更新 .github/workflows/buidl_and_push_ghcr.yml
Some checks failed
Docker Image CI / build-and-push (push) Failing after 20s

This commit is contained in:
2025-12-18 05:54:58 +00:00
parent 01def7257d
commit f30d0a8a1b

View File

@@ -1,64 +1,64 @@
name: Docker Image CI name: Docker Image CI
on: on:
workflow_dispatch: workflow_dispatch: # 保留手动触发
push: push:
branches: branches:
- main - main # 推送代码到 main 分支时触发
jobs: jobs:
build: build-and-push:
# 对应 Helm values 中 runner.labels 配置的标签
runs-on: ubuntu-latest runs-on: ubuntu-latest
# 模仿参考配置:指定运行容器,确保包含完整的工具链
# 指定执行环境容器
container: container:
image: catthehacker/ubuntu:act-latest image: catthehacker/ubuntu:act-latest
# 【关键配置】
# 显式指定连接到同 Pod 内的 DinD Sidecar
# 因为我们在 Helm 里配置了 DOCKER_TLS_CERTDIR="",所以这里走非加密 TCP
env:
DOCKER_HOST: tcp://localhost:2375
steps: steps:
- name: Checkout code - name: Checkout code
uses: actions/checkout@v4 uses: actions/checkout@v4
with:
fetch-depth: 0
# (可选) 调试步骤:确认 Docker 是否连接成功 # 模仿参考配置:提取元数据 (Registry地址, 镜像名, Version)
# 如果这一步打印出 Server Version说明 Helm 配置生效了 # Gitea 的 server_url 包含协议头(https://)docker tag 不需要,所以这里处理一下
- name: Check Docker Info - name: Get Meta
id: meta
run: | run: |
echo "Connecting to Docker at $DOCKER_HOST..." # 提取域名 (去除 http:// 或 https://)
docker info REGISTRY_HOST=$(echo "${{ gitea.server_url }}" | sed -E 's/^\s*.*:\/\///g')
# 转换为小写,确保镜像名合法
REPO_LOWER=$(echo "${{ gitea.repository }}" | tr '[:upper:]' '[:lower:]')
echo "REGISTRY_HOST=$REGISTRY_HOST" >> $GITHUB_OUTPUT
echo "IMAGE_NAME=$REPO_LOWER" >> $GITHUB_OUTPUT
echo "VERSION_SHA=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT
# 设置 Buildx # 设置 QEMU (支持多架构构建,如果不需要可以注释掉)
- name: Set up QEMU
uses: docker/setup-qemu-action@v3
# 设置 Docker Buildx (构建的核心)
- name: Set up Docker Buildx - name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3 uses: docker/setup-buildx-action@v3
with: # 针对 dind-rootless 环境,有时需要显式指定驱动,通常默认即可
# 必须显式指定 endpoint否则 Buildx 可能会尝试启动新容器或找 Socket 文件 # 如果遇到 socket 权限问题,可能需要配置 driver-opts
driver-opts: image=moby/buildkit:master
endpoint: tcp://localhost:2375
# 登录 Gitea 容器镜像仓库 # 登录 Gitea 内置的容器镜像仓库
- name: Log in to Gitea Container Registry - name: Log in to Gitea Registry
uses: docker/login-action@v3 uses: docker/login-action@v3
with: with:
# 如果 ${{ gitea.server_url }} 带了 http:// 前缀且构建失败, registry: ${{ steps.meta.outputs.REGISTRY_HOST }}
# 请直接写死域名,例如: registry: git.your-domain.com
registry: ${{ gitea.server_url }}
username: ${{ gitea.actor }} username: ${{ gitea.actor }}
password: ${{ secrets.GITEA_TOKEN }} password: ${{ secrets.GITHUB_TOKEN }} # Gitea 会自动生成此 Token拥有推送到包管理器的权限
# 构建并推送 # 构建并推送
- name: Build and push Docker image - name: Build and push
uses: docker/build-push-action@v5 uses: docker/build-push-action@v5
with: with:
context: . context: .
file: Dockerfile file: ./Dockerfile
push: true push: true
# 生成镜像标签 platforms: linux/amd64,linux/arm64 # 根据需要保留或修改架构
# 注意Docker tag 不支持带 "http://",如果 ${{ gitea.server_url }} 包含协议头,
# 请手动替换为域名,例如: git.your-domain.com/${{ gitea.actor }}/my-docs:...
tags: | tags: |
${{ gitea.server_url }}/${{ gitea.actor }}/my-docs:latest ${{ steps.meta.outputs.REGISTRY_HOST }}/${{ steps.meta.outputs.IMAGE_NAME }}:latest
${{ gitea.server_url }}/${{ gitea.actor }}/my-docs:${{ gitea.sha }} ${{ steps.meta.outputs.REGISTRY_HOST }}/${{ steps.meta.outputs.IMAGE_NAME }}:${{ steps.meta.outputs.VERSION_SHA }}