mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
github: No more docker workflow
This commit is contained in:
Arne Welzel
parent
f3eb7cc0c1
commit
f9b0681c98
1 changed files with 0 additions and 195 deletions
195
.github/workflows/docker.yml
vendored
195
.github/workflows/docker.yml
vendored
|
|
@ -1,195 +0,0 @@
|
||||||
name: Check and publish Docker images
|
|
||||||
|
|
||||||
on:
|
|
||||||
pull_request:
|
|
||||||
push:
|
|
||||||
branches: [master]
|
|
||||||
tags:
|
|
||||||
- 'v*'
|
|
||||||
- '!v*-dev'
|
|
||||||
- 'release'
|
|
||||||
|
|
||||||
defaults:
|
|
||||||
run:
|
|
||||||
shell: bash
|
|
||||||
|
|
||||||
env:
|
|
||||||
IMAGE_NAME: zeek-image.tar
|
|
||||||
IMAGE_FILE: /tmp/zeek-image.tar
|
|
||||||
IMAGE_PATH: /tmp
|
|
||||||
|
|
||||||
permissions:
|
|
||||||
contents: read
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
docker-build:
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
env:
|
|
||||||
TEST_TAG: zeek:latest
|
|
||||||
CONFFLAGS: --generator=Ninja --build-type=Release
|
|
||||||
steps:
|
|
||||||
- uses: actions/checkout@v3
|
|
||||||
with:
|
|
||||||
submodules: "recursive"
|
|
||||||
|
|
||||||
# Create and boot a loader. This will e.g., provide caching
|
|
||||||
# so we avoid rebuilds of the same image after this step.
|
|
||||||
- uses: docker/setup-buildx-action@v2
|
|
||||||
|
|
||||||
- name: Build image
|
|
||||||
uses: docker/build-push-action@v3
|
|
||||||
with:
|
|
||||||
context: ./
|
|
||||||
file: docker/Dockerfile
|
|
||||||
build-args: |
|
|
||||||
CONFFLAGS=${{ env.CONFFLAGS }}
|
|
||||||
load: true
|
|
||||||
tags: ${{ env.TEST_TAG }}
|
|
||||||
|
|
||||||
- name: Run btests
|
|
||||||
run: make -C docker/btest
|
|
||||||
|
|
||||||
- name: Save image tarball
|
|
||||||
run: docker save -o ${{ env.IMAGE_FILE }} ${{ env.TEST_TAG }}
|
|
||||||
|
|
||||||
- name: Get version
|
|
||||||
id: version
|
|
||||||
run: echo "RELEASE_VERSION=$(cat VERSION)" >> $GITHUB_OUTPUT
|
|
||||||
|
|
||||||
- name: Compute target tag
|
|
||||||
id: target
|
|
||||||
env:
|
|
||||||
RELEASE_VERSION: ${{ steps.version.outputs.RELEASE_VERSION }}
|
|
||||||
run: |
|
|
||||||
# Translate the GitHub reference into a tag name.
|
|
||||||
#
|
|
||||||
# - `release` tag maps to `zeek:latest`
|
|
||||||
# - `v*` tag (excluding `v*-dev` tags) maps to `zeek:RELEASE_VERSION`
|
|
||||||
# - `master` branch maps to `zeek-dev:latest`
|
|
||||||
#
|
|
||||||
# Any other refs are not published below.
|
|
||||||
if [ "${GITHUB_REF}" = "refs/tags/release" ]; then
|
|
||||||
echo "tag=zeek:latest" >> $GITHUB_OUTPUT
|
|
||||||
elif [ "${GITHUB_REF}" = "refs/heads/master" ]; then
|
|
||||||
echo "tag=zeek-dev:latest" >> $GITHUB_OUTPUT
|
|
||||||
elif [[ "${GITHUB_REF}" = refs/tags/v* ]] && [[ "${GITHUB_REF}" != refs/tags/v*-dev ]]; then
|
|
||||||
echo "tag=zeek:${RELEASE_VERSION}" >> $GITHUB_OUTPUT
|
|
||||||
fi
|
|
||||||
|
|
||||||
- name: Login to ECR
|
|
||||||
# Don't publish on forks. Also note that secrets for the login are not
|
|
||||||
# available for pull requests, so trigger on pushes only.
|
|
||||||
if: github.repository == 'zeek/zeek' && github.event_name == 'push'
|
|
||||||
uses: docker/login-action@v1
|
|
||||||
with:
|
|
||||||
registry: public.ecr.aws
|
|
||||||
username: ${{ secrets.AWS_ACCESS_KEY_ID }}
|
|
||||||
password: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
|
|
||||||
|
|
||||||
- name: Login to DockerHub
|
|
||||||
uses: docker/login-action@v2
|
|
||||||
# Don't publish on forks. Also note that secrets for the login are not
|
|
||||||
# available for pull requests, so trigger on pushes only.
|
|
||||||
if: github.repository == 'zeek/zeek' && github.event_name == 'push'
|
|
||||||
with:
