mirror of
https://github.com/qdrant/qdrant.git
synced 2026-07-23 11:11:00 -05:00
111de40297
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 6.0.3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](de0fac2e45...df4cb1c069)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
149 lines
7.9 KiB
YAML
149 lines
7.9 KiB
YAML
name: Build and deploy docker image
|
|
|
|
on:
|
|
push:
|
|
# Pattern matched against refs/tags
|
|
tags:
|
|
- '*' # Push events to every tag not containing /
|
|
|
|
jobs:
|
|
|
|
build:
|
|
# Run build on our self-hosted runner, we had trouble with shared runners
|
|
runs-on: [self-hosted, linux, x64]
|
|
permissions:
|
|
contents: read
|
|
packages: write
|
|
id-token: write # needed for cosign keyless signing with OIDC
|
|
steps:
|
|
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
|
|
- uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
|
|
- name: Install cosign
|
|
uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2
|
|
- name: Get current tag
|
|
id: vars
|
|
run: echo "tag=${GITHUB_REF#refs/*/}" >> $GITHUB_OUTPUT
|
|
- name: Get minor and major tags
|
|
id: version
|
|
run: |
|
|
MAJOR_VERSION=$(echo "${{ steps.vars.outputs.tag }}" | cut -d '.' -f 1)
|
|
MINOR_VERSION=$(echo "${{ steps.vars.outputs.tag }}" | cut -d '.' -f 1-2)
|
|
echo "major_version=${MAJOR_VERSION}" >> $GITHUB_OUTPUT
|
|
echo "minor_version=${MINOR_VERSION}" >> $GITHUB_OUTPUT
|
|
- name: Build the Docker image
|
|
env:
|
|
RELEASE_VERSION: ${{ steps.vars.outputs.tag }}
|
|
MAJOR_VERSION: ${{ steps.version.outputs.major_version }}
|
|
MINOR_VERSION: ${{ steps.version.outputs.minor_version }}
|
|
run: |
|
|
# Create build container
|
|
docker run --rm --privileged multiarch/qemu-user-static --reset -p yes
|
|
docker buildx create --use
|
|
|
|
# Authenticate on registries
|
|
echo "${{ secrets.DOCKERHUB_TOKEN }}" | docker login --username generall --password-stdin
|
|
echo "${{ secrets.GITHUB_TOKEN }}" | docker login https://docker.pkg.github.com -u qdrant --password-stdin
|
|
|
|
# Build regular image for Docker Hub
|
|
DOCKERHUB_TAG="qdrant/qdrant:${{ github.ref_name }}"
|
|
DOCKERHUB_TAG_LATEST="qdrant/qdrant:latest"
|
|
DOCKERHUB_TAG_MINOR="qdrant/qdrant:${MINOR_VERSION}"
|
|
DOCKERHUB_TAG_MAJOR="qdrant/qdrant:${MAJOR_VERSION}"
|
|
TAGS="-t ${DOCKERHUB_TAG} -t ${DOCKERHUB_TAG_LATEST} -t ${DOCKERHUB_TAG_MINOR} -t ${DOCKERHUB_TAG_MAJOR}"
|
|
GITHUB_TAG="docker.pkg.github.com/qdrant/qdrant/qdrant:${{ github.ref_name }}"
|
|
|
|
# Pull, retag and push to GitHub packages
|
|
docker buildx build --sbom=true --platform='linux/amd64,linux/arm64' --build-arg GIT_COMMIT_ID=${{ github.sha }} $TAGS --push --label "org.opencontainers.image.version"=$RELEASE_VERSION .
