eb8a0531e6
Add three Dockerfiles under .docker/ and a build-images.yml workflow that
pushes them to the local Gitea container registry (172.0.0.29:3000).
Each image pre-installs all system deps, Node.js 22, and the Rust cross-
compilation target so release builds can skip apt-get entirely:
trcaa-linux-amd64:rust1.88-node22 — webkit2gtk, gtk3, all Tauri deps
trcaa-windows-cross:rust1.88-node22 — mingw-w64, nsis, Windows target
trcaa-linux-arm64:rust1.88-node22 — arm64 multiarch dev libs, Rust 1.88
build-images.yml triggers automatically when .docker/ changes on master
and supports workflow_dispatch for manual/first-time builds.
auto-tag.yml is NOT changed in this commit — switch it to use the new
images in the follow-up PR (after images are pushed to the registry).
One-time server setup required before first use:
echo '{"insecure-registries":["172.0.0.29:3000"]}' \
| sudo tee /etc/docker/daemon.json && sudo systemctl restart docker
108 lines
3.8 KiB
YAML
108 lines
3.8 KiB
YAML
name: Build CI Docker Images
|
|
|
|
# Rebuilds the pre-baked builder images and pushes them to the local Gitea
|
|
# container registry (172.0.0.29:3000).
|
|
#
|
|
# WHEN TO RUN:
|
|
# - Automatically: whenever a Dockerfile under .docker/ changes on master.
|
|
# - Manually: via workflow_dispatch (e.g. first-time setup, forced rebuild).
|
|
#
|
|
# ONE-TIME SERVER PREREQUISITE (run once on 172.0.0.29 before first use):
|
|
# echo '{"insecure-registries":["172.0.0.29:3000"]}' \
|
|
# | sudo tee /etc/docker/daemon.json
|
|
# sudo systemctl restart docker
|
|
#
|
|
# Images produced:
|
|
# 172.0.0.29:3000/sarman/trcaa-linux-amd64:rust1.88-node22
|
|
# 172.0.0.29:3000/sarman/trcaa-windows-cross:rust1.88-node22
|
|
# 172.0.0.29:3000/sarman/trcaa-linux-arm64:rust1.88-node22
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- master
|
|
paths:
|
|
- '.docker/**'
|
|
workflow_dispatch:
|
|
|
|
concurrency:
|
|
group: build-ci-images
|
|
cancel-in-progress: false
|
|
|
|
env:
|
|
REGISTRY: 172.0.0.29:3000
|
|
REGISTRY_USER: sarman
|
|
|
|
jobs:
|
|
linux-amd64:
|
|
runs-on: linux-amd64
|
|
container:
|
|
image: docker:24-cli
|
|
options: -v /var/run/docker.sock:/var/run/docker.sock
|
|
steps:
|
|
- name: Checkout
|
|
run: |
|
|
apk add --no-cache git
|
|
git init
|
|
git remote add origin http://172.0.0.29:3000/sarman/tftsr-devops_investigation.git
|
|
git fetch --depth=1 origin "$GITHUB_SHA"
|
|
git checkout FETCH_HEAD
|
|
- name: Build and push linux-amd64 builder
|
|
env:
|
|
RELEASE_TOKEN: ${{ secrets.RELEASE_TOKEN }}
|
|
run: |
|
|
echo "$RELEASE_TOKEN" | docker login $REGISTRY -u $REGISTRY_USER --password-stdin
|
|
docker build \
|
|
-t $REGISTRY/$REGISTRY_USER/trcaa-linux-amd64:rust1.88-node22 \
|
|
-f .docker/Dockerfile.linux-amd64 .
|
|
docker push $REGISTRY/$REGISTRY_USER/trcaa-linux-amd64:rust1.88-node22
|
|
echo "✓ Pushed $REGISTRY/$REGISTRY_USER/trcaa-linux-amd64:rust1.88-node22"
|
|
|
|
windows-cross:
|
|
runs-on: linux-amd64
|
|
container:
|
|
image: docker:24-cli
|
|
options: -v /var/run/docker.sock:/var/run/docker.sock
|
|
steps:
|
|
- name: Checkout
|
|
run: |
|
|
apk add --no-cache git
|
|
git init
|
|
git remote add origin http://172.0.0.29:3000/sarman/tftsr-devops_investigation.git
|
|
git fetch --depth=1 origin "$GITHUB_SHA"
|
|
git checkout FETCH_HEAD
|
|
- name: Build and push windows-cross builder
|
|
env:
|
|
RELEASE_TOKEN: ${{ secrets.RELEASE_TOKEN }}
|
|
run: |
|
|
echo "$RELEASE_TOKEN" | docker login $REGISTRY -u $REGISTRY_USER --password-stdin
|
|
docker build \
|
|
-t $REGISTRY/$REGISTRY_USER/trcaa-windows-cross:rust1.88-node22 \
|
|
-f .docker/Dockerfile.windows-cross .
|
|
docker push $REGISTRY/$REGISTRY_USER/trcaa-windows-cross:rust1.88-node22
|
|
echo "✓ Pushed $REGISTRY/$REGISTRY_USER/trcaa-windows-cross:rust1.88-node22"
|
|
|
|
linux-arm64:
|
|
runs-on: linux-amd64
|
|
container:
|
|
image: docker:24-cli
|
|
options: -v /var/run/docker.sock:/var/run/docker.sock
|
|
steps:
|
|
- name: Checkout
|
|
run: |
|
|
apk add --no-cache git
|
|
git init
|
|
git remote add origin http://172.0.0.29:3000/sarman/tftsr-devops_investigation.git
|
|
git fetch --depth=1 origin "$GITHUB_SHA"
|
|
git checkout FETCH_HEAD
|
|
- name: Build and push linux-arm64 builder
|
|
env:
|
|
RELEASE_TOKEN: ${{ secrets.RELEASE_TOKEN }}
|
|
run: |
|
|
echo "$RELEASE_TOKEN" | docker login $REGISTRY -u $REGISTRY_USER --password-stdin
|
|
docker build \
|
|
-t $REGISTRY/$REGISTRY_USER/trcaa-linux-arm64:rust1.88-node22 \
|
|
-f .docker/Dockerfile.linux-arm64 .
|
|
docker push $REGISTRY/$REGISTRY_USER/trcaa-linux-arm64:rust1.88-node22
|
|
echo "✓ Pushed $REGISTRY/$REGISTRY_USER/trcaa-linux-arm64:rust1.88-node22"
|