Set fixed version of codesign + upgrade to docker v2
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
This commit is contained in:
4
.github/workflows/release.yaml
vendored
4
.github/workflows/release.yaml
vendored
@@ -64,6 +64,10 @@ jobs:
|
|||||||
username: ${{ github.actor }}
|
username: ${{ github.actor }}
|
||||||
password: ${{ secrets.GITHUB_TOKEN }}
|
password: ${{ secrets.GITHUB_TOKEN }}
|
||||||
|
|
||||||
|
- uses: sigstore/cosign-installer@053f9b74638557590800a301da1ba82351507e2c # v3.8.1
|
||||||
|
with:
|
||||||
|
cosign-release: "v3.0.4"
|
||||||
|
|
||||||
- name: Run GoReleaser
|
- name: Run GoReleaser
|
||||||
uses: goreleaser/goreleaser-action@e435ccd777264be153ace6237001ef4d979d3a7a # v6.4.0
|
uses: goreleaser/goreleaser-action@e435ccd777264be153ace6237001ef4d979d3a7a # v6.4.0
|
||||||
with:
|
with:
|
||||||
|
|||||||
@@ -78,17 +78,29 @@ signs:
|
|||||||
artifacts: checksum
|
artifacts: checksum
|
||||||
output: true
|
output: true
|
||||||
|
|
||||||
docker_manifests:
|
dockers_v2:
|
||||||
- name_template: "ghcr.io/getprobo/probo:{{ .Tag }}"
|
- images:
|
||||||
image_templates:
|
- "ghcr.io/getprobo/probo"
|
||||||
- "ghcr.io/getprobo/probo:{{ .Tag }}-amd64"
|
tags:
|
||||||
- "ghcr.io/getprobo/probo:{{ .Tag }}-arm64"
|
- "{{ .Tag }}"
|
||||||
skip_push: "{{ .IsSnapshot }}"
|
- latest
|
||||||
- name_template: "ghcr.io/getprobo/probo:latest"
|
dockerfile: Dockerfile
|
||||||
image_templates:
|
ids:
|
||||||
- "ghcr.io/getprobo/probo:latest-amd64"
|
- probod-docker
|
||||||
- "ghcr.io/getprobo/probo:latest-arm64"
|
extra_files:
|
||||||
skip_push: "{{ .IsSnapshot }}"
|
- entrypoint.sh
|
||||||
|
labels:
|
||||||
|
"org.opencontainers.image.title": "{{.ProjectName}}"
|
||||||
|
"org.opencontainers.image.description": "Probo compliance management platform"
|
||||||
|
"org.opencontainers.image.url": "https://github.com/getprobo/probo"
|
||||||
|
"org.opencontainers.image.source": "https://github.com/getprobo/probo"
|
||||||
|
"org.opencontainers.image.version": "{{.Version}}"
|
||||||
|
"org.opencontainers.image.created": '{{time "2006-01-02T15:04:05Z07:00"}}'
|
||||||
|
"org.opencontainers.image.revision": "{{.FullCommit}}"
|
||||||
|
"org.opencontainers.image.licenses": "MIT"
|
||||||
|
platforms:
|
||||||
|
- linux/amd64
|
||||||
|
- linux/arm64
|
||||||
|
|
||||||
docker_signs:
|
docker_signs:
|
||||||
- id: images
|
- id: images
|
||||||
@@ -120,54 +132,6 @@ docker_signs:
|
|||||||
cosign sign "${artifact}@${digest}" --yes
|
cosign sign "${artifact}@${digest}" --yes
|
||||||
fi
|
fi
|
||||||
|
|
||||||
dockers:
|
|
||||||
- image_templates:
|
|
||||||
- "ghcr.io/getprobo/probo:{{ .Tag }}-amd64"
|
|
||||||
- "ghcr.io/getprobo/probo:latest-amd64"
|
|
||||||
dockerfile: Dockerfile
|
|
||||||
use: buildx
|
|
||||||
build_flag_templates:
|
|
||||||
- "--platform=linux/amd64"
|
|
||||||
- "--label=org.opencontainers.image.title={{.ProjectName}}"
|
|
||||||
- "--label=org.opencontainers.image.description=Probo compliance management platform"
|
|
||||||
- "--label=org.opencontainers.image.url=https://github.com/getprobo/probo"
|
