Samba Container Image CI #1493
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Samba Container Image CI | |
| on: | |
| push: | |
| branches: [master] | |
| pull_request: | |
| branches: [master] | |
| schedule: | |
| - cron: '0 2 * * *' | |
| # Allow manually triggering a run in the github ui. | |
| # See: https://docs.github.com/en/actions/using-workflows/manually-running-a-workflow | |
| workflow_dispatch: {} | |
| env: | |
| CONTAINER_CMD: docker | |
| jobs: | |
| checks: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| # We need a newer version of shellcheck to avoid problems with the | |
| # relative imports. Our scripts work on v0.7.2 and up but not the | |
| # v0.7.0 preinstalled in the ubutnu image. We can force a local | |
| # install by expliclity setting SHELLCHECK to `$ALT_BIN/shellcheck` | |
| - name: Run static check tools | |
| run: make check SHELLCHECK=$PWD/.bin/shellcheck | |
| check-commits: | |
| runs-on: ubuntu-latest | |
| if: github.event_name == 'pull_request' | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| ref: ${{ github.event.pull_request.head.sha }} | |
| - name: Ensure branches | |
| run: git fetch | |
| - name: Lint git commit messages | |
| run: make check-gitlint | |
| build-server: | |
| # Reminder: the nightly-server images consume nightly samba rpm builds | |
| # it is not *just* an image that gets built nightly | |
| strategy: | |
| matrix: | |
| package_source: [default, nightly] | |
| os: [centos, fedora, opensuse] | |
| arch: [amd64] | |
| exclude: | |
| # there are no nightly packages for opensuse | |
| - package_source: nightly | |
| os: opensuse | |
| include: | |
| - package_source: devbuilds | |
| os: centos | |
| arch: amd64 | |
| runs-on: ubuntu-latest | |
| env: | |
| BUILDAH_FORMAT: oci | |
| IMG_TAG: ${{ matrix.package_source }}-${{ matrix.os }}-${{ matrix.arch }} | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Build the server image | |
| run: make KIND=server PACKAGE_SOURCE=${{ matrix.package_source }} OS_NAME=${{ matrix.os}} BUILD_ARCH=${{ matrix.arch}} build-image | |
| - name: Upload server image | |
| uses: ishworkh/container-image-artifact-upload@v1.0.0 | |
| with: | |
| image: "samba-server:${{ env.IMG_TAG }}" | |
| container_engine: ${{ env.CONTAINER_CMD }} | |
| retention_days: 1 | |
| build-ad-server: | |
| strategy: | |
| matrix: | |
| package_source: [default, nightly] | |
| os: [centos, fedora, opensuse] | |
| arch: [amd64] | |
| exclude: | |
| # there are no nightly packages for opensuse | |
| - package_source: nightly | |
| os: opensuse | |
| # the distro packages for centos do not include an ad-dc | |
| - package_source: default | |
| os: centos | |
| runs-on: ubuntu-latest | |
| env: | |
| BUILDAH_FORMAT: oci | |
| IMG_TAG: ${{ matrix.package_source }}-${{ matrix.os }}-${{ matrix.arch }} | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Build the ad server image | |
| run: make KIND=ad-server PACKAGE_SOURCE=${{ matrix.package_source }} OS_NAME=${{ matrix.os }} BUILD_ARCH=${{ matrix.arch }} build-image | |
| - name: Upload ad server image | |
| uses: ishworkh/container-image-artifact-upload@v1.0.0 | |
| with: | |
| image: "samba-ad-server:${{ env.IMG_TAG }}" | |
| container_engine: ${{ env.CONTAINER_CMD }} | |
| retention_days: 1 | |
| build-client: | |
| strategy: | |
| matrix: | |
| os: [centos, fedora, opensuse] | |
| arch: [amd64] | |
| runs-on: ubuntu-latest | |
| env: | |
| BUILDAH_FORMAT: oci | |
| IMG_TAG: default-${{ matrix.os }}-${{ matrix.arch }} | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: build the client image | |
| run: make KIND=client OS_NAME=${{ matrix.os }} BUILD_ARCH=${{ matrix.arch }} build-image | |
| # The client image is used as a base for the samba-toolbox build process. | |
| - name: Upload the client image | |
| uses: ishworkh/container-image-artifact-upload@v1.0.0 | |
