Compare commits
4
Commits
6f36b03855
..
main
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
3dfa8b4d07 | ||
|
|
679f2a03ec | ||
|
|
856ae59bff | ||
|
|
512571f8b9 |
No files matched your search
@@ -1,135 +0,0 @@
|
|||||||
name: Build
|
|
||||||
on:
|
|
||||||
schedule:
|
|
||||||
- cron: "21 21 * * *"
|
|
||||||
push:
|
|
||||||
branches: ["main"]
|
|
||||||
workflow_dispatch:
|
|
||||||
|
|
||||||
env:
|
|
||||||
REGISTRY: ghcr.io
|
|
||||||
SERVER_IMAGE_NAME: "supermicro-x10drh"
|
|
||||||
WORKSTATION_BASE_IMAGE_NAME: "workstation-nvidia-base"
|
|
||||||
LENOVO_IMAGE_NAME: "lenovo-16arh7h"
|
|
||||||
ASROCK_IMAGE_NAME: "asrock-x570"
|
|
||||||
IMAGE_REGISTRY: ghcr.io/${{ github.repository_owner }}
|
|
||||||
REGISTRY_USER: ${{ github.actor }}
|
|
||||||
REGISTRY_PASSWORD: ${{ github.token }}
|
|
||||||
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
supermicro-x10drh:
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
steps:
|
|
||||||
- name: Checkout repo
|
|
||||||
uses: actions/checkout@v3
|
|
||||||
|
|
||||||
- name: Build container image
|
|
||||||
uses: redhat-actions/buildah-build@v2.12
|
|
||||||
with:
|
|
||||||
containerfiles: Containerfile-${{ env.SERVER_IMAGE_NAME }}
|
|
||||||
image: ${{ env.SERVER_IMAGE_NAME }}
|
|
||||||
layers: false
|
|
||||||
oci: true
|
|
||||||
|
|
||||||
- name: Push to ghcr.io
|
|
||||||
uses: redhat-actions/push-to-registry@v2.7
|
|
||||||
with:
|
|
||||||
image: ${{ env.SERVER_IMAGE_NAME }}
|
|
||||||
tags: "latest"
|
|
||||||
registry: ${{ env.IMAGE_REGISTRY }}
|
|
||||||
username: ${{ env.REGISTRY_USER }}
|
|
||||||
password: ${{ env.REGISTRY_PASSWORD }}
|
|
||||||
extra-args: |
|
|
||||||
--disable-content-trust
|
|
||||||
workstation-nvidia-base:
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
steps:
|
|
||||||
- name: Free Disk Space (Ubuntu)
|
|
||||||
uses: jlumbroso/free-disk-space@main
|
|
||||||
with:
|
|
||||||
# this might remove tools that are actually needed,
|
|
||||||
# if set to "true" but frees about 6 GB
|
|
||||||
tool-cache: false
|
|
||||||
|
|
||||||
# all of these default to true, but feel free to set to
|
|
||||||
# "false" if necessary for your workflow
|
|
||||||
android: true
|
|
||||||
dotnet: true
|
|
||||||
haskell: true
|
|
||||||
large-packages: true
|
|
||||||
docker-images: false
|
|
||||||
swap-storage: true
|
|
||||||
|
|
||||||
- name: Checkout repo
|
|
||||||
uses: actions/checkout@v3
|
|
||||||
|
|
||||||
- name: Build container image
|
|
||||||
uses: redhat-actions/buildah-build@v2.12
|
|
||||||
with:
|
|
||||||
containerfiles: Containerfile-${{ env.WORKSTATION_BASE_IMAGE_NAME }}
|
|
||||||
image: ${{ env.WORKSTATION_BASE_IMAGE_NAME }}
|
|
||||||
layers: false
|
|
||||||
oci: true
|
|
||||||
|
|
||||||
- name: Push to ghcr.io
|
|
||||||
uses: redhat-actions/push-to-registry@v2.7
|
|
||||||
with:
|
|
||||||
image: ${{ env.WORKSTATION_BASE_IMAGE_NAME }}
|
|
||||||
tags: "latest"
|
|
||||||
registry: ${{ env.IMAGE_REGISTRY }}
|
|
||||||
username: ${{ env.REGISTRY_USER }}
|
|
||||||
password: ${{ env.REGISTRY_PASSWORD }}
|
|
||||||
extra-args: |
|
|
||||||
--disable-content-trust
|
|
||||||
asrock-x570:
|
|
||||||
needs: workstation-nvidia-base
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
steps:
|
|
||||||
- name: Checkout repo
|
|
||||||
uses: actions/checkout@v3
|
|
||||||
|
|
||||||
- name: Build container image
|
|
||||||
uses: redhat-actions/buildah-build@v2.12
|
|
||||||
with:
|
|
||||||
containerfiles: Containerfile-${{ env.ASROCK_IMAGE_NAME }}
|
|
||||||
image: ${{ env.ASROCK_IMAGE_NAME }}
|
|
||||||
layers: false
|
|
||||||
oci: true
|
|
||||||
|
|
||||||
- name: Push to ghcr.io
|
|
