Skip to content

ci: also publish release images to the China mirror #6

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
zhanghaohit wants to merge 1 commit into from
Closed

ci: also publish release images to the China mirror #6

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
41 changes: 41 additions & 0 deletions .github/workflows/release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -65,10 +65,51 @@ jobs:
password: ${{ secrets.DOCKERHUB_TOKEN }}

- name: Build and push hang-watcher
id: push
uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
with:
context: .
file: Dockerfile
platforms: linux/amd64,linux/arm64
push: true
tags: ${{ steps.tags.outputs.t0 }}

- name: Mirror hang-watcher to modelsphere.tencentcloudcr.com
# The China mirror of Docker Hub's 4pdosc. Copies what this job just pushed,
# by digest, with crane: manifests are copied verbatim, so both registries
# serve identical bytes (`buildx imagetools create` would wrap a single
# manifest in a new index and change its digest). A separate step after the
# Docker Hub push: a mirror outage fails this step but cannot stop or
# half-finish the Docker Hub release. Skipped with a notice when the org
# secrets TCR_USERNAME / TCR_TOKEN are not available.
env:
TAGS: ${{ steps.tags.outputs.t0 }}
DIGEST: ${{ steps.push.outputs.digest }}
TCR_USERNAME: ${{ secrets.TCR_USERNAME }}
TCR_TOKEN: ${{ secrets.TCR_TOKEN }}
CRANE_VERSION: v0.20.6
CRANE_SHA256: c1d593d01551f2c9a3df5ca0a0be4385a839bd9b86d4a76e18d7b17d16559127
run: |
set -euo pipefail
mirror=modelsphere.tencentcloudcr.com
if [ -z "$TCR_USERNAME" ] || [ -z "$TCR_TOKEN" ]; then
echo "::notice::TCR_USERNAME/TCR_TOKEN not set; not mirrored to $mirror"
exit 0
fi
crane="$RUNNER_TEMP/crane"
if [ ! -x "$crane" ]; then # once per job, however many images it mirrors
curl -sSfL -o "$RUNNER_TEMP/crane.tgz" \
"https://github.com/google/go-containerregistry/releases/download/$CRANE_VERSION/go-containerregistry_Linux_x86_64.tar.gz"
echo "$CRANE_SHA256 $RUNNER_TEMP/crane.tgz" | sha256sum -c -
tar -xzf "$RUNNER_TEMP/crane.tgz" -C "$RUNNER_TEMP" crane
fi
printf '%s' "$TCR_TOKEN" | "$crane" auth login "$mirror" -u "$TCR_USERNAME" --password-stdin
for ref in $(printf '%s\n' "$TAGS" | tr ',' '\n'); do
case "$ref" in
docker.io/4pdosc/*) ref=${ref#docker.io/} ;;
4pdosc/*) ;;
*) continue ;;
esac
echo "mirroring docker.io/$ref -> $mirror/$ref"
"$crane" copy "docker.io/${ref%:*}@$DIGEST" "$mirror/$ref"
done
Loading