|
|
||||||
username: ${{ secrets.DOCKER_USERNAME }}
|
|
||||||
password: ${{ secrets.DOCKER_PASSWORD }}
|
|
||||||
|
|
||||||
- name: Push image
|
|
||||||
# Only publish if we did compute a tag.
|
|
||||||
if: github.repository == 'zeek/zeek' && github.event_name == 'push' && steps.target.outputs.tag != ''
|
|
||||||
uses: docker/build-push-action@v3
|
|
||||||
with:
|
|
||||||
context: ./
|
|
||||||
file: docker/Dockerfile
|
|
||||||
build-args: |
|
|
||||||
CONFFLAGS=${{ env.CONFFLAGS }}
|
|
||||||
push: true
|
|
||||||
tags: |
|
|
||||||
public.ecr.aws/zeek/${{ steps.target.outputs.tag }}
|
|
||||||
docker.io/zeekurity/${{ steps.target.outputs.tag }}
|
|
||||||
docker.io/zeek/${{ steps.target.outputs.tag }}
|
|
||||||
|
|
||||||
- name: Preserve image artifact
|
|
||||||
uses: actions/upload-artifact@v3
|
|
||||||
with:
|
|
||||||
name: ${{ env.IMAGE_NAME }}
|
|
||||||
path: ${{ env.IMAGE_FILE }}
|
|
||||||
retention-days: 1
|
|
||||||
|
|
||||||
- name: Preserve btest artifacts
|
|
||||||
uses: actions/upload-artifact@v3
|
|
||||||
if: failure()
|
|
||||||
with:
|
|
||||||
name: docker-btest
|
|
||||||
path: docker/btest/.tmp
|
|
||||||
if-no-files-found: ignore
|
|
||||||
|
|
||||||
cluster-testing:
|
|
||||||
# We need the Zeek Docker image build job to complete first, since we need
|
|
||||||
# the resulting image for our docker-compose setup.
|
|
||||||
needs: docker-build
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
steps:
|
|
||||||
# Grab the sources so we have access to btest. Could also use pip, but it
|
|
||||||
# seems appealing to be using the in-tree version of btest. btest is in a
|
|
||||||
# submodule; we check it out selectively to save time.
|
|
||||||
- uses: actions/checkout@v3
|
|
||||||
- name: Check out btest
|
|
||||||
run: git submodule update --init ./auxil/btest
|
|
||||||
|
|
||||||
- name: Download Docker image artifact
|
|
||||||
uses: actions/download-artifact@v3
|
|
||||||
with:
|
|
||||||
name: ${{ env.IMAGE_NAME }}
|
|
||||||
path: ${{ env.IMAGE_PATH }}
|
|
||||||
|
|
||||||
- name: Load Docker image
|
|
||||||
run: |
|
|
||||||
docker load --input ${{ env.IMAGE_FILE }}
|
|
||||||
docker tag zeek:latest zeektest:latest
|
|
||||||
|
|
||||||
# The testsuite ref to use for this version of Zeek is stored in a file in
|
|
||||||
# the Zeek source tree.
|
|
||||||
- name: Get testsuite version
|
|
||||||
run: |
|
|
||||||
echo "TESTSUITE_COMMIT=$(cat ./testing/external/commit-hash.zeek-testing-cluster)" >> $GITHUB_ENV
|
|
||||||
|
|
||||||
- name: Retrieve cluster testsuite
|
|
||||||
uses: actions/checkout@v3
|
|
||||||
with:
|
|
||||||
repository: zeek/zeek-testing-cluster
|
|
||||||
path: testing/external/zeek-testing-cluster
|
|
||||||
ref: ${{ ENV.TESTSUITE_COMMIT }}
|
|
||||||
|
|
||||||
- name: Run testsuite
|
|
||||||
run: make -C testing/external/zeek-testing-cluster
|
|
||||||
|
|
||||||
# upload-artifact balks at certain characters in artifact
|
|
||||||
# filenames, so substitute them for dots.
|
|
||||||
- name: Sanitize artifacts
|
|
||||||
if: failure()
|
|
||||||
run: |
|
|
||||||
sudo apt-get -q update && sudo apt-get install -q -y rename
|
|
||||||
find testing/external/zeek-testing-cluster/.tmp -depth -execdir rename 's/[":<>|*?\r\n]/./g' "{}" \;
|
|
||||||
|
|
||||||
- name: Preserve btest artifacts
|
|
||||||
uses: actions/upload-artifact@v3
|
|
||||||
if: failure()
|
|
||||||
with:
|
|
||||||
name: cluster-btest
|
|
||||||
path: testing/external/zeek-testing-cluster/.tmp
|
|
||||||
if-no-files-found: ignore
|
|
||||||
|
|
||||||
# To save storage space, truncate the Docker image artifact
|
|
||||||
# when this run was successful.
|
|
||||||
- name: Truncate Docker image
|
|
||||||
run: |
|
|
||||||
truncate -s0 ${{ env.IMAGE_FILE }}
|
|
||||||
|
|
||||||
- name: Store truncated image artifact
|
|
||||||
uses: actions/upload-artifact@v3
|
|
||||||
with:
|
|
||||||
name: ${{ env.IMAGE_NAME }}
|
|
||||||
path: ${{ env.IMAGE_FILE }}
|
|
||||||
retention-days: 1
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue