84 lines
2.6 KiB
YAML
84 lines
2.6 KiB
YAML
name: Build and Push to ACR
|
||
|
||
on:
|
||
push:
|
||
branches: [ main ]
|
||
release:
|
||
types: [ published ]
|
||
workflow_dispatch:
|
||
inputs:
|
||
image_tag:
|
||
description: "Tag to push (leave empty to use 'latest')"
|
||
required: false
|
||
default: ""
|
||
|
||
jobs:
|
||
docker:
|
||
runs-on: [buildx]
|
||
steps:
|
||
- name: Checkout
|
||
uses: actions/checkout@v3
|
||
|
||
- name: Resolve TAG
|
||
id: meta
|
||
env:
|
||
INPUT_TAG: ${{ github.event.inputs.image_tag || '' }}
|
||
run: |
|
||
set -euo pipefail
|
||
|
||
# 仅两级：手动输入 > latest
|
||
TAG="${INPUT_TAG:-}"
|
||
if [ -z "$TAG" ]; then TAG="latest"; fi
|
||
|
||
# 规范化（可留可去，但推荐保留，防止手滑输非法字符）
|
||
TAG="$(printf '%s' "$TAG" \
|
||
| tr '[:upper:]' '[:lower:]' \
|
||
| sed -E 's#[^a-z0-9._-]#-#g; s#/+#-#g; s#^[.-]+##; s#[.-]+$##')"
|
||
TAG="${TAG:0:128}"
|
||
|
||
echo "tag=$TAG" >> "$GITHUB_OUTPUT"
|
||
echo "Resolved TAG: $TAG"
|
||
|
||
|
||
- name: Login to Aliyun ACR
|
||
env:
|
||
ACR_REGISTRY: ${{ secrets.ACR_REGISTRY }}
|
||
ACR_USERNAME: ${{ secrets.ACR_USERNAME }}
|
||
ACR_PASSWORD: ${{ secrets.ACR_PASSWORD }}
|
||
run: |
|
||
set -euo pipefail
|
||
docker logout "$ACR_REGISTRY" || true
|
||
echo "$ACR_PASSWORD" | docker login "$ACR_REGISTRY" \
|
||
--username "$ACR_USERNAME" --password-stdin
|
||
|
||
- name: Build Docker Image
|
||
env:
|
||
IMAGE: ${{ secrets.ACR_REGISTRY }}/${{ secrets.ACR_NAMESPACE }}/${{ vars.IMAGE_NAME }}
|
||
TAG: ${{ steps.meta.outputs.tag }}
|
||
run: |
|
||
set -euo pipefail
|
||
echo "Building ${IMAGE}:${TAG}"
|
||
|
||
# 确保构建时使用 proxy_net，并把代理传给 RUN 阶段
|
||
docker build \
|
||
--network=proxy_net \
|
||
--build-arg HTTP_PROXY=http://proxy:7890 \
|
||
--build-arg HTTPS_PROXY=http://proxy:7890 \
|
||
--build-arg NO_PROXY=localhost,127.0.0.1,proxy \
|
||
-t "${IMAGE}:${TAG}" -f docker/Dockerfile .
|
||
|
||
- name: Push Docker Image
|
||
env:
|
||
IMAGE: ${{ secrets.ACR_REGISTRY }}/${{ secrets.ACR_NAMESPACE }}/${{ vars.IMAGE_NAME }}
|
||
TAG: ${{ steps.meta.outputs.tag }}
|
||
run: |
|
||
set -euo pipefail
|
||
echo "Pushing ${IMAGE}:${TAG}"
|
||
docker push "${IMAGE}:${TAG}"
|
||
|
||
# 如果上一步给了 latest，这里一并推
|
||
if docker image inspect "${IMAGE}:latest" > /dev/null 2>&1; then
|
||
echo "Pushing ${IMAGE}:latest"
|
||
docker push "${IMAGE}:latest"
|
||
fi
|