||||||
uses: redhat-actions/push-to-registry@v2.7
|
|
||||||
with:
|
|
||||||
image: ${{ env.ASROCK_IMAGE_NAME }}
|
|
||||||
tags: "latest"
|
|
||||||
registry: ${{ env.IMAGE_REGISTRY }}
|
|
||||||
username: ${{ env.REGISTRY_USER }}
|
|
||||||
password: ${{ env.REGISTRY_PASSWORD }}
|
|
||||||
extra-args: |
|
|
||||||
--disable-content-trust
|
|
||||||
lenovo-16arh7h:
|
|
||||||
needs: workstation-nvidia-base
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
steps:
|
|
||||||
- name: Checkout repo
|
|
||||||
uses: actions/checkout@v3
|
|
||||||
|
|
||||||
- name: Build container image
|
|
||||||
uses: redhat-actions/buildah-build@v2.12
|
|
||||||
with:
|
|
||||||
containerfiles: Containerfile-${{ env.LENOVO_IMAGE_NAME }}
|
|
||||||
image: ${{ env.LENOVO_IMAGE_NAME }}
|
|
||||||
layers: false
|
|
||||||
oci: true
|
|
||||||
|
|
||||||
- name: Push to ghcr.io
|
|
||||||
uses: redhat-actions/push-to-registry@v2.7
|
|
||||||
with:
|
|
||||||
image: ${{ env.LENOVO_IMAGE_NAME }}
|
|
||||||
tags: "latest"
|
|
||||||
registry: ${{ env.IMAGE_REGISTRY }}
|
|
||||||
username: ${{ env.REGISTRY_USER }}
|
|
||||||
password: ${{ env.REGISTRY_PASSWORD }}
|
|
||||||
extra-args: |
|
|
||||||
--disable-content-trust
|
|
||||||
|
|
||||||
@@ -32,6 +32,7 @@ RUN wget -O /etc/udev/rules.d/42-logitech-unify-permissions.rules https://raw.gi
|
|||||||
iotop \
|
iotop \
|
||||||
libavcodec-freeworld \
|
libavcodec-freeworld \
|
||||||
libva-utils \
|
libva-utils \
|
||||||
|
lm_sensors \
|
||||||
mesa-va-drivers-freeworld \
|
mesa-va-drivers-freeworld \
|
||||||
steam \
|
steam \
|
||||||
syncthing \
|
syncthing \
|
||||||
|
|||||||
@@ -23,6 +23,7 @@ RUN rpm --import \
|
|||||||
gnome-shell-extension-dash-to-panel \
|
gnome-shell-extension-dash-to-panel \
|
||||||
gnome-terminal \
|
gnome-terminal \
|
||||||
gnome-tweaks \
|
gnome-tweaks \
|
||||||
|
lm_sensors \
|
||||||
vim && \
|
vim && \
|
||||||
dnf5 swap -y ffmpeg-free ffmpeg --allowerasing && \
|
dnf5 swap -y ffmpeg-free ffmpeg --allowerasing && \
|
||||||
dnf5 clean all
|
dnf5 clean all
|
||||||
|
|||||||
@@ -1,19 +1,5 @@
|
|||||||
# ====== Stage 1: Builder image ======
|
|
||||||
FROM registry.fedoraproject.org/fedora:latest AS builder
|
|
||||||
|
|
||||||
RUN dnf5 update -y && dnf install -y git golang
|
|
||||||
|
|
||||||
RUN git clone https://github.com/rfjakob/gocryptfs.git
|
|
||||||
|
|
||||||
WORKDIR /gocryptfs
|
|
||||||
|
|
||||||
RUN ./build-without-openssl.bash
|
|
||||||
|
|
||||||
# ====== Stage 2: Server image ======
|
|
||||||
FROM quay.io/fedora/fedora-silverblue:44
|
FROM quay.io/fedora/fedora-silverblue:44
|
||||||
|
|
||||||
COPY --from=builder /gocryptfs/gocryptfs /usr/bin/gocryptfs
|
|
||||||
|
|
||||||
COPY gpg-keys/* /keys/
|
COPY gpg-keys/* /keys/
|
||||||
|
|
||||||
# Import keys, install ZFS repository & build deps & zfs
|
# Import keys, install ZFS repository & build deps & zfs
|
||||||
@@ -43,12 +29,11 @@ RUN dnf5 install -y \
|
|||||||
ansible \
|
ansible \
|
||||||
borgbackup \
|
borgbackup \
|
||||||
certbot \
|
certbot \
|
||||||
cockpit \
|
|
||||||
cockpit-podman \
|
|
||||||
distrobox \
|
distrobox \
|
||||||
fail2ban \
|
fail2ban \
|
||||||
fuse-encfs \
|
fuse-encfs \
|
||||||
fuse-sshfs \
|
fuse-sshfs \
|
||||||
|
gocryptfs \
|
||||||
hddtemp \
|
hddtemp \
|
||||||
htop \
|
htop \
|
||||||
iftop \
|
iftop \
|
||||||
|
|||||||
@@ -36,6 +36,7 @@ RUN rpm --import \
|
|||||||
iotop \
|
iotop \
|
||||||
libva-nvidia-driver \
|
libva-nvidia-driver \
|
||||||
libva-utils \
|
libva-utils \
|
||||||
|
lm_sensors \
|
||||||
nvtop \
|
nvtop \
|
||||||
qpdf \
|
qpdf \
|
||||||
steam \
|
steam \
|
||||||
|
|||||||
Reference in new issue
Block a user