test multiarch

.drone.jsonnet

@@ -0,0 +1,216 @@
+local PipelineTest = {
+  kind: 'pipeline',
+  name: 'test',
+  platform: {
+    os: 'linux',
+    arch: 'amd64',
+  },
+  steps: [
+    {
+      name: 'markdownlint',
+      image: 'thegeeklab/markdownlint-cli',
+      commands: [
+        "markdownlint 'README.md'",
+      ],
+    },
+  ],
+  trigger: {
+    ref: ['refs/heads/main', 'refs/tags/**', 'refs/pull/**'],
+  },
+};
+
+local PipelineBuildContainer(arch='amd64') = {
+  kind: 'pipeline',
+  name: 'build-container-' + arch,
+  platform: {
+    os: 'linux',
+    arch: 'amd64',
+  },
+  steps: [
+    {
+      name: 'wait-for',
+      image: 'thegeeklab/wait-for',
+      commands: [
+        'wait-for dind-' + arch + ':2376',
+      ],
+      environment: {
+        WAITFOR_TIMEOUT: 60,
+      },
+    },
+    {
+      name: 'dryrun',
+      image: 'jdrouet/docker-with-buildx:stable',
+      commands: [
+        'docker buildx create --use',
+        'docker buildx build --platform linux/' + std.strReplace(arch, '_', '/') + ' --tag thegeeklab/buildx-alpine:latest .',
+      ],
+      volumes: [{
+        name: 'dockersock-' + arch,
+        path: '/var/run',
+      }],
+      depends_on: ['wait-for'],
+      when: {
+        ref: ['refs/pull/**'],
+      },
+    },
+    {
+      name: 'tags',
+      image: 'thegeeklab/docker-autotag',
+      environment: {
+        DOCKER_AUTOTAG_FORCE_LATEST: 'True',
+        DOCKER_AUTOTAG_IGNORE_PRERELEASE: 'True',
+        DOCKER_AUTOTAG_OUTPUT_FILE: '.tags',
+        DOCKER_AUTOTAG_VERSION: '${DRONE_TAG}',
+      },
+      depends_on: ['wait-for'],
+      when: {
+        ref: ['refs/heads/main', 'refs/tags/**'],
+      },
+    },
+    {
+      name: 'publish-dockerhub',
+      image: 'jdrouet/docker-with-buildx:stable',
+      commands: [
+        'docker login -u "$$DOCKER_USERNAME" -p "$$DOCKER_PASSWORD"',
+        'docker buildx create --use',
+        'docker buildx build --platform linux/' + std.strReplace(arch, '_', '/') + ' --tag thegeeklab/buildx-alpine:latest-' + std.split(arch, '_')[0] + ' .',
+      ],
+      environment: {
+        DOCKER_PASSWORD: { from_secret: 'docker_password' },
+        DOCKER_USERNAME: { from_secret: 'docker_username' },
+      },
+      volumes: [{
+        name: 'dockersock-' + arch,
+        path: '/var/run',
+      }],
+      when: {
+        ref: ['refs/heads/main', 'refs/tags/**'],
+      },
+      depends_on: ['tags'],
+    },
+  ],
+  services: [
+    {
+      name: 'dind-' + arch,
+      image: 'docker:dind',
+      privileged: true,
+      volumes: [{
+        name: 'dockersock-' + arch,
+        path: '/var/run',
+      }],
+    },
+  ],
+  volumes: [{
+    name: 'dockersock-' + arch,
+    temp: {},
+  }],
+  depends_on: [
+    'test',
+  ],