| with: | |
| image: "samba-client:${{ env.IMG_TAG }}" | |
| container_engine: ${{ env.CONTAINER_CMD }} | |
| retention_days: 1 | |
| build-toolbox: | |
| strategy: | |
| matrix: | |
| os: [centos, fedora, opensuse] | |
| arch: [amd64] | |
| needs: build-client | |
| runs-on: ubuntu-latest | |
| env: | |
| BUILDAH_FORMAT: oci | |
| IMG_TAG: default-${{ matrix.os }}-${{ matrix.arch }} | |
| steps: | |
| - uses: actions/checkout@v4 | |
| # Download locally stored samba-client image to be used as base for building | |
| # samba-toolbox. | |
| - name: Download client image | |
| uses: ishworkh/container-image-artifact-download@v1.0.0 | |
| with: | |
| image: "samba-client:${{ env.IMG_TAG }}" | |
| container_engine: ${{ env.CONTAINER_CMD }} | |
| # Workaround: retag the image so that the FQIN image matches the name in | |
| # the toolbox containerfiles. | |
| - name: Apply OS-latest tag to image (for centos) | |
| run: ${{ env.CONTAINER_CMD }} tag samba-client:${{ env.IMG_TAG }} quay.io/samba.org/samba-client:${{ matrix.os }}-latest | |
| - name: Apply latest tag to image (for fedora) | |
| run: ${{ env.CONTAINER_CMD }} tag samba-client:${{ env.IMG_TAG }} quay.io/samba.org/samba-client:latest | |
| - name: Build the toolbox image | |
| run: make KIND=toolbox OS_NAME=${{ matrix.os }} BUILD_ARCH=${{ matrix.arch }} build-image | |
| # Upload the toolbox image for reference and/or image push | |
| - name: Upload the toolbox image | |
| uses: ishworkh/container-image-artifact-upload@v1.0.0 | |
| with: | |
| image: "samba-toolbox:${{ env.IMG_TAG }}" | |
| container_engine: ${{ env.CONTAINER_CMD }} | |
| retention_days: 1 | |
| test-server: | |
| strategy: | |
| matrix: | |
| package_source: [default, nightly] | |
| os: [centos, fedora, opensuse] | |
| arch: [amd64] | |
| exclude: | |
| # there are no nightly packages for opensuse | |
| - package_source: nightly | |
| os: opensuse | |
| include: | |
| - package_source: devbuilds | |
| os: centos | |
| arch: amd64 | |
| needs: build-server | |
| runs-on: ubuntu-latest | |
| env: | |
| BUILDAH_FORMAT: oci | |
| IMG_TAG: ${{ matrix.package_source }}-${{ matrix.os }}-${{ matrix.arch }} | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Download server image | |
| uses: ishworkh/container-image-artifact-download@v1.0.0 | |
| with: | |
| image: "samba-server:${{ env.IMG_TAG }}" | |
| container_engine: ${{ env.CONTAINER_CMD }} | |
| - name: Test the server image | |
| run: LOCAL_TAG=samba-server:${{ env.IMG_TAG }} tests/test-samba-container.sh | |
| test-ad-server-kubernetes: | |
| strategy: | |
| matrix: | |
| package_source: [default, nightly] | |
| os: [centos, fedora, opensuse] | |
| arch: [amd64] | |
| exclude: | |
| # there are no nightly packages for opensuse | |
| - package_source: nightly | |
| os: opensuse | |
| # the distro packages for centos do not include an ad-dc | |
| - package_source: default | |
| os: centos | |
| needs: | |
| - build-ad-server | |
| - build-server | |
| # need to explicitly use 20.04 to avoid problems with jq... | |
| runs-on: ubuntu-20.04 | |
| env: | |
| BUILDAH_FORMAT: oci | |
| IMG_TAG: ${{ matrix.package_source }}-${{ matrix.os }}-${{ matrix.arch }} | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: nolar/setup-k3d-k3s@v1 | |
| - name: get nodes | |
| run: kubectl get nodes | |
| - name: Download ad server image | |
| uses: ishworkh/container-image-artifact-download@v1.0.0 | |
| with: | |
| image: "samba-ad-server:${{ env.IMG_TAG }}" | |
| container_engine: ${{ env.CONTAINER_CMD }} | |
| - name: Download file server image | |
| uses: ishworkh/container-image-artifact-download@v1.0.0 | |
| with: | |
| image: "samba-server:${{ env.IMG_TAG }}" | |
| container_engine: ${{ env.CONTAINER_CMD }} | |
| - name: import images to k3d | |
