Update build_latest_release_multi.yml

flomesh-io · May 23, 2024 · d0dcf1c · d0dcf1c
1 parent 9118973
commit d0dcf1c
Showing 1 changed file with 13 additions and 84 deletions.
diff --git a/.github/workflows/build_latest_release_multi.yml b/.github/workflows/build_latest_release_multi.yml
@@ -1,12 +1,6 @@
 name: build_latest_release_multi_images
 on:
-  push:
-    tags:
-      - '*'
-env:
-  REGISTRY_USER: ${{ github.actor }}
-  REGISTRY_PASSWORD: ${{ github.token }}
-  IMAGE_REGISTRY: ghcr.io/${{ github.repository_owner }}
+  workflow_dispatch:
 
 jobs:
   build_multi_latest_release_tag:
@@ -22,26 +16,14 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@v3
-        with:
-          tag_name: ${{ github.ref }}
-      - name: Log in to ghcr.io
-        uses: redhat-actions/podman-login@v1
-        with:
-          username: ${{ env.REGISTRY_USER }}
-          password: ${{ env.REGISTRY_PASSWORD }}
-          registry: ${{ env.IMAGE_REGISTRY }}
       - name: "login docker hub"
         run: |
           podman login -u ${{secrets.DOCKER_HUB_USER}} -p ${{secrets.DOCKER_HUB_TOKEN}} docker.io
           docker login -u ${{secrets.DOCKER_HUB_USER}} -p ${{secrets.DOCKER_HUB_TOKEN}}
-      - name: "login quay.io"
+      - name: 'install dev deps'
         run: |
-          podman login -u ${{secrets.QUAY_USER}} -p ${{secrets.QUAY_TOKEN}} quay.io
-          docker login -u ${{secrets.QUAY_USER}} -p ${{secrets.QUAY_TOKEN}} quay.io
-      - run: |
           sudo apt-get update
           sudo apt-get -y install buildah less git make podman qemu qemu-user-static clamav clamav-freshclam
-        name: 'install dev deps'
       - name: Sets env vars
         run: |
           release_tag_redirect=$(curl -s https://github.com/curl/curl/releases/latest -w'%{redirect_url}\n' -o /dev/null)
@@ -50,69 +32,16 @@ jobs:
           rel=${latest_release_ref:5}
           release_image_tag="${rel//_/.}"
           echo "REL=$release_image_tag" >> $GITHUB_ENV
-      - run: buildah unshare make branch_or_ref=$TAG_REF release_tag=$REL multibuild
-        name: 'build multi image'
-      - run: buildah unshare make dist_name=localhost/curl-multi release_tag=$REL test
-        name: 'test image'
-      - run: make image_name=localhost/curl-multi:${REL} scan
-        name: 'security scan image'
-      - run: |
-          buildah manifest push --format v2s2 --all curl-multi:$REL "docker://ghcr.io/curl/curl-container/curl-multi:${REL}"
-          buildah manifest push --format v2s2 --all curl-base-multi:$REL "docker://ghcr.io/curl/curl-container/curl-base-multi:${REL}"
-        name: 'push images to github registry'
-      - name: Install Cosign
-        uses: sigstore/cosign-installer@main
-      - name: Write signing key to disk (only needed for `cosign sign --key`)
-        run: echo "${{ secrets.COSIGN_PRIVATE_KEY }}" > cosign.key
-      - name: Sign images with sigstore key
-        run: |
-          cosign sign -y --key cosign.key ghcr.io/curl/curl-container/curl-multi:$REL
-          cosign sign -y --key cosign.key ghcr.io/curl/curl-container/curl-base-multi:$REL
-        env:
-          COSIGN_PASSWORD: ${{secrets.COSIGN_PASSWORD}}
-      - name: Write public key to disk
-        run: echo "${{ secrets.COSIGN_PUBLIC_KEY }}" > cosign.pub
-      - name: Verify image with public key
-        run: |
-          cosign verify --key cosign.pub ghcr.io/curl/curl-container/curl-multi:$REL
-          cosign verify --key cosign.pub ghcr.io/curl/curl-container/curl-base-multi:$REL
