config/.github/workflows/checks.yml at main · marinatedconcrete/config · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
---
name: Run checks
on:
  push:

env:
  DEVCONTAINER_BASE_TAG: candidate-${{ github.sha }}

jobs:
  build:
    permissions:
      contents: read
      packages: write
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Repo
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - name: Set up Docker
        uses: docker/setup-docker-action@77e84dbf09b47d1e29270283c22f16145aa85ca1 # v5
        with:
          daemon-config: |
            {
              "features": {
                "containerd-snapshotter": true
              }
            }
      - name: Login to GitHub Container Registry
        uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4
        with:
          registry: ghcr.io
          username: ${{ github.repository_owner }}
          password: ${{ secrets.GITHUB_TOKEN }}
      - name: Build Candidate Base Image
        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
        with:
          context: images/devcontainer-base
          file: images/devcontainer-base/Containerfile
          load: true
          push: false
          tags: ghcr.io/${{ github.repository_owner }}/devcontainer-base:${{ env.DEVCONTAINER_BASE_TAG }}
      - name: Build devcontainer image
        uses: devcontainers/ci@513af61f4de4f75d37e4438f184ba4358f0fc1ca # v0.3.1900000450
        with:
          cacheFrom: ghcr.io/marinatedconcrete/config-devcontainer
          cacheTo: ghcr.io/marinatedconcrete/config-devcontainer
          env: |
            CI=1
          imageName: ghcr.io/marinatedconcrete/config-devcontainer
          push: filter
          refFilterForPush: refs/heads/main
  check-format:
    needs: build
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Repo
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - name: Build Candidate Base Image
        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
        with:
          context: images/devcontainer-base
          file: images/devcontainer-base/Containerfile
          load: true
          push: false
          tags: ghcr.io/${{ github.repository_owner }}/devcontainer-base:${{ env.DEVCONTAINER_BASE_TAG }}
      - name: Check formatting
        uses: devcontainers/ci@513af61f4de4f75d37e4438f184ba4358f0fc1ca # v0.3.1900000450
        with:
          cacheFrom: ghcr.io/marinatedconcrete/config-devcontainer
          env: |
            CI=1
          imageName: ghcr.io/marinatedconcrete/config-devcontainer
          push: never
          runCmd: just check-format
  kustomization-test:
    needs: build
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Repo
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - name: Build Candidate Base Image
        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
        with:
          context: images/devcontainer-base
          file: images/devcontainer-base/Containerfile
          load: true
          push: false
          tags: ghcr.io/${{ github.repository_owner }}/devcontainer-base:${{ env.DEVCONTAINER_BASE_TAG }}
      - name: Validate configs
        uses: devcontainers/ci@513af61f4de4f75d37e4438f184ba4358f0fc1ca # v0.3.1900000450
        with:
          cacheFrom: ghcr.io/marinatedconcrete/config-devcontainer
          env: |
            CI=1
          imageName: ghcr.io/marinatedconcrete/config-devcontainer
          push: never
          runCmd: just kustomization-test ${{ matrix.kustomization-test }}
    strategy:
      matrix:
        kustomization-test:
          - factorio
          - kube-vip
          - mosquitto
          - paperless
          - priorityclass
          - unifi-network-application
  lint:
    needs: build
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Repo
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - name: Build Candidate Base Image
        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
        with:
          context: images/devcontainer-base
          file: images/devcontainer-base/Containerfile
          load: true
          push: false
          tags: ghcr.io/${{ github.repository_owner }}/devcontainer-base:${{ env.DEVCONTAINER_BASE_TAG }}
      - name: Validate configs
        uses: devcontainers/ci@513af61f4de4f75d37e4438f184ba4358f0fc1ca # v0.3.1900000450
        with:
          cacheFrom: ghcr.io/marinatedconcrete/config-devcontainer
          env: |
            CI=1
          imageName: ghcr.io/marinatedconcrete/config-devcontainer
          push: never
          runCmd: just lint