discord-rss-bot/.github/workflows/build.yml

92 lines
3 KiB
YAML

---
# Required setup for self-hosted runner:
# 1. Install dependencies:
# sudo pacman -S qemu-user-static qemu-user-static-binfmt docker
# 2. Add runner to docker group:
# sudo usermod -aG docker forgejo-runner
# 3. Restart runner service to apply group membership:
# sudo systemctl restart forgejo-runner
# 4. Install uv and ruff for the runner user
# 5. Login to GitHub Container Registry:
# echo "ghp_YOUR_TOKEN_HERE" | sudo -u forgejo-runner docker login ghcr.io -u TheLovinator1 --password-stdin
name: Test and build Docker image
on:
push:
branches:
- master
pull_request:
workflow_dispatch:
schedule:
- cron: "0 0 1 * *"
env:
TEST_WEBHOOK_URL: ${{ secrets.TEST_WEBHOOK_URL }}
jobs:
docker:
runs-on: self-hosted
steps:
# Download the latest commit from the master branch
- uses: actions/checkout@v6
# Verify local tools are available on the self-hosted runner
- name: Check local toolchain
run: |
python --version
uv --version
ruff --version
docker version
# Bootstrap a local Buildx builder for multi-arch builds
# (requires qemu-user-static and qemu-user-static-binfmt installed via pacman)
- name: Configure local buildx for multi-arch
run: |
docker buildx inspect local-multiarch-builder >/dev/null 2>&1 || \
docker buildx create --name local-multiarch-builder --driver docker-container
docker buildx use local-multiarch-builder
docker buildx inspect --bootstrap
# Lint the Python code using ruff
- run: ruff check --exit-non-zero-on-fix --verbose
# Check if the Python code needs formatting
- run: ruff format --check --verbose
# Lint Dockerfile
- run: docker build --check .
# Install dependencies
- run: uv sync --all-extras --all-groups
# Run tests
- run: uv run pytest
# Compute image tags
- id: tags
name: Compute image tags
run: |
IMAGE="ghcr.io/thelovinator1/discord-rss-bot"
if [ "${FORGEJO_REF}" = "refs/heads/master" ]; then
echo "tags=${IMAGE}:latest,${IMAGE}:master" >> "$FORGEJO_OUTPUT"
else
SHORT_SHA="$(echo "$FORGEJO_SHA" | cut -c1-12)"
echo "tags=${IMAGE}:sha-${SHORT_SHA}" >> "$FORGEJO_OUTPUT"
fi
# Build (and optionally push) Docker image
- name: Build and push Docker image
env:
TAGS: ${{ steps.tags.outputs.tags }}
run: |
IFS=',' read -r -a tag_array <<< "$TAGS"
tag_args=()
for tag in "${tag_array[@]}"; do
tag_args+=( -t "$tag" )
done
if [ "${{ github.event_name }}" = "pull_request" ]; then
docker buildx build --platform linux/amd64,linux/arm64 "${tag_args[@]}" --load .
else
docker buildx build --platform linux/amd64,linux/arm64 "${tag_args[@]}" --push .
fi