Compare commits
4
Commits
6f36b03855
...
main
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
3dfa8b4d07 | ||
|
|
679f2a03ec | ||
|
|
856ae59bff | ||
|
|
512571f8b9 |
No files matched your search
@@ -1,135 +0,0 @@
|
||||
name: Build
|
||||
on:
|
||||
schedule:
|
||||
- cron: "21 21 * * *"
|
||||
push:
|
||||
branches: ["main"]
|
||||
workflow_dispatch:
|
||||
|
||||
env:
|
||||
REGISTRY: ghcr.io
|
||||
SERVER_IMAGE_NAME: "supermicro-x10drh"
|
||||
WORKSTATION_BASE_IMAGE_NAME: "workstation-nvidia-base"
|
||||
LENOVO_IMAGE_NAME: "lenovo-16arh7h"
|
||||
ASROCK_IMAGE_NAME: "asrock-x570"
|
||||
IMAGE_REGISTRY: ghcr.io/${{ github.repository_owner }}
|
||||
REGISTRY_USER: ${{ github.actor }}
|
||||
REGISTRY_PASSWORD: ${{ github.token }}
|
||||
|
||||
|
||||
jobs:
|
||||
supermicro-x10drh:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout repo
|
||||
uses: actions/checkout@v3
|
||||
|
||||
- name: Build container image
|
||||
uses: redhat-actions/buildah-build@v2.12
|
||||
with:
|
||||
containerfiles: Containerfile-${{ env.SERVER_IMAGE_NAME }}
|
||||
image: ${{ env.SERVER_IMAGE_NAME }}
|
||||
layers: false
|
||||
oci: true
|
||||
|
||||
- name: Push to ghcr.io
|
||||
uses: redhat-actions/push-to-registry@v2.7
|
||||
with:
|
||||
image: ${{ env.SERVER_IMAGE_NAME }}
|
||||
tags: "latest"
|
||||
registry: ${{ env.IMAGE_REGISTRY }}
|
||||
username: ${{ env.REGISTRY_USER }}
|
||||
password: ${{ env.REGISTRY_PASSWORD }}
|
||||
extra-args: |
|
||||
--disable-content-trust
|
||||
workstation-nvidia-base:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Free Disk Space (Ubuntu)
|
||||
uses: jlumbroso/free-disk-space@main
|
||||
with:
|
||||
# this might remove tools that are actually needed,
|
||||
# if set to "true" but frees about 6 GB
|
||||
tool-cache: false
|
||||
|
||||
# all of these default to true, but feel free to set to
|
||||
# "false" if necessary for your workflow
|
||||
android: true
|
||||
dotnet: true
|
||||
haskell: true
|
||||
large-packages: true
|
||||
docker-images: false
|
||||
swap-storage: true
|
||||
|
||||
- name: Checkout repo
|
||||
uses: actions/checkout@v3
|
||||
|
||||
- name: Build container image
|
||||
uses: redhat-actions/buildah-build@v2.12
|
||||
with:
|
||||
containerfiles: Containerfile-${{ env.WORKSTATION_BASE_IMAGE_NAME }}
|
||||
image: ${{ env.WORKSTATION_BASE_IMAGE_NAME }}
|
||||
layers: false
|
||||
oci: true
|
||||
|
||||
- name: Push to ghcr.io
|
||||
uses: redhat-actions/push-to-registry@v2.7
|
||||
with:
|
||||
image: ${{ env.WORKSTATION_BASE_IMAGE_NAME }}
|
||||
tags: "latest"
|
||||
registry: ${{ env.IMAGE_REGISTRY }}
|
||||
username: ${{ env.REGISTRY_USER }}
|
||||
password: ${{ env.REGISTRY_PASSWORD }}
|
||||
extra-args: |
|
||||
--disable-content-trust
|
||||
asrock-x570:
|
||||
needs: workstation-nvidia-base
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout repo
|
||||
uses: actions/checkout@v3
|
||||
|
||||
- name: Build container image
|
||||
