mirror of
https://github.com/DIYgod/RSSHub.git
synced 2026-10-18 22:32:10 +08:00
dependabot[bot]
d89867efdb
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 8.0.1 to 8.0.2. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c...9000827ccba6bdab643e8b6fd33ac0654aef8333) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
330 lines
15 KiB
YAML
330 lines
15 KiB
YAML
name: 'Docker Release'
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- master
|
|
paths:
|
|
- '.github/workflows/docker-release.yml'
|
|
- 'lib/**'
|
|
- '!lib/**/*.test.ts'
|
|
- 'Dockerfile'
|
|
workflow_dispatch: {}
|
|
|
|
jobs:
|
|
check-env:
|
|
permissions:
|
|
contents: none
|
|
runs-on: ubuntu-slim
|
|
timeout-minutes: 5
|
|
outputs:
|
|
check-docker: ${{ steps.check-docker.outputs.defined }}
|
|
steps:
|
|
- id: check-docker
|
|
env:
|
|
DOCKER_USERNAME: ${{ vars.DOCKER_USERNAME }}
|
|
if: ${{ env.DOCKER_USERNAME != '' }}
|
|
run: echo "defined=true" >> $GITHUB_OUTPUT
|
|
release:
|
|
runs-on: ${{ matrix.runner }}
|
|
needs: check-env
|
|
if: needs.check-env.outputs.check-docker == 'true'
|
|
timeout-minutes: 30
|
|
outputs:
|
|
repo-name: ${{ steps.repo-name.outputs.repo-name }}
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
include:
|
|
- platform: linux/amd64
|
|
runner: ubuntu-latest
|
|
- platform: linux/arm64
|
|
runner: ubuntu-26.04-arm
|
|
permissions:
|
|
packages: write
|
|
id-token: write
|
|
attestations: write
|
|
steps:
|
|
- name: Enable ZRAM
|
|
id: zram
|
|
# Reduce memory pressure
|
|
# PERCENT=100 is safe: https://fedoraproject.org/wiki/Changes/Scale_ZRAM_to_full_memory_size
|
|
run: |
|
|
sudo apt-get update -yq
|
|
sudo apt-get install -yq zram-tools
|
|
# TODO: remove when runner is 26.0
|
|
modinfo zram > /dev/null 2>&1 || sudo apt-get install -yq "linux-modules-extra-$(uname -r)"
|
|
echo -e 'ALGO=zstd\nPERCENT=100' | sudo tee -a /etc/default/zramswap
|
|
sudo systemctl restart zramswap
|
|
swapon
|
|
background: true
|
|
|
|
- name: Prepare
|
|
run: |
|
|
platform=${{ matrix.platform }}
|
|
echo "PLATFORM_PAIR=${platform//\//-}" >> $GITHUB_ENV
|
|
|
|
- name: Checkout
|
|
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
|
|
|
|
- name: Extract repository name
|
|
id: repo-name
|
|
run: |
|
|
REPO_NAME="${GITHUB_REPOSITORY#*/}"
|
|
REPO_NAME_LOWER="${REPO_NAME,,}"
|
|
echo "repo-name=$REPO_NAME_LOWER" >> "$GITHUB_OUTPUT"
|
|
|
|
- name: Set up Docker Buildx
|
|
uses: docker/setup-buildx-action@594f3bf4285d9ea8dc53c9a0c9c4092420091003 # v4.4.0
|
|
|
|
- name: Log in to Docker Hub
|
|
uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
|
|
with:
|
|
username: ${{ vars.DOCKER_USERNAME }}
|
|
password: ${{ secrets.DOCKER_PASSWORD }}
|
|
|
|
- name: Log in to the Container registry
|
|
uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
|
|
with:
|
|
registry: ghcr.io
|
|
username: ${{ github.actor }}
|
|
password: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
- name: Extract Docker metadata (ordinary version)
|
|
id: meta-ordinary
|
|
uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6.2.0
|
|
with:
|
|
images: |
|
|
${{ vars.DOCKER_USERNAME }}/${{ steps.repo-name.outputs.repo-name }}
|
|
ghcr.io/${{ github.repository }}
|
|
tags: |
|
|
type=raw,value=latest,enable=true
|
|
type=raw,value={{date 'YYYY-MM-DD'}},enable=true
|
|
type=sha,format=long,prefix=,enable=true
|
|
flavor: latest=false
|
|
|
|
- name: Extract image names (ordinary version)
|
|
id: image-name-ordinary
|
|
run: |
|
|
tags=$(jq -r '.target["docker-metadata-action"].args.DOCKER_META_IMAGES' "$DOCKER_METADATA_OUTPUT_BAKE_FILE_TAGS")
|
|
echo "tags=$tags" >> "$GITHUB_OUTPUT"
|
|
|
|
- name: Wait for ZRAM
|
|
wait: zram
|
|
|
|
- name: Build and push Docker image (ordinary version)
|
|
id: build-and-push
|
|
uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
|
|
with:
|
|
context: .
