CrazyMax
f410dbda88
dockerfile: dind target to build docker image for testing
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2025-04-08 11:48:33 +02:00
Sebastiaan van Stijn
c41ed7c98c
gha: build, cross: update to Ubuntu 24.04
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2025-03-06 23:14:54 +01:00
Paweł Gronowski
5e9ee1a849
gha: Adjust release branches
...
Adjust all workflows to also run on branches like `27.x`
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com >
2025-01-20 16:34:14 +01:00
CrazyMax
f8a973ba4e
ci: update bake-action to v6
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2025-01-08 13:43:59 +01:00
CrazyMax
16be996b6b
ci: use edge releases of buildx
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2024-11-28 14:38:01 +01:00
Sebastiaan van Stijn
91c448bfb5
gha: use "ubuntu-24.04" instead of "ubuntu-latest"
...
To be more explicit on what we're using.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-10-12 18:20:22 +02:00
Sebastiaan van Stijn
cfe0d2a131
gha: build (binary), build (dynbinary): limit to 20 minutes
...
Regular runs are under 5 minutes.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-10-12 17:34:33 +02:00
Sebastiaan van Stijn
c68c9aed8c
gha: restrict cross and bin-image to 20 minutes
...
We had a couple of runs where these jobs got stuck and github
actions didn't allow terminating them, so that they were only
terminated after 120 minutes.
These jobs usually complete in 5 minutes, so let's give them
a shorter timeout. 20 minutes should be enough (don't @ me).
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-10-11 23:04:24 +02:00
Sebastiaan van Stijn
6b7e2783d1
gha: add guardrails timeouts on all jobs
...
We had a few "runaway jobs" recently, where the job got stuck, and kept
running for 6 hours (in one case even 24 hours, probably due some github
outage). Some of those jobs could not be terminated.
While running these actions on public repositories doesn't cost us, it's
still not desirable to have jobs running for that long (as they can still
hold up the queue).
This patch adds a blanket "2 hours" time-limit to all jobs that didn't
have a limit set. We should look at tweaking those limits to actually
expected duration, but having a default at least is a start.
Also changed the position of some existing timeouts so that we have a
consistent order in which it's set; making it easier to spot locations
where no limit is defined.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-10-10 13:43:59 +02:00
Sebastiaan van Stijn
4f1d739de5
gha: govulncheck: make sure read permissions are set
...
If any permission is set, any permission not included in the list is
implicitly set to "none".
see https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
The govulncheck check need read permissions, which is not problematic
for public repositories, but may be needed when running in a private
fork (such as those used for security releases).
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-09-18 10:29:58 +02:00
CrazyMax
3cd28504de
govulncheck to report known vulnerabilities
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2024-08-09 10:56:09 +02:00
Sebastiaan van Stijn
2b5ffa0b63
gha: set permissions to read-only by default
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-07-29 14:53:38 +02:00
CrazyMax
4aa85cd159
ci: enable debug for buildkit container builder
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2024-06-07 15:30:22 +02:00
CrazyMax
aff003139c
ci: update workflow artifacts retention
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2024-03-27 10:57:01 +01:00
CrazyMax
9babc02283
ci: update to actions/download-artifact@v4 and actions/upload-artifact@v4
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2024-02-01 09:33:02 +01:00
Sebastiaan van Stijn
4a1839ef1d
gha: update to docker/bake-action@v4
...
- Node 20 as default runtime (requires Actions Runner v2.308.0 or later)
- full diff https://github.com/docker/bake-action/compare/v2.3.0...v4.1.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-01-31 10:50:17 +01:00
Sebastiaan van Stijn
b7fd571b0a
gha: update to docker/setup-buildx-action@v3
...
- Node 20 as default runtime (requires Actions Runner v2.308.0 or later)
- full diff: https://github.com/docker/setup-buildx-action/compare/v2.10.0...v3.0.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-01-31 10:50:16 +01:00
Sebastiaan van Stijn
0ffddc6bb8
gha: update to actions/checkout@v4
...