uses: redhat-actions/buildah-build@v2.12
|
||||
with:
|
||||
containerfiles: Containerfile-${{ env.ASROCK_IMAGE_NAME }}
|
||||
image: ${{ env.ASROCK_IMAGE_NAME }}
|
||||
layers: false
|
||||
oci: true
|
||||
|
||||
- name: Push to ghcr.io
|
||||
uses: redhat-actions/push-to-registry@v2.7
|
||||
with:
|
||||
image: ${{ env.ASROCK_IMAGE_NAME }}
|
||||
tags: "latest"
|
||||
registry: ${{ env.IMAGE_REGISTRY }}
|
||||
username: ${{ env.REGISTRY_USER }}
|
||||
password: ${{ env.REGISTRY_PASSWORD }}
|
||||
extra-args: |
|
||||
--disable-content-trust
|
||||
lenovo-16arh7h:
|
||||
needs: workstation-nvidia-base
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout repo
|
||||
uses: actions/checkout@v3
|
||||
|
||||
- name: Build container image
|
||||
uses: redhat-actions/buildah-build@v2.12
|
||||
with:
|
||||
containerfiles: Containerfile-${{ env.LENOVO_IMAGE_NAME }}
|
||||
image: ${{ env.LENOVO_IMAGE_NAME }}
|
||||
layers: false
|
||||
oci: true
|
||||
|
||||
- name: Push to ghcr.io
|
||||
uses: redhat-actions/push-to-registry@v2.7
|
||||
with:
|
||||
image: ${{ env.LENOVO_IMAGE_NAME }}
|
||||
tags: "latest"
|
||||
registry: ${{ env.IMAGE_REGISTRY }}
|
||||
username: ${{ env.REGISTRY_USER }}
|
||||
password: ${{ env.REGISTRY_PASSWORD }}
|
||||
extra-args: |
|
||||
--disable-content-trust
|
||||
|
||||
@@ -32,6 +32,7 @@ RUN wget -O /etc/udev/rules.d/42-logitech-unify-permissions.rules https://raw.gi
|
||||
iotop \
|
||||
libavcodec-freeworld \
|
||||
libva-utils \
|
||||
lm_sensors \
|
||||
mesa-va-drivers-freeworld \
|
||||
steam \
|
||||
syncthing \
|
||||
|
||||
@@ -23,6 +23,7 @@ RUN rpm --import \
|
||||
gnome-shell-extension-dash-to-panel \
|
||||
gnome-terminal \
|
||||
gnome-tweaks \
|
||||
lm_sensors \
|
||||
vim && \
|
||||
dnf5 swap -y ffmpeg-free ffmpeg --allowerasing && \
|
||||
dnf5 clean all
|
||||
|
||||
@@ -1,19 +1,5 @@
|
||||
# ====== Stage 1: Builder image ======
|
||||
FROM registry.fedoraproject.org/fedora:latest AS builder
|
||||
|
||||
RUN dnf5 update -y && dnf install -y git golang
|
||||
|
||||
RUN git clone https://github.com/rfjakob/gocryptfs.git
|
||||
|
||||
WORKDIR /gocryptfs
|
||||
|
||||
RUN ./build-without-openssl.bash
|
||||
|
||||
# ====== Stage 2: Server image ======
|
||||
FROM quay.io/fedora/fedora-silverblue:44
|
||||
|
||||
COPY --from=builder /gocryptfs/gocryptfs /usr/bin/gocryptfs
|
||||
|
||||
COPY gpg-keys/* /keys/
|
||||
|
||||
# Import keys, install ZFS repository & build deps & zfs
|
||||
@@ -43,12 +29,11 @@ RUN dnf5 install -y \
|
||||
ansible \
|
||||
borgbackup \
|
||||
certbot \
|
||||
cockpit \
|
||||
cockpit-podman \
|
||||
distrobox \
|
||||
fail2ban \
|
||||
fuse-encfs \
|
||||
fuse-sshfs \
|
||||
gocryptfs \
|
||||
hddtemp \
|
||||
htop \
|
||||
iftop \
|
||||
|
||||
@@ -36,6 +36,7 @@ RUN rpm --import \
|
||||
iotop \
|
||||
libva-nvidia-driver \
|
||||
libva-utils \
|
||||
lm_sensors \
|
||||
nvtop \
|
||||
qpdf \
|
||||
steam \
|
||||
|
||||
Reference in new issue
Block a user