arm-images

commit b6f313222dbcba2021e0ae3fdeca1de2210c048a
Author: MTRNord <mtrnord1@gmail.com>
Date:   Tue, 13 Jun 2023 19:35:27 +0200

Add build jobs for synapse

Diffstat:
A
.github/workflows/build_synapse.yaml
 | 
55
+++++++++++++++++++++++++++++++++++++++++++++++++++++++
A
.github/workflows/build_synapse_release.yaml
 | 
55
+++++++++++++++++++++++++++++++++++++++++++++++++++++++
A
synapse/Dockerfile
 | 
5
+++++

3 files changed, 115 insertions(+), 0 deletions(-)
diff --git a/.github/workflows/build_synapse.yaml b/.github/workflows/build_synapse.yaml
@@ -0,0 +1,55 @@
+name: Publish Synapse Docker image
+
+on:
+  push:
+    branches:
+      - "main"
+  workflow_dispatch:
+
+jobs:
+  push_to_registries:
+    permissions:
+      contents: read
+      packages: write
+      id-token: write
+    name: Push synapse image to repo
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out the repo
+        uses: actions/checkout@v3
+
+      - name: Log in to Docker Hub
+        uses: docker/login-action@v2
+        with:
+          registry: coreharbor.kubernetes.midnightthoughts.space
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+
+      - name: Install Cosign
+        uses: sigstore/cosign-installer@v3
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v2
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v2
+
+      - name: Docker meta
+        id: meta
+        uses: docker/metadata-action@v4
+        with:
+          images: coreharbor.kubernetes.midnightthoughts.space/matrixdotorg/synapse
+          tags: type=sha,format=long
+
+      - name: Build and push
+        uses: docker/build-push-action@v4
+        with:
+          push: true
+          context: synapse
+          sbom: true
+          provenance: true
+          platforms: linux/amd64,linux/arm64
+          tags: ${{ steps.docker_meta.outputs.tags }}
+      - name: Sign the images with GitHub OIDC Token
+        env:
+          DIGEST: ${{ steps.build-and-push.outputs.digest }}
+          TAGS: ${{ steps.docker_meta.outputs.tags }}
+        run: cosign sign --yes "${TAGS}@${DIGEST}"
diff --git a/.github/workflows/build_synapse_release.yaml b/.github/workflows/build_synapse_release.yaml
@@ -0,0 +1,55 @@
+name: Publish Synapse Docker image
+
+on:
+  push:
+    tags:
+      - synapse-**
+  workflow_dispatch:
+
+jobs:
+  push_to_registries:
+    permissions:
+      contents: read
+      packages: write
+      id-token: write
+    name: Push synapse image to repo
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out the repo
+        uses: actions/checkout@v3
+
+      - name: Log in to Docker Hub
+        uses: docker/login-action@v2
+        with:
+          registry: coreharbor.kubernetes.midnightthoughts.space
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+
+      - name: Install Cosign
+        uses: sigstore/cosign-installer@v3
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v2
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v2
+
+      - name: Docker meta
+        id: meta
+        uses: docker/metadata-action@v4
+        with:
+          images: coreharbor.kubernetes.midnightthoughts.space/matrixdotorg/synapse
+          tags: type=sha,format=long
+
+      - name: Build and push
+        uses: docker/build-push-action@v4
+        with:
+          push: true
+          context: synapse
+          sbom: true
+          provenance: true
+          platforms: linux/amd64,linux/arm64
+          tags: ${{ steps.docker_meta.outputs.tags }}
+      - name: Sign the images with GitHub OIDC Token
+        env:
+          DIGEST: ${{ steps.build-and-push.outputs.digest }}
+          TAGS: ${{ steps.docker_meta.outputs.tags }}
+        run: cosign sign --yes "${TAGS}@${DIGEST}"
diff --git a/synapse/Dockerfile b/synapse/Dockerfile
@@ -0,0 +1,4 @@
+FROM matrixdotorg/synapse:latest
+
+RUN apt-get update -yqq && apt-get install git -yqq && apt-get clean -yqq
+RUN pip install --no-deps git+https://github.com/devture/matrix-synapse-shared-secret-auth
+\ No newline at end of file