.drone.jsonnet

@@ -0,0 +1,180 @@
+local PipelineTest = {
+  kind: 'pipeline',
+  name: 'test',
+  platform: {
+    os: 'linux',
+    arch: 'amd64',
+  },
+  steps: [
+    {
+      name: 'markdownlint',
+      image: 'thegeeklab/markdownlint-cli',
+      commands: [
+        "markdownlint 'README.md'",
+      ],
+    },
+  ],
+  trigger: {
+    ref: ['refs/heads/main', 'refs/tags/**', 'refs/pull/**'],
+  },
+};
+
+local PipelineBuildContainer(version='7') = {
+  kind: 'pipeline',
+  name: 'build-container-rh' + version,
+  platform: {
+    os: 'linux',
+    arch: 'amd64',
+  },
+  steps: [
+    {
+      name: 'dryrun',
+      image: 'thegeeklab/drone-docker-buildx:20',
+      pull: 'always',
+      settings: {
+        dry_run: true,
+        dockerfile: 'Dockerfile.rh' + version,
+        repo: 'thegeeklab/${DRONE_REPO_NAME}',
+      },
+      when: {
+        ref: ['refs/pull/**'],
+      },
+    },
+    {
+      name: 'publish-dockerhub',
+      image: 'thegeeklab/drone-docker-buildx:20',
+      pull: 'always',
+      settings: {
+        dockerfile: 'Dockerfile.rh' + version,
+        repo: 'thegeeklab/${DRONE_REPO_NAME}',
+        username: { from_secret: 'docker_username' },
+        password: { from_secret: 'docker_password' },
+      },
+      when: {
+        ref: ['refs/heads/main', 'refs/tags/**'],
+      },
+    },
+    {
+      name: 'publish-quay',
+      image: 'thegeeklab/drone-docker-buildx:20',
+      pull: 'always',
+      settings: {
+        dockerfile: 'Dockerfile.rh' + version,
+        registry: 'quay.io',
+        repo: 'quay.io/thegeeklab/${DRONE_REPO_NAME}',
+        username: { from_secret: 'quay_username' },
+        password: { from_secret: 'quay_password' },
+        tags: version,
+      },
+      when: {
+        ref: ['refs/heads/main', 'refs/tags/**'],
+      },
+    },
+  ],
+  depends_on: [
+    'test',
+  ],
+  trigger: {
+    ref: ['refs/heads/main', 'refs/tags/**', 'refs/pull/**'],
+  },
+};
+
+local PipelineNotifications = {
+  kind: 'pipeline',
+  name: 'notifications',
+  platform: {
+    os: 'linux',
+    arch: 'amd64',
+  },
+  steps: [
+    {
+      image: 'plugins/manifest',
+      name: 'manifest-dockerhub',
+      settings: {
+        ignore_missing: true,
+        username: { from_secret: 'docker_username' },
+        password: { from_secret: 'docker_password' },
+        spec: 'manifest.tmpl',
+      },
+      when: {
+        status: ['success'],
+      },
+    },
+    {
+      image: 'plugins/manifest',
+      name: 'manifest-quay',
+      settings: {
+        ignore_missing: true,
+        username: { from_secret: 'quay_username' },
+        password: { from_secret: 'quay_password' },
+        spec: 'manifest-quay.tmpl',
+      },
+      when: {
+        status: ['success'],
+      },
+    },
+    {
+      name: 'pushrm-dockerhub',
+      pull: 'always',
+      image: 'chko/docker-pushrm:1',
+      environment: {
+        DOCKER_PASS: {
+          from_secret: 'docker_password',
+        },
+        DOCKER_USER: {
+          from_secret: 'docker_username',
+        },
+        PUSHRM_FILE: 'README.md',
+        PUSHRM_SHORT: 'Rootless Alpine base image',
+        PUSHRM_TARGET: 'thegeeklab/${DRONE_REPO_NAME}',
+      },
+      when: {
+        status: ['success'],
+      },
+    },
+    {
+      name: 'pushrm-quay',
+      pull: 'always',
+      image: 'chko/docker-pushrm:1',
+      environment: {
+        APIKEY__QUAY_IO: {
+          from_secret: 'quay_token',
+        },
+        PUSHRM_FILE: 'README.md',
+        PUSHRM_TARGET: 'quay.io/thegeeklab/${DRONE_REPO_NAME}',
+      },
+      when: {
+        status: ['success'],
+      },
+    },
+    {
+      name: 'matrix',
+      image: 'thegeeklab/drone-matrix',
+      settings: {
+        homeserver: { from_secret: 'matrix_homeserver' },
+        roomid: { from_secret: 'matrix_roomid' },
+        template: 'Status: **{{ build.Status }}**<br/> Build: [{{ repo.Owner }}/{{ repo.Name }}]({{ build.Link }}){{#if build.Branch}} ({{ build.Branch }}){{/if}} by {{ commit.Author }}<br/> Message: {{ commit.Message.Title }}',
+        username: { from_secret: 'matrix_username' },
+        password: { from_secret: 'matrix_password' },
+      },
+      when: {
+        status: ['success', 'failure'],
+      },
+    },
+  ],
+  depends_on: [
+    'build-container-rh7',
+    'build-container-rh8',
+  ],
+  trigger: {
+    ref: ['refs/heads/main', 'refs/tags/**'],
+    status: ['success', 'failure'],
+  },
+};
+
+[
+  PipelineTest,
+  PipelineBuildContainer(version='7'),
+  PipelineBuildContainer(version='8'),
+  PipelineNotifications,
+]

