GitHub Actions Runner in Docker - Base #2362
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: GitHub Actions Runner in Docker - Base | |
| on: | |
| push: | |
| paths: | |
| - Dockerfile.base | |
| - .github/workflows/base.yml | |
| - goss* | |
| branches: | |
| - master | |
| - develop | |
| schedule: | |
| - cron: '0 22 * * *' | |
| workflow_dispatch: | |
| jobs: | |
| ubuntu_base_tests: | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| release: [jammy, focal, noble] | |
| platform: [amd64, arm64] | |
| fail-fast: false | |
| steps: | |
| - name: Copy Repo Files | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 | |
| - name: Get GitHub organization or user | |
| run: echo 'ORG='$(echo $(dirname ${GITHUB_REPOSITORY}) | awk '{print tolower($0)}') >> $GITHUB_ENV | |
| - name: Set up QEMU | |
| uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0 | |
| with: | |
| image: tonistiigi/binfmt:qemu-v7.0.0 | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 | |
| - name: Copy Dockerfile | |
| run: cp Dockerfile.base Dockerfile.base.ubuntu-${{ matrix.release }}; sed -i.bak 's/FROM.*/FROM ubuntu:${{ matrix.release }}/' Dockerfile.base.ubuntu-${{ matrix.release }} | |
| - name: Install Goss and dgoss | |
| run: | | |
| set -euo pipefail | |
| VERSION="v0.4.9" | |
| BIN_DIR="$HOME/.local/bin" | |
| mkdir -p "$BIN_DIR" | |
| echo "$BIN_DIR" >> "$GITHUB_PATH" | |
| ARCH="${{ matrix.platform }}" | |
| if [ "$ARCH" != "amd64" ] && [ "$ARCH" != "arm64" ]; then | |
| echo "Unsupported platform: $ARCH" | |
| exit 1 | |
| fi | |
| curl -fsSL \ | |
| -o "$BIN_DIR/goss" \ | |
| "https://github.com/goss-org/goss/releases/download/${VERSION}/goss-linux-${ARCH}" | |
| curl -fsSL \ | |
| -o "$BIN_DIR/dgoss" \ | |
| "https://github.com/goss-org/goss/releases/download/${VERSION}/dgoss" | |
| chmod +x "$BIN_DIR/goss" "$BIN_DIR/dgoss" | |
| "$BIN_DIR/goss" --version | |
| - name: Get current Git SHA | |
| id: vars | |
| run: echo "GIT_SHA=$(git rev-parse --short HEAD)" >> $GITHUB_ENV | |
| - name: set testable image environment variable | |
| id: testvars | |
| run: echo "GH_RUNNER_IMAGE=ubuntu-${{ matrix.release }}-${{ env.GIT_SHA }}-${{ matrix.platform }}" >> $GITHUB_ENV | |
| - name: Login to DockerHub | |
| uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 | |
| with: | |
| username: ${{ secrets.DOCKER_USER }} | |
| password: ${{ secrets.DOCKER_TOKEN }} | |
| - name: Retry build and load | |
| uses: nick-fields/retry@ad984534de44a9489a53aefd81eb77f87c70dc60 # v4 | |
| with: | |
| timeout_minutes: 60 | |
| max_attempts: 3 | |
| command: | | |
| docker buildx build \ | |
| --file Dockerfile.base.ubuntu-${{ matrix.release }} \ | |
| --platform linux/${{ matrix.platform }} \ | |
| --tag ${{ env.GH_RUNNER_IMAGE }} \ | |
| --load \ | |
| --pull \ | |
| --cache-from type=gha \ | |
| --cache-to type=gha,mode=max \ | |
| . | |
| - name: Run goss tests | |
| uses: nick-fields/retry@ad984534de44a9489a53aefd81eb77f87c70dc60 # v4 | |
| with: | |
| timeout_minutes: 60 | |
| max_attempts: 3 | |
| command: | | |
| echo "os: ubuntu" >goss_vars_${GH_RUNNER_IMAGE}.yaml | |
| echo "oscodename: ${{ matrix.release }}" >>goss_vars_${GH_RUNNER_IMAGE}.yaml | |
| echo "arch: ${{ matrix.platform }}" >>goss_vars_${GH_RUNNER_IMAGE}.yaml | |
| GOSS_VARS=goss_vars_${GH_RUNNER_IMAGE}.yaml GOSS_FILE=goss_base.yaml GOSS_SLEEP=1 $HOME/.local/bin/dgoss run --entrypoint /usr/bin/sleep -e RUNNER_NAME=test -e DEBUG_ONLY=true ${GH_RUNNER_IMAGE} 10 | |
| if [ $? -ne 0 ]; then | |
| exit 1 | |
| fi | |
| debian_base_tests: | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| release: [bookworm, trixie] | |
