Merge pull request 'BuildKit-build and push action - fix authentication on push' (#4) from tests/cicd into main

Reviewed-on: #4

.gitea/actions/buildkit-build-push/action.yaml

@@ -0,0 +1,65 @@
+name: BuildKit Build and Deploys
+description: "Build and deploy images"
+
+inputs:
+  registry_addr: 
+    description: registry address
+    required: true
+  registry_username:
+    description: "registry username"
+    required: true
+  registry_password:
+    description: "registry password"
+    required: true
+  buildkit_addr:
+    description: "buildkit address"
+    required: true
+  tags:
+    description: "image tags / buildctl image name"
+    required: true
+  context:
+    description: "buildctl build context"
+    required: false
+    default: "."
+  dockerfile:
+    description: "buildctl build dockerfile/folder"
+    required: true
+    default: "."       
+runs:
+  using: "composite"
+  steps:
+    - name: run buildctl built and push
+      shell: bash
+      run: |
+
+        # create docker config temp folder
+        DOCKER_CONFIG_DIR="${RUNNER_TEMP}/.buildctl_docker"
+        mkdir -p "$DOCKER_CONFIG_DIR"
+
+        # clean up
+        trap 'rm -rf "$DOCKER_CONFIG_DIR"' EXIT
+
+
+        # setup file docker config (auth) temp file
+        AUTH=$(printf "%s" "${{ inputs.registry_username }}:${{ inputs.registry_password }}" | base64 -w 0)
+        cat > "$DOCKER_CONFIG_DIR/config.json" <<EOF
+        {
+          "auths": {
+            "${{ inputs.registry_addr }}": {
+              "auth": "$AUTH"
+            }
+          }
+        }
+        EOF
+
+        # Run BuildKit build, set DOCKER_CONFIG to DOCKER_CONFIG_DIR so auth works on push 
+        DOCKER_CONFIG=$DOCKER_CONFIG_DIR buildctl \
+          --addr ${{ inputs.buildkit_addr }} \
+          build \
+          --frontend=dockerfile.v0 \
+          --local context=${{ inputs.context }} \
+          --local dockerfile=${{ inputs.dockerfile }} \
+          --opt filename=Dockerfile \
+          --output type=image,name=${{ inputs.tags }},push=true
+
+              

act-runners/network-stack/Dockerfile

@@ -1,5 +1,4 @@
-
+FROM gitea/act_runner:0.3.0
-FROM gitea/act_runner:0.2.13
 
 RUN echo "build started.." && \
 apk add --no-cache openssh-client curl ansible nodejs rclone rsync nodejs envsubst bash tar jq
@@ -21,3 +20,33 @@ RUN HELM_VERSION=$(curl -s https://api.github.com/repos/helm/helm/releases/lates
     tar -zxvf helm.tar.gz && \
     mv linux-amd64/helm /usr/local/bin/helm && \
     rm -rf linux-amd64 helm.tar.gz
+
+
+RUN echo "build started.." && \
+apk add --no-cache openssh-client curl ansible nodejs rclone rsync nodejs envsubst bash tar jq
+
+RUN curl -LO https://storage.googleapis.com/kubernetes-release/release/$(curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt)/bin/linux/amd64/kubectl
+RUN chmod +x ./kubectl
+RUN mv ./kubectl /usr/local/bin
+
+
+RUN curl -fsSL https://get.helm.sh/helm-v3.14.4-linux-amd64.tar.gz \
+    -o helm.tar.gz && \
+    tar -zxvf helm.tar.gz && \
+    mv linux-amd64/helm /usr/local/bin/helm && \
+    rm -rf linux-amd64 helm.tar.gz
+
+
+RUN HELM_VERSION=$(curl -s https://api.github.com/repos/helm/helm/releases/latest | jq -r .tag_name) && \
+    curl -fsSL https://get.helm.sh/helm-${HELM_VERSION}-linux-amd64.tar.gz -o helm.tar.gz && \
+    tar -zxvf helm.tar.gz && \
+    mv linux-amd64/helm /usr/local/bin/helm && \
+    rm -rf linux-amd64 helm.tar.gz
+
+
+# Install buildctl only (no buildkitd)
+ENV BUILDKIT_VERSION=v0.28.0
+RUN curl -L "https://github.com/moby/buildkit/releases/download/${BUILDKIT_VERSION}/buildkit-${BUILDKIT_VERSION}.linux-amd64.tar.gz" \
+    | tar -xz -C /usr/local/bin --strip-components=1 bin/buildctl
+
+###################