diff --git a/.github/workflows/publish-stable.yml b/.github/workflows/publish-stable.yml index 91151b2..d41611b 100644 --- a/.github/workflows/publish-stable.yml +++ b/.github/workflows/publish-stable.yml @@ -1,40 +1,57 @@ -name: Publish +name: Publish Stable on: - release: - types: [published] + workflow_dispatch: + +env: + REGISTRY: ghcr.io + NAME: koreanbots/core jobs: image-push: - name: Push stable docker image + name: Push docker image runs-on: ubuntu-latest + permissions: + contents: read + packages: write steps: - uses: actions/checkout@v2 with: submodules: true - - uses: docker/setup-buildx-action@v1 - name: Parse image tag run: | parsed=${GITHUB_REF#refs/*/} echo "RELEASE_TAG=${parsed//\//-}" >> $GITHUB_ENV - - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@v1 + - name: Set up Docker Buildx + uses: docker/setup-buildx-action@v2 + - name: Log in to the Container registry + uses: docker/login-action@v2 with: - aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} - aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} - aws-region: ap-northeast-2 - - name: Login to Amazon ECR - id: login-ecr - uses: aws-actions/amazon-ecr-login@v1 + registry: ${{ env.REGISTRY }} + username: ${{ github.actor }} + password: ${{ secrets.GITHUB_TOKEN }} + - name: Get metadata for Docker + uses: docker/metadata-action@v4 + id: meta + with: + images: ${{ env.REGISTRY }}/${{ env.NAME }} + tags: | + type=raw,value=latest,priority=100 + type=raw,value=stable,priority=200 + type=sha,prefix=,suffix=,format=short,priority=300 + type=schedule,pattern={{date 'YYYYMMDD-hhmmss' tz='Asia/Seoul'}} - name: Build and push - env: - SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }} - NEXT_PUBLIC_SENTRY_DSN: ${{ secrets.SENTRY_DSN }} - SENTRY_DSN: ${{ secrets.SENTRY_DSN }} - ECR_REGISTRY: ${{ steps.login-ecr.outputs.registry }} - IMAGE_TAG: ${{ github.sha }} - NEXT_PUBLIC_HCAPTCHA_SITEKEY: ${{ secrets.NEXT_PUBLIC_HCAPTCHA_SITEKEY }} - run: | - printf 'defaults.url=https://sentry.io/\ndefaults.org=koreanbots\ndefaults.project=client' > sentry.properties - docker build --build-arg NEXT_PUBLIC_HCAPTCHA_SITEKEY=$NEXT_PUBLIC_HCAPTCHA_SITEKEY --build-arg SENTRY_AUTH_TOKEN=$SENTRY_AUTH_TOKEN --build-arg NEXT_PUBLIC_SENTRY_DSN=$NEXT_PUBLIC_SENTRY_DSN --build-arg SENTRY_DSN=$SENTRY_DSN --build-arg SOURCE_COMMIT=${{ env.GITHUB_SHA }} --build-arg TAG=${{ env.RELEASE_TAG }} -t koreanlist . - docker tag koreanlist:latest ${{ secrets.AWS_IMAGE_URL }}:stable - docker push ${{ secrets.AWS_IMAGE_URL }} --all-tags \ No newline at end of file + uses: docker/build-push-action@v4 + with: + context: . + push: true + tags: ${{ steps.meta.outputs.tags }} + labels: ${{ steps.meta.outputs.labels }} + cache-from: type=gha + cache-to: type=gha,mode=max + build-args: | + SENTRY_AUTH_TOKEN=${{ secrets.SENTRY_AUTH_TOKEN }} + NEXT_PUBLIC_SENTRY_DSN=${{ secrets.SENTRY_DSN }} + SENTRY_DSN=${{ secrets.SENTRY_DSN }} + NEXT_PUBLIC_HCAPTCHA_SITEKEY=${{ secrets.NEXT_PUBLIC_HCAPTCHA_SITEKEY }} + SOURCE_COMMIT=${{ github.sha }} + TAG=${{ env.RELEASE_TAG }} \ No newline at end of file diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index a8bbcdb..470de38 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -1,41 +1,56 @@ name: Publish on: - push: - branches: [master] + workflow_dispatch: + +env: + REGISTRY: ghcr.io + NAME: koreanbots/core jobs: image-push: name: Push docker image runs-on: ubuntu-latest + permissions: + contents: read + packages: write steps: - uses: actions/checkout@v2 with: submodules: true - - uses: docker/setup-buildx-action@v1 - name: Parse image tag run: | parsed=${GITHUB_REF#refs/*/} echo "RELEASE_TAG=${parsed//\//-}" >> $GITHUB_ENV - - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@v1 + - name: Set up Docker Buildx + uses: docker/setup-buildx-action@v2 + - name: Log in to the Container registry + uses: docker/login-action@v2 with: - aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} - aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} - aws-region: ap-northeast-2 - - name: Login to Amazon ECR - id: login-ecr - uses: aws-actions/amazon-ecr-login@v1 + registry: ${{ env.REGISTRY }} + username: ${{ github.actor }} + password: ${{ secrets.GITHUB_TOKEN }} + - name: Get metadata for Docker + uses: docker/metadata-action@v4 + id: meta + with: + images: ${{ env.REGISTRY }}/${{ env.NAME }} + tags: | + type=raw,value=latest,priority=100 + type=sha,prefix=,suffix=,format=short,priority=300 + type=schedule,pattern={{date 'YYYYMMDD-hhmmss' tz='Asia/Seoul'}} - name: Build and push - env: - SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }} - NEXT_PUBLIC_SENTRY_DSN: ${{ secrets.SENTRY_DSN }} - SENTRY_DSN: ${{ secrets.SENTRY_DSN }} - ECR_REGISTRY: ${{ steps.login-ecr.outputs.registry }} - IMAGE_TAG: ${{ github.sha }} - NEXT_PUBLIC_HCAPTCHA_SITEKEY: ${{ secrets.NEXT_PUBLIC_HCAPTCHA_SITEKEY }} - run: | - printf 'defaults.url=https://sentry.io/\ndefaults.org=koreanbots\ndefaults.project=client' > sentry.properties - docker build --build-arg NEXT_PUBLIC_HCAPTCHA_SITEKEY=$NEXT_PUBLIC_HCAPTCHA_SITEKEY --build-arg SENTRY_AUTH_TOKEN=$SENTRY_AUTH_TOKEN --build-arg NEXT_PUBLIC_SENTRY_DSN=$NEXT_PUBLIC_SENTRY_DSN --build-arg SENTRY_DSN=$SENTRY_DSN --build-arg SOURCE_COMMIT=${{ env.GITHUB_SHA }} --build-arg TAG=${{ env.RELEASE_TAG }} -t koreanlist . - docker tag koreanlist:latest ${{ secrets.AWS_IMAGE_URL }}:latest - docker tag koreanlist:latest ${{ secrets.AWS_IMAGE_URL }}:${{ env.RELEASE_TAG == 'master' && 'nightly' || env.RELEASE_TAG }} - docker push ${{ secrets.AWS_IMAGE_URL }} --all-tags \ No newline at end of file + uses: docker/build-push-action@v4 + with: + context: . + push: true + tags: ${{ steps.meta.outputs.tags }} + labels: ${{ steps.meta.outputs.labels }} + cache-from: type=gha + cache-to: type=gha,mode=max + build-args: | + SENTRY_AUTH_TOKEN=${{ secrets.SENTRY_AUTH_TOKEN }} + NEXT_PUBLIC_SENTRY_DSN=${{ secrets.SENTRY_DSN }} + SENTRY_DSN=${{ secrets.SENTRY_DSN }} + NEXT_PUBLIC_HCAPTCHA_SITEKEY=${{ secrets.NEXT_PUBLIC_HCAPTCHA_SITEKEY }} + SOURCE_COMMIT=${{ github.sha }} + TAG=${{ env.RELEASE_TAG }} \ No newline at end of file