.drone.yml

@@ -7,111 +7,138 @@ platform:
   arch: amd64
 
 steps:
-- name: markdownlint
+  - name: markdownlint
-  image: thegeeklab/markdownlint-cli
+    image: thegeeklab/markdownlint-cli
-  commands:
+    commands:
-  - markdownlint 'README.md'
+      - markdownlint 'README.md'
 
 trigger:
   ref:
-  - refs/heads/main
+    - refs/heads/main
-  - refs/pull/**
+    - refs/tags/**
-  - refs/tags/**
+    - refs/pull/**
 
 ---
 kind: pipeline
-name: build-container
+name: build-container-rh7
 
 platform:
   os: linux
   arch: amd64
 
 steps:
-- name: dryrun
+  - name: dryrun
-  image: thegeeklab/drone-docker-buildx:20
+    pull: always
-  settings:
+    image: thegeeklab/drone-docker-buildx:20
-    dockerfile: Dockerfile
+    settings:
-    dry_run: true
+      dockerfile: Dockerfile.rh7
-    password:
+      dry_run: true
-      from_secret: docker_password
+      repo: thegeeklab/${DRONE_REPO_NAME}
-    repo: thegeeklab/${DRONE_REPO_NAME}
+    when:
-    username:
+      ref:
-      from_secret: docker_username
+        - refs/pull/**
-  when:
-    ref:
-    - refs/pull/**
 
-- name: tags
+  - name: publish-dockerhub
-  image: thegeeklab/docker-autotag
+    pull: always
-  environment:
+    image: thegeeklab/drone-docker-buildx:20
-    DOCKER_AUTOTAG_FORCE_LATEST: True
+    settings:
-    DOCKER_AUTOTAG_IGNORE_PRERELEASE: True
+      dockerfile: Dockerfile.rh7
-    DOCKER_AUTOTAG_OUTPUT_FILE: .tags
+      password:
-    DOCKER_AUTOTAG_VERSION: ${DRONE_TAG}
+        from_secret: docker_password
-  when:
+      repo: thegeeklab/${DRONE_REPO_NAME}
-    ref:
+      username:
-    - refs/heads/main
+        from_secret: docker_username
-    - refs/tags/**
+    when:
-  depends_on:
+      ref:
-  - dryrun
+        - refs/heads/main
+        - refs/tags/**
 
-- name: publish-dockerhub
+  - name: publish-quay
-  image: thegeeklab/drone-docker-buildx:20
+    pull: always
-  settings:
+    image: thegeeklab/drone-docker-buildx:20
-    dockerfile: Dockerfile
+    settings:
-    password:
+      dockerfile: Dockerfile.rh7
-      from_secret: docker_password
+      password:
-    repo: thegeeklab/${DRONE_REPO_NAME}
+        from_secret: quay_password
-    username:
+      registry: quay.io
-      from_secret: docker_username
+      repo: quay.io/thegeeklab/${DRONE_REPO_NAME}
-  when:
+      tags: 7
-    ref:
+      username:
-    - refs/heads/main
+        from_secret: quay_username
-    - refs/tags/**
+    when:
-  depends_on:
+      ref:
-  - tags
+        - refs/heads/main
-
+        - refs/tags/**
-- name: publish-quay
-  image: thegeeklab/drone-docker-buildx:20
-  settings:
-    dockerfile: Dockerfile
-    password:
-      from_secret: quay_password
-    registry: quay.io
-    repo: quay.io/thegeeklab/${DRONE_REPO_NAME}
-    username:
-      from_secret: quay_username
-  when:
-    ref:
-    - refs/heads/main
-    - refs/tags/**
-  depends_on:
-  - tags
-
-- name: publish-gitea
-  image: plugins/gitea-release
-  settings:
-    api_key:
-      from_secret: gitea_token
-    base_url: https://gitea.rknet.org
-    note: CHANGELOG.md
-    overwrite: true
-    title: ${DRONE_TAG}
-  when:
-    ref:
-    - refs/tags/**
-  depends_on:
-  - publish-dockerhub
-  - publish-quay
 
