mirror of
https://github.com/edgelesssys/constellation.git
synced 2024-10-01 01:36:09 -04:00
107 lines
3.6 KiB
YAML
107 lines
3.6 KiB
YAML
name: Build and Upload CoreOS
|
|
env:
|
|
REGISTRY: ghcr.io
|
|
AZ_CLI_VERSION: 2.37.0
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
coordinator-name:
|
|
description: Coordinator name
|
|
required: true
|
|
type: string
|
|
|
|
workflow_call:
|
|
inputs:
|
|
coordinator-name:
|
|
required: true
|
|
type: string
|
|
|
|
secrets:
|
|
CI_GITHUB_REPOSITORY:
|
|
required: true
|
|
AWS_ACCESS_KEY_ID:
|
|
required: true
|
|
AWS_SECRET_ACCESS_KEY:
|
|
required: true
|
|
AWS_DEFAULT_REGION:
|
|
required: true
|
|
BUCKET_NAME:
|
|
required: true
|
|
PUBLIC_BUCKET_NAME:
|
|
required: true
|
|
AZURE_CREDENTIALS:
|
|
required: true
|
|
|
|
jobs:
|
|
build-enclave:
|
|
name: "Build CoreOS using customized COSA"
|
|
runs-on: [self-hosted, linux, nested-virt]
|
|
permissions:
|
|
contents: read
|
|
packages: read
|
|
defaults:
|
|
run:
|
|
shell: bash
|
|
env:
|
|
working-directory: ${{ github.workspace }}/image
|
|
SHELL: /bin/bash
|
|
steps:
|
|
- name: Checkout
|
|
id: checkout
|
|
uses: actions/checkout@v2
|
|
with:
|
|
submodules: recursive
|
|
token: ${{ secrets.CI_GITHUB_REPOSITORY }}
|
|
|
|
- name: Log in to the Container registry
|
|
id: docker-login
|
|
uses: docker/login-action@v1
|
|
with:
|
|
registry: ${{ env.REGISTRY }}
|
|
username: ${{ github.actor }}
|
|
password: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
- name: "Install azure CLI"
|
|
run: |
|
|
curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash
|
|
sudo apt-get install -y --allow-downgrades "azure-cli=${AZ_CLI_VERSION}-1~$(lsb_release -sc)"
|
|
wget -q https://aka.ms/downloadazcopy-v10-linux -O azcopy.tar.gz
|
|
tar --strip-components 1 -xf azcopy.tar.gz
|
|
rm azcopy.tar.gz
|
|
echo "$(pwd)" >> $GITHUB_PATH
|
|
|
|
- uses: azure/login@v1
|
|
with:
|
|
creds: ${{ secrets.AZURE_CREDENTIALS }}
|
|
|
|
- name: Setup Go environment
|
|
uses: actions/setup-go@v2.2.0
|
|
with:
|
|
go-version: "1.18"
|
|
|
|
- name: Install dependencies
|
|
run: sudo apt-get update && sudo apt-get install -y pkg-config libcryptsetup12 libcryptsetup-dev
|
|
|
|
- name: "Compile disk-mapper"
|
|
run: |
|
|
mkdir -p ${{ github.workspace }}/build
|
|
GOCACHE=/home/github-actions-runner-user/.cache/go-build GOPATH=/home/github-actions-runner-user/go GOPRIVATE=github.com/edgelesssys GOMODCACHE=/home/github-actions-runner-user/.cache/go-mod go build -o ${{ github.workspace }}/build/disk-mapper -ldflags "-s -w"
|
|
working-directory: ${{ github.workspace }}/state/cmd
|
|
|
|
- name: "Store GH token to be mounted by cosa"
|
|
run: echo "machine github.com login api password ${{ secrets.CI_GITHUB_REPOSITORY }}" > /tmp/.netrc
|
|
|
|
- name: "Set image timestamp"
|
|
run: |
|
|
TIMESTAMP=$(date +%s)
|
|
echo "TIMESTAMP=${TIMESTAMP}" >> $GITHUB_ENV
|
|
echo "IMAGE_TIMESTAMP=constellation-coreos-${TIMESTAMP}" >> $GITHUB_ENV
|
|
echo "IMAGE_VERSION=0.0.${TIMESTAMP}" >> $GITHUB_ENV
|
|
|
|
- name: "Build and Upload"
|
|
run: >
|
|
make -j$(nproc) CONTAINER_ENGINE=docker NETRC=/tmp/.netrc GCP_IMAGE_NAME="${{ env.IMAGE_TIMESTAMP }}" AZURE_IMAGE_NAME="${{ env.IMAGE_TIMESTAMP }}"
|
|
AZURE_IMAGE_DEFINITION="constellation-coreos" AZURE_IMAGE_VERSION="${{env.IMAGE_VERSION }}" DOWNLOAD_COORDINATOR=y COORDINATOR_URL="https://${{ secrets.PUBLIC_BUCKET_NAME }}.s3.us-east-2.amazonaws.com/coordinator/${{ inputs.coordinator-name }}"
|
|
image-gcp image-azure upload-gcp upload-azure
|
|
working-directory: ${{ env.working-directory }}
|