|
|
docker pull $DOCKERHUB_TAG
|
|
docker tag $DOCKERHUB_TAG $GITHUB_TAG
|
|
docker push $GITHUB_TAG
|
|
|
|
DIGEST=$(docker buildx imagetools inspect ${DOCKERHUB_TAG} --format '{{ json .Manifest.Digest }}' | cut -d '"' -f 2)
|
|
cosign sign --new-bundle-format=false --use-signing-config=false --yes "${DOCKERHUB_TAG}@${DIGEST}"
|
|
|
|
# Build unprivileged image for Docker Hub
|
|
DOCKERHUB_TAG_UNPRIVILEGED="qdrant/qdrant:${{ github.ref_name }}-unprivileged"
|
|
DOCKERHUB_TAG_LATEST_UNPRIVILEGED="qdrant/qdrant:latest-unprivileged"
|
|
DOCKERHUB_TAG_MINOR_UNPRIVILEGED="qdrant/qdrant:${MINOR_VERSION}-unprivileged"
|
|
DOCKERHUB_TAG_MAJOR_UNPRIVILEGED="qdrant/qdrant:${MAJOR_VERSION}-unprivileged"
|
|
TAGS_UNPRIVILEGED="-t ${DOCKERHUB_TAG_UNPRIVILEGED} -t ${DOCKERHUB_TAG_LATEST_UNPRIVILEGED} -t ${DOCKERHUB_TAG_MINOR_UNPRIVILEGED} -t ${DOCKERHUB_TAG_MAJOR_UNPRIVILEGED}"
|
|
GITHUB_TAG_UNPRIVILEGED="docker.pkg.github.com/qdrant/qdrant/qdrant:${{ github.ref_name }}-unprivileged"
|
|
|
|
# Pull, retag and push to GitHub packages
|
|
docker buildx build --sbom=true --build-arg='USER_ID=1000' --platform='linux/amd64,linux/arm64' $TAGS_UNPRIVILEGED --push --label "org.opencontainers.image.version"=$RELEASE_VERSION .
|
|
docker pull $DOCKERHUB_TAG_UNPRIVILEGED
|
|
docker tag $DOCKERHUB_TAG_UNPRIVILEGED $GITHUB_TAG_UNPRIVILEGED
|
|
docker push $GITHUB_TAG_UNPRIVILEGED
|
|
|
|
DIGEST=$(docker buildx imagetools inspect ${DOCKERHUB_TAG_UNPRIVILEGED} --format '{{ json .Manifest.Digest }}' | cut -d '"' -f 2)
|
|
cosign sign --new-bundle-format=false --use-signing-config=false --yes "${DOCKERHUB_TAG_UNPRIVILEGED}@${DIGEST}"
|
|
|
|
build-gpu:
|
|
runs-on: [self-hosted, linux, x64]
|
|
permissions:
|
|
contents: read
|
|
packages: write
|
|
id-token: write # needed for cosign keyless signing with OIDC
|
|
steps:
|
|
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
|
|
- uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
|
|
- name: Install cosign
|
|
uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2
|
|
- name: Get current tag
|
|
id: vars
|
|
run: echo "tag=${GITHUB_REF#refs/*/}" >> $GITHUB_OUTPUT
|
|
- name: Get minor and major tags
|
|
id: version
|
|
run: |
|
|
MAJOR_VERSION=$(echo "${{ steps.vars.outputs.tag }}" | cut -d '.' -f 1)
|
|
MINOR_VERSION=$(echo "${{ steps.vars.outputs.tag }}" | cut -d '.' -f 1-2)
|
|
echo "major_version=${MAJOR_VERSION}" >> $GITHUB_OUTPUT
|
|
echo "minor_version=${MINOR_VERSION}" >> $GITHUB_OUTPUT
|
|
- name: Build the Docker image
|
|
env:
|
|
RELEASE_VERSION: ${{ steps.vars.outputs.tag }}
|
|
MAJOR_VERSION: ${{ steps.version.outputs.major_version }}
