ci: add sanity check for container images

Fail build if container images have been pushed with corrupted layers
and enable buildx debug logs.
This commit is contained in:
Hidde Beydals 2020-09-18 13:15:53 +02:00
parent 37ffa6fd9a
commit 2576c739f4
1 changed files with 12 additions and 2 deletions

View File

@ -22,12 +22,14 @@ jobs:
kustomize edit set image fluxcd/source-controller=fluxcd/source-controller:${{ steps.get_version.outputs.VERSION }} kustomize edit set image fluxcd/source-controller=fluxcd/source-controller:${{ steps.get_version.outputs.VERSION }}
kustomize build . > source-controller.yaml kustomize build . > source-controller.yaml
- name: Setup QEMU - name: Setup QEMU
uses: docker/setup-qemu-action@master uses: docker/setup-qemu-action@v1
with: with:
platforms: all platforms: all
- name: Setup Docker Buildx - name: Setup Docker Buildx
id: buildx id: buildx
uses: docker/setup-buildx-action@master uses: docker/setup-buildx-action@v1
with:
buildkitd-flags: "--debug"
- name: Login to GitHub Container Registry - name: Login to GitHub Container Registry
uses: docker/login-action@v1 uses: docker/login-action@v1
with: with:
@ -59,6 +61,14 @@ jobs:
file: ./Dockerfile file: ./Dockerfile
platforms: linux/arm64 platforms: linux/arm64
tags: ghcr.io/fluxcd/source-controller-arm64:${{ steps.get_version.outputs.VERSION }} tags: ghcr.io/fluxcd/source-controller-arm64:${{ steps.get_version.outputs.VERSION }}
- name: Check images
run: |
docker buildx imagetools inspect docker.io/fluxcd/source-controller:${{ steps.get_version.outputs.VERSION }}
docker buildx imagetools inspect ghcr.io/fluxcd/source-controller:${{ steps.get_version.outputs.VERSION }}
docker buildx imagetools inspect ghcr.io/fluxcd/source-controller-arm64:${{ steps.get_version.outputs.VERSION }}
docker pull docker.io/fluxcd/source-controller:${{ steps.get_version.outputs.VERSION }}
docker pull ghcr.io/fluxcd/source-controller:${{ steps.get_version.outputs.VERSION }}
docker pull ghcr.io/fluxcd/source-controller-arm64:${{ steps.get_version.outputs.VERSION }}
- name: Create release - name: Create release
id: create_release id: create_release
uses: actions/create-release@latest uses: actions/create-release@latest