Release notes:
- https://github.com/actions/checkout/compare/v3.6.0...v4.1.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2024-01-31 10:46:14 +01:00
CrazyMax
1ea1d561c7
ci: do not run ci workflow on push tag events
...
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com >
2023-12-21 16:53:46 +01:00
CrazyMax
e8a82ed24d
Dockerfile: add "all" stage to build binaries and extra tools
...
We still need a stage that build binaries and extra tools as well for
docker-ce-packaging repo: ff110508ff/static/Makefile (L41-L57)
This could be removed if we create a package for each project
like it's done in docker-packaging repo: https://github.com/docker/packaging/tree/main/pkg
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2023-01-01 18:03:04 +01:00
CrazyMax
113e95ec02
ci: add extra steps to check artifacts
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2023-01-01 18:03:03 +01:00
CrazyMax
9bcf5bed05
bake: define DESTDIR
...
Keep the same output dir format in the bake definition
as the one used in make scripts.
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2023-01-01 18:03:03 +01:00
CrazyMax
8086f40123
Dockerfile: use TARGETPLATFORM to build Docker
...
Better support for cross compilation so we can fully rely
on `--platform` flag of buildx for a seamless integration.
This removes unnecessary extra cross logic in the Dockerfile,
DOCKER_CROSSPLATFORMS and CROSS vars and some hack scripts as well.
Non-sandboxed build invocation is still supported and dev stages
in the Dockerfile have been updated accordingly.
Bake definition and GitHub Actions workflows have been updated
accordingly as well.
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2023-01-01 18:03:01 +01:00
Bjorn Neergaard
6a02afa56f
ci(actions): bump outdated actions on Linux
...
Signed-off-by: Bjorn Neergaard <bneergaard@mirantis.com >
2022-11-10 11:44:57 -07:00
CrazyMax
6d59619d6e
ci: reduce cache throttling limits
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2022-09-21 22:41:45 +02:00
CrazyMax
5e50d002f1
ci: fix branch filter pattern
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2022-09-20 21:17:29 +02:00
CrazyMax
7602edfd06
ci: reusable dco workflow
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2022-09-10 15:10:51 +02:00
CrazyMax
a4d081cc17
ci: move buildkit tests to a dedicated workflow
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2022-08-29 22:52:34 +02:00
CrazyMax
8e8d9a3650
ci: fix broken workflow
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2022-08-26 04:30:04 +02:00
Sebastiaan van Stijn
6217f8001e
gha: temporarily pin BuildKit integration test version
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2022-08-25 21:32:05 +02:00
CrazyMax
e05f614267
vendor buildkit 8e2d9b9 (v0.10 branch)
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2022-08-05 14:40:46 +02:00
CrazyMax
a0a6b82a0d
ci: add concurrency check
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2022-06-02 15:21:05 +02:00
Sebastiaan van Stijn
80862d61d0
gha: temporarily override buildkit version for tests
...
This includes a single fix that only affects the tests, so using
a temporary override to update the tests to make CI pass, but keeping
the module version to the tagged release.
https://github.com/moby/buildkit/compare/v0.10.3..0da740f7d4f782a52b416a44f564ac37504b9ee1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2022-05-20 00:32:07 +02:00
CrazyMax
fd2143e0b0
use go-winres for cross to create Windows resources
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2022-04-14 19:52:35 +02:00
CrazyMax
170049225c
ci: add cross job in ci workflow
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2022-04-10 21:03:54 +02:00
CrazyMax
d730d550e2
ci: set shorter retention period for artifacts
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2022-04-10 21:01:24 +02:00
CrazyMax
c2dfb60e31
ci: update upload-artifact and download-artifact actions to v3
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2022-04-10 21:01:24 +02:00
CrazyMax
32f0561715
ci: buildkit integration test
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2022-03-23 16:07:04 +01:00
CrazyMax
da068165f6
ci: simple gha workflow to build docker daemon
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2022-03-14 06:33:50 +01:00