|
|
MINOR_VERSION: ${{ steps.version.outputs.minor_version }}
|
|
run: |
|
|
# Create build container
|
|
docker run --rm --privileged multiarch/qemu-user-static --reset -p yes
|
|
docker buildx create --use
|
|
|
|
# Authenticate on registries
|
|
echo "${{ secrets.DOCKERHUB_TOKEN }}" | docker login --username generall --password-stdin
|
|
echo "${{ secrets.GITHUB_TOKEN }}" | docker login https://docker.pkg.github.com -u qdrant --password-stdin
|
|
|
|
# Build GPU NVIDIA image for Docker Hub
|
|
DOCKERHUB_TAG="qdrant/qdrant:${{ github.ref_name }}-gpu-nvidia"
|
|
DOCKERHUB_TAG_LATEST="qdrant/qdrant:gpu-nvidia-latest"
|
|
DOCKERHUB_TAG_MINOR="qdrant/qdrant:${MINOR_VERSION}-gpu-nvidia"
|
|
DOCKERHUB_TAG_MAJOR="qdrant/qdrant:${MAJOR_VERSION}-gpu-nvidia"
|
|
TAGS="-t ${DOCKERHUB_TAG} -t ${DOCKERHUB_TAG_LATEST} -t ${DOCKERHUB_TAG_MINOR} -t ${DOCKERHUB_TAG_MAJOR}"
|
|
GITHUB_TAG="docker.pkg.github.com/qdrant/qdrant/qdrant:${{ github.ref_name }}-gpu-nvidia"
|
|
|
|
# Pull, retag and push to GitHub packages
|
|
docker buildx build --sbom=true --build-arg GPU=nvidia --platform='linux/amd64' --build-arg GIT_COMMIT_ID=${{ github.sha }} $TAGS --push --label "org.opencontainers.image.version"=$RELEASE_VERSION .
|
|
docker pull $DOCKERHUB_TAG
|
|
docker tag $DOCKERHUB_TAG $GITHUB_TAG
|
|
docker push $GITHUB_TAG
|
|
|
|
DIGEST=$(docker buildx imagetools inspect ${DOCKERHUB_TAG} --format '{{ json .Manifest.Digest }}' | cut -d '"' -f 2)
|
|
cosign sign --new-bundle-format=false --use-signing-config=false --yes "${DOCKERHUB_TAG}@${DIGEST}"
|
|
|
|
# Build GPU AMD image for Docker Hub
|
|
DOCKERHUB_TAG="qdrant/qdrant:${{ github.ref_name }}-gpu-amd"
|
|
DOCKERHUB_TAG_LATEST="qdrant/qdrant:gpu-amd-latest"
|
|
DOCKERHUB_TAG_MINOR="qdrant/qdrant:${MINOR_VERSION}-gpu-amd"
|
|
DOCKERHUB_TAG_MAJOR="qdrant/qdrant:${MAJOR_VERSION}-gpu-amd"
|
|
TAGS="-t ${DOCKERHUB_TAG} -t ${DOCKERHUB_TAG_LATEST} -t ${DOCKERHUB_TAG_MINOR} -t ${DOCKERHUB_TAG_MAJOR}"
|
|
GITHUB_TAG="docker.pkg.github.com/qdrant/qdrant/qdrant:${{ github.ref_name }}-gpu-amd"
|
|
|
|
# Pull, retag and push to GitHub packages
|
|
docker buildx build --sbom=true --build-arg GPU=amd --platform='linux/amd64' --build-arg GIT_COMMIT_ID=${{ github.sha }} $TAGS --push --label "org.opencontainers.image.version"=$RELEASE_VERSION .
|
|
docker pull $DOCKERHUB_TAG
|
|
docker tag $DOCKERHUB_TAG $GITHUB_TAG
|
|
docker push $GITHUB_TAG
|
|
|
|
DIGEST=$(docker buildx imagetools inspect ${DOCKERHUB_TAG} --format '{{ json .Manifest.Digest }}' | cut -d '"' -f 2)
|
|
cosign sign --new-bundle-format=false --use-signing-config=false --yes "${DOCKERHUB_TAG}@${DIGEST}"
|