|
|
tags: ${{ steps.image-name-ordinary.outputs.tags }}
|
|
labels: ${{ steps.meta-ordinary.outputs.labels }}
|
|
platforms: ${{ matrix.platform }}
|
|
cache-from: type=gha,scope=docker-release-${{ env.PLATFORM_PAIR }}
|
|
cache-to: type=gha,mode=max,scope=docker-release-${{ env.PLATFORM_PAIR }}
|
|
outputs: type=image,compression=zstd,force-compression=true,push-by-digest=true,name-canonical=true,push=true
|
|
|
|
- name: Attest (ordinary version)
|
|
uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2
|
|
with:
|
|
subject-name: |
|
|
${{ vars.DOCKER_USERNAME }}/${{ steps.repo-name.outputs.repo-name }}
|
|
ghcr.io/${{ github.repository }}
|
|
subject-digest: ${{ steps.build-and-push.outputs.digest }}
|
|
|
|
- name: Export digest (ordinary version)
|
|
run: |
|
|
mkdir -p ${{ runner.temp }}/digests/ordinary
|
|
digest="${{ steps.build-and-push.outputs.digest }}"
|
|
touch "${{ runner.temp }}/digests/ordinary/${digest#sha256:}"
|
|
|
|
- name: Upload digest (ordinary version)
|
|
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
|
|
with:
|
|
name: digests-ordinary-${{ env.PLATFORM_PAIR }}
|
|
path: ${{ runner.temp }}/digests/ordinary/*
|
|
if-no-files-found: error
|
|
retention-days: 1
|
|
|
|
- name: Extract Docker metadata (Chromium-bundled version)
|
|
id: meta-chromium-bundled
|
|
uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6.2.0
|
|
with:
|
|
images: |
|
|
${{ vars.DOCKER_USERNAME }}/${{ steps.repo-name.outputs.repo-name }}
|
|
ghcr.io/${{ github.repository }}
|
|
tags: |
|
|
type=raw,value=chromium-bundled,enable=true
|
|
type=raw,value=chromium-bundled-{{date 'YYYY-MM-DD'}},enable=true
|
|
type=sha,format=long,prefix=chromium-bundled-,enable=true
|
|
flavor: latest=false
|
|
|
|
- name: Extract image names (Chromium-bundled version)
|
|
id: image-name-chromium-bundled
|
|
run: |
|
|
tags=$(jq -r '.target["docker-metadata-action"].args.DOCKER_META_IMAGES' "$DOCKER_METADATA_OUTPUT_BAKE_FILE_TAGS")
|
|
echo "tags=$tags" >> "$GITHUB_OUTPUT"
|
|
|
|
- name: Build and push Docker image (Chromium-bundled version)
|
|
id: build-and-push-chromium
|
|
uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
|
|
with:
|
|
context: .
