build: Generate cloud-init seed ISO

This commit is contained in:
2025-07-25 15:33:21 +10:00
parent 29faf646ab
commit baac570a15
3 changed files with 88 additions and 45 deletions

View File

@ -2,62 +2,77 @@ name: build-image
on: [push] on: [push]
jobs: jobs:
semrel_dryrun: # semrel_dryrun:
name: Semantic Release (Dry-run) # name: Semantic Release (Dry-run)
runs-on: ubuntu-latest # runs-on: ubuntu-latest
outputs: # outputs:
version: ${{ steps.sem_rel.outputs.version }} # version: ${{ steps.sem_rel.outputs.version }}
steps: # steps:
- name: Check out repository code # - name: Check out repository code
uses: actions/checkout@v3 # uses: actions/checkout@v3
- name: Set up Node # - name: Set up Node
uses: actions/setup-node@v3 # uses: actions/setup-node@v3
with: # with:
node-version: 20 # node-version: 20
- name: Install dependencies # - name: Install dependencies
run: | # run: |
npm install \ # npm install \
semantic-release \ # semantic-release \
@semantic-release/commit-analyzer \ # @semantic-release/commit-analyzer \
@semantic-release/exec # @semantic-release/exec
- name: Semantic Release (dry-run) # - name: Semantic Release (dry-run)
id: sem_rel # id: sem_rel
run: | # run: |
npx semantic-release \ # npx semantic-release \
--package @semantic-release/exec \ # --package @semantic-release/exec \
--package semantic-release \ # --package semantic-release \
--branches ${{ gitea.refname }} \ # --branches ${{ gitea.refname }} \
--tag-format 'v${version}' \ # --tag-format 'v${version}' \
--dry-run \ # --dry-run \
--plugins @semantic-release/commit-analyzer,@semantic-release/exec \ # --plugins @semantic-release/commit-analyzer,@semantic-release/exec \
--analyzeCommits @semantic-release/commit-analyzer \ # --analyzeCommits @semantic-release/commit-analyzer \
--verifyRelease @semantic-release/exec \ # --verifyRelease @semantic-release/exec \
--verifyReleaseCmd 'echo "version=${nextRelease.version}" >> $GITHUB_OUTPUT' # --verifyReleaseCmd 'echo "version=${nextRelease.version}" >> $GITHUB_OUTPUT'
env: # env:
GIT_CREDENTIALS: ${{ secrets.GIT_USERNAME }}:${{ secrets.GIT_APIKEY }} # GIT_CREDENTIALS: ${{ secrets.GIT_USERNAME }}:${{ secrets.GIT_APIKEY }}
- name: Assert semantic release output # - name: Assert semantic release output
run: | # run: |
[[ -z "${{ steps.sem_rel.outputs.version }}" ]] && { # [[ -z "${{ steps.sem_rel.outputs.version }}" ]] && {
echo 'No release tag - exiting'; exit 1 # echo 'No release tag - exiting'; exit 1
} || { # } || {
echo 'Release tag set correctly: ${{ steps.sem_rel.outputs.version }}'; exit 0 # echo 'Release tag set correctly: ${{ steps.sem_rel.outputs.version }}'; exit 0
} }
build_image: build_image:
name: Build image name: Build image
runs-on: ubuntu-latest runs-on: ubuntu-latest
needs: semrel_dryrun # needs: semrel_dryrun
# container: ghcr.io/catthehacker/ubuntu:act-latest
steps: steps:
- name: Check out repository code - name: Check out repository code
uses: actions/checkout@v4 uses: actions/checkout@v4
- name: Print Hello - name: Generate seed ISO
run: echo "Hello from Harvester!" shell: bash
run: |
apt-get update && \
apt-get install -y \
genisoimage
sed "s/__ROOT_HASHED_PASSWORD__/${{ secrets.ROOT_HASHED_PASSWORD }}/g" \
cloud-init/user-data.template > cloud-init/user-data
sed "s/__PUBLIC_SSHKEY__/${{ secrets.PUBLIC_SSHKEY }}/g" \
cloud-init/user-data.template > cloud-init/user-data
genisoimage \
-output seed.iso \
-volid cidata \
-joliet \
-rock \
cloud-init/meta-data cloud-init/user-data
# semrel: # semrel:
# name: Semantic Release # name: Semantic Release
# runs-on: dind-rootless # runs-on: ubuntu-latest
# needs: [build_container,build_chart] # needs: build_image
# steps: # steps:
# - name: Check out repository code # - name: Check out repository code
# uses: actions/checkout@v3 # uses: actions/checkout@v3

0
cloud-init/meta-data Normal file
View File

View File

@ -0,0 +1,28 @@
#cloud-config
package_update: true
package_upgrade: true
snap:
commands:
00: snap refresh --hold=forever
package_reboot_if_required: true
packages:
- qemu-guest-agent
- yq
- cifs-utils
runcmd:
- apt-get install -y linux-modules-extra-$(uname -r)
- sysctl -w net.ipv6.conf.all.disable_ipv6=1
- systemctl enable --now qemu-guest-agent.service
disable_root: false
users:
- name: root
hashed_passwd: __ROOT_HASHED_PASSWORD__
lock_passwd: false
shell: /bin/bash
ssh_authorized_keys:
- __PUBLIC_SSHKEY__
ssh_authorized_keys:
- >
__PUBLIC_SSHKEY__