using ghcr.io

.github/workflows/build.yml → .github/workflows/build_and_push.yml

@@ -1,48 +1,52 @@
-name: build
+name: Create and publish a Docker image
 
 on:
   push:
     branches: ['main']
 
+env:
+  REGISTRY: ghcr.io
+
 jobs:
-  docker:
+  build-and-push-image:
     runs-on: ubuntu-latest
+    # Sets the permissions granted to the `GITHUB_TOKEN` for the actions in this job.
+    permissions:
+      contents: read
+      packages: write
+      attestations: write
+      id-token: write
     strategy:
       fail-fast: false
       matrix:
         include:
           - version: 3.6.4
-#          - version: 3.5.3
-#          - version: 3.4.6
-#          - version: 3.3.5
-    permissions:
-      contents: read
-      packages: write
     steps:
-      -
-        name: Checkout
+      - name: Checkout repository
         uses: actions/checkout@v4
-      -
-        name: Docker meta
+
+      - name: Set meta
         id: meta
         uses: docker/metadata-action@v5
         with:
-          images: easzlab/kubeasz
+          images: ${{ env.REGISTRY }}/easzlab/kubeasz
           tags: ${{ matrix.version }}
-      -
-        name: Set up QEMU
+
+      - name: Set up QEMU
         uses: docker/setup-qemu-action@v3
-      -
-        name: Set up Docker Buildx
+
+      - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
-      -
-        name: Login to DockerHub
+
+      - name: Login to the Container registry
         uses: docker/login-action@v3
         with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-      -
-        name: Build and push
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and push Docker image
+        id: push
         uses: docker/build-push-action@v5
         with:
           build-args: KUBEASZ_VER=${{ matrix.version }}

Dockerfile

@@ -4,7 +4,8 @@
 
 FROM easzlab/ansible:2.14.4-lite
 
-ARG KUBEASZ_VER=3.3.2
+# KUBEASZ_VER will be set by build-args
+#ARG KUBEASZ_VER=3.3.2
 
 ENV TZ="Asia/Shanghai"