Ben MeadorsandGitHub
d8884125b6
Reconciles develop to master's latest renovate values for deps bumped on the 2.7 line but never back-merged, so the develop->master 2.8 promotion (#10777) doesn't regress them. Done as a value reconcile, not a cherry-pick: several master commits are superseded (5 device-ui bumps, 2 ststm32 bumps), and develop's stale archive/refs/tags/ URL form actually blocked renovate from bumping these (the regex expects archive/<version>.zip). GitHub Actions: - actions/checkout v6 -> v7 (35 refs) - actions/cache v5 -> v6 - actions/github-script v8 -> v9 (3 refs) - actions/stale v10.2.0 -> v10.3.0 Build / platform: - alpine 3.23 -> 3.24 (alpine.Dockerfile) - platformio/ststm32 19.5.0 -> 19.7.0 - platformio/nordicnrf52 10.11.0 -> 10.12.0 Libraries: - Adafruit SSD1306 2.5.16 -> 2.5.17 - SparkFun MMC5983MA v1.1.4 -> v1.1.5 - Sensirion I2C SCD30 1.0.0 -> 1.1.1 - meshtastic esp8266-oled-ssd1306 6bfd1f1 -> 2e26010 Deliberately excluded: - meshtastic/device-ui digest: coupled to firmware protobuf/API and develop has diverged hard (NodeDB v25); left for a separate maintainer bump + visual check. - libpax: develop uses the mverch67 fork (pinned by Arduino-3.x migration #9122), master uses dbinfrago -- a fork divergence, not a version bump; not reconciled. - platform-native digest: develop already at 61067ac (equal to master).
111 lines
3.2 KiB
YAML
111 lines
3.2 KiB
YAML
name: Build Docker
|
|
|
|
# Build Docker image, push untagged (digest-only)
|
|
|
|
on:
|
|
workflow_call:
|
|
secrets:
|
|
DOCKER_FIRMWARE_TOKEN:
|
|
required: false # Only required for push
|
|
inputs:
|
|
distro:
|
|
description: Distro to target
|
|
required: true
|
|
type: string
|
|
# choices: [debian, alpine]
|
|
platform:
|
|
description: Platform to target
|
|
required: true
|
|
type: string
|
|
runs-on:
|
|
description: Runner to use
|
|
required: true
|
|
type: string
|
|
push:
|
|
description: Push images to registry
|
|
required: false
|
|
type: boolean
|
|
default: false
|
|
pio_env:
|
|
description: PlatformIO environment to build
|
|
required: false
|
|
type: string
|
|
default: native
|
|
outputs:
|
|
digest:
|
|
description: Digest of built image
|
|
value: ${{ jobs.docker-build.outputs.digest }}
|
|
|
|
permissions:
|
|
contents: read
|
|
packages: write
|
|
|
|
jobs:
|
|
docker-build:
|
|
outputs:
|
|
digest: ${{ steps.docker_variant.outputs.digest }}
|
|
runs-on: ${{ inputs.runs-on }}
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v7
|
|
with:
|
|
submodules: recursive
|
|
|
|
- name: Get release version string
|
|
run: |
|
|
echo "long=$(./bin/buildinfo.py long)" >> $GITHUB_OUTPUT
|
|
id: version
|
|
|
|
- name: Set up QEMU
|
|
uses: docker/setup-qemu-action@v4
|
|
with:
|
|
cache-image: true
|
|
|
|
- name: Docker setup
|
|
uses: docker/setup-buildx-action@v4
|
|
with:
|
|
# Add Google/Amazon DockerHub mirrors to buildkit config
|
|
# https://docs.docker.com/build/ci/github-actions/configure-builder/#registry-mirror
|
|
buildkitd-config-inline: |
|
|
[registry."docker.io"]
|
|
mirrors = ["mirror.gcr.io", "public.ecr.aws"]
|
|
|
|
- name: Sanitize platform string
|
|
id: sanitize_platform
|
|
# Replace slashes with underscores
|
|
env:
|
|
plat: ${{ inputs.platform }}
|
|
run: echo "cleaned_platform=${plat}" | sed 's/\//_/g' >> $GITHUB_OUTPUT
|
|
|
|
- name: Docker login
|
|
if: ${{ inputs.push }}
|
|
uses: docker/login-action@v4
|
|
with:
|
|
username: meshtastic
|
|
password: ${{ secrets.DOCKER_FIRMWARE_TOKEN }}
|
|
|
|
- name: Docker tag
|
|
id: meta
|
|
uses: docker/metadata-action@v6
|
|
with:
|
|
images: meshtastic/meshtasticd
|
|
tags: |
|
|
GHA-${{ steps.version.outputs.long }}-${{ inputs.distro }}-${{ steps.sanitize_platform.outputs.cleaned_platform }}
|
|
flavor: latest=false
|
|
|
|
- name: Docker build and push
|
|
uses: docker/build-push-action@v7
|
|
id: docker_variant
|
|
with:
|
|
context: .
|
|
file: |
|
|
${{ contains(inputs.distro, 'debian') && './Dockerfile' || contains(inputs.distro, 'alpine') && './alpine.Dockerfile' }}
|
|
push: ${{ inputs.push }}
|
|
tags: ${{ steps.meta.outputs.tags }} # Tag is only meant to be consumed by the "manifest" job
|
|
platforms: ${{ inputs.platform }}
|
|
build-args: |
|
|
PIO_ENV=${{ inputs.pio_env }}
|
|
# Cache image layers in GitHub Actions cache to speed up subsequent builds.
|
|
cache-from: type=gha
|
|
cache-to: type=gha,mode=max
|