+  trigger: {
+    ref: ['refs/heads/main', 'refs/tags/**', 'refs/pull/**'],
+  },
+};
+
+local PipelineNotifications = {
+  kind: 'pipeline',
+  image_pull_secrets: ['docker_config'],
+  name: 'notifications',
+  platform: {
+    os: 'linux',
+    arch: 'amd64',
+  },
+  steps: [
+    {
+      image: 'plugins/manifest',
+      name: 'manifest-dockerhub',
+      settings: {
+        ignore_missing: true,
+        auto_tag: true,
+        username: { from_secret: 'docker_username' },
+        password: { from_secret: 'docker_password' },
+        spec: 'manifest.tmpl',
+      },
+      when: {
+        status: ['success'],
+      },
+    },
+    {
+      image: 'plugins/manifest',
+      name: 'manifest-quay',
+      settings: {
+        ignore_missing: true,
+        auto_tag: true,
+        username: { from_secret: 'quay_username' },
+        password: { from_secret: 'quay_password' },
+        spec: 'manifest-quay.tmpl',
+      },
+      when: {
+        status: ['success'],
+      },
+    },
+    {
+      name: 'pushrm-dockerhub',
+      pull: 'always',
+      image: 'chko/docker-pushrm:1',
+      environment: {
+        DOCKER_PASS: {
+          from_secret: 'docker_password',
+        },
+        DOCKER_USER: {
+          from_secret: 'docker_username',
+        },
+        PUSHRM_FILE: 'README.md',
+        PUSHRM_SHORT: 'Rootless Alpine base image',
+        PUSHRM_TARGET: 'thegeeklab/${DRONE_REPO_NAME}',
+      },
+      when: {
+        status: ['success'],
+      },
+    },
+    {
+      name: 'pushrm-quay',
+      pull: 'always',
+      image: 'chko/docker-pushrm:1',
+      environment: {
+        APIKEY__QUAY_IO: {
+          from_secret: 'quay_token',
+        },
+        PUSHRM_FILE: 'README.md',
+        PUSHRM_TARGET: 'quay.io/thegeeklab/${DRONE_REPO_NAME}',
+      },
+      when: {
+        status: ['success'],
+      },
+    },
+    {
+      name: 'matrix',
+      image: 'plugins/matrix',
+      settings: {
+        homeserver: { from_secret: 'matrix_homeserver' },
+        roomid: { from_secret: 'matrix_roomid' },
+        template: 'Status: **{{ build.status }}**<br/> Build: [{{ repo.Owner }}/{{ repo.Name }}]({{ build.link }}) ({{ build.branch }}) by {{ build.author }}<br/> Message: {{ build.message }}',
+        username: { from_secret: 'matrix_username' },
+        password: { from_secret: 'matrix_password' },
+      },
+      when: {
+        status: ['success', 'failure'],
+      },
+    },
+  ],
+  depends_on: [
+    'docs',
+  ],
+  trigger: {
+    ref: ['refs/heads/main', 'refs/tags/**'],
+    status: ['success', 'failure'],
+  },
+};
+
+[
+  PipelineTest,
+  PipelineBuildContainer(arch='amd64'),
+  PipelineBuildContainer(arch='arm64_v8'),
+  PipelineBuildContainer(arch='arm_v7'),
+  PipelineNotifications,
+]

