Build Image and Publish #1187
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build Image and Publish | |
| on: | |
| schedule: | |
| - cron: "0 5 * * *" | |
| push: | |
| branches: | |
| - development | |
| release: | |
| types: [published] | |
| pull_request: | |
| permissions: | |
| contents: read | |
| env: | |
| components_branch: ${{ github.event_name == 'release' && 'master' || 'development' }} | |
| jobs: | |
| test: | |
| if: github.event_name == 'pull_request' | |
| runs-on: ${{ startsWith(matrix.platform, 'linux/arm') && 'ubuntu-24.04-arm' || 'ubuntu-latest' }} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| platform: | |
| - linux/amd64 | |
| - linux/386 | |
| - linux/arm/v6 | |
| - linux/arm/v7 | |
| - linux/arm64 | |
| - linux/riscv64 | |
| env: | |
| CI_ARCH: ${{ matrix.platform }} | |
| steps: | |
| - name: Checkout Repo | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0 | |
| - name: Set up QEMU | |
| uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 #v4.2.0 | |
| - name: Test | |
| run: CIPLATFORM=${{ env.CI_ARCH }} bash test/run.sh | |
| build-prepare: | |
| runs-on: ubuntu-24.04 | |
| outputs: | |
| components_branch: ${{ env.components_branch }} | |
| steps: | |
| # FIXME: can't use env object in reusable workflow inputs: https://github.com/orgs/community/discussions/26671 | |
| - run: echo "Exposing env vars for reusable workflow" | |
| build: | |
| uses: docker/github-builder/.github/workflows/build.yml@5f637c833aa76bc99372a1dc9a6f8bcd8056fb85 #v1.12.0 | |
| needs: | |
| - build-prepare | |
| permissions: | |
| contents: read # same as global permissions | |
| id-token: write # for signing attestation(s) with GitHub OIDC Token | |
| packages: write # required to push to GHCR | |
| with: | |
| setup-qemu: true | |
| cache: true | |
| cache-scope: build | |
| cache-mode: max | |
| fail-fast: true | |
| context: src | |
| output: image | |
| build-args: | | |
| PIHOLE_DOCKER_TAG={{meta.version}} | |
| FTL_BRANCH=${{ needs.build-prepare.outputs.components_branch }} | |
| CORE_BRANCH=${{ needs.build-prepare.outputs.components_branch }} | |
| WEB_BRANCH=${{ needs.build-prepare.outputs.components_branch }} | |
| PADD_BRANCH=${{ needs.build-prepare.outputs.components_branch }} | |
| platforms: linux/amd64,linux/386,linux/arm/v6,linux/arm/v7,linux/arm64,linux/riscv64 | |
| push: ${{ github.event_name != 'pull_request' }} | |
| set-meta-labels: true | |
| meta-images: | | |
| pihole/pihole | |
| ghcr.io/${{ github.repository_owner }}/pihole | |
| meta-tags: | | |
| type=schedule,pattern=nightly | |
| type=raw,value=nightly,enable=${{ github.event_name == 'push' }} | |
| type=ref,event=tag | |
| meta-flavor: | | |
| latest=${{ startsWith(github.ref, 'refs/tags/') }} | |
| # FIXME: GHCR does not support the referrers API and spams the registry with sha-tagged images when cosigned: https://github.com/docker/github-builder/issues/109 | |
| sign: false | |
| secrets: | |
| registry-auths: | | |
| - registry: docker.io | |
| username: ${{ secrets.DOCKERHUB_USER }} | |
| password: ${{ secrets.DOCKERHUB_PASS }} | |
| - registry: ghcr.io | |
| username: ${{ github.repository_owner }} | |
| password: ${{ secrets.GITHUB_TOKEN }} |