic-release/commit-analyzer,@semantic-release/release-notes-generator,@semantic-release/changelog,@semantic-release/git env: GIT_CREDENTIALS: ${{ secrets.GIT_USERNAME }}:${{ secrets.GIT_APIKEY }}