.drone.yml

@@ -15,12 +15,12 @@ steps:
 trigger:
   ref:
   - refs/heads/main
-  - refs/pull/**
   - refs/tags/**
+  - refs/pull/**
 
 ---
 kind: pipeline
-name: build-container
+name: build-container-amd64
 
 platform:
   os: linux
@@ -30,7 +30,7 @@ steps:
 - name: wait-for
   image: thegeeklab/wait-for
   commands:
-  - wait-for dind:2376
+  - wait-for dind-amd64:2376
   environment:
     WAITFOR_TIMEOUT: 60
 
@@ -38,9 +38,9 @@ steps:
   image: jdrouet/docker-with-buildx:stable
   commands:
   - docker buildx create --use
-  - docker buildx build --platform linux/arm/v7,linux/arm64/v8,linux/amd64 --tag thegeeklab/buildx-alpine:latest .
+  - docker buildx build --platform linux/amd64 --tag thegeeklab/buildx-alpine:latest .
   volumes:
-  - name: dockersock
+  - name: dockersock-amd64
     path: /var/run
   when:
     ref:
@@ -67,15 +67,14 @@ steps:
   commands:
   - docker login -u "$$DOCKER_USERNAME" -p "$$DOCKER_PASSWORD"
   - docker buildx create --use
-  - docker buildx build --push --platform linux/amd64 --tag thegeeklab/buildx-alpine:latest .
+  - docker buildx build --platform linux/amd64 --tag thegeeklab/buildx-alpine:latest-amd64 .
-  - docker buildx build --push --platform linux/arm/v7 --tag thegeeklab/buildx-alpine:latest .
   environment:
     DOCKER_PASSWORD:
       from_secret: docker_password
     DOCKER_USERNAME:
       from_secret: docker_username
   volumes:
-  - name: dockersock
+  - name: dockersock-amd64
     path: /var/run
   when:
     ref:
@@ -84,38 +83,195 @@ steps:
   depends_on:
   - tags
 
-- name: publish-gitea
-  image: plugins/gitea-release
-  settings:
-    api_key:
-      from_secret: gitea_token
-    base_url: https://gitea.rknet.org
-    note: CHANGELOG.md
-    overwrite: true
-    title: ${DRONE_TAG}
-  when:
-    ref:
-    - refs/tags/**
-  depends_on:
-  - publish-dockerhub
-
 services:
-- name: dind
+- name: dind-amd64
   image: docker:dind
   privileged: true
   volumes:
-  - name: dockersock
+  - name: dockersock-amd64
     path: /var/run
 