| run: k3d image import samba-server:${{ env.IMG_TAG }} samba-ad-server:${{ env.IMG_TAG }} | |
| - name: run the ad-dc deployment test | |
| run: ./tests/test-samba-ad-server-kubernetes.sh | |
| push: | |
| # verify it passes the test jobs first | |
| needs: | |
| - build-client | |
| - build-toolbox | |
| - test-server | |
| - test-ad-server-kubernetes | |
| runs-on: ubuntu-latest | |
| env: | |
| REPO_BASE: quay.io/samba.org | |
| if: (github.event_name == 'push' || github.event_name == 'schedule') && github.repository == 'samba-in-kubernetes/samba-container' | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: log in to quay.io | |
| run: ${CONTAINER_CMD} login -u "${{ secrets.QUAY_USER }}" -p "${{ secrets.QUAY_PASS }}" quay.io | |
| # pull in already built images we plan on pushing | |
| # (server images) | |
| - name: Fetch server default-fedora-amd64 | |
| uses: ishworkh/container-image-artifact-download@v1.0.0 | |
| with: | |
| image: "samba-server:default-fedora-amd64" | |
| container_engine: ${{ env.CONTAINER_CMD }} | |
| - name: Fetch server nightly-fedora-amd64 | |
| uses: ishworkh/container-image-artifact-download@v1.0.0 | |
| with: | |
| image: "samba-server:nightly-fedora-amd64" | |
| container_engine: ${{ env.CONTAINER_CMD }} | |
| - name: Fetch server nightly-centos-amd64 | |
| uses: ishworkh/container-image-artifact-download@v1.0.0 | |
| with: | |
| image: "samba-server:nightly-centos-amd64" | |
| container_engine: ${{ env.CONTAINER_CMD }} | |
| - name: Fetch server devbuilds-centos-amd64 | |
| uses: ishworkh/container-image-artifact-download@v1.0.0 | |
| with: | |
| image: "samba-server:devbuilds-centos-amd64" | |
| container_engine: ${{ env.CONTAINER_CMD }} | |
| # (ad server images) | |
| - name: Fetch ad-server default-fedora-amd64 | |
| uses: ishworkh/container-image-artifact-download@v1.0.0 | |
| with: | |
| image: "samba-ad-server:default-fedora-amd64" | |
| container_engine: ${{ env.CONTAINER_CMD }} | |
| - name: Fetch ad-server nightly-fedora-amd64 | |
| uses: ishworkh/container-image-artifact-download@v1.0.0 | |
| with: | |
| image: "samba-ad-server:nightly-fedora-amd64" | |
| container_engine: ${{ env.CONTAINER_CMD }} | |
| # (client images) | |
| - name: Fetch client default-fedora-amd64 | |
| uses: ishworkh/container-image-artifact-download@v1.0.0 | |
| with: | |
| image: "samba-client:default-fedora-amd64" | |
| container_engine: ${{ env.CONTAINER_CMD }} | |
| # (toolbox images) | |
| - name: Fetch toolbox default-fedora-amd64 | |
| uses: ishworkh/container-image-artifact-download@v1.0.0 | |
| with: | |
| image: "samba-toolbox:default-fedora-amd64" | |
| container_engine: ${{ env.CONTAINER_CMD }} | |
| # reapply missing tags | |
| - name: Retag images | |
| run: > | |
| ./hack/build-image | |
| --retag | |
| --container-engine=${CONTAINER_CMD} | |
| --repo-base=${REPO_BASE} | |
| --no-distro-qualified | |
| -i samba-server:default-fedora-amd64 | |
| -i samba-server:nightly-fedora-amd64 | |
| -i samba-server:nightly-centos-amd64 | |
| -i samba-server:devbuilds-centos-amd64 | |
| -i samba-ad-server:default-fedora-amd64 | |
| -i samba-ad-server:nightly-fedora-amd64 | |
| -i samba-client:default-fedora-amd64 | |
| -i samba-toolbox:default-fedora-amd64 | |
| - name: Push images | |
| run: > | |
| ./hack/build-image | |
| --push | |
| --container-engine=${CONTAINER_CMD} | |
| --verbose | |
| --push-state=exists | |
| --push-selected-tags=mixed | |
| -i ${REPO_BASE}/samba-server:default-fedora-amd64 | |
| -i ${REPO_BASE}/samba-server:nightly-fedora-amd64 | |
| -i ${REPO_BASE}/samba-server:nightly-centos-amd64 | |
| -i ${REPO_BASE}/samba-server:devbuilds-centos-amd64 | |
| -i ${REPO_BASE}/samba-ad-server:default-fedora-amd64 | |
| -i ${REPO_BASE}/samba-ad-server:nightly-fedora-amd64 | |
| -i ${REPO_BASE}/samba-client:default-fedora-amd64 | |
| -i ${REPO_BASE}/samba-toolbox:default-fedora-amd64 |