Files
cloudflare_balancer/.gitea/workflows/docker.yml
T

62 lines
2.5 KiB
YAML

name: Docker
on:
push:
branches:
- main
- master
tags:
- 'v*'
pull_request:
jobs:
build:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4
- name: Build image
run: docker build -t cloudflare-balancer:ci .
# Публикация в registry: не используйте `if: secrets.X != ''` — в Gitea/GitHub
# проверка «пустой ли секрет» в выражениях часто всегда ложна, шаги пропускаются.
# Секреты пробрасываем в env и проверяем в bash.
#
# Секреты: REGISTRY_URL, REGISTRY_USER, PACKAGE_TOKEN (или REGISTRY_PASSWORD)
- name: Login and push to Container Registry (optional)
env:
REGISTRY_URL: ${{ secrets.REGISTRY_URL }}
REGISTRY_USER: ${{ secrets.REGISTRY_USER }}
PACKAGE_TOKEN: ${{ secrets.PACKAGE_TOKEN }}
REGISTRY_PASSWORD: ${{ secrets.REGISTRY_PASSWORD }}
run: |
set -e
if [ "${GITHUB_EVENT_NAME:-}" = "pull_request" ]; then
echo "Pull request: push в registry не выполняется (только сборка)."
exit 0
fi
if [ -z "${REGISTRY_URL:-}" ] || [ -z "${REGISTRY_USER:-}" ]; then
echo "Пропуск registry: задайте секреты REGISTRY_URL и REGISTRY_USER."
exit 0
fi
PASS="${PACKAGE_TOKEN:-}"
if [ -z "$PASS" ]; then PASS="${REGISTRY_PASSWORD:-}"; fi
if [ -z "$PASS" ]; then
echo "Пропуск registry: задайте PACKAGE_TOKEN или REGISTRY_PASSWORD."
exit 0
fi
REG="${REGISTRY_URL#https://}"
REG="${REG#http://}"
REG="${REG%/}"
echo "$PASS" | docker login "$REG" -u "$REGISTRY_USER" --password-stdin
IMG="cloudflare-balancer"
OWNER_LOWER=$(echo "${{ github.repository_owner }}" | tr '[:upper:]' '[:lower:]')
TAG="${GITHUB_SHA:0:12}"
case "${GITHUB_REF}" in refs/tags/*) TAG="${GITHUB_REF#refs/tags/}" ;; esac
docker tag cloudflare-balancer:ci "${REG}/${OWNER_LOWER}/${IMG}:${TAG}"
docker tag cloudflare-balancer:ci "${REG}/${OWNER_LOWER}/${IMG}:latest"
docker push "${REG}/${OWNER_LOWER}/${IMG}:${TAG}"
docker push "${REG}/${OWNER_LOWER}/${IMG}:latest"
echo "Опубликовано: ${REG}/${OWNER_LOWER}/${IMG}:${TAG}"