 volumes:
-- name: dockersock
+- name: dockersock-amd64
   temp: {}
 
 trigger:
   ref:
   - refs/heads/main
-  - refs/pull/**
   - refs/tags/**
+  - refs/pull/**
+
+depends_on:
+- test
+
+---
+kind: pipeline
+name: build-container-arm64_v8
+
+platform:
+  os: linux
+  arch: amd64
+
+steps:
+- name: wait-for
+  image: thegeeklab/wait-for
+  commands:
+  - wait-for dind-arm64_v8:2376
+  environment:
+    WAITFOR_TIMEOUT: 60
+
+- name: dryrun
+  image: jdrouet/docker-with-buildx:stable
+  commands:
+  - docker buildx create --use
+  - docker buildx build --platform linux/arm64/v8 --tag thegeeklab/buildx-alpine:latest .
+  volumes:
+  - name: dockersock-arm64_v8
+    path: /var/run
+  when:
+    ref:
+    - refs/pull/**
+  depends_on:
+  - wait-for
+
+- name: tags
+  image: thegeeklab/docker-autotag
+  environment:
+    DOCKER_AUTOTAG_FORCE_LATEST: True
+    DOCKER_AUTOTAG_IGNORE_PRERELEASE: True
+    DOCKER_AUTOTAG_OUTPUT_FILE: .tags
+    DOCKER_AUTOTAG_VERSION: ${DRONE_TAG}
+  when:
+    ref:
+    - refs/heads/main
+    - refs/tags/**
+  depends_on:
+  - wait-for
+
+- name: publish-dockerhub
+  image: jdrouet/docker-with-buildx:stable
+  commands:
+  - docker login -u "$$DOCKER_USERNAME" -p "$$DOCKER_PASSWORD"
+  - docker buildx create --use
+  - docker buildx build --platform linux/arm64/v8 --tag thegeeklab/buildx-alpine:latest-arm64 .
+  environment:
+    DOCKER_PASSWORD:
+      from_secret: docker_password
+    DOCKER_USERNAME:
+      from_secret: docker_username
+  volumes:
+  - name: dockersock-arm64_v8
+    path: /var/run
+  when:
+    ref:
+    - refs/heads/main
+    - refs/tags/**
+  depends_on:
+  - tags
+
+services:
+- name: dind-arm64_v8
+  image: docker:dind
+  privileged: true
+  volumes:
+  - name: dockersock-arm64_v8
+    path: /var/run
+
+volumes:
+- name: dockersock-arm64_v8
+  temp: {}
+
+trigger:
+  ref:
+  - refs/heads/main
+  - refs/tags/**
+  - refs/pull/**
+
+depends_on:
+- test
+
+---
+kind: pipeline
+name: build-container-arm_v7
+
+platform:
+  os: linux
+  arch: amd64
+
+steps:
+- name: wait-for
+  image: thegeeklab/wait-for
+  commands:
+  - wait-for dind-arm_v7:2376
+  environment:
+    WAITFOR_TIMEOUT: 60
+
+- name: dryrun
+  image: jdrouet/docker-with-buildx:stable
+  commands:
+  - docker buildx create --use
+  - docker buildx build --platform linux/arm/v7 --tag thegeeklab/buildx-alpine:latest .
+  volumes:
+  - name: dockersock-arm_v7
+    path: /var/run
+  when:
+    ref:
+    - refs/pull/**
+  depends_on:
+  - wait-for
+
+- name: tags
+  image: thegeeklab/docker-autotag
+  environment:
+    DOCKER_AUTOTAG_FORCE_LATEST: True
+    DOCKER_AUTOTAG_IGNORE_PRERELEASE: True
+    DOCKER_AUTOTAG_OUTPUT_FILE: .tags
+    DOCKER_AUTOTAG_VERSION: ${DRONE_TAG}
+  when:
+    ref:
+    - refs/heads/main
+    - refs/tags/**
+  depends_on:
+  - wait-for
+
+- name: publish-dockerhub
+  image: jdrouet/docker-with-buildx:stable
+  commands:
+  - docker login -u "$$DOCKER_USERNAME" -p "$$DOCKER_PASSWORD"
+  - docker buildx create --use
+  - docker buildx build --platform linux/arm/v7 --tag thegeeklab/buildx-alpine:latest-arm .
+  environment:
+    DOCKER_PASSWORD:
+      from_secret: docker_password
+    DOCKER_USERNAME:
+      from_secret: docker_username
+  volumes:
+  - name: dockersock-arm_v7
+    path: /var/run
+  when:
+    ref:
+    - refs/heads/main
+    - refs/tags/**
+  depends_on:
+  - tags
+
+services:
+- name: dind-arm_v7
+  image: docker:dind
+  privileged: true
+  volumes:
+  - name: dockersock-arm_v7
+    path: /var/run
+
+volumes:
+- name: dockersock-arm_v7
+  temp: {}
+
+trigger:
+  ref:
+  - refs/heads/main
+  - refs/tags/**
+  - refs/pull/**
 
 depends_on:
 - test
@@ -129,6 +285,34 @@ platform:
   arch: amd64
 
 steps:
+- name: manifest-dockerhub
+  image: plugins/manifest
+  settings:
+    auto_tag: true
+    ignore_missing: true
+    password:
+      from_secret: docker_password
+    spec: manifest.tmpl
+    username:
+      from_secret: docker_username
+  when:
+    status:
+    - success
+
+- name: manifest-quay
+  image: plugins/manifest
+  settings:
+    auto_tag: true
+    ignore_missing: true
+    password:
+      from_secret: quay_password
+    spec: manifest-quay.tmpl
+    username:
+      from_secret: quay_username
+  when:
+    status:
+    - success
+
 - name: pushrm-dockerhub
   pull: always
   image: chko/docker-pushrm:1
@@ -173,6 +357,9 @@ steps:
     - success
     - failure
 
+image_pull_secrets:
+- docker_config
+
 trigger:
   ref:
   - refs/heads/main
@@ -182,10 +369,6 @@ trigger:
   - failure
 
 depends_on:
-- build-container
+- docs
-
----
-kind: signature
-hmac: d62e2d1f1c7d48265f021c7581a4171ccbe70fdfca9569fa9733c915bc2fcde4
 
 ...