Merge pull request #42 from jumpserver/dev

v4.0.0

Author: baijiangjie

.github/workflows/jms-build-test.yml

@@ -1,35 +1,41 @@
 name: "Run Build Test"
 on:
   push:
-    branches:
-      - pr@*
-      - repr@*
+    paths:
+      - 'Dockerfile'
+      - 'Dockerfile*'
+      - 'requirements.txt'
 
 jobs:
   build:
     runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        component: [applets]
+        version: [v4]
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
+    - uses: docker/setup-buildx-action@v3
 
-    - uses: docker/setup-qemu-action@v2
-
-    - uses: docker/setup-buildx-action@v2
+    - name: Login to GitHub Container Registry
+      uses: docker/login-action@v3
+      with:
+        registry: ghcr.io
+        username: ${{ github.repository_owner }}
+        password: ${{ secrets.GITHUB_TOKEN }}
 
-    - uses: docker/build-push-action@v3
+    - name: Build Image
+      uses: docker/build-push-action@v5
       with:
         context: .
-        push: false
-        tags: jumpserver/applets:test
+        push: true
+        file: Dockerfile
+        tags: ghcr.io/jumpserver/${{ matrix.component }}:${{ matrix.version }}
+        platforms: linux/amd64
         build-args: |
+          VERSION=${{ matrix.version }}
           APT_MIRROR=http://deb.debian.org
           PIP_MIRROR=https://pypi.org/simple
-        file: Dockerfile
+        outputs: type=image,oci-mediatypes=true,compression=zstd,compression-level=3,force-compression=true
         cache-from: type=gha
         cache-to: type=gha,mode=max
-
-    - uses: LouisBrunner/checks-action@v1.5.0
-      if: always()
-      with:
-        token: ${{ secrets.GITHUB_TOKEN }}
-        name: Check Build
-        conclusion: ${{ job.status }}

Dockerfile

@@ -1,28 +1,35 @@
 FROM python:3.11-slim-bullseye as stage-build
 ARG TARGETARCH
-ARG PIP_MIRROR=https://pypi.tuna.tsinghua.edu.cn/simple
-ARG APT_MIRROR=http://mirrors.ustc.edu.cn
 
-RUN --mount=type=cache,target=/var/cache/apt,sharing=locked,id=applets \
-    sed -i "s@http://.*.debian.org@${APT_MIRROR}@g" /etc/apt/sources.list \
-    && rm -f /etc/cron.daily/apt-compat \
-    && ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime \
+ARG DEPENDENCIES="            \
+        ca-certificates       \
+        curl                  \
+        wget                  \
+        zip"
+
+ARG APT_MIRROR=http://mirrors.ustc.edu.cn
+RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
+    --mount=type=cache,target=/var/lib/apt,sharing=locked \
+    set -ex \
+    && rm -f /etc/apt/apt.conf.d/docker-clean \
+    && echo 'Binary::apt::APT::Keep-Downloaded-Packages "true";' >/etc/apt/apt.conf.d/keep-cache \
+    && sed -i "s@http://.*.debian.org@${APT_MIRROR}@g" /etc/apt/sources.list \
     && apt-get update \
-    && apt-get install -y --no-install-recommends wget zip \
-    && echo "no" | dpkg-reconfigure dash \
-    && rm -rf /var/lib/apt/lists/*
+    && apt-get -y install --no-install-recommends ${DEPENDENCIES} \
+    && echo "no" | dpkg-reconfigure dash
 
 WORKDIR /opt/applets
-COPY requirements.txt requirements.txt
 
-RUN --mount=type=cache,target=/root/.cache/pip \
+ARG PIP_MIRROR=https://pypi.tuna.tsinghua.edu.cn/simple
+RUN --mount=type=cache,target=/root/.cache,sharing=locked,id=applets \
+    --mount=type=bind,source=requirements.txt,target=requirements.txt \
     set -ex \
     && mkdir pip_packages build \
     && pip config set global.index-url ${PIP_MIRROR} \
-    && pip download --only-binary=:all: \
-    -d pip_packages \
-    --platform win_amd64 \
-    --python-version 3.11.6 --abi cp311 -r requirements.txt -i${PIP_MIRROR} \
+    && pip download \
+          --only-binary=:all: --platform win_amd64 \
+          --python-version 3.11.6 --abi cp311 \
+          -d pip_packages -r requirements.txt -i${PIP_MIRROR} \
     && cp requirements.txt pip_packages \
     && zip -r pip_packages.zip pip_packages \
     && mv pip_packages.zip build