Skip to content

Commit

Permalink
Externalize mirroring from ghcr.io to docker hub in another workflow …
Browse files Browse the repository at this point in the history
…to avoid memory issues
  • Loading branch information
nvuillam committed Oct 20, 2024
1 parent 68b9927 commit a0e1dd7
Show file tree
Hide file tree
Showing 3 changed files with 55 additions and 12 deletions.
24 changes: 12 additions & 12 deletions .github/workflows/deploy-ALPHA-flavors.yml
Original file line number Diff line number Diff line change
Expand Up @@ -116,6 +116,13 @@ jobs:
tags: |
ghcr.io/oxsecurity/megalinter-${{ matrix.flavor }}:alpha
- name: Invoke Mirror docker image workflow (Flavor image)
uses: benc-uk/workflow-dispatch@v1
with:
workflow: mirror-docker-image.yml
inputs: '{ "source-image": "ghcr.io/oxsecurity/megalinter-${{ matrix.flavor }}:alpha", "target-image": "docker.io/oxsecurity/megalinter-${{ matrix.flavor }}:alpha" }'
ref: ${{ github.ref_name }}

- name: Build Worker Image
uses: docker/build-push-action@v6
with:
Expand All @@ -134,19 +141,12 @@ jobs:
tags: |
ghcr.io/oxsecurity/megalinter-worker-${{ matrix.flavor }}:alpha
- name: Login to Docker Hub
uses: docker/login-action@v3
- name: Invoke Mirror docker image workflow (Flavor worker image)
uses: benc-uk/workflow-dispatch@v1
with:
username: ${{ secrets.DOCKER_USERNAME }}
password: ${{ secrets.DOCKER_PASSWORD }}

# Copy ghrc.io image to Docker Hub
- name: Pull image from GHCR
run: docker system prune -a --volumes --force && docker pull ghcr.io/oxsecurity/megalinter-worker-${{ matrix.flavor }}:alpha
- name: Tag image for Docker Hub
run: docker tag ghcr.io/oxsecurity/megalinter-worker-${{ matrix.flavor }}:alpha oxsecurity/megalinter-worker-${{ matrix.flavor }}:alpha
- name: Push image to Docker Hub
run: docker push oxsecurity/megalinter-worker-${{ matrix.flavor }}:alpha
workflow: mirror-docker-image.yml
inputs: '{ "source-image": "ghcr.io/oxsecurity/megalinter-worker-${{ matrix.flavor }}:alpha", "target-image": "docker.io/oxsecurity/megalinter-worker-${{ matrix.flavor }}:alpha" }'
ref: ${{ github.ref_name }}

##############################################
# Check Docker image security with Trivy #
Expand Down
42 changes: 42 additions & 0 deletions .github/workflows/mirror-docker-image.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,42 @@
name: Mirror docker image

on:
workflow_dispatch:
inputs:
source-image:
description: 'Source of the image on ghcr.io'
required: true
target-image:
description: 'Target of the image hosted on docker hub'
required: true
free-space-before:
description: 'Free space on the runner before pulling and pushing docker image'
required: false
default: 'true'

jobs:
copy-to-docker-hub:
runs-on: ubuntu-latest
environment:
name: beta
steps:
# Free disk space
- name: Free Disk space
if: github.event.inputs.free-space-before == 'true'
shell: bash
run: |
sudo rm -rf /usr/local/lib/android # will release about 10 GB if you don't need Android
sudo rm -rf /usr/share/dotnet # will release about 20GB if you don't need .NET
# Login to docker hub
- name: Login to Docker Hub
uses: docker/login-action@v3
with:
username: ${{ secrets.DOCKER_USERNAME }}
password: ${{ secrets.DOCKER_PASSWORD }}
# Copy ghrc.io image to Docker Hub
- name: Pull image from GHCR
run: docker pull "${{ github.event.inputs.source-image }}"
- name: Tag image for Docker Hub
run: docker tag "${{ github.event.inputs.source-image }}" "${{ github.event.inputs.target-image }}"
- name: Push image to Docker Hub
run: docker push "${{ github.event.inputs.target-image }}"
1 change: 1 addition & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -29,6 +29,7 @@ Note: Can be used with `oxsecurity/megalinter@beta` in your GitHub Action mega-l

- CI
- Also prune volumes before pulling and pushing to docker hub
- Externalize mirroring from ghcr.io to docker hub in another workflow to avoid memory issues

- mega-linter-runner

Expand Down

0 comments on commit a0e1dd7

Please sign in to comment.