Introduce a custom Kaniko-based image for OCI container builds, including a wrapper script (`build.sh`) for flexible execution. Added Forgejo CI workflows for PR, branch, and tag builds, along with detailed documentation in the updated README. Licensed under Apache 2.0. Reviewed-on: #1 Co-authored-by: Guillaume B.B. Van Hemmen <GuillaumeHemmen@noreply.git.van-hemmen.com> Co-committed-by: Guillaume B.B. Van Hemmen <GuillaumeHemmen@noreply.git.van-hemmen.com>
1.5 KiB
1.5 KiB
kaniko (action)
Custom Kaniko image (forked from Google’s gcr.io/kaniko-project/executor:debug
) for Forgejo Actions.
Build & push OCI-compatible container images in your pipelines without a Docker daemon. Just set a few environment variables.
Highlights
Feature | Benefit |
---|---|
Daemon-less builds | Works in completely rootless, container-only environments |
Debug base | Includes /shell & common tools for troubleshooting |
Registry-agnostic | Push to Docker Hub, GHCR, Harbor, Quay, Google Artifact Registry, etc. |
Small wrapper script | Autodetects credentials and common env-var combos |
Image tags
Tag | Base | Intended use |
---|---|---|
latest |
Google debug executor |
General CI pipelines |
Quick start
# .forgejo/workflows/build.yaml
name: Build & push image
on:
push:
branches: [ main ]
jobs:
build:
runs-on: docker
steps:
- name: Build & push with Kaniko
uses: actions/kaniko@v1
env:
# ✍️ Fill these placeholders
REGISTRY: ghcr.io
IMAGE_NAME: myorg/myapp
IMAGE_TAG: ${{ github.sha }}
# Optional authentication variables...
# REGISTRY_USERNAME: ${{ secrets.REGISTRY_USERNAME }}
# REGISTRY_PASSWORD: ${{ secrets.REGISTRY_PASSWORD }}