 trigger:
   ref:
-  - refs/heads/main
+    - refs/heads/main
-  - refs/pull/**
+    - refs/tags/**
-  - refs/tags/**
+    - refs/pull/**
 
 depends_on:
-- test
+  - test
+
+---
+kind: pipeline
+name: build-container-rh8
+
+platform:
+  os: linux
+  arch: amd64
+
+steps:
+  - name: dryrun
+    pull: always
+    image: thegeeklab/drone-docker-buildx:20
+    settings:
+      dockerfile: Dockerfile.rh8
+      dry_run: true
+      repo: thegeeklab/${DRONE_REPO_NAME}
+    when:
+      ref:
+        - refs/pull/**
+
+  - name: publish-dockerhub
+    pull: always
+    image: thegeeklab/drone-docker-buildx:20
+    settings:
+      dockerfile: Dockerfile.rh8
+      password:
+        from_secret: docker_password
+      repo: thegeeklab/${DRONE_REPO_NAME}
+      username:
+        from_secret: docker_username
+    when:
+      ref:
+        - refs/heads/main
+        - refs/tags/**
+
+  - name: publish-quay
+    pull: always
+    image: thegeeklab/drone-docker-buildx:20
+    settings:
+      dockerfile: Dockerfile.rh8
+      password:
+        from_secret: quay_password
+      registry: quay.io
+      repo: quay.io/thegeeklab/${DRONE_REPO_NAME}
+      tags: 8
+      username:
+        from_secret: quay_username
+    when:
+      ref:
+        - refs/heads/main
+        - refs/tags/**
+
+trigger:
+  ref:
+    - refs/heads/main
+    - refs/tags/**
+    - refs/pull/**
+
+depends_on:
+  - test
 
 ---
 kind: pipeline
@@ -122,63 +149,90 @@ platform:
   arch: amd64
 
 steps:
-- name: pushrm-dockerhub
+  - name: manifest-dockerhub
-  pull: always
+    image: plugins/manifest
-  image: chko/docker-pushrm:1
+    settings:
-  environment:
+      ignore_missing: true
-    DOCKER_PASS:
+      password:
-      from_secret: docker_password
+        from_secret: docker_password
-    DOCKER_USER:
+      spec: manifest.tmpl
-      from_secret: docker_username
+      username:
-    PUSHRM_FILE: README.md
+        from_secret: docker_username
-    PUSHRM_SHORT: CentOS 7 image to build RPM packages
+    when:
-    PUSHRM_TARGET: thegeeklab/${DRONE_REPO_NAME}
+      status:
-  when:
+        - success
-    status:
-    - success
 
-- name: pushrm-quay
+  - name: manifest-quay
-  pull: always
+    image: plugins/manifest
-  image: chko/docker-pushrm:1
+    settings:
-  environment:
+      ignore_missing: true
-    APIKEY__QUAY_IO:
+      password:
-      from_secret: quay_token
+        from_secret: quay_password
-    PUSHRM_FILE: README.md
+      spec: manifest-quay.tmpl
-    PUSHRM_TARGET: quay.io/thegeeklab/${DRONE_REPO_NAME}
+      username:
-  when:
+        from_secret: quay_username
-    status:
+    when:
-    - success
+      status:
+        - success
 
-- name: matrix
+  - name: pushrm-dockerhub
-  image: plugins/matrix
+    pull: always
-  settings:
+    image: chko/docker-pushrm:1
-    homeserver:
+    environment:
-      from_secret: matrix_homeserver
+      DOCKER_PASS:
-    password:
+        from_secret: docker_password
-      from_secret: matrix_password
+      DOCKER_USER:
-    roomid:
+        from_secret: docker_username
-      from_secret: matrix_roomid
+      PUSHRM_FILE: README.md
-    template: "Status: **{{ build.status }}**<br/> Build: [{{ repo.Owner }}/{{ repo.Name }}]({{ build.link }}) ({{ build.branch }}) by {{ build.author }}<br/> Message: {{ build.message }}"
+      PUSHRM_SHORT: Rootless Alpine base image
-    username:
+      PUSHRM_TARGET: thegeeklab/${DRONE_REPO_NAME}
-      from_secret: matrix_username
+    when:
-  when:
+      status:
-    status:
+        - success
-    - success
+
-    - failure
+  - name: pushrm-quay
+    pull: always
+    image: chko/docker-pushrm:1
+    environment:
+      APIKEY__QUAY_IO:
+        from_secret: quay_token
+      PUSHRM_FILE: README.md
+      PUSHRM_TARGET: quay.io/thegeeklab/${DRONE_REPO_NAME}
+    when:
+      status:
+        - success
+
+  - name: matrix
+    image: thegeeklab/drone-matrix
+    settings:
+      homeserver:
+        from_secret: matrix_homeserver
+      password:
+        from_secret: matrix_password
+      roomid:
+        from_secret: matrix_roomid
+      template: "Status: **{{ build.Status }}**<br/> Build: [{{ repo.Owner }}/{{ repo.Name }}]({{ build.Link }}){{#if build.Branch}} ({{ build.Branch }}){{/if}} by {{ commit.Author }}<br/> Message: {{ commit.Message.Title }}"
+      username:
+        from_secret: matrix_username
+    when:
+      status:
+        - success
+        - failure
 
