cluster

commit 5fa645d6879dffeca5e9ce8035188681bd6b83ff
parent c2b630a58e83e8ff1781f59bc3186cd540b74f93
Author: MTRNord <MTRNord@users.noreply.github.com>
Date:   Wed, 25 Mar 2026 20:16:29 +0100

also build the blog and fix singing issues

Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>

Diffstat:
A
.github/workflows/build-blog.yaml
 | 
70
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
M
.github/workflows/build-continuwuity.yaml
 | 
2
+-

2 files changed, 71 insertions(+), 1 deletion(-)
diff --git a/.github/workflows/build-blog.yaml b/.github/workflows/build-blog.yaml
@@ -0,0 +1,70 @@
+name: Build Blog Image
+
+on:
+  push:
+    branches: ["main"]
+    paths:
+      - "apps/talos_cluster/blog/docker/**"
+      - ".github/workflows/build-blog.yaml"
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    name: Build and Push
+    runs-on: ubuntu-latest
+    environment: registry
+    steps:
+      - name: Checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        with:
+          persist-credentials: false
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4
+
+      - name: Log in to self-hosted registry
+        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4
+        with:
+          registry: registry.midnightthoughts.space
+          username: ${{ secrets.REGISTRY_USERNAME }}
+          password: ${{ secrets.REGISTRY_PASSWORD }}
+
+      - name: Install cosign
+        uses: sigstore/cosign-installer@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 # v4.1.0
+
+      - name: Extract metadata
+        id: meta
+        uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6
+        with:
+          images: registry.midnightthoughts.space/mtrnord/blog
+          tags: |
+            type=raw,value=latest
+            type=sha,prefix=sha-
+
+      - name: Build and push
+        id: build
+        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7
+        with:
+          context: apps/talos_cluster/blog/docker
+          file: apps/talos_cluster/blog/docker/Dockerfile
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          platforms: linux/amd64,linux/arm64
+
+      - name: Sign image
+        env:
+          COSIGN_PRIVATE_KEY: ${{ secrets.COSIGN_PRIVATE_KEY }}
+          COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }}
+          DIGEST: ${{ steps.build.outputs.digest }}
+        run: |
+          cosign sign --yes --key env://COSIGN_PRIVATE_KEY \
+            registry.midnightthoughts.space/mtrnord/blog@${DIGEST}
diff --git a/.github/workflows/build-continuwuity.yaml b/.github/workflows/build-continuwuity.yaml
@@ -69,5 +69,5 @@ jobs:
           COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }}
           DIGEST: ${{ steps.build.outputs.digest }}
         run: |
-          cosign sign --key env://COSIGN_PRIVATE_KEY \
+          cosign sign --yes --key env://COSIGN_PRIVATE_KEY \
             registry.midnightthoughts.space/mtrnord/cluster/continuwuity@${DIGEST}