sync-image #3
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: sync-image | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| date: | |
| description: "可选：附加版本日期（例如 20251016），将额外同步 tag-<date>" | |
| required: false | |
| default: "" | |
| jobs: | |
| sync: | |
| name: Sync images from CNB to GHCR & Docker Hub | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| packages: write | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| with: | |
| submodules: false | |
| - name: Setup skopeo | |
| run: | | |
| sudo apt-get update | |
| sudo apt-get install -y --no-install-recommends skopeo jq | |
| - name: Parse mapping.json → build matrix | |
| id: gen | |
| run: | | |
| set -euo pipefail | |
| # 固定使用 cnb 作为源 | |
| src_key="cnb" | |
| echo "使用源: ${src_key}" | |
| date_input='${{ github.event.inputs.date }}' | |
| if [ -n "$date_input" ]; then | |
| echo "使用日期后缀: $date_input" | |
| else | |
| echo "未指定日期后缀" | |
| fi | |
| # 读取 registry 映射 | |
| ghcr_repo=$(jq -r '.registry["ddk"].github' mapping.json) | |
| docker_repo=$(jq -r '.registry["ddk"].docker' mapping.json) | |
| cnb_repo=$(jq -r '.registry["ddk"].cnb' mapping.json) | |
| ghcr_clang_repo=$(jq -r '.registry["ddk-clang"].github' mapping.json) | |
| docker_clang_repo=$(jq -r '.registry["ddk-clang"].docker' mapping.json) | |
| cnb_clang_repo=$(jq -r '.registry["ddk-clang"].cnb' mapping.json) | |
| # 选择源 | |
| src_ddk="$cnb_repo"; src_clang="$cnb_clang_repo" | |
| # 组合版本矩阵：每个元素包含：name, src, ghcr, docker | |
| # ddk 标签：来自 mapping.json.android[].name | |
| echo "[INFO] 从 mapping.json 收集 ddk 标签" | |
| ddk_count=$(jq -r '.android | length' mapping.json) | |
| echo "ddk 标签数量: $ddk_count" | |
| ddk_matrix="[]" | |
| jq -r '.android[].name' mapping.json | while read -r tag; do | |
| item=$(jq -n \ | |
| --arg name "ddk:$tag" \ | |
| --arg src "$src_ddk:$tag" \ | |
| --arg ghcr "$ghcr_repo:$tag" \ | |
| --arg dock "$docker_repo:$tag" \ | |
| '{name:$name, src:$src, ghcr:$ghcr, docker:$dock}') | |
| ddk_matrix=$(jq -c --argjson it "$item" '. + [$it]' <<< "$ddk_matrix") | |
| # 若指定日期，则添加额外的日期标签项（源使用原标签，目标标签追加 -$date） | |
| if [ -n "$date_input" ]; then | |
| item_date=$(jq -n \ | |
| --arg name "ddk:${tag}-$date_input" \ | |
| --arg src "$src_ddk:$tag" \ | |
| --arg ghcr "$ghcr_repo:${tag}-$date_input" \ | |
| --arg dock "$docker_repo:${tag}-$date_input" \ | |
| '{name:$name, src:$src, ghcr:$ghcr, docker:$dock}') | |
| ddk_matrix=$(jq -c --argjson it "$item_date" '. + [$it]' <<< "$ddk_matrix") | |
| fi | |
| done | |
| # ddk-clang 标签：来自 mapping.json.clang[].version | |
| echo "[INFO] 从 mapping.json 收集 ddk-clang 标签" | |
| clang_count=$(jq -r '.clang | length' mapping.json) | |
| echo "ddk-clang 标签数量: $clang_count" | |
| clang_matrix="[]" | |
| jq -r '.clang[].version' mapping.json | while read -r tag; do | |
