linter fixes #4
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Push to AWS | ||
| on: | ||
| pull_request: | ||
| branches: | ||
| - master | ||
| permissions: read-all | ||
| jobs: | ||
| build-aws-image: | ||
| runs-on: ubuntu-latest | ||
| permissions: | ||
| id-token: write # OIDC support | ||
| contents: write | ||
| actions: read | ||
| security-events: write | ||
| strategy: | ||
| matrix: | ||
| include: | ||
| # We don't publish AWS images for all combinations so we go hardcoded here | ||
| - flavor: ubuntu | ||
| flavor_release: 24.04 | ||
| family: ubuntu | ||
| base_image: ubuntu:24.04 | ||
| variant: standard | ||
| steps: | ||
| - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 | ||
| - run: | | ||
| git fetch --prune --unshallow | ||
| - name: Release space from worker | ||
| run: | | ||
| ./github/release-space-from-ubuntu-runners.sh | ||
| - name: Install kairos-agent (for versioneer) | ||
| uses: Luet-lab/luet-install-action@cec77490c3f2416d7d07a47cfab04d448641d7ce # v1.1 | ||
| with: | ||
| repository: quay.io/kairos/packages | ||
| packages: system/kairos-agent | ||
| - name: Build 🔧 | ||
| run: | | ||
| # REPLACE_IN_FINAL | ||
| # TODO: Does "sort" work correctly on k3s versions? Which version do we want? | ||
| #k3s_version=$(echo '${{ needs.get-standard-matrix.outputs.matrix }}' | \ | ||
| # jq -r '[.[].k3s_version] | unique | sort | .[0]') | ||
| k3s_version=v1.32.0-k3s1 | ||
| # REPLACE_IN_FINAL | ||
| #version=$(git describe --always --tags --dirty) | ||
| version=master | ||
| containerImage=$(kairos-agent versioneer container-artifact-name \ | ||
| --flavor ${{ .matrix.flavor }} \ | ||
| --flavor-release ${{ .matrix.flavor_release }} \ | ||
| --variant ${{ .matrix.variant }} \ | ||
| --model generic \ | ||
| --arch amd64 \ | ||
| --software-version-prefix k3s \ | ||
| --registry-and-org quay.io/kairos \ | ||
| --software-version "$k3s_version" \ | ||
| --version "$version" | ||
| ) | ||
| docker run -v /var/run/docker.sock:/var/run/docker.sock --net host \ | ||
| --privileged \ | ||
| -v $PWD:/aurora --rm -ti quay.io/kairos/auroraboot \ | ||
| --debug \ | ||
| --set "disable_http_server=true" \ | ||
| --set "container_image=docker:${containerImage}" \ | ||
| --set "disable_netboot=true" \ | ||
| --set "disk.raw=true" \ | ||
| --set "state_dir=/aurora" | ||
| - name: Install AWS cli | ||
| run: | | ||
| curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip" | ||
| unzip awscliv2.zip | ||
| sudo ./aws/install | ||
| # https://github.com/aws-actions/configure-aws-credentials?tab=readme-ov-file#assumerole-with-static-iam-credentials-in-repository-secrets | ||
| - name: Configure AWS Credentials | ||
| uses: aws-actions/configure-aws-credentials@v4 | ||
| with: | ||
| aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} | ||
| aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | ||
| aws-region: eu-central-1 | ||
| role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }} | ||
| role-external-id: ${{ secrets.AWS_ROLE_EXTERNAL_ID }} | ||
| role-duration-seconds: 1200 | ||
| role-session-name: AWSCIPush | ||
| - name: Push to AWS | ||
| env: | ||
| AWS_S3_BUCKET: kairos-cloud-images | ||
| AWS_PROFILE: default | ||
| AWS_REGION: eu-central-1 | ||
| run: | | ||
| AWS_PROFILE=kairos | ||
| .github/upload-image-to-aws.sh $(ls *.raw) | ||
