NucleicandClaude Opus 4.8
11b9825e09
Switch the containerization dependency from the github URL to a vendored copy (third_party/containerization, upstream commit 6b7b42ca) referenced by path, so we can carry a small local patch that upstream lacks: LinuxContainer.Configuration gains a `vmExtensions` field forwarded into VMConfiguration.extensions. Upstream already supports VMConfiguration.extensions + the VZInstanceExtension hook, but LinuxContainer — our only entry point — never forwarded them, so there was no way to attach a device (e.g. a memory balloon) to a container's VM. Tests/, docs/, examples/, images/ and the corresponding test targets are trimmed for footprint (we never build the dependency's tests). See PATCHES.md for the full diff vs. upstream and the re-vendoring procedure. Also adds the ContainerizationExtras product to NucleicCore (AddressAllocator, named in the configureVZ signature). Co-Authored-By: Claude Opus 4.8 <[email protected]>
78 lines
2.5 KiB
YAML
78 lines
2.5 KiB
YAML
name: Build and publish containerization test images
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
publish:
|
|
type: boolean
|
|
description: "Publish the built image"
|
|
default: false
|
|
version:
|
|
type: string
|
|
description: "Version of the image to create"
|
|
default: "test"
|
|
image:
|
|
type: choice
|
|
description: Test image to build
|
|
options:
|
|
- dockermanifestimage
|
|
- emptyimage
|
|
default: 'dockermanifestimage'
|
|
useBuildx:
|
|
type: boolean
|
|
description: "Use docker buildx to build the image"
|
|
default: false
|
|
|
|
jobs:
|
|
image:
|
|
name: Build test images
|
|
timeout-minutes: 30
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
contents: read
|
|
packages: write
|
|
steps:
|
|
- name: Check branch
|
|
env:
|
|
GH_REF: ${{ github.ref }}
|
|
PUBLISH: ${{ inputs.publish }}
|
|
run: |
|
|
if [[ "${GH_REF}" != "refs/heads/main" ]] && [[ "${GH_REF}" != refs/heads/release* ]] && [[ "${PUBLISH}" == "true" ]]; then
|
|
echo "❌ Cannot publish an image if we are not on main or a release branch."
|
|
exit 1
|
|
fi
|
|
- name: Check inputs
|
|
env:
|
|
IMAGE: ${{ inputs.image }}
|
|
USE_BUILDX: ${{ inputs.useBuildx }}
|
|
run: |
|
|
if [[ "${IMAGE}" == "dockermanifestimage" ]] && [[ "${USE_BUILDX}" == "true" ]]; then
|
|
echo "❌ dockermanifestimage cannot be built with buildx"
|
|
exit 1
|
|
fi
|
|
|
|
if [[ "${IMAGE}" == "emptyimage" ]] && [[ "${USE_BUILDX}" != "true" ]]; then
|
|
echo "❌ emptyimage should be built with buildx"
|
|
exit 1
|
|
fi
|
|
- name: Checkout repository
|
|
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
|
|
- name: Login to GitHub Container Registry
|
|
uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
|
|
with:
|
|
registry: ghcr.io
|
|
username: ${{ github.actor }}
|
|
password: ${{ secrets.GITHUB_TOKEN }}
|
|
- name: Set up Docker Buildx
|
|
if: ${{ inputs.useBuildx }}
|
|
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
|
|
- name: Build dockerfile and push image
|
|
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
|
|
with:
|
|
push: ${{ inputs.publish }}
|
|
context: Tests/TestImages/${{ inputs.image }}
|
|
tags: ghcr.io/apple/containerization/${{ inputs.image }}:${{ inputs.version }}
|