cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

commit a40398060dd4a1e31647ddca35c5f3f079e2e0bd
parent 66d6a6df79f1bf7b8f76eef58f558eb2ce33eeec
Author: MTRNord <MTRNord@users.noreply.github.com>
Date:   Thu,  9 Apr 2026 23:23:55 +0200

for now use github ci again for images

Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>

Diffstat:
M.github/workflows/build-blog.yaml | 2+-
M.github/workflows/build-bookwyrm.yaml | 2+-
M.github/workflows/build-continuwuity.yaml | 2+-
Mapps/talos_cluster/image-builder/build-blog-cronjob.yaml | 12+++++++++++-
Mapps/talos_cluster/image-builder/build-bookwyrm-cronjob.yaml | 14+++++++++++++-
Mapps/talos_cluster/image-builder/build-continuwuity-cronjob.yaml | 14+++++++++++++-
Mapps/talos_cluster/image-builder/build-matrix-backup-cronjob.yaml | 14+++++++++++++-
Mapps/talos_cluster/image-builder/kustomization.yaml | 6+++---
8 files changed, 56 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/build-blog.yaml b/.github/workflows/build-blog.yaml @@ -13,7 +13,7 @@ permissions: jobs: build: - if: false # disabled — replaced by in-cluster image-builder cronjob + #if: false # disabled — replaced by in-cluster image-builder cronjob name: Build and Push runs-on: ubuntu-latest environment: registry diff --git a/.github/workflows/build-bookwyrm.yaml b/.github/workflows/build-bookwyrm.yaml @@ -24,7 +24,7 @@ permissions: jobs: check: - if: false # disabled — replaced by in-cluster image-builder cronjob + #if: false # disabled — replaced by in-cluster image-builder cronjob name: Check for new version runs-on: ubuntu-latest outputs: diff --git a/.github/workflows/build-continuwuity.yaml b/.github/workflows/build-continuwuity.yaml @@ -16,7 +16,7 @@ permissions: jobs: build: - if: false # disabled — replaced by in-cluster image-builder cronjob + #if: false # disabled — replaced by in-cluster image-builder cronjob name: Build and Push runs-on: ubuntu-latest environment: registry diff --git a/apps/talos_cluster/image-builder/build-blog-cronjob.yaml b/apps/talos_cluster/image-builder/build-blog-cronjob.yaml @@ -16,6 +16,16 @@ spec: serviceAccountName: image-builder-cronjob restartPolicy: Never initContainers: + - name: register-qemu + image: multiarch/qemu-user-static:latest + securityContext: + privileged: true + command: + - /register + - --reset + - -p + - "yes" + - name: clone-repo image: alpine/git:latest command: @@ -38,7 +48,7 @@ spec: - -c - | set -eu - apk add --no-cache podman git iptables jq qemu-user-static >/dev/null + apk add --no-cache podman git iptables jq >/dev/null # Install cosign v3.0.6 wget -q https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-amd64 -O /tmp/cosign && chmod +x /tmp/cosign diff --git a/apps/talos_cluster/image-builder/build-bookwyrm-cronjob.yaml b/apps/talos_cluster/image-builder/build-bookwyrm-cronjob.yaml @@ -16,6 +16,16 @@ spec: serviceAccountName: image-builder-cronjob restartPolicy: OnFailure initContainers: + - name: register-qemu + image: multiarch/qemu-user-static:latest + securityContext: + privileged: true + command: + - /register + - --reset + - -p + - "yes" + - name: check-version image: alpine:3 command: @@ -102,7 +112,9 @@ spec: - -c - | set -eu - apk add --no-cache podman git iptables jq qemu-user-static >/dev/null + apk add --no-cache podman git iptables jq >/dev/null + + # Set up QEMU permissions for the root user # Install cosign v3.0.6 wget -q https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-amd64 -O /tmp/cosign && chmod +x /tmp/cosign diff --git a/apps/talos_cluster/image-builder/build-continuwuity-cronjob.yaml b/apps/talos_cluster/image-builder/build-continuwuity-cronjob.yaml @@ -16,6 +16,16 @@ spec: serviceAccountName: image-builder-cronjob restartPolicy: Never initContainers: + - name: register-qemu + image: multiarch/qemu-user-static:latest + securityContext: + privileged: true + command: + - /register + - --reset + - -p + - "yes" + - name: clone-repo image: alpine/git:latest command: @@ -50,7 +60,9 @@ spec: - -c - | set -eu - apk add --no-cache podman git iptables jq qemu-user-static >/dev/null + apk add --no-cache podman git iptables jq >/dev/null + + # Set up QEMU permissions for the root user # Install cosign v3.0.6 wget -q https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-amd64 -O /tmp/cosign && chmod +x /tmp/cosign diff --git a/apps/talos_cluster/image-builder/build-matrix-backup-cronjob.yaml b/apps/talos_cluster/image-builder/build-matrix-backup-cronjob.yaml @@ -16,6 +16,16 @@ spec: serviceAccountName: image-builder-cronjob restartPolicy: Never initContainers: + - name: register-qemu + image: multiarch/qemu-user-static:latest + securityContext: + privileged: true + command: + - /register + - --reset + - -p + - "yes" + - name: clone-repo image: alpine/git:latest command: @@ -38,7 +48,9 @@ spec: - -c - | set -eu - apk add --no-cache podman git iptables jq qemu-user-static >/dev/null + apk add --no-cache podman git iptables jq >/dev/null + + # Set up QEMU permissions for the root user # Install cosign v3.0.6 wget -q https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-amd64 -O /tmp/cosign && chmod +x /tmp/cosign diff --git a/apps/talos_cluster/image-builder/kustomization.yaml b/apps/talos_cluster/image-builder/kustomization.yaml @@ -6,7 +6,7 @@ resources: - binfmt-daemonset.yaml - registry-secret.yaml - cosign-secret.yaml - - build-blog-cronjob.yaml - - build-continuwuity-cronjob.yaml - - build-bookwyrm-cronjob.yaml + #- build-blog-cronjob.yaml + #- build-continuwuity-cronjob.yaml + #- build-bookwyrm-cronjob.yaml - build-matrix-backup-cronjob.yaml