Kristian Klausen
6d3ea0c032
Fix incorrect cosign verify commands
...
The identity has been changed[1] to also include the "CI config path"
and the ref path should be the git tag of the release.
Also remove `jq` as it is only nice to have, not needed and it masks the
return code of `cosign verify`.
[1] a4b3e128c1
Fixes: 8317be4
("Sign the images with sigstore's fulcio/rekor")
2023-09-21 06:42:36 +02:00
Kristian Klausen
c432cbcbe2
Add use-sigstore-attachments: true to the image:publish:secure job
...
Fixes: 8317be4
("Sign the images with sigstore's fulcio/rekor")
2023-09-21 06:12:54 +02:00
Justin Kromlinger
797702633e
Add sigstore-param-file.yaml to releases branch
...
Fixes https://gitlab.archlinux.org/archlinux/archlinux-docker/-/jobs/179122#L222
2023-09-16 16:24:18 +02:00
hashworks
9bbf04eac9
Merge branch 'sigstore' into 'master'
...
Sign the images with sigstore's fulcio/rekor
Closes #77
See merge request archlinux/archlinux-docker!77
2023-09-16 14:04:11 +00:00
Justin Kromlinger
6090c65290
README 80 column wrap, cleanup
2023-09-16 16:00:30 +02:00
Kristian Klausen
8317be4d2d
Sign the images with sigstore's fulcio/rekor
...
The ecosystem is moving towards sigstore and we are federated with the
public fulcio instance[1], so let's sign our images. Cosign is not used,
but the sigstore feature built into podman, which works basically the
same way as cosign.
[1] https://github.com/sigstore/fulcio/pull/1214
Fix #77
2023-09-16 15:55:50 +02:00
hashworks
3be9448db8
Merge branch 'fix-ci-on-forks' into 'master'
...
Do not use secure runners on forks
See merge request archlinux/archlinux-docker!66
2023-09-16 13:54:47 +00:00
nl6720
ca9957f7d1
Do not use secure runners on forks
...
Forks may not have access to secure runners.
2023-09-16 15:50:45 +02:00
hashworks
4c107498cf
Merge branch 'mixed-bag' into 'master'
...
Mixed bags of fixes and polish
See merge request archlinux/archlinux-docker!78
2023-09-16 13:47:17 +00:00
Emil Velikov
ffd47f737e
Use the in-tree mirrorlist
...
Currently we use the system mirrorlist for the pacman invocation.
The system config may or may not be identical to the in-tree one - as
one of my dev machines was kind enough to remind me.
The tooling should be self-contained and leak as few builder specific as
possible.
Signed-off-by: Emil Velikov <emil.l.velikov@gmail.com>
2023-09-16 15:37:25 +02:00
Emil Velikov
9c32b05bfa
README: rewrap, use standalone references
...
Re-wrap the readme to about 80 columns and use standalone references for
the long URLs. Reduces the eye-bleed for casual contributors.
Signed-off-by: Emil Velikov <emil.l.velikov@gmail.com>
2023-09-16 15:37:22 +02:00
Emil Velikov
615bfa55ea
Drop erroneous oci- prefix for image-base{,-devel} targets
...
The targets never had a docker/oci prefix. Update the PHONY targets in
the Makefile and the README.
Signed-off-by: Emil Velikov <emil.l.velikov@gmail.com>
2023-09-16 15:30:21 +02:00
Emil Velikov
8589e40bd8
README: s/docker/podman/ in the requirements
...
We're switched to podman a while ago.
Signed-off-by: Emil Velikov <emil.l.velikov@gmail.com>
2023-09-16 15:30:20 +02:00
Emil Velikov
9d3774ce35
gitlab-ci: de-duplicate matrix option
...
Just push the parallel/matrix into the templates.
Signed-off-by: Emil Velikov <emil.l.velikov@gmail.com>
2023-09-16 15:30:19 +02:00
Emil Velikov
5ec09f5357
gitlab-ci: install devtools without its dependencies
...
We only need devtools for the pacman.conf. While currently we install a
dozen+ of extra dependencies, weighting in at over 100M.
Signed-off-by: Emil Velikov <emil.l.velikov@gmail.com>
2023-09-16 15:30:18 +02:00
Emil Velikov
c90b1ab2f1
gitlab-ci: document the get_version implicit nature
...
Had a silly moment a while back, assuming the stage is no longer needed.
That's not the case, so add a brief commit about that.
Signed-off-by: Emil Velikov <emil.l.velikov@gmail.com>
2023-09-16 15:30:17 +02:00
hashworks
4618632641
Merge branch 'xeonacid-master-patch-23599' into 'master'
...
Delete `package group` in README
See merge request archlinux/archlinux-docker!79
2023-09-16 13:18:40 +00:00
Acid Xeon
e39d28dcce
Delete package group
in README
...
`base-devel` is also meta package now.
2023-08-12 09:19:34 +00:00
Justin Kromlinger
301942f9e5
Replace temporary link
2023-06-27 00:00:07 +02:00
Justin Kromlinger
e4875c7e36
Add ghcr.io daily target
2023-06-21 20:54:10 +02:00
Justin Kromlinger
3ef8b2737b
Fix dockerfile lint
2023-06-20 12:16:16 +02:00
Justin Kromlinger
c42fc6a251
Switch back to alpine to fix official DockerHub builds
...
