1.0.0

Author: omniproc

.github/workflows/regular.yaml

@@ -0,0 +1,39 @@
+name: Build OCI Image
+
+on:
+  push:
+    branches:
+      - 'main'
+
+jobs:
+  build:
+    runs-on: ubuntu-22.04
+    container: 
+      image: catthehacker/ubuntu:act-22.04
+    env: 
+      DOCKER_CONFIG: '~/.docker/'
+    steps:
+    - name: buildx setup
+      uses: docker/setup-buildx-action@v3
+      with:
+        use: true
+        platforms: linux/amd64,linux/arm64 
+    - name: oci metadata
+      id: meta
+      uses: docker/metadata-action@v5
+      with:
+        images: |
+         ghcr.io/${{ github.repository }}
+        tags: |
+          type=sha,event=branch
+        labels: |
+          org.opencontainers.image.description=A buildkit runner
+    - name: oci build
+      uses: docker/build-push-action@v6
+      with:
+        context: "{{defaultContext}}"
+        platforms: linux/arm64,linux/amd64
+        build-args: BUILDKIT_TAG=v0.15.1
+        push: false
+        tags: ${{ steps.meta.outputs.tags }}
+        labels: ${{ steps.meta.outputs.labels }}

.github/workflows/release.yaml

@@ -0,0 +1,54 @@
+name: Build OCI Image
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+# Permissions to be given to the GITHUB_TOKEN for this workflow
+permissions:
+  packages: write
+
+jobs:
+  build:
+    runs-on: ubuntu-22.04
+    container: 
+      image: catthehacker/ubuntu:act-22.04
+    env: 
+      DOCKER_CONFIG: '~/.docker/'
+    steps:
+    - name: buildx setup
+      uses: docker/setup-buildx-action@v3
+      with:
+        use: true
+        platforms: linux/amd64,linux/arm64 
+    - name: oci metadata
+      id: meta
+      uses: docker/metadata-action@v5
+      with:
+        images: |
+          ghcr.io/${{ github.repository }}
+        tags: |
+          type=semver,pattern={{version}}
+          type=semver,pattern={{major}}.{{minor}}
+        labels: |
+          org.opencontainers.image.description=A buildkit runner
+    - name: oci login
+      uses: docker/login-action@v3
+      with:
+        registry: ghcr.io
+        username: ${{ github.repository_owner }}
+        # Use the built-in GitHub action token for authentication with ghcr
+        # https://docs.github.com/en/actions/security-guides/automatic-token-authentication
+        password: ${{ secrets.GITHUB_TOKEN }}
+    - name: oci build
+      uses: docker/build-push-action@v6
+      with:
+        context: "{{defaultContext}}"
+        platforms: linux/arm64,linux/amd64
+        build-args: BUILDKIT_TAG=v0.15.1
+        # Only push package if triggered by tag and prevent anyone from creating tags using tag-protection for this repository
+        # https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/managing-repository-settings/configuring-tag-protection-rules
+        push: ${{ github.ref_type == 'tag' }}
+        tags: ${{ steps.meta.outputs.tags }}
+        labels: ${{ steps.meta.outputs.labels }}

Dockerfile

@@ -0,0 +1,17 @@
+FROM ghcr.io/catthehacker/ubuntu:act-22.04 AS build
+# injected by build-push-action by default
+ARG TARGETARCH
+# injected by build-push-action build-args
+ARG BUILDKIT_TAG
+RUN echo "TARGETARCH=${TARGETARCH}"
+RUN echo "BUILDKIT_TAG=${BUILDKIT_TAG}"
+RUN wget -q "https://github.com/moby/buildkit/releases/download/${BUILDKIT_TAG}/buildkit-${BUILDKIT_TAG}.linux-${TARGETARCH}.tar.gz"
+RUN mkdir /buildkit && cat buildkit-${BUILDKIT_TAG}.linux-${TARGETARCH}.tar.gz | tar -C /buildkit -zxvf -
+# cleanup layers
+# PersistentVolume privilege missmatch between act-runner and workflow pod currently stop us from using the less privileged runner variant
+#FROM ghcr.io/catthehacker/ubuntu:runner-22.04
+FROM ghcr.io/catthehacker/ubuntu:act-22.04
+LABEL org.opencontainers.image.title act-buildkit-runner
+LABEL org.opencontainers.image.description A Ubuntu based act runner with integrated buildkit
+LABEL org.opencontainers.image.licenses MIT
+COPY --from=build /buildkit/bin/buildctl /usr/bin/buildctl

README.md

@@ -1 +1,20 @@
-# act-buildkit-runner
+# Act BuildKit Runner
+
+A [`act`](https://github.com/nektos/act) runner based on [`catthehacker/ubuntu:act-22.04`](https://github.com/catthehacker/docker_images) with integrated [buildkit](https://github.com/moby/buildkit). Foundation for [buildkit-build-push-action](https://github.com/omniproc/buildkit-build-push-action).
+
+
+# Example usage
+
+```yaml
+name: Example
+on:
+  push
+jobs:
+  test:
+    runs-on: ubuntu-22.04
+    container:
+      image: ghcr.io/omniproc/act-buildkit-runner:0.1.1
+    steps: 
+    - name: git checkout
+      uses: https://github.com/actions/checkout@v4
+```