118 lines
5.2 KiB
YAML
118 lines
5.2 KiB
YAML
---
|
|
|
|
variables:
|
|
MY_PROJECT_ID: "45741845"
|
|
GIT_SYNC_URL: "https://$GITHUB_USERNAME_ROBOT:$GITHUB_TOKEN_ROBOT@github.com/NoFussComputing/execution_environment.git"
|
|
|
|
DOCKER_IMAGE_BUILD_TARGET_PLATFORMS: "linux/amd64,linux/arm64"
|
|
DOCKER_IMAGE_PUBLISH_NAME: 'ansible-ee'
|
|
DOCKER_IMAGE_PUBLISH_REGISTRY: docker.io/nofusscomputing
|
|
DOCKER_IMAGE_PUBLISH_URL: https://hub.docker.com/r/nofusscomputing/$DOCKER_IMAGE_PUBLISH_NAME
|
|
PAGES_ENVIRONMENT_PATH: projects/ansible/execution_environment/
|
|
|
|
include:
|
|
- project: nofusscomputing/projects/gitlab-ci
|
|
ref: development
|
|
file:
|
|
- template/automagic.gitlab-ci.yaml
|
|
#- template: Jobs/Container-Scanning.gitlab-ci.yml # see https://gitlab.com/gitlab-org/gitlab/-/issues/381665
|
|
|
|
|
|
.MKDocs_Build:
|
|
image: python:3.11-buster
|
|
|
|
Build/Cache Python Packages:
|
|
stage: build
|
|
image: nofusscomputing/docker-buildx-qemu:dev
|
|
services:
|
|
- name: docker:23-dind
|
|
entrypoint: ["env", "-u", "DOCKER_HOST"]
|
|
command: ["dockerd-entrypoint.sh"]
|
|
needs: []
|
|
variables:
|
|
DOCKER_HOST: tcp://docker:2375/
|
|
DOCKER_DRIVER: overlay2
|
|
DOCKER_TLS_CERTDIR: ""
|
|
before_script:
|
|
- docker info
|
|
#- docker login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY
|
|
- pip3 install setuptools wheel
|
|
- pip3 install commitizen==2.21.0 # version specified so current build works.
|
|
- pip3 install gitlab-ci/gitlab_release/python-module/cz_nfc/.
|
|
# see: https://gitlab.com/gitlab-org/gitlab-runner/-/merge_requests/1861
|
|
# on why this `docker run` is required. without it multiarch support doesnt work.
|
|
- docker run --rm --privileged multiarch/qemu-user-static --reset -p yes
|
|
- update-binfmts --enable # Important: Ensures execution of other binary formats is enabled in the kernel
|
|
- docker buildx create --driver=docker-container --driver-opt image=moby/buildkit:v0.11.6 --use
|
|
- docker buildx inspect --bootstrap
|
|
script: |
|
|
docker buildx build \
|
|
--file dockerfile-build_cache \
|
|
--platform=$DOCKER_IMAGE_BUILD_TARGET_PLATFORMS . \
|
|
--build-arg CI_JOB_TOKEN=$CI_JOB_TOKEN \
|
|
--build-arg CI_API_V4_URL=$CI_API_V4_URL \
|
|
--build-arg CI_PROJECT_ID=$CI_PROJECT_ID \
|
|
--progress plain
|
|
rules:
|
|
- if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
|
|
when: never
|
|
- if: $CI_COMMIT_TAG
|
|
when: never
|
|
- if: '$CI_COMMIT_BRANCH != "master"'
|
|
allow_failure: true
|
|
when: manual
|
|
- when: never
|
|
|
|
|
|
Docker Container:
|
|
extends: .build_docker_container
|
|
resource_group: build
|
|
needs: []
|
|
script:
|
|