| item=$(jq -n \ | |
| --arg name "ddk-clang:$tag" \ | |
| --arg src "$src_clang:$tag" \ | |
| --arg ghcr "$ghcr_clang_repo:$tag" \ | |
| --arg dock "$docker_clang_repo:$tag" \ | |
| '{name:$name, src:$src, ghcr:$ghcr, docker:$dock}') | |
| clang_matrix=$(jq -c --argjson it "$item" '. + [$it]' <<< "$clang_matrix") | |
| if [ -n "$date_input" ]; then | |
| item_date=$(jq -n \ | |
| --arg name "ddk-clang:${tag}-$date_input" \ | |
| --arg src "$src_clang:$tag" \ | |
| --arg ghcr "$ghcr_clang_repo:${tag}-$date_input" \ | |
| --arg dock "$docker_clang_repo:${tag}-$date_input" \ | |
| '{name:$name, src:$src, ghcr:$ghcr, docker:$dock}') | |
| clang_matrix=$(jq -c --argjson it "$item_date" '. + [$it]' <<< "$clang_matrix") | |
| fi | |
| done | |
| full_matrix=$(jq -c --argjson ddk "$ddk_matrix" --argjson clang "$clang_matrix" '$ddk + $clang') | |
| echo "matrix=$full_matrix" >> $GITHUB_OUTPUT | |
| count=$(echo "$full_matrix" | jq 'length') | |
| echo "将要同步的镜像 (共 ${count} 个):" | tee -a $GITHUB_STEP_SUMMARY | |
| echo "$full_matrix" | jq -r '.[0:10] | .[] | "- " + .name + " ← " + .src' | tee -a $GITHUB_STEP_SUMMARY | |
| if [ "$count" -gt 10 ]; then | |
| echo "... 共 ${count} 条，以上仅展示前 10 条" | tee -a $GITHUB_STEP_SUMMARY | |
| fi | |
| - name: Login to GHCR | |
| if: always() | |
| env: | |
| GHCR_USER: ${{ github.actor }} | |
| GHCR_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| run: | | |
| echo "$GHCR_TOKEN" | skopeo login ghcr.io --username "$GHCR_USER" --password-stdin | |
| - name: Login to Docker Hub | |
| if: always() | |
| env: | |
| DOCKERHUB_USER: ${{ secrets.DOCKERHUB_USERNAME }} | |
| DOCKERHUB_PASS: ${{ secrets.DOCKERHUB_TOKEN }} | |
| run: | | |
| if [ -n "${DOCKERHUB_USER}" ] && [ -n "${DOCKERHUB_PASS}" ]; then | |
| echo "$DOCKERHUB_PASS" | skopeo login docker.io --username "$DOCKERHUB_USER" --password-stdin | |
| else | |
| echo "[WARN] 未配置 Docker Hub 凭据，跳过登录" | |
| fi | |
| - name: Sync images | |
| env: | |
| MATRIX: ${{ steps.gen.outputs.matrix }} | |
| run: | | |
| set -euo pipefail | |
| echo "$MATRIX" | jq -c '.[]' | while read -r item; do | |
| name=$(jq -r '.name' <<< "$item") | |
| src=$(jq -r '.src' <<< "$item") | |
| dst_ghcr=$(jq -r '.ghcr' <<< "$item") | |
| dst_dock=$(jq -r '.docker' <<< "$item") | |
| echo "=== 同步 $name ===" | |
| echo "源: $src" | |
| echo "→ GHCR: $dst_ghcr" | |
| echo "→ Docker: $dst_dock" | |
| # 同步到 GHCR | |
| skopeo copy --all docker://$src docker://$dst_ghcr | |
| # 同步到 Docker Hub（若已登录） | |
| if skopeo login --get-login docker.io >/dev/null 2>&1; then | |
| skopeo copy --all docker://$src docker://$dst_dock | |
| else | |
| echo "[WARN] 未登录 Docker Hub，跳过 $dst_dock" | |
| fi | |
| done | |
| - name: Summary | |
| run: | | |
| echo "同步完成。源 → GHCR 与（可选）Docker Hub。" >> $GITHUB_STEP_SUMMARY |