SpinShare Referee Bot refbot.ellite.dev/overlay

kaniko safe me

+9 -24
+9 -24
.tangled/workflows/buildnpush.yml
··· 7 7 dependencies: 8 8 nixpkgs: 9 9 - curl 10 - - buildah 10 + - kaniko 11 11 - nodejs 12 - - shadow 13 - 14 - environment: 15 - BUILDAH_ISOLATION: "chroot" 16 - STORAGE_DRIVER: "vfs" 17 12 18 13 steps: 19 - - name: Setup user environment 20 - command: | 21 - echo "root:x:0:0:root:/root:/bin/sh" >> /etc/passwd 22 - echo "root:x:0:" >> /etc/group 23 - 24 - - name: Get version from package.json 14 + - name: Build and push Docker image 25 15 command: | 26 16 export VERSION=$(node -p "require('./package.json').version") 27 - 28 - - name: Build Docker Image 29 - command: | 30 - buildah build -t registry.ellite.dev/alpinesystem/refbot:latest -t registry.ellite.dev/alpinesystem/refbot:v$VERSION . 31 - 32 - - name: Push Docker Image 33 - command: | 34 - buildah push --creds=refbot:$REGISTRY_PASSWORD registry.ellite.dev/alpinesystem/refbot docker://registry.ellite.dev/alpinesystem/refbot 35 - 36 - - name: Trigger Portainer redeploy 37 - command: | 38 - curl -X POST https://portainer.ellite.dev/api/stacks/webhooks/729bf24e-a305-4eaf-8efc-de31043519bb 17 + mkdir -p /kaniko/.docker 18 + echo "{\"auths\":{\"registry.ellite.dev\":{\"username\":\"refbot\",\"password\":\"$REGISTRY_PASSWORD\"}}}" > /kaniko/.docker/config.json 19 + executor \ 20 + --context=dir://$(pwd) \ 21 + --dockerfile=$(pwd)/Dockerfile \ 22 + --destination=registry.ellite.dev/alpinesystem/refbot:latest \ 23 + --destination=registry.ellite.dev/alpinesystem/refbot:v$VERSION