Initial commit.

.forgejo/workflows/build-image-from-tag.yaml

@@ -0,0 +1,71 @@
+name: build-image-from-tag
+
+# The build job is triggered manually (we trigger it from the multi-semantic-release workflow on tag creation)
+on:
+  workflow_dispatch:
+
+jobs:
+  build:
+    # Don't build the image if the registry credentials are not set, the ref is not a tag or it doesn't contain '-v'
+    if: ${{ vars.REGISTRY_USER != '' && secrets.REGISTRY_PASS != '' && startsWith(github.ref, 'refs/tags/') && contains(github.ref, '-v') }}
+    runs-on: docker
+    container:
+      image: forgejo.mixinet.net/oci/node-mixinet:latest
+      # Mount the /dind/docker.sock in the container to use it (avoids LXC)
+      options: -v /dind/docker.sock:/var/run/docker.sock
+    steps:
+      - name: Extract image name and tag from the git tag and get registry name from env
+        id: job_data
+        run: |
+          echo "::set-output name=img_name::${GITHUB_REF_NAME%%-v*}"
+          echo "::set-output name=img_tag::${GITHUB_REF_NAME##*-v}"
+          echo "::set-output name=registry::$(echo "${{ github.server_url }}" | sed -e 's%https://%%')"
+          echo "::set-output name=oci_registry_prefix::$(echo "${{ github.server_url }}/oci" | sed -e 's%https://%%')"
+
+      - name: Checkout the repo
+        uses: actions/checkout@v4
+
+      - name: Export build dir and Dockerfile
+        id: build_data
+        run: |
+          img="${{ steps.job_data.outputs.img_name }}"
+          build_dir="$(pwd)/${img}"
+          dockerfile="${build_dir}/Dockerfile"
+          if [ -f "$dockerfile" ]; then
+            echo "::set-output name=build_dir::$build_dir"
+            echo "::set-output name=dockerfile::$dockerfile"
+          else
+            echo "Couldn't find the Dockerfile for the '$img' image"
+            exit 1
+          fi
+
+      - name: Login to Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ steps.job_data.outputs.registry }}
+          username: ${{ vars.REGISTRY_USER }}
+          password: ${{ secrets.REGISTRY_PASS }}
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Build and Push
+        uses: docker/build-push-action@v6
+        with:
+          push: true
+          tags: |
+            ${{ steps.job_data.outputs.oci_registry_prefix }}/${{ steps.job_data.outputs.img_name }}:${{ steps.job_data.outputs.img_tag }}
+            ${{ steps.job_data.outputs.oci_registry_prefix }}/${{ steps.job_data.outputs.img_name }}:latest
+          context: ${{ steps.build_data.outputs.build_dir }}
+          file: ${{ steps.build_data.outputs.dockerfile }}
+          build-args: |
+            OCI_REGISTRY_PREFIX=${{ steps.job_data.outputs.oci_registry_prefix }}/
+
+      - name: List dind images and cleanup dangling ones, if present
+        shell: sh
+        run: |
+          docker image ls
+          images_to_remove="$(docker image ls -q --filter dangling=true)"
+          for img in $images_to_remove; do
+            docker rmi $img
+          done

.forgejo/workflows/multi-semantic-release.yaml

@@ -0,0 +1,73 @@
+name: multi-semantic-release
+
+# This monorepo only tags releases from the main branch
+on:
+  push:
+    branches:
+      - 'main'
+
+jobs:
+  multi-semantic-release:
+    runs-on: docker
+    container:
+      image: forgejo.mixinet.net/oci/multi-semantic-release:latest
+    steps:
+      - name: Checkout the repo
+        uses: actions/checkout@v4
+
+      - name: Generate multi-semantic-release configuration
+        shell: sh
+        run: |
+          # Get the list of images to work with (the folders that have a Dockerfile)
+          images="$(for img in */Dockerfile; do dirname "$img"; done)"
+          # Generate a values.yaml file for the main packages.json file
+          package_json_values_yaml=".package.json-values.yaml"
+          echo "images:" >"$package_json_values_yaml"
+          for img in $images; do
+            echo " - name: $img" >>"$package_json_values_yaml"
+            echo "   path: $img" >>"$package_json_values_yaml"
+          done
+          echo "::group::Generated values.yaml for the project"
+          cat "$package_json_values_yaml"
+          echo "::endgroup::"
+          # Generate the package.json file validating that is a good json file with jq
+          tmpl -f "$package_json_values_yaml" ".forgejo/package.json.tmpl" | jq . > "package.json"
+          echo "::group::Generated package.json for the project"
+          cat "package.json"
+          echo "::endgroup::"
+          # Remove the temporary values file
+          rm -f "$package_json_values_yaml"
+          # Generate the package.json file for each image
+          for img in $images; do
+            tmpl -v "img_name=$img" -v "img_path=$img" ".forgejo/ws-package.json.tmpl" | jq . > "$img/package.json"
+            echo "::group::Generated package.json for the '$img' image"
+            cat "$img/package.json"
+            echo "::endgroup::"
+          done
+
+      - name: Run multi-semantic-release
+        shell: sh
+        run: |
+          multi-semantic-release | tee .multi-semantic-release.log
+
+      - name: Trigger builds
+        shell: sh
+        run: |
+          # Get the list of tags published on the previous steps
+          tags="$(
+            sed -n -e 's/^\[.*\] \[\(.*\)\] .* Published release \([0-9]\+\.[0-9]\+\.[0-9]\+\) on .*$/\1-v\2/p' \
+              .multi-semantic-release.log
+          )"
+          rm -f .multi-semantic-release.log
+          if [ "$tags" ]; then
+            # Prepare the url for building the images
+            workflow="build-image-from-tag.yaml"
+            dispatch_url="${{ github.api_url }}/repos/${{ github.repository }}/actions/workflows/$workflow/dispatches"
+            echo "$tags" | while read -r tag; do
+              echo "Triggering build for tag '$tag'"
+              curl \
+                -H "Content-Type:application/json" \
+                -H "Authorization: token ${{ secrets.GITHUB_TOKEN }}" \
+                -d "{\"ref\":\"$tag\"}" "$dispatch_url"
+            done
+          fi