mirror of
https://github.com/aevea/action-kaniko.git
synced 2025-04-20 00:58:15 +02:00
ff9e1ae761
Fixing few issues with digest: 1. Multi-stage dockerfiles override /usr/local/lib, downloading jq and reg to /kaniko instead 2. Github registry doesn't support digest yet, downloading manifest and calculating the digest manually 3. Digest was fetched for the current tag, which not yet exist. Fetching digest for the latest tag instead
96 lines
3 KiB
Bash
Executable file
96 lines
3 KiB
Bash
Executable file
#!/busybox/sh
|
|
set -e pipefail
|
|
|
|
export REGISTRY=${INPUT_REGISTRY:-"docker.io"}
|
|
export IMAGE=${INPUT_IMAGE}
|
|
export BRANCH=$(echo ${GITHUB_REF} | sed -E "s/refs\/(heads|tags)\///g" | sed -e "s/\//-/g")
|
|
export TAG=${INPUT_TAG:-$([ "$BRANCH" == "master" ] && echo latest || echo $BRANCH)}
|
|
export TAG=${TAG:-"latest"}
|
|
export TAG=${TAG#$INPUT_STRIP_TAG_PREFIX}
|
|
export USERNAME=${INPUT_USERNAME:-$GITHUB_ACTOR}
|
|
export PASSWORD=${INPUT_PASSWORD:-$GITHUB_TOKEN}
|
|
export REPOSITORY=$IMAGE
|
|
export IMAGE=$IMAGE:$TAG
|
|
|
|
function ensure() {
|
|
if [ -z "${1}" ]; then
|
|
echo >&2 "Unable to find the ${2} variable. Did you set with.${2}?"
|
|
exit 1
|
|
fi
|
|
}
|
|
|
|
ensure "${REGISTRY}" "registry"
|
|
ensure "${USERNAME}" "username"
|
|
ensure "${PASSWORD}" "password"
|
|
ensure "${IMAGE}" "image"
|
|
ensure "${TAG}" "tag"
|
|
|
|
if [ "$REGISTRY" == "docker.pkg.github.com" ]; then
|
|
IMAGE_NAMESPACE="$(echo $GITHUB_REPOSITORY | tr '[:upper:]' '[:lower:]')"
|
|
export IMAGE="$IMAGE_NAMESPACE/$IMAGE"
|
|
export REPOSITORY="$IMAGE_NAMESPACE/$REPOSITORY"
|
|
|
|
if [ ! -z $INPUT_CACHE_REGISTRY ]; then
|
|
export INPUT_CACHE_REGISTRY="$REGISTRY/$IMAGE_NAMESPACE/$INPUT_CACHE_REGISTRY"
|
|
fi
|
|
fi
|
|
|
|
if [ "$REGISTRY" == "docker.io" ]; then
|
|
export REGISTRY="index.${REGISTRY}/v1/"
|
|
else
|
|
export IMAGE="$REGISTRY/$IMAGE"
|
|
fi
|
|
|
|
export CACHE=${INPUT_CACHE:+"--cache=true"}
|
|
export CACHE=$CACHE${INPUT_CACHE_TTL:+" --cache-ttl=$INPUT_CACHE_TTL"}
|
|
export CACHE=$CACHE${INPUT_CACHE_REGISTRY:+" --cache-repo=$INPUT_CACHE_REGISTRY"}
|
|
export CACHE=$CACHE${INPUT_CACHE_DIRECTORY:+" --cache-dir=$INPUT_CACHE_DIRECTORY"}
|
|
export CONTEXT="--context $GITHUB_WORKSPACE"
|
|
export DOCKERFILE="--dockerfile ${INPUT_BUILD_FILE:-Dockerfile}"
|
|
|
|
if [ ! -z $INPUT_SKIP_UNCHANGED_DIGEST ]; then
|
|
export DESTINATION="--no-push --digest-file digest"
|
|
else
|
|
export DESTINATION="--destination $IMAGE"
|
|
fi
|
|
|
|
export ARGS="$CACHE $CONTEXT $DOCKERFILE $DESTINATION $INPUT_EXTRA_ARGS"
|
|
|
|
cat <<EOF >/kaniko/.docker/config.json
|
|
{
|
|
"auths": {
|
|
"https://${REGISTRY}": {
|
|
"username": "${USERNAME}",
|
|
"password": "${PASSWORD}"
|
|
}
|
|
}
|
|
}
|
|
EOF
|
|
|
|
/kaniko/executor --reproducible $ARGS
|
|
|
|
if [ ! -z $INPUT_SKIP_UNCHANGED_DIGEST ]; then
|
|
export DIGEST=$(cat digest)
|
|
|
|
if [ "$REGISTRY" == "docker.pkg.github.com" ]; then
|
|
wget -q -O manifest --header "Authorization: Basic $(echo -n $USERNAME:$PASSWORD | base64)" https://docker.pkg.github.com/v2/$REPOSITORY/manifests/latest || true
|
|
export REMOTE="sha256:$(cat manifest | sha256sum | awk '{ print $1 }')"
|
|
else
|
|
export REMOTE=$(reg digest -u $USERNAME -p $PASSWORD $REGISTRY/$REPOSITORY | tail -1)
|
|
fi
|
|
|
|
if [ "$DIGEST" == "$REMOTE" ]; then
|
|
echo "Digest hasn't changed, skipping, $DIGEST"
|
|
echo "Done 🎉️"
|
|
exit 0
|
|
fi
|
|
|
|
export DESTINATION="--destination $IMAGE"
|
|
export ARGS="$CACHE $CONTEXT $DOCKERFILE $DESTINATION $INPUT_EXTRA_ARGS"
|
|
|
|
echo "Pushing image..."
|
|
|
|
/kaniko/executor --reproducible $ARGS >/dev/null 2>&1
|
|
|
|
echo "Done 🎉️"
|
|
fi
|