b5e81eb6b2
## Issue Addressed Resolves #1674 ## Proposed Changes - Whenever a tag is pushed with the prefix `v` this workflow is triggered - creates portable and non-portable binaries for linux x86_64, linux aarch64, macOS - an attempt at using github actions caching - signs each binary using GPG - auto-generates full changelog based on commit messages since the last release - creates a **draft** release - hot new formatting (preview [here](https://github.com/realbigsean/lighthouse/releases/tag/v0.9.23)) - has been taking around 35 minutes ## Additional Info TODOs: - Figure out how we should automate dockerhub's version tag. - It'd be quickest just to tag `latest`, but we'd need to make sure the docker workflow completes before this starts - we do the same cross-compile in the `docker` workflow, we could try to use the same binary - integrate a similar flow for unstable binaries (`-rc` tag?) - improve caching, potentially use sccache - if we start using a self-hosted runner this'll require some re-working Need to add the following secrets to Github: - `GPG_PASSPHRASE` - ~~`GPG_PUBLIC_KEY`~~ hard-coded this, because it was tough manage as a secret - `GPG_SIGNING_KEY` Co-authored-by: realbigsean <seananderson33@gmail.com>
102 lines
4.2 KiB
YAML
102 lines
4.2 KiB
YAML
name: docker
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- unstable
|
|
- stable
|
|
|
|
env:
|
|
DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
|
|
DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}
|
|
IMAGE_NAME: sigp/lighthouse
|
|
|
|
jobs:
|
|
extract-branch-name:
|
|
runs-on: ubuntu-18.04
|
|
steps:
|
|
- name: Extract branch name
|
|
run: echo "::set-output name=BRANCH_NAME::$(echo ${GITHUB_REF#refs/heads/})"
|
|
id: extract_branch
|
|
outputs:
|
|
BRANCH_NAME: ${{ steps.extract_branch.outputs.BRANCH_NAME }}
|
|
build-docker-arm64:
|
|
runs-on: ubuntu-18.04
|
|
environment: protected
|
|
needs: [extract-branch-name]
|
|
# We need to enable experimental docker features in order to use `docker buildx`
|
|
env:
|
|
DOCKER_CLI_EXPERIMENTAL: enabled
|
|
steps:
|
|
- uses: actions/checkout@v2
|
|
- name: Dockerhub login
|
|
run: |
|
|
echo "${DOCKER_PASSWORD}" | docker login --username ${DOCKER_USERNAME} --password-stdin
|
|
- uses: actions-rs/toolchain@v1
|
|
with:
|
|
toolchain: stable
|
|
- name: Cross build lighthouse binary
|
|
uses: actions-rs/cargo@v1
|
|
with:
|
|
use-cross: true
|
|
command: build
|
|
args: --release --manifest-path lighthouse/Cargo.toml --target aarch64-unknown-linux-gnu --features portable
|
|
- name: Move cross-built ARM binary into Docker scope
|
|
run: |
|
|
mkdir ./bin;
|
|
mv ./target/aarch64-unknown-linux-gnu/release/lighthouse ./bin;
|
|
- name: Set Env
|
|
if: needs.extract-branch-name.outputs.BRANCH_NAME == 'unstable'
|
|
run: |
|
|
echo "TAG_SUFFIX=-unstable" >> $GITHUB_ENV;
|
|
# Install dependencies for emulation. Have to create a new builder to pick up emulation support.
|
|
- name: Build ARM64 dockerfile (with push)
|
|
run: |
|
|
docker run --privileged --rm tonistiigi/binfmt --install arm64
|
|
docker buildx create --use --name cross-builder
|
|
docker buildx build \
|
|
--platform=linux/arm64 \
|
|
--file ./Dockerfile.cross . \
|
|
--tag ${IMAGE_NAME}:latest-arm64${TAG_SUFFIX} \
|
|
--push
|
|
build-docker-amd64:
|
|
runs-on: ubuntu-18.04
|
|
environment: protected
|
|
needs: [extract-branch-name]
|
|
steps:
|
|
- uses: actions/checkout@v2
|
|
- name: Dockerhub login
|
|
run: |
|
|
echo "${DOCKER_PASSWORD}" | docker login --username ${DOCKER_USERNAME} --password-stdin
|
|
- name: Set Env
|
|
if: needs.extract-branch-name.outputs.BRANCH_NAME == 'unstable'
|
|
run: |
|
|
echo "TAG_SUFFIX=-unstable" >> $GITHUB_ENV;
|
|
- name: Build AMD64 dockerfile (with push)
|
|
run: |
|
|
docker build \
|
|
--build-arg PORTABLE=true \
|
|
--tag ${IMAGE_NAME}:latest-amd64${TAG_SUFFIX} \
|
|
--file ./Dockerfile .
|
|
docker push ${IMAGE_NAME}:latest-amd64${TAG_SUFFIX}
|
|
build-docker-multiarch:
|
|
runs-on: ubuntu-18.04
|
|
needs: [build-docker-arm64, build-docker-amd64, extract-branch-name]
|
|
# We need to enable experimental docker features in order to use `docker manifest`
|
|
env:
|
|
DOCKER_CLI_EXPERIMENTAL: enabled
|
|
steps:
|
|
- name: Dockerhub login
|
|
run: |
|
|
echo "${DOCKER_PASSWORD}" | docker login --username ${DOCKER_USERNAME} --password-stdin
|
|
- name: Set Env
|
|
if: needs.extract-branch-name.outputs.BRANCH_NAME == 'unstable'
|
|
run: |
|
|
echo "TAG_SUFFIX=-unstable" >> $GITHUB_ENV;
|
|
- name: Create and push multiarch manifest
|
|
run: |
|
|
docker manifest create ${IMAGE_NAME}:latest${TAG_SUFFIX} \
|
|
--amend ${IMAGE_NAME}:latest-arm64${TAG_SUFFIX} \
|
|
--amend ${IMAGE_NAME}:latest-amd64${TAG_SUFFIX};
|
|
docker manifest push ${IMAGE_NAME}:latest${TAG_SUFFIX}
|