Reverts a76517d48c
2023-06-20 12:13:56 +02:00
Justin Kromlinger
17c4a88a88
Use docker.io for Dockerfile verify step to please DockerHub Official Builds
...
https://github.com/docker-library/official-images/actions/runs/5300787500/jobs/9594533073?pr=14883
2023-06-20 11:54:26 +02:00
Justin Kromlinger
d2ad02b012
Fix release of latest tags
2023-06-16 11:52:15 +02:00
Justin Kromlinger
10fb4f9e4f
Be more explicit about runner tags
2023-06-15 22:39:14 +02:00
Justin Kromlinger
af3c3dcff0
Fix SUID test
2023-06-15 17:20:33 +02:00
Justin Kromlinger
87d3f29452
Drop image tag for VM runners, install podman
...
The executer gives us a fresh Arch VM with a shell.
2023-06-15 17:05:30 +02:00
Justin Kromlinger
62d2b0fa76
Update base image just in case
2023-06-15 16:34:30 +02:00
Justin Kromlinger
b2322a4600
Ignore DL3007 since we use :latest
2023-06-15 16:34:29 +02:00
Justin Kromlinger
a76517d48c
Eat our own dog food, drop renovate since we no longer pin any versions
2023-06-15 16:34:28 +02:00
Justin Kromlinger
6aa7dcc287
Replace kaniko with podman
...
Resolves #71 , fixes #70 .
2023-06-15 16:33:58 +02:00
Justin Kromlinger
0b819be950
Fix pull commands for the DockerHub library images
2023-06-14 14:46:20 +02:00
Justin Kromlinger
9df81a9cbf
Add daily releases to quay.io repository
...
See #73 .
2023-06-14 14:43:34 +02:00
Justin Kromlinger
de5fe5cbe7
Avoid creation of .pacnew files for every image
...
This was just confusing to users, since a pacdiff on a new Arch container
should always exit cleanly.
2023-06-14 14:06:27 +02:00
hashworks
a395f71b63
Merge branch 'renovate/gcr.io-kaniko-project-executor-1.x' into 'master'
...
Update gcr.io/kaniko-project/executor Docker tag to v1.11.0
See merge request archlinux/archlinux-docker!75
2023-06-09 09:22:48 +00:00
renovate
db6f1e46e4
Update gcr.io/kaniko-project/executor Docker tag to v1.11.0
2023-06-08 23:23:51 +00:00
hashworks
cd6d85768d
Merge branch 'renovate/gcr.io-kaniko-project-executor-1.x' into 'master'
...
Update gcr.io/kaniko-project/executor Docker tag to v1.10.0
See merge request archlinux/archlinux-docker!69
2023-06-08 18:46:03 +00:00
renovate
6a986d0426
Update gcr.io/kaniko-project/executor Docker tag to v1.10.0
2023-06-08 18:34:19 +00:00
Justin Kromlinger
875fdf5e26
Fix missing | in sed
2023-06-08 20:31:21 +02:00
Justin Kromlinger
fb1d1a3499
Drop duplicate labels
2023-06-08 20:20:09 +02:00
Justin Kromlinger
e2d91e1ea7
Merge branch 'master' of ssh://gitlab.archlinux.org:222/archlinux/archlinux-docker
2023-06-08 20:18:13 +02:00
Justin Kromlinger
74dc761af8
Add additional opencontainers labels, fix version id
2023-06-08 20:18:07 +02:00
Justin Kromlinger
c3cc18f520
Add opencontainers labels to the image
...
Resolves #75 .
2023-06-08 19:01:27 +02:00
hashworks
4afa2a09af
Merge branch 'renovate/alpine-3.x' into 'master'
...
Update alpine Docker tag to v3.18
See merge request archlinux/archlinux-docker!73
2023-05-26 20:23:08 +00:00
renovate
9e02744bb9
Update alpine Docker tag to v3.18
2023-05-26 20:10:41 +00:00
hashworks
c2f9a8ac85
Merge branch 'devtools-1.0.0' into 'master'
...
Adjust the path to "pacman-extra.conf" for devtools>=1.0.0
See merge request archlinux/archlinux-docker!74
2023-05-26 20:09:51 +00:00
Kristian Klausen
44c5b4f90e
Adjust the path to "pacman-extra.conf" for devtools>=1.0.0
2023-05-26 22:01:42 +02:00
hashworks
6a1f7a1965
Merge branch 'units' into 'master'
...
README: update image sizes and use proper units
See merge request archlinux/archlinux-docker!67
2023-04-19 10:56:12 +00:00
nl6720
80898b1da2
README: update image sizes and use proper units
...
The sizes are liberally rounded values from https://gitlab.archlinux.org/archlinux/archlinux-docker/container_registry/2 .
2023-04-19 08:56:41 +03:00
hashworks
a866d979b3
Merge branch 'vorburger-master-patch-31338' into 'master'
...
Fix minor typo in Dockerfile.template
See merge request archlinux/archlinux-docker!70
2023-04-16 21:18:11 +00:00