Skip to content

Commit 39f3768

Browse files
lucky-lusalucky-lusa
authored
DCT for docker images (#23)
* chore: add dct signing to eps, sd and proxy
1 parent f156939 commit 39f3768

File tree

1 file changed

+94
-25
lines changed

1 file changed

+94
-25
lines changed

‎.github/workflows/build-and-push-docker-images.yml‎

Lines changed: 94 additions & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -20,30 +20,99 @@ jobs:
2020
run: |
2121
echo $VERSION
2222
echo ${{ env.VERSION }}
23-
- name: Build and push eps
24-
uses: docker/build-push-action@v1
23+
24+
- name: Login to DockerHub
25+
uses: docker/login-action@v1
2526
with:
26-
build_args: VERSION=${{ env.VERSION }}
27-
username: ${{ secrets.DOCKER_HUB_USER }}
28-
password: ${{ secrets.DOCKER_HUB_PW }}
29-
repository: inoeg/eps
30-
tag_with_ref: true
31-
dockerfile: ./docker/Eps.dockerfile
32-
- name: Build and push sd
33-
uses: docker/build-push-action@v1
34-
with:
35-
build_args: VERSION=${{ env.VERSION }}
36-
username: ${{ secrets.DOCKER_HUB_USER }}
37-
password: ${{ secrets.DOCKER_HUB_PW }}
38-
repository: inoeg/sd
39-
tag_with_ref: true
40-
dockerfile: ./docker/Sd.dockerfile
41-
- name: Build and push proxy
42-
uses: docker/build-push-action@v1
43-
with:
44-
build_args: VERSION=${{ env.VERSION }}
4527
username: ${{ secrets.DOCKER_HUB_USER }}
46-
password: ${{ secrets.DOCKER_HUB_PW }}
47-
repository: inoeg/proxy
48-
tag_with_ref: true
49-
dockerfile: ./docker/Proxy.dockerfile
28+
password: ${{ secrets.DOCKER_HUB_PW }}
29+
30+
- name: Create eps image tag
31+
id: meta_eps
32+
uses: docker/metadata-action@v3
33+
with:
34+
images: inoeg/eps
35+
- name: Build eps
36+
uses: docker/build-push-action@v2.9.0
37+
with:
38+
build-args: VERSION=${{ env.VERSION }}
39+
file: ./docker/Eps.dockerfile
40+
tags: ${{ steps.meta_eps.outputs.tags }}
41+
push: false
42+
load: true
43+
labels: |
44+
iris.eps.image.revision=${{ github.sha }}
45+
- name: Sign and push versioned eps image
46+
uses: sudo-bot/action-docker-sign@latest
47+
with:
48+
image-ref: ${{fromJSON(steps.meta_eps.outputs.json).tags[0]}}
49+
private-key-id: ${{ secrets.DOCKER_HUB_DCT_PRIVATE_KEY_IDENTIFIER }}
50+
private-key: ${{ secrets.DOCKER_HUB_DCT_PRIVATE_KEY }}
51+
private-key-passphrase: ${{ secrets.DOCKER_HUB_DCT_PASSPHRASE }}
52+
- name: Sign and push latest eps image
53+
uses: sudo-bot/action-docker-sign@latest
54+
with:
55+
image-ref: ${{fromJSON(steps.meta_eps.outputs.json).tags[1]}}
56+
private-key-id: ${{ secrets.DOCKER_HUB_DCT_PRIVATE_KEY_IDENTIFIER }}
57+
private-key: ${{ secrets.DOCKER_HUB_DCT_PRIVATE_KEY }}
58+
private-key-passphrase: ${{ secrets.DOCKER_HUB_DCT_PASSPHRASE }}
59+
60+
- name: Create sd image tag
61+
id: meta_sd
62+
uses: docker/metadata-action@v3
63+
with:
64+
images: inoeg/sd
65+
- name: Build sd
66+
uses: docker/build-push-action@v2.9.0
67+
with:
68+
build-args: VERSION=${{ env.VERSION }}
69+
file: ./docker/Sd.dockerfile
70+
tags: ${{ steps.meta_sd.outputs.tags }}
71+
push: false
72+
load: true
73+
labels: |
74+
iris.sd.image.revision=${{ github.sha }}
75+
- name: Sign and push sd versioned image
76+
uses: sudo-bot/action-docker-sign@latest
77+
with:
78+
image-ref: ${{fromJSON(steps.meta_sd.outputs.json).tags[0]}}
79+
private-key-id: ${{ secrets.DOCKER_HUB_DCT_PRIVATE_KEY_IDENTIFIER }}
80+
private-key: ${{ secrets.DOCKER_HUB_DCT_PRIVATE_KEY }}
81+
private-key-passphrase: ${{ secrets.DOCKER_HUB_DCT_PASSPHRASE }}
82+
- name: Sign and push sd latest image
83+
uses: sudo-bot/action-docker-sign@latest
84+
with:
85+
image-ref: ${{fromJSON(steps.meta_sd.outputs.json).tags[1]}}
86+
private-key-id: ${{ secrets.DOCKER_HUB_DCT_PRIVATE_KEY_IDENTIFIER }}
87+
private-key: ${{ secrets.DOCKER_HUB_DCT_PRIVATE_KEY }}
88+
private-key-passphrase: ${{ secrets.DOCKER_HUB_DCT_PASSPHRASE }}
89+
90+
- name: Create proxy image tag
91+
id: meta_proxy
92+
uses: docker/metadata-action@v3
93+
with:
94+
images: inoeg/proxy
95+
- name: Build proxy
96+
uses: docker/build-push-action@v2.9.0
97+
with:
98+
build-args: VERSION=${{ env.VERSION }}
99+
file: ./docker/Proxy.dockerfile
100+
tags: ${{ steps.meta_proxy.outputs.tags }}
101+
push: false
102+
load: true
103+
labels: |
104+
iris.proxy.image.revision=${{ github.sha }}
105+
- name: Sign and push proxy versioned image
106+
uses: sudo-bot/action-docker-sign@latest
107+
with:
108+
image-ref: ${{fromJSON(steps.meta_proxy.outputs.json).tags[0]}}
109+
private-key-id: ${{ secrets.DOCKER_HUB_DCT_PRIVATE_KEY_IDENTIFIER }}
110+
private-key: ${{ secrets.DOCKER_HUB_DCT_PRIVATE_KEY }}
111+
private-key-passphrase: ${{ secrets.DOCKER_HUB_DCT_PASSPHRASE }}
112+
- name: Sign and push proxy latest image
113+
uses: sudo-bot/action-docker-sign@latest
114+
with:
115+
image-ref: ${{fromJSON(steps.meta_proxy.outputs.json).tags[1]}}
116+
private-key-id: ${{ secrets.DOCKER_HUB_DCT_PRIVATE_KEY_IDENTIFIER }}
117+
private-key: ${{ secrets.DOCKER_HUB_DCT_PRIVATE_KEY }}
118+
private-key-passphrase: ${{ secrets.DOCKER_HUB_DCT_PASSPHRASE }}

0 commit comments

Comments
 (0)