-
Notifications
You must be signed in to change notification settings - Fork 0
47 lines (41 loc) · 1.49 KB
/
containers.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
name: build and push container to registry
on:
workflow_dispatch:
inputs:
image_name:
type: string
description: the package to use for `nix build`
repository_name:
type: string
description: the container registry name
jobs:
publish-container:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3
- name: Install nix
uses: DeterminateSystems/nix-installer-action@v2
with:
logger: pretty
log-directives: nix_installer=trace
backtrace: full
github-token: ${{ secrets.GITHUB_TOKEN }}
extra-conf: |
extra-substituters = https://cache.garnix.io
extra-trusted-public-keys = cache.garnix.io:CTFPyKSLcx5RMJKfLo5EEPUObbA78b0YQ2DTCJXqr9g=
system-features = kvm
- name: build image
env:
PACKAGE_NAME: ${{ inputs.image_name }}
run: nix build .#${PACKAGE_NAME}
- name: login to registry
env:
USERNAME: ${{ secrets.DOCKER_HUB_USERNAME }}
PASSWORD: ${{ secrets.DOCKER_HUB_TOKEN }}
run: echo ${PASSWORD} | nix develop .#ci -c skopeo login docker.io -u ${USERNAME} --password-stdin
- name: push to registry
env:
REPO_OWNER: justinrubek
REPO_NAME: ${{ inputs.repository_name }}
VERSION: ${{ github.sha }}
run: nix develop .#ci -c skopeo copy docker-archive:result docker://${REPO_OWNER}/${REPO_NAME}:${VERSION} --insecure-policy