Skip to content

2.3.7

2.3.7 #95

Workflow file for this run

name: Release
on:
# This workflow can be manually triggered
workflow_dispatch:
# But the main use case is to release new layers when a release is created
release:
types: [ published ]
# Necessary to deploy to AWS using OIDC
# https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/configuring-openid-connect-in-amazon-web-services
permissions:
id-token: write # This is required for requesting the JWT
contents: read # This is required for actions/checkout
jobs:
release:
name: Publish ${{ matrix.cpu }} layers
runs-on: ubuntu-22.04
strategy:
matrix:
cpu:
- x86
- arm
steps:
- uses: actions/checkout@v4
- name: Get the version
id: get_version
run: echo ::set-output name=VERSION::${GITHUB_REF/refs\/tags\//}
# See https://stackoverflow.com/questions/70312490/github-actions-runner-environment-doesnt-build-for-arm-images
- name: Set up QEMU to run ARM images (that were built with Depot)
uses: docker/setup-qemu-action@v3
- uses: depot/setup-action@v1
- name: Configure AWS credentials
uses: aws-actions/configure-aws-credentials@v4
with:
role-to-assume: arn:aws:iam::534081306603:role/bref-layer-publisher-github-actions
role-session-name: bref-layer-publisher-github-actions
aws-region: us-east-1
- name: Configure Docker Hub credentials
uses: docker/login-action@v3
with:
username: ${{ secrets.DOCKER_USERNAME }}
password: ${{ secrets.DOCKER_PASSWORD }}
- run: make docker-images
env:
CPU: ${{ matrix.cpu }}
USE_DEPOT: 1
DEPOT_TOKEN: ${{ secrets.DEPOT_TOKEN }}
- run: make layers
env:
CPU: ${{ matrix.cpu }}
- run: make test
env:
CPU: ${{ matrix.cpu }}
- run: make upload-layers
env:
CPU: ${{ matrix.cpu }}
- run: make upload-to-docker-hub
env:
CPU: ${{ matrix.cpu }}
DOCKER_TAG: ${{ steps.get_version.outputs.VERSION }}
update-layer-versions:
name: Update layer versions in brefphp/bref
runs-on: ubuntu-22.04
needs: [ release ]
steps:
- name: Trigger layer update in brefphp/bref
uses: actions/github-script@v6
with:
github-token: ${{ secrets.GH_TOKEN_TRIGGER }}
script: |
await github.rest.actions.createWorkflowDispatch({
owner: 'brefphp',
repo: 'bref',
workflow_id: 'update-layer-versions.yml',
ref: 'master',
inputs: {
release_url: '${{ github.event.release.url }}',
release_html_url: '${{ github.event.release.html_url }}',
release_name: '${{ github.event.release.name }}'
}
})
update-layer-js-versions:
name: Update layer versions in brefphp/layers.js
runs-on: ubuntu-22.04
needs: [ release ]
steps:
- name: Trigger release in brefphp/layers.js
uses: actions/github-script@v6
with:
github-token: ${{ secrets.GH_TOKEN_TRIGGER }}
script: |
await github.rest.actions.createWorkflowDispatch({
owner: 'brefphp',
repo: 'layers.js',
workflow_id: 'release.yml',
ref: 'main'
})