Merge pull request #51 from crowdsecurity/hes-bump-crowdsec-version #73
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Builder | |
| env: | |
| BUILD_ARGS: "--test" | |
| MONITORED_FILES: "build.yaml config.yaml Dockerfile rootfs/etc/services.d/crowdsec/run rootfs/etc/services.d/ttyd/run rootfs/etc/services.d/crowdsec-firewall-bouncer/run" | |
| on: | |
| push: | |
| branches: | |
| - main | |
| jobs: | |
| init: | |
| runs-on: ubuntu-latest | |
| name: Initialize builds | |
| outputs: | |
| changed_addons: ${{ steps.changed_addons.outputs.addons }} | |
| changed: ${{ steps.changed_addons.outputs.changed }} | |
| steps: | |
| - name: Check out the repository | |
| uses: actions/[email protected] | |
| - name: Get changed files | |
| id: changed_files | |
| uses: jitterbit/get-changed-files@v1 | |
| - name: Find add-on directories | |
| id: addons | |
| uses: home-assistant/actions/helpers/find-addons@master | |
| - name: Get changed add-ons | |
| id: changed_addons | |
| run: | | |
| declare -a changed_addons | |
| for addon in ${{ steps.addons.outputs.addons }}; do | |
| if [[ "${{ steps.changed_files.outputs.all }}" =~ $addon ]]; then | |
| for file in ${{ env.MONITORED_FILES }}; do | |
| if [[ "${{ steps.changed_files.outputs.all }}" =~ $addon/$file ]]; then | |
| if [[ ! "${changed_addons[@]}" =~ $addon ]]; then | |
| changed_addons+=("\"${addon}\","); | |
| fi | |
| fi | |
| done | |
| fi | |
| done | |
| changed=$(echo ${changed_addons[@]} | rev | cut -c 2- | rev) | |
| if [[ -n ${changed} ]]; then | |
| echo "Changed add-ons: $changed"; | |
| echo "changed=true" >> $GITHUB_OUTPUT | |
| echo "addons=[$changed]" >> $GITHUB_OUTPUT | |
| else | |
| echo "No add-on had any monitored files changed (${{ env.MONITORED_FILES }})"; | |
| fi | |
| build: | |
| needs: init | |
| runs-on: ubuntu-latest | |
| if: needs.init.outputs.changed == 'true' | |
| name: Build ${{ matrix.arch }} ${{ matrix.addon }} add-on | |
| strategy: | |
| matrix: | |
| addon: ${{ fromJson(needs.init.outputs.changed_addons) }} | |
| arch: ["aarch64", "amd64", "i386", "armhf", "armv7"] | |
| steps: | |
| - name: Check out repository | |
| uses: actions/[email protected] | |
| - name: Get information | |
| id: info | |
| uses: home-assistant/actions/helpers/info@master | |
| with: | |
| path: "./${{ matrix.addon }}" | |
| - name: 🚀 Run Home Assistant Add-on Information | |
| id: information | |
| uses: frenck/action-addon-information@v1 | |
| with: | |
| path: "./${{ matrix.addon }}" | |
| - name: ℹ️ Compose build flags | |
| id: flags | |
| run: | | |
| echo "date=$(date +"%Y-%m-%dT%H:%M:%SZ")" >> $GITHUB_OUTPUT | |
| from=$(yq --no-colors eval ".build_from.${{ matrix.arch }}" "${{ steps.information.outputs.build }}") | |
| echo "from=${from}" >> $GITHUB_OUTPUT | |
| if [[ "${{ matrix.arch}}" = "amd64" ]]; then | |
| echo "platform=linux/amd64" >> $GITHUB_OUTPUT | |
| elif [[ "${{ matrix.arch }}" = "i386" ]]; then | |
| echo "platform=linux/386" >> $GITHUB_OUTPUT | |
| elif [[ "${{ matrix.arch }}" = "armhf" ]]; then | |
| echo "platform=linux/arm/v6" >> $GITHUB_OUTPUT | |
| elif [[ "${{ matrix.arch }}" = "armv7" ]]; then | |
| echo "platform=linux/arm/v7" >> $GITHUB_OUTPUT | |
| elif [[ "${{ matrix.arch }}" = "aarch64" ]]; then | |
| echo "platform=linux/arm64/v8" >> $GITHUB_OUTPUT | |
| else | |
| echo "::error ::Could not determine platform for arch ${{ matrix.arch }}" | |
| exit 1 | |
| fi | |
| - name: Set up QEMU | |
| uses: docker/[email protected] | |
| - name: Set up Docker Buildx | |
| uses: docker/[email protected] | |
| - name: Check if add-on should be built | |
| id: check | |
| run: | | |
| if [[ "${{ steps.info.outputs.architectures }}" =~ ${{ matrix.arch }} ]]; then | |
| echo "build_arch=true" >> $GITHUB_OUTPUT | |
| echo "image=$(echo ${{ steps.info.outputs.image }} | cut -d'/' -f3)" >> $GITHUB_OUTPUT | |
| if [[ -z "${{ github.head_ref }}" ]] && [[ "${{ github.event_name }}" == "push" ]]; then | |
| echo "BUILD_ARGS=" >> $GITHUB_ENV; | |
| fi | |
| else | |
| echo "${{ matrix.arch }} is not a valid arch for ${{ matrix.addon }}, skipping build"; | |
| echo "build_arch=false" >> $GITHUB_OUTPUT | |
| fi | |
| - name: Login to GitHub Container Registry | |
| if: env.BUILD_ARGS != '--test' | |
| uses: docker/[email protected] | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.repository_owner }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Build ${{ matrix.addon }} add-on | |
| if: steps.check.outputs.build_arch == 'true' | |
| uses: docker/[email protected] | |
| with: | |
| push: true | |
| context: ./${{ matrix.addon }} | |
| tags: | | |
| ghcr.io/${{ github.repository_owner }}/${{ matrix.arch }}-addon-${{ matrix.addon }}:${{ steps.information.outputs.version }} | |
| platforms: ${{ steps.flags.outputs.platform }} | |
| build-args: | | |
| BUILD_ARCH=${{ matrix.arch }} | |
| BUILD_DATE=${{ steps.flags.outputs.date }} | |
| BUILD_FROM=${{ steps.flags.outputs.from }} | |
| BUILD_REF=${{ github.sha }} | |
| BUILD_REPOSITORY=${{ github.repository }} | |
| BUILD_VERSION=${{ needs.information.outputs.version }} | |
| labels: | | |
| org.opencontainers.image.source=${{ github.event.repository.html_url }} | |
| org.opencontainers.image.revision=${{ github.sha }} |