Skip to content

Commit 66aac04

Browse files
committed
ci: sconification
1 parent 91d01df commit 66aac04

File tree

2 files changed

+114
-45
lines changed

2 files changed

+114
-45
lines changed

.github/workflows/ci.yaml

Lines changed: 76 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -48,37 +48,83 @@ jobs:
4848
post-compute-oci-image:
4949
name: post-compute OCI image
5050
needs: prepare
51-
uses: iExecBlockchainComputing/github-actions-workflows/.github/workflows/[email protected]
52-
with:
53-
image-name: docker-regis.iex.ec/tee-worker-post-compute-rust
54-
image-tag: ${{ needs.prepare.outputs.image_tag }}
55-
dockerfile: post-compute/Dockerfile
56-
context: .
57-
registry: docker-regis.iex.ec
58-
push: true
59-
security-scan: true
60-
security-report: "sarif"
61-
hadolint: true
62-
platforms: linux/amd64
63-
secrets:
64-
username: ${{ secrets.NEXUS_USERNAME }}
65-
password: ${{ secrets.NEXUS_PASSWORD }}
51+
env:
52+
IMG_FROM: docker-regis.iex.ec/tee-worker-post-compute-rust:${{ needs.prepare.outputs.image_tag }}
53+
IMG_TO: docker-regis.iex.ec/tee-worker-post-compute-rust-unlocked:${{ needs.prepare.outputs.image_tag }}-sconify-5.9.1-debug
54+
steps:
55+
- name: native
56+
uses: iExecBlockchainComputing/github-actions-workflows/.github/workflows/[email protected]
57+
with:
58+
image-name: docker-regis.iex.ec/tee-worker-post-compute-rust
59+
image-tag: ${{ needs.prepare.outputs.image_tag }}
60+
dockerfile: post-compute/Dockerfile
61+
context: .
62+
registry: docker-regis.iex.ec
63+
push: true
64+
security-scan: true
65+
security-report: "sarif"
66+
hadolint: true
67+
platforms: linux/amd64
68+
secrets:
69+
username: ${{ secrets.NEXUS_USERNAME }}
70+
password: ${{ secrets.NEXUS_PASSWORD }}
71+
- name: Login to Scontain registry
72+
uses: docker/login-action@v3
73+
with:
74+
registry: registry.scontain.com
75+
username: ${{ secrets.SCONTAIN_REGISTRY_USERNAME }}
76+
password: ${{ secrets.SCONTAIN_REGISTRY_PAT }}
77+
- name: Sconify
78+
run: pre-compute/scone/sconify.sh
79+
- name: Login to Docker regis
80+
uses: docker/login-action@v3
81+
with:
82+
registry: docker-regis.iex.ec
83+
username: ${{ secrets.NEXUS_USERNAME }}
84+
password: ${{ secrets.NEXUS_PASSWORD }}
85+
- name: Publish
86+
run: docker push $IMG_TO
87+
- name: Clean
88+
run: docker image rm -f $IMG_FROM $IMG_TO registry.scontain.com/scone-debug/iexec-sconify-image-unlocked:5.9.1
6689