| platform: [amd64, arm64] | |
| fail-fast: false | |
| steps: | |
| - name: Copy Repo Files | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 | |
| - name: Get GitHub organization or user | |
| run: echo 'ORG='$(echo $(dirname ${GITHUB_REPOSITORY}) | awk '{print tolower($0)}') >> $GITHUB_ENV | |
| - name: Set up QEMU | |
| uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0 | |
| with: | |
| image: tonistiigi/binfmt:qemu-v7.0.0 | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 | |
| - name: Copy Dockerfile | |
| run: cp Dockerfile.base Dockerfile.base.debian-${{ matrix.release }}; sed -i.bak 's/FROM.*/FROM debian:${{ matrix.release }}/' Dockerfile.base.debian-${{ matrix.release }} | |
| - name: Install Goss and dgoss | |
| run: | | |
| set -euo pipefail | |
| VERSION="v0.4.9" | |
| BIN_DIR="$HOME/.local/bin" | |
| mkdir -p "$BIN_DIR" | |
| echo "$BIN_DIR" >> "$GITHUB_PATH" | |
| ARCH="${{ matrix.platform }}" | |
| if [ "$ARCH" != "amd64" ] && [ "$ARCH" != "arm64" ]; then | |
| echo "Unsupported platform: $ARCH" | |
| exit 1 | |
| fi | |
| curl -fsSL \ | |
| -o "$BIN_DIR/goss" \ | |
| "https://github.com/goss-org/goss/releases/download/${VERSION}/goss-linux-${ARCH}" | |
| curl -fsSL \ | |
| -o "$BIN_DIR/dgoss" \ | |
| "https://github.com/goss-org/goss/releases/download/${VERSION}/dgoss" | |
| chmod +x "$BIN_DIR/goss" "$BIN_DIR/dgoss" | |
| "$BIN_DIR/goss" --version | |
| - name: Get current Git SHA | |
| id: vars | |
| run: echo "GIT_SHA=$(git rev-parse --short HEAD)" >> $GITHUB_ENV | |
| - name: set testable image environment variable | |
| id: testvars | |
| run: echo "GH_RUNNER_IMAGE=debian-${{ matrix.release }}-${{ env.GIT_SHA }}-${{ matrix.platform }}" >> $GITHUB_ENV | |
| - name: Login to DockerHub | |
| uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 | |
| with: | |
| username: ${{ secrets.DOCKER_USER }} | |
| password: ${{ secrets.DOCKER_TOKEN }} | |
| - name: Retry build | |
| uses: nick-fields/retry@ad984534de44a9489a53aefd81eb77f87c70dc60 # v4 | |
| with: | |
| timeout_minutes: 60 | |
| max_attempts: 3 | |
| command: | | |
| docker buildx build \ | |
| --file Dockerfile.base.debian-${{ matrix.release }} \ | |
| --platform linux/${{ matrix.platform }} \ | |
| --tag ${{ env.GH_RUNNER_IMAGE }} \ | |
| --load \ | |
| --pull \ | |
| --cache-from type=gha \ | |
| --cache-to type=gha,mode=max \ | |
| . | |
| - name: Run goss tests | |
| uses: nick-fields/retry@ad984534de44a9489a53aefd81eb77f87c70dc60 # v4 | |
| with: | |
| timeout_minutes: 60 | |
| max_attempts: 3 | |
| command: | | |
| echo "os: debian" >goss_vars_${GH_RUNNER_IMAGE}.yaml | |
| echo "oscodename: ${{ matrix.release }}" >>goss_vars_${GH_RUNNER_IMAGE}.yaml | |
| echo "arch: ${{ matrix.platform }}" >>goss_vars_${GH_RUNNER_IMAGE}.yaml | |
| GOSS_VARS=goss_vars_${GH_RUNNER_IMAGE}.yaml GOSS_FILE=goss_base.yaml GOSS_SLEEP=1 $HOME/.local/bin/dgoss run --entrypoint /usr/bin/sleep -e RUNNER_NAME=test -e DEBUG_ONLY=true ${GH_RUNNER_IMAGE} 10 | |
| if [ $? -ne 0 ]; then | |
| exit 1 | |
| fi | |
| ubuntu_base_latest_deploy: | |
| runs-on: ubuntu-latest | |
| needs: ubuntu_base_tests | |
| steps: | |
| - name: Copy Repo Files | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 | |
| - name: Get GitHub organization or user | |
| run: echo 'ORG='$(echo $(dirname ${GITHUB_REPOSITORY}) | awk '{print tolower($0)}') >> $GITHUB_ENV | |
| - name: Set up QEMU | |
| uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0 | |
| with: | |
| image: tonistiigi/binfmt:qemu-v7.0.0 | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 | |
| - name: Login to DockerHub | |
| uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 | |
| with: | |
| username: ${{ secrets.DOCKER_USER }} | |
| password: ${{ secrets.DOCKER_TOKEN }} | |
| - name: Retry build and push | |
| uses: nick-fields/retry@ad984534de44a9489a53aefd81eb77f87c70dc60 # v4 | |
| with: | |
| timeout_minutes: 60 | |
| max_attempts: 3 | |
| command: | | |
| docker buildx build \ | |
| --file Dockerfile.base \ | |
| --platform linux/amd64,linux/arm64 \ | |
| --tag ${{ env.ORG }}/github-runner-base:latest \ | |
| --push \ | |
| --pull \ | |
| --cache-from type=gha \ | |
| --cache-to type=gha,mode=max \ | |
| . | |
| ubuntu_base_deploy: | |
| runs-on: ubuntu-latest | |
| needs: ubuntu_base_tests | |
| strategy: | |
| matrix: | |
| release: [jammy, focal, noble] | |
| fail-fast: false | |
| steps: | |
| - name: Copy Repo Files | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 | |
| - name: Get GitHub organization or user | |
| run: echo 'ORG='$(echo $(dirname ${GITHUB_REPOSITORY}) | awk '{print tolower($0)}') >> $GITHUB_ENV | |
| - name: Set up QEMU | |
| uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0 | |
| with: | |
| image: tonistiigi/binfmt:qemu-v7.0.0 | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 | |
| - name: Copy Dockerfile | |
| run: cp Dockerfile.base Dockerfile.base.ubuntu-${{ matrix.release }}; sed -i.bak 's/FROM.*/FROM ubuntu:${{ matrix.release }}/' Dockerfile.base.ubuntu-${{ matrix.release }} | |
| - name: Login to DockerHub | |
| uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 | |
| with: | |
| username: ${{ secrets.DOCKER_USER }} | |
| password: ${{ secrets.DOCKER_TOKEN }} | |
| - name: Retry build and push | |
| uses: nick-fields/retry@ad984534de44a9489a53aefd81eb77f87c70dc60 # v4 | |
| with: | |
| timeout_minutes: 60 | |
| max_attempts: 3 | |
| command: | | |
| docker buildx build \ | |
| --file Dockerfile.base.ubuntu-${{ matrix.release }} \ | |
| --platform linux/amd64,linux/arm64 \ | |
| --tag ${{ env.ORG }}/github-runner-base:ubuntu-${{ matrix.release }} \ | |
| --push \ | |
| --pull \ | |
| --cache-from type=gha \ | |
| --cache-to type=gha,mode=max \ | |
| . | |
| debian_base_deploy: | |
| runs-on: ubuntu-latest | |
| needs: debian_base_tests | |
| strategy: | |
| matrix: | |
| release: [bookworm, trixie] | |
| fail-fast: false | |
| steps: | |
| - name: Copy Repo Files | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 | |
| - name: Get GitHub organization or user | |
| run: echo 'ORG='$(echo $(dirname ${GITHUB_REPOSITORY}) | awk '{print tolower($0)}') >> $GITHUB_ENV | |
| - name: Set up QEMU | |
| uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0 | |
| with: | |
| image: tonistiigi/binfmt:qemu-v7.0.0 | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 | |
| - name: Copy Dockerfile | |
| run: cp Dockerfile.base Dockerfile.base.debian-${{ matrix.release }}; sed -i.bak 's/FROM.*/FROM debian:${{ matrix.release }}/' Dockerfile.base.debian-${{ matrix.release }} | |
| - name: Login to DockerHub | |
| uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 | |
| with: | |
| username: ${{ secrets.DOCKER_USER }} | |
| password: ${{ secrets.DOCKER_TOKEN }} | |
| - name: Retry build and push | |
| uses: nick-fields/retry@ad984534de44a9489a53aefd81eb77f87c70dc60 # v4 | |
| with: | |
| timeout_minutes: 60 | |
| max_attempts: 3 | |
| command: | | |
| docker buildx build \ | |
| --file Dockerfile.base.debian-${{ matrix.release }} \ | |
| --platform linux/amd64,linux/arm64 \ | |
| --tag ${{ env.ORG }}/github-runner-base:debian-${{ matrix.release }} \ | |
| --push \ | |
| --pull \ | |
| --cache-from type=gha \ | |
| --cache-to type=gha,mode=max \ | |
| . |