|
|
build-args: PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD=0
|
|
tags: ${{ steps.image-name-chromium-bundled.outputs.tags }}
|
|
labels: ${{ steps.meta-chromium-bundled.outputs.labels }}
|
|
platforms: ${{ matrix.platform }}
|
|
cache-from: |
|
|
type=registry,ref=${{ vars.DOCKER_USERNAME }}/${{ steps.repo-name.outputs.repo-name }}:chromium-bundled
|
|
cache-to: type=inline,ref=${{ vars.DOCKER_USERNAME }}/${{ steps.repo-name.outputs.repo-name }}:chromium-bundled # inline cache is enough
|
|
outputs: type=image,compression=zstd,force-compression=true,push-by-digest=true,name-canonical=true,push=true
|
|
|
|
- name: Attest (Chromium-bundled version)
|
|
uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2
|
|
with:
|
|
subject-name: |
|
|
${{ vars.DOCKER_USERNAME }}/${{ steps.repo-name.outputs.repo-name }}
|
|
ghcr.io/${{ github.repository }}
|
|
subject-digest: ${{ steps.build-and-push-chromium.outputs.digest }}
|
|
|
|
- name: Export digest (Chromium-bundled version)
|
|
run: |
|
|
mkdir -p ${{ runner.temp }}/digests/chromium
|
|
digest="${{ steps.build-and-push-chromium.outputs.digest }}"
|
|
touch "${{ runner.temp }}/digests/chromium/${digest#sha256:}"
|
|
|
|
- name: Upload digest (Chromium-bundled version)
|
|
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
|
|
with:
|
|
name: digests-chromium-${{ env.PLATFORM_PAIR }}
|
|
path: ${{ runner.temp }}/digests/chromium/*
|
|
if-no-files-found: error
|
|
retention-days: 1
|
|
|
|
merge:
|
|
runs-on: ubuntu-latest
|
|
needs: [check-env, release]
|
|
if: needs.check-env.outputs.check-docker == 'true'
|
|
timeout-minutes: 5
|
|
permissions:
|
|
packages: write
|
|
id-token: write
|
|
steps:
|
|
- name: Set up Docker Buildx
|
|
uses: docker/setup-buildx-action@594f3bf4285d9ea8dc53c9a0c9c4092420091003 # v4.4.0
|
|
|
|
- name: Log in to Docker Hub
|
|
uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
|
|
with:
|
|
username: ${{ vars.DOCKER_USERNAME }}
|
|
password: ${{ secrets.DOCKER_PASSWORD }}
|
|
|
|
- name: Log in to the Container registry
|
|
uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
|
|
with:
|
|
registry: ghcr.io
|
|
username: ${{ github.actor }}
|
|
password: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
- name: Download digests (ordinary version)
|
|
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
|
|
with:
|
|
path: ${{ runner.temp }}/digests/ordinary
|
|
pattern: digests-ordinary-*
|
|
merge-multiple: true
|
|
|
|
- name: Extract Docker metadata (ordinary version)
|
|
id: meta-ordinary-merge
|
|
uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6.2.0
|
|
with:
|
|
images: |
|
|
${{ vars.DOCKER_USERNAME }}/${{ needs.release.outputs.repo-name }}
|
|
ghcr.io/${{ github.repository }}
|
|
tags: |
|
|
type=raw,value=latest,enable=true
|
|
type=raw,value={{date 'YYYY-MM-DD'}},enable=true
|
|
type=sha,format=long,prefix=,enable=true
|
|
flavor: latest=false
|
|
|
|
- name: Create manifest list and push (ordinary version)
|
|
working-directory: ${{ runner.temp }}/digests/ordinary
|
|
run: |
|
|