6790
pre-compute-oci-image:
6891
name: pre-compute OCI image
6992
needs: prepare
70-
uses: iExecBlockchainComputing/github-actions-workflows/.github/workflows/[email protected]
71-
with:
72-
image-name: docker-regis.iex.ec/tee-worker-pre-compute-rust
73-
image-tag: ${{ needs.prepare.outputs.image_tag }}
74-
dockerfile: pre-compute/Dockerfile
75-
context: .
76-
registry: docker-regis.iex.ec
77-
push: true
78-
security-scan: true
79-
security-report: "sarif"
80-
hadolint: true
81-
platforms: linux/amd64
82-
secrets:
83-
username: ${{ secrets.NEXUS_USERNAME }}
84-
password: ${{ secrets.NEXUS_PASSWORD }}
93+
env:
94+
IMG_FROM: docker-regis.iex.ec/tee-worker-pre-compute-rust:${{ needs.prepare.outputs.image_tag }}
95+
IMG_TO: docker-regis.iex.ec/tee-worker-pre-compute-rust-unlocked:${{ needs.prepare.outputs.image_tag }}-sconify-5.9.1-debug
96+
steps:
97+
- name: native
98+
uses: iExecBlockchainComputing/github-actions-workflows/.github/workflows/[email protected]
99+
with:
100+
image-name: docker-regis.iex.ec/tee-worker-pre-compute-rust
101+
image-tag: ${{ needs.prepare.outputs.image_tag }}
102+
dockerfile: pre-compute/Dockerfile
103+
context: .
104+
registry: docker-regis.iex.ec
105+
push: true
106+
security-scan: true
107+
security-report: "sarif"
108+
hadolint: true
109+
platforms: linux/amd64
110+
secrets:
111+
username: ${{ secrets.NEXUS_USERNAME }}
112+
password: ${{ secrets.NEXUS_PASSWORD }}
113+
- name: Login to Scontain registry
114+
uses: docker/login-action@v3
115+
with:
116+
registry: registry.scontain.com
117+
username: ${{ secrets.SCONTAIN_REGISTRY_USERNAME }}
118+
password: ${{ secrets.SCONTAIN_REGISTRY_PAT }}
119+
- name: Sconify
120+
run: post-compute/scone/sconify.sh
121+
- name: Login to Docker regis
122+
uses: docker/login-action@v3
123+
with:
124+
registry: docker-regis.iex.ec
125+
username: ${{ secrets.NEXUS_USERNAME }}
126+
password: ${{ secrets.NEXUS_PASSWORD }}
127+
- name: Publish
128+
run: docker push $IMG_TO
129+
- name: Clean
130+
run: docker image rm -f $IMG_FROM $IMG_TO registry.scontain.com/scone-debug/iexec-sconify-image-unlocked:5.9.1

.github/workflows/docker-build-on-tag.yaml

Lines changed: 38 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -55,18 +55,41 @@ jobs:
5555
build-oci-image:
5656
name: Build OCI image
5757
needs: prepare
58-
uses: iExecBlockchainComputing/github-actions-workflows/.github/workflows/[email protected]
59-
with:
60-
image-name: docker-regis.iex.ec/${{ needs.prepare.outputs.image_name }}
61-
image-tag: ${{ needs.prepare.outputs.image_tag }}
62-
dockerfile: ${{ needs.prepare.outputs.dockerfile }}
63-
context: .
64-
registry: docker-regis.iex.ec
65-
push: true
66-
security-scan: true
67-
security-report: "sarif"
68-
hadolint: true
69-
platforms: linux/amd64
70-
secrets:
71-
username: ${{ secrets.NEXUS_USERNAME }}
72-
password: ${{ secrets.NEXUS_PASSWORD }}
58+
env:
59+
IMG_FROM: docker-regis.iex.ec/${{ needs.prepare.outputs.image_name }}:${{ needs.prepare.outputs.image_tag }}
60+
IMG_TO: docker-regis.iex.ec/${{ needs.prepare.outputs.image_name }}:${{ needs.prepare.outputs.image_tag }}-sconify-5.9.1-debug
61+
steps:
62+
- name: native
63+
uses: iExecBlockchainComputing/github-actions-workflows/.github/workflows/[email protected]
64+
with:
65+
image-name: docker-regis.iex.ec/${{ needs.prepare.outputs.image_name }}
66+
image-tag: ${{ needs.prepare.outputs.image_tag }}
67+
dockerfile: ${{ needs.prepare.outputs.dockerfile }}
68+
context: .
69+
registry: docker-regis.iex.ec
70+
push: true
71+
security-scan: true
72+
security-report: "sarif"
73+
hadolint: true
74+
platforms: linux/amd64
75+
secrets:
76+
username: ${{ secrets.NEXUS_USERNAME }}
77+
password: ${{ secrets.NEXUS_PASSWORD }}
78+
- name: Login to Scontain registry
79+
uses: docker/login-action@v3
80+
with:
81+
registry: registry.scontain.com
82+
username: ${{ secrets.SCONTAIN_REGISTRY_USERNAME }}
83+
password: ${{ secrets.SCONTAIN_REGISTRY_PAT }}
84+
- name: Sconify
85+
run: post-compute/scone/sconify.sh
86+
- name: Login to Docker regis
87+
uses: docker/login-action@v3
88+
with:
89+
registry: docker-regis.iex.ec
90+
username: ${{ secrets.NEXUS_USERNAME }}
91+
password: ${{ secrets.NEXUS_PASSWORD }}
92+
- name: Publish
93+
run: docker push $IMG_TO
94+
- name: Clean
95+
run: docker image rm -f $IMG_FROM $IMG_TO registry.scontain.com/scone-production/iexec-sconify-image:5.9.1

0 commit comments

Comments
 (0)