|
||||||
- "--label=org.opencontainers.image.source=https://github.com/getprobo/probo"
|
|
||||||
- "--label=org.opencontainers.image.version={{.Version}}"
|
|
||||||
- '--label=org.opencontainers.image.created={{time "2006-01-02T15:04:05Z07:00"}}'
|
|
||||||
- "--label=org.opencontainers.image.revision={{.FullCommit}}"
|
|
||||||
- "--label=org.opencontainers.image.licenses=MIT"
|
|
||||||
extra_files:
|
|
||||||
- entrypoint.sh
|
|
||||||
# Use the Docker-specific build with AMD64 filtering
|
|
||||||
ids:
|
|
||||||
- probod-docker
|
|
||||||
goos: linux
|
|
||||||
goarch: amd64
|
|
||||||
skip_push: "{{ .IsSnapshot }}"
|
|
||||||
- image_templates:
|
|
||||||
- "ghcr.io/getprobo/probo:{{ .Tag }}-arm64"
|
|
||||||
- "ghcr.io/getprobo/probo:latest-arm64"
|
|
||||||
dockerfile: Dockerfile
|
|
||||||
use: buildx
|
|
||||||
build_flag_templates:
|
|
||||||
- "--platform=linux/arm64"
|
|
||||||
- "--label=org.opencontainers.image.title={{.ProjectName}}"
|
|
||||||
- "--label=org.opencontainers.image.description=Probo compliance management platform"
|
|
||||||
- "--label=org.opencontainers.image.url=https://github.com/getprobo/probo"
|
|
||||||
- "--label=org.opencontainers.image.source=https://github.com/getprobo/probo"
|
|
||||||
- "--label=org.opencontainers.image.version={{.Version}}"
|
|
||||||
- '--label=org.opencontainers.image.created={{time "2006-01-02T15:04:05Z07:00"}}'
|
|
||||||
- "--label=org.opencontainers.image.revision={{.FullCommit}}"
|
|
||||||
- "--label=org.opencontainers.image.licenses=MIT"
|
|
||||||
extra_files:
|
|
||||||
- entrypoint.sh
|
|
||||||
# Use the Docker-specific build with ARM64 filtering
|
|
||||||
ids:
|
|
||||||
- probod-docker
|
|
||||||
goos: linux
|
|
||||||
goarch: arm64
|
|
||||||
skip_push: "{{ .IsSnapshot }}"
|
|
||||||
|
|
||||||
changelog:
|
changelog:
|
||||||
sort: asc
|
sort: asc
|
||||||
filters:
|
filters:
|
||||||
@@ -193,7 +157,3 @@ release:
|
|||||||
## Docker Images
|
## Docker Images
|
||||||
- `ghcr.io/getprobo/probo:{{ .Tag }}` (multi-arch: linux/amd64, linux/arm64)
|
- `ghcr.io/getprobo/probo:{{ .Tag }}` (multi-arch: linux/amd64, linux/arm64)
|
||||||
- `ghcr.io/getprobo/probo:latest` (multi-arch: linux/amd64, linux/arm64)
|
- `ghcr.io/getprobo/probo:latest` (multi-arch: linux/amd64, linux/arm64)
|
||||||
|
|
||||||
### Architecture-specific images
|
|
||||||
- `ghcr.io/getprobo/probo:{{ .Tag }}-amd64`
|
|
||||||
- `ghcr.io/getprobo/probo:{{ .Tag }}-arm64`
|
|
||||||
|
|||||||
@@ -11,7 +11,8 @@ RUN useradd -m probo && \
|
|||||||
apt-get install -y ca-certificates libcap2-bin && \
|
apt-get install -y ca-certificates libcap2-bin && \
|
||||||
rm -rf /var/lib/apt/lists/*
|
rm -rf /var/lib/apt/lists/*
|
||||||
|
|
||||||
COPY probod /usr/local/bin/probod
|
ARG TARGETPLATFORM
|
||||||
|
COPY $TARGETPLATFORM/probod /usr/local/bin/probod
|
||||||
COPY entrypoint.sh /usr/local/bin/entrypoint.sh
|
COPY entrypoint.sh /usr/local/bin/entrypoint.sh
|
||||||
|
|
||||||
RUN chmod +x /usr/local/bin/probod && \
|
RUN chmod +x /usr/local/bin/probod && \
|
||||||
|
|||||||
Reference in New Issue
Block a user