- update-binfmts --display
|
|
- |
|
|
|
|
if [ "0$DOCKER_IMAGE_BUILD_TARGET_PLATFORMS" != "0" ]; then
|
|
|
|
echo "[DEBUG] building multiarch/specified arch image";
|
|
|
|
docker buildx build --platform=$DOCKER_IMAGE_BUILD_TARGET_PLATFORMS . \
|
|
--label org.opencontainers.image.created="$(date '+%Y-%m-%d %H:%M:%S%:z')" \
|
|
--label org.opencontainers.image.documentation="$CI_PROJECT_URL" \
|
|
--label org.opencontainers.image.source="$CI_PROJECT_URL" \
|
|
--label org.opencontainers.image.revision="$CI_COMMIT_SHA" \
|
|
--push \
|
|
--build-arg CI_JOB_TOKEN=$CI_JOB_TOKEN --build-arg CI_PROJECT_ID=$CI_PROJECT_ID --build-arg CI_API_V4_URL=$CI_API_V4_URL \
|
|
--build-arg CI_COMMIT_SHA=$CI_COMMIT_SHA \
|
|
--file $DOCKER_DOCKERFILE \
|
|
--tag $DOCKER_IMAGE_BUILD_REGISTRY/$DOCKER_IMAGE_BUILD_NAME:$DOCKER_IMAGE_BUILD_TAG;
|
|
|
|
docker buildx imagetools inspect $DOCKER_IMAGE_BUILD_REGISTRY/$DOCKER_IMAGE_BUILD_NAME:$DOCKER_IMAGE_BUILD_TAG;
|
|
|
|
# during docker multi platform build there are >=3 additional unknown images added to gitlab container registry. cleanup
|
|
|
|
DOCKER_MULTI_ARCH_IMAGES=$(docker buildx imagetools inspect "$DOCKER_IMAGE_BUILD_REGISTRY/$DOCKER_IMAGE_BUILD_NAME:$DOCKER_IMAGE_BUILD_TAG" --format "{{ range .Manifest.Manifests }}{{ if ne (print .Platform) \"&{unknown unknown [] }\" }}$DOCKER_IMAGE_BUILD_REGISTRY/$DOCKER_IMAGE_BUILD_NAME:$DOCKER_IMAGE_BUILD_TAG@{{ println .Digest }}{{end}} {{end}}");
|
|
|
|
docker buildx imagetools create $DOCKER_MULTI_ARCH_IMAGES --tag $DOCKER_IMAGE_BUILD_REGISTRY/$DOCKER_IMAGE_BUILD_NAME:$DOCKER_IMAGE_BUILD_TAG;
|
|
|
|
docker buildx imagetools inspect $DOCKER_IMAGE_BUILD_REGISTRY/$DOCKER_IMAGE_BUILD_NAME:$DOCKER_IMAGE_BUILD_TAG;
|
|
|
|
else
|
|
|
|
echo "[DEBUG] building image";
|
|
|
|
docker build . \
|
|
--label org.opencontainers.image.created="$(date '+%Y-%m-%d %H:%M:%S%:z')" \
|
|
--label org.opencontainers.image.documentation="$CI_PROJECT_URL" \
|
|
--label org.opencontainers.image.source="$CI_PROJECT_URL" \
|
|
--label org.opencontainers.image.url="$CI_PROJECT_URL/-/releases/$(cz -n cz_nfc version --project)" \
|
|
--label org.opencontainers.image.version="$(cz -n cz_nfc version --project)" \
|
|
--label org.opencontainers.image.revision="$CI_COMMIT_SHA" \
|
|
--build-arg CI_JOB_TOKEN=$CI_JOB_TOKEN --build-arg CI_PROJECT_ID=$CI_PROJECT_ID --build-arg CI_API_V4_URL=$CI_API_V4_URL \
|
|
--build-arg CI_COMMIT_SHA=$CI_COMMIT_SHA \
|
|
--file $DOCKER_DOCKERFILE \
|
|
--tag $DOCKER_IMAGE_BUILD_REGISTRY/$DOCKER_IMAGE_BUILD_NAME:$DOCKER_IMAGE_BUILD_TAG;
|
|
|
|
docker push $DOCKER_IMAGE_BUILD_REGISTRY/$DOCKER_IMAGE_BUILD_NAME:$DOCKER_IMAGE_BUILD_TAG;
|
|
|
|
fi |