+      - name: 'build multi image'
+        run: buildah unshare make branch_or_ref=$TAG_REF release_tag=$REL multibuild
+      - name: 'test image'
+        run: buildah unshare make dist_name=localhost/curl-multi release_tag=$REL test
+      - name: 'security scan image'
+        run: make image_name=localhost/curl-multi:${REL} scan
       - name: 'push release to docker hub'
         run: |
-          buildah manifest push --format v2s2 --all localhost/curl-multi:$REL "docker://docker.io/curlimages/curl:${REL}"
-          buildah manifest push --format v2s2 --all localhost/curl-multi:$REL "docker://docker.io/curlimages/curl:latest"
-          buildah manifest push --format v2s2 --all localhost/curl-base-multi:$REL "docker://docker.io/curlimages/curl-base:${REL}"
-          buildah manifest push --format v2s2 --all localhost/curl-base-multi:$REL "docker://docker.io/curlimages/curl-base:latest"
-      - name: Sign images with a sigstore key
-        run: |
-          cosign sign -y --key cosign.key docker.io/curlimages/curl:$REL
-          cosign sign -y --key cosign.key docker.io/curlimages/curl:latest
-          cosign sign -y --key cosign.key docker.io/curlimages/curl-base:$REL
-          cosign sign -y --key cosign.key docker.io/curlimages/curl-base:latest
-        env:
-          COSIGN_PASSWORD: ${{secrets.COSIGN_PASSWORD}}
-      - name: Verify image
-        run: |
-          cosign verify --key cosign.pub docker.io/curlimages/curl:$REL
-          cosign verify --key cosign.pub docker.io/curlimages/curl:latest
-          cosign verify --key cosign.pub docker.io/curlimages/curl-base:$REL
-          cosign verify --key cosign.pub docker.io/curlimages/curl-base:latest
-      - name: 'push release to quay.io'
-        run: |
-          buildah manifest push --format v2s2 --all localhost/curl-multi:$REL "docker://quay.io/curl/curl:${REL}"
-          buildah manifest push --format v2s2 --all localhost/curl-multi:$REL "docker://quay.io/curl/curl:latest"
-          buildah manifest push --format v2s2 --all localhost/curl-base-multi:$REL "docker://quay.io/curl/curl-base:${REL}"
-          buildah manifest push --format v2s2 --all localhost/curl-base-multi:$REL "docker://quay.io/curl/curl-base:latest"
-      - name: Sign images with a sigstore key
-        run: |
-          cosign sign -y --key cosign.key quay.io/curl/curl:$REL
-          cosign sign -y --key cosign.key quay.io/curl/curl:latest
-          cosign sign -y --key cosign.key quay.io/curl/curl-base:$REL
-          cosign sign -y --key cosign.key quay.io/curl/curl-base:latest
-        env:
-          COSIGN_PASSWORD: ${{secrets.COSIGN_PASSWORD}}
-      - name: Verify image
-        run: |
-          cosign verify --key cosign.pub quay.io/curl/curl:$REL
-          cosign verify --key cosign.pub quay.io/curl/curl:latest
-          cosign verify --key cosign.pub quay.io/curl/curl-base:$REL
-          cosign verify --key cosign.pub quay.io/curl/curl-base:latest
+          buildah manifest push --format v2s2 --all localhost/curl-multi:$REL "docker://docker.io/flomesh/curl:${REL}"
+          buildah manifest push --format v2s2 --all localhost/curl-multi:$REL "docker://docker.io/flomesh/curl:latest"
+          buildah manifest push --format v2s2 --all localhost/curl-base-multi:$REL "docker://docker.io/flomesh/curl-base:${REL}"
+          buildah manifest push --format v2s2 --all localhost/curl-base-multi:$REL "docker://docker.io/flomesh/curl-base:latest"
+