 trigger:
   ref:
-  - refs/heads/main
+    - refs/heads/main
-  - refs/tags/**
+    - refs/tags/**
   status:
-  - success
+    - success
-  - failure
+    - failure
 
 depends_on:
-- build-container
+  - build-container-rh7
+  - build-container-rh8
 
 ---
 kind: signature
-hmac: f3a932f626d5aab6054e52d4419f9b6eacd25e52dec3ab9a9f0335acd5433e73
+hmac: 474bbbb50ad73c8e3fb3c9047caabeefaf91f311582963e508503405b652af5d
 
 ...

Dockerfile.rh7

@@ -9,6 +9,10 @@ LABEL org.opencontainers.image.documentation="https://gitea.rknet.org/docker/rpm
 
 ENV RPMBUILD_BASE_DIR=/drone/src
 
+RUN yum install -q -y \
+    epel-release \
+    yum-utils && \
+    rpm --import https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-7
 RUN yum install -q -y \
     dash \
     ca-certificates \
@@ -38,9 +42,7 @@ RUN yum install -q -y \
     pkgconfig \
     wget curl \
     automake autoconf \
-    yum-utils rpm-build rpmdevtools \
+    rpm-build rpmdevtools && \
-    epel-release && \
-    rpm --import https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-7 && \
     yum clean all
 
 ADD overlay/ /

Dockerfile.rh8

@@ -0,0 +1,54 @@
+FROM rockylinux/rockylinux:8
+
+LABEL maintainer="Robert Kaussow <mail@thegeeklab.de>"
+LABEL org.opencontainers.image.authors="Robert Kaussow <mail@thegeeklab.de>"
+LABEL org.opencontainers.image.title="rpmbuild"
+LABEL org.opencontainers.image.url="https://gitea.rknet.org/docker/rpmbuild"
+LABEL org.opencontainers.image.source="https://gitea.rknet.org/docker/rpmbuild"
+LABEL org.opencontainers.image.documentation="https://gitea.rknet.org/docker/rpmbuild"
+
+ENV RPMBUILD_BASE_DIR=/drone/src
+
+RUN dnf install -q -y \
+    epel-release \
+    dnf-utils dnf-plugins-core && \
+    rpm --import https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-7 && \
+    dnf config-manager --set-enabled powertools
+RUN dnf install -q -y \
+    dash \
+    ca-certificates \
+    gcc gcc-c++ \
+    gnutls \
+    gnutls-devel \
+    libtool libtool-ltdl \
+    pam-devel \
+    dbus-devel \
+    avahi-devel \
+    systemd-devel \
+    make cmake \
+    git \
+    bzip2 \
+    bzip2-devel \
+    freetype-devel \
+    fribidi-devel \
+    expat-devel \
+    gperf \
+    nasm \
+    perl \
+    python3 \
+    yasm \
+    which \
+    libva-devel \
+    zlib-devel \
+    pkgconfig \
+    wget curl \
+    automake autoconf \
+    rpm-build rpmdevtools && \
+    dnf clean all
+
+ADD overlay/ /
+
+USER root
+
+WORKDIR ${RPMBUILD_BASE_DIR}
+CMD []

README.md

@@ -1,6 +1,6 @@
 # rpmbuild
 
-CentOS 7 image to build RPM packages
+Base image to build RPM packages
 
 [![Build Status](https://img.shields.io/drone/build/docker/rpmbuild?logo=drone&server=https%3A%2F%2Fdrone.rknet.org)](https://drone.rknet.org/docker/rpmbuild)
 [![Docker Hub](https://img.shields.io/badge/dockerhub-latest-blue.svg?logo=docker&logoColor=white)](https://hub.docker.com/r/thegeeklab/rpmbuild)
@@ -8,7 +8,7 @@ CentOS 7 image to build RPM packages
 [![Source: Gitea](https://img.shields.io/badge/source-gitea-blue.svg?logo=gitea&logoColor=white)](https://gitea.rknet.org/docker/rpmbuild)
 [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](https://gitea.rknet.org/docker/rpmbuild/src/branch/main/LICENSE)
 
-Simple Docker image based on CentOS 7 to build RPM packages.
+Simple Docker images based on CentOS 7/Rocky Linux 8 to build RPM packages.
 
 ## Environment variables
 

renovate.json

@@ -0,0 +1,4 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["github>thegeeklab/renovate-presets:docker"]
+}