docker buildx imagetools create $(jq -cr '.tags | map("-t " + .) | join(" ")' <<< "$DOCKER_METADATA_OUTPUT_JSON") \
|
|
$(printf '${{ vars.DOCKER_USERNAME }}/${{ needs.release.outputs.repo-name }}@sha256:%s ' *)
|
|
|
|
- name: Download digests (Chromium-bundled version)
|
|
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
|
|
with:
|
|
path: ${{ runner.temp }}/digests/chromium
|
|
pattern: digests-chromium-*
|
|
merge-multiple: true
|
|
|
|
- name: Extract Docker metadata (Chromium-bundled version)
|
|
id: meta-chromium-bundled-merge
|
|
uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6.2.0
|
|
with:
|
|
images: |
|
|
${{ vars.DOCKER_USERNAME }}/${{ needs.release.outputs.repo-name }}
|
|
ghcr.io/${{ github.repository }}
|
|
tags: |
|
|
type=raw,value=chromium-bundled,enable=true
|
|
type=raw,value=chromium-bundled-{{date 'YYYY-MM-DD'}},enable=true
|
|
type=sha,format=long,prefix=chromium-bundled-,enable=true
|
|
flavor: latest=false
|
|
|
|
- name: Create manifest list and push (Chromium-bundled version)
|
|
working-directory: ${{ runner.temp }}/digests/chromium
|
|
run: |
|
|
docker buildx imagetools create $(jq -cr '.tags | map("-t " + .) | join(" ")' <<< "$DOCKER_METADATA_OUTPUT_JSON") \
|
|
$(printf '${{ vars.DOCKER_USERNAME }}/${{ needs.release.outputs.repo-name }}@sha256:%s ' *)
|
|
|
|
github-release:
|
|
runs-on: ubuntu-slim
|
|
needs: [release, merge]
|
|
timeout-minutes: 5
|
|
permissions:
|
|
contents: write
|
|
steps:
|
|
- name: Prepare release notes
|
|
id: notes
|
|
env:
|
|
IMAGE_REPOSITORY: ${{ needs.release.outputs.repo-name }}
|
|
DOCKER_USERNAME: ${{ vars.DOCKER_USERNAME }}
|
|
run: |
|
|
echo "tag=v$(date -u +%Y.%m.%d)-${GITHUB_RUN_NUMBER}.${GITHUB_SHA:0:7}" >> "$GITHUB_OUTPUT"
|
|
image_repository="${GITHUB_REPOSITORY,,}"
|
|
cat > "$RUNNER_TEMP/release-notes.md" <<EOF
|
|
Source commit: $GITHUB_SHA
|
|
|
|
Published multi-platform images:
|
|
- ghcr.io/$image_repository:$GITHUB_SHA
|
|
- ghcr.io/$image_repository:chromium-bundled-$GITHUB_SHA
|
|
- $DOCKER_USERNAME/$IMAGE_REPOSITORY:$GITHUB_SHA
|
|
- $DOCKER_USERNAME/$IMAGE_REPOSITORY:chromium-bundled-$GITHUB_SHA
|
|
|
|
Use these commit-specific image tags to reproduce this release. Daily Docker tags may be updated by subsequent builds.
|
|
EOF
|
|
|
|
- name: Create a source release for the published images
|
|
uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3.0.3
|
|
with:
|
|
tag_name: ${{ steps.notes.outputs.tag }}
|
|
name: ${{ steps.notes.outputs.tag }}
|
|
target_commitish: ${{ github.sha }}
|
|
body_path: ${{ runner.temp }}/release-notes.md
|
|
|
|
description:
|
|
runs-on: ubuntu-slim
|
|
needs: [check-env, release]
|
|
if: needs.check-env.outputs.check-docker == 'true'
|
|
timeout-minutes: 5
|
|
steps:
|
|
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
|
|
|
|
- name: Docker Hub Description
|
|
uses: peter-evans/dockerhub-description@1b9a80c056b620d92cedb9d9b5a223409c68ddfa # v5.0.0
|
|
with:
|
|
username: ${{ vars.DOCKER_USERNAME }}
|
|
password: ${{ secrets.DOCKER_PASSWORD }}
|
|
repository: ${{ vars.DOCKER_USERNAME }}/${{ needs.release.outputs.repo-name }}
|