Donavan Fritz
f1dbdafb0c
The org now has more container versions than one API page returns; the unpaginated list dropped a package's older numeric tags, so KEEP-based pruning silently left them (base/runner crept to 5). Loop pages at the max page size instead. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
86 lines
2.8 KiB
YAML
86 lines
2.8 KiB
YAML
name: Push Image
|
|
description: Push a locally-built image to code.fritzlab.net and prune old numeric tags.
|
|
inputs:
|
|
image:
|
|
description: Full image name without tag (e.g. code.fritzlab.net/fritzlab/chrony)
|
|
required: true
|
|
tag:
|
|
description: Tag to push. Defaults to github.run_number when empty.
|
|
required: false
|
|
default: ''
|
|
token:
|
|
description: CI_BOT_TOKEN — registry login + Gitea package API for cleanup
|
|
required: true
|
|
org:
|
|
description: Gitea org for package API (e.g. fritzlab, dns)
|
|
required: true
|
|
name:
|
|
description: Package/image name (e.g. chrony, base, runner)
|
|
required: true
|
|
latest:
|
|
description: Also push a :latest tag
|
|
required: false
|
|
default: 'true'
|
|
keep:
|
|
description: Numeric tags to retain after prune; older ones are deleted
|
|
required: false
|
|
default: '3'
|
|
runs:
|
|
using: composite
|
|
steps:
|
|
- name: Log in to registry
|
|
uses: docker/login-action@v3
|
|
with:
|
|
registry: code.fritzlab.net
|
|
username: ci-bot
|
|
password: ${{ inputs.token }}
|
|
|
|
- name: Push
|
|
shell: bash
|
|
env:
|
|
IMAGE: ${{ inputs.image }}
|
|
TAG_INPUT: ${{ inputs.tag }}
|
|
RUN_NUMBER: ${{ github.run_number }}
|
|
LATEST: ${{ inputs.latest }}
|
|
run: |
|
|
set -euo pipefail
|
|
TAG="${TAG_INPUT:-$RUN_NUMBER}"
|
|
echo "Pushing ${IMAGE}:${TAG}"
|
|
docker push "${IMAGE}:${TAG}"
|
|
if [ "$LATEST" = "true" ]; then
|
|
docker tag "${IMAGE}:${TAG}" "${IMAGE}:latest"
|
|
echo "Pushing ${IMAGE}:latest"
|
|
docker push "${IMAGE}:latest"
|
|
fi
|
|
|
|
- name: Prune old tags
|
|
continue-on-error: true
|
|
shell: bash
|
|
env:
|
|
TOKEN: ${{ inputs.token }}
|
|
ORG: ${{ inputs.org }}
|
|
NAME: ${{ inputs.name }}
|
|
KEEP: ${{ inputs.keep }}
|
|
run: |
|
|
set -euo pipefail
|
|
tea login add --name ci --url https://code.fritzlab.net \
|
|
--token "$TOKEN" --no-version-check >/dev/null 2>&1 || true
|
|
# Paginate the package list. The org has more container versions than a
|
|
# single API page returns (Gitea caps page size at MAX_RESPONSE_ITEMS),
|
|
# so an unpaginated call silently drops a package's older tags from the
|
|
# list and they never get pruned — that's how tags crept past KEEP.
|
|
page=1
|
|
while :; do
|
|
resp=$(tea api "/packages/${ORG}?type=container&limit=50&page=${page}")
|
|
[ "$(jq 'length' <<<"$resp")" -eq 0 ] && break
|
|
jq -r --arg n "$NAME" \
|
|
'.[] | select(.name==$n) | select(.version | test("^[0-9]+$")) | .version' \
|
|
<<<"$resp"
|
|
page=$((page + 1))
|
|
done \
|
|
| sort -n | head -n -"$KEEP" \
|
|
| while read -r tag; do
|
|
echo "deleting ${NAME}:$tag"
|
|
tea api -X DELETE "/packages/${ORG}/container/${NAME}/${tag}"
|
|
done
|