A container registry that uses the AT Protocol for manifest storage and S3 for blob storage.
split release workflows
+180
-80
+60
.tangled/workflows/release-appview.yml
+60
.tangled/workflows/release-appview.yml
···
1
+
# ATCR AppView Release
2
+
# Builds multi-arch (amd64 + arm64) container image and publishes a manifest list.
3
+
4
+
when:
5
+
- event: ["push"]
6
+
tag: ["v*"]
7
+
8
+
engine: kubernetes
9
+
image: quay.io/buildah/stable:latest
10
+
architecture: [amd64, arm64]
11
+
12
+
environment:
13
+
IMAGE_REGISTRY: atcr.io
14
+
IMAGE_USER: atcr.io
15
+
IMAGE_NAME: appview
16
+
DOCKERFILE: ./Dockerfile.appview
17
+
18
+
steps:
19
+
- name: Build image archive
20
+
command: |
21
+
set -e
22
+
mkdir -p /artifacts
23
+
buildah bud \
24
+
--tag "${IMAGE_NAME}:${TANGLED_ARCHITECTURE}" \
25
+
--file "${DOCKERFILE}" \
26
+
.
27
+
buildah push \
28
+
"${IMAGE_NAME}:${TANGLED_ARCHITECTURE}" \
29
+
"oci-archive:/artifacts/${IMAGE_NAME}.tar"
30
+
31
+
final:
32
+
architecture: amd64
33
+
image: quay.io/buildah/stable:latest
34
+
steps:
35
+
- name: Login to registry
36
+
command: |
37
+
echo "${APP_PASSWORD}" | buildah login \
38
+
-u "${IMAGE_USER}" \
39
+
--password-stdin \
40
+
"${IMAGE_REGISTRY}"
41
+
42
+
- name: Create and push multi-arch manifest
43
+
command: |
44
+
set -e
45
+
FULL="${IMAGE_REGISTRY}/${IMAGE_USER}/${IMAGE_NAME}"
46
+
47
+
buildah pull "oci-archive:/artifacts/amd64/${IMAGE_NAME}.tar"
48
+
buildah pull "oci-archive:/artifacts/arm64/${IMAGE_NAME}.tar"
49
+
50
+
buildah manifest create "${FULL}:${TANGLED_REF_NAME}"
51
+
buildah manifest add "${FULL}:${TANGLED_REF_NAME}" "${IMAGE_NAME}:amd64"
52
+
buildah manifest add "${FULL}:${TANGLED_REF_NAME}" "${IMAGE_NAME}:arm64"
53
+
54
+
buildah manifest push --all \
55
+
"${FULL}:${TANGLED_REF_NAME}" \
56
+
"docker://${FULL}:${TANGLED_REF_NAME}"
57
+
58
+
buildah manifest push --all \
59
+
"${FULL}:${TANGLED_REF_NAME}" \
60
+
"docker://${FULL}:latest"
+60
.tangled/workflows/release-hold.yml
+60
.tangled/workflows/release-hold.yml
···
1
+
# ATCR Hold Release
2
+
# Builds multi-arch (amd64 + arm64) container image and publishes a manifest list.
3
+
4
+
when:
5
+
- event: ["push"]
6
+
tag: ["v*"]
7
+
8
+
engine: kubernetes
9
+
image: quay.io/buildah/stable:latest
10
+
architecture: [amd64, arm64]
11
+
12
+
environment:
13
+
IMAGE_REGISTRY: atcr.io
14
+
IMAGE_USER: atcr.io
15
+
IMAGE_NAME: hold
16
+
DOCKERFILE: ./Dockerfile.hold
17
+
18
+
steps:
19
+
- name: Build image archive
20
+
command: |
21
+
set -e
22
+
mkdir -p /artifacts
23
+
buildah bud \
24
+
--tag "${IMAGE_NAME}:${TANGLED_ARCHITECTURE}" \
25
+
--file "${DOCKERFILE}" \
26
+
.
27
+
buildah push \
28
+
"${IMAGE_NAME}:${TANGLED_ARCHITECTURE}" \
29
+
"oci-archive:/artifacts/${IMAGE_NAME}.tar"
30
+
31
+
final:
32
+
architecture: amd64
33
+
image: quay.io/buildah/stable:latest
34
+
steps:
35
+
- name: Login to registry
36
+
command: |
37
+
echo "${APP_PASSWORD}" | buildah login \
38
+
-u "${IMAGE_USER}" \
39
+
--password-stdin \
40
+
"${IMAGE_REGISTRY}"
41
+
42
+
- name: Create and push multi-arch manifest
43
+
command: |
44
+
set -e
45
+
FULL="${IMAGE_REGISTRY}/${IMAGE_USER}/${IMAGE_NAME}"
46
+
47
+
buildah pull "oci-archive:/artifacts/amd64/${IMAGE_NAME}.tar"
48
+
buildah pull "oci-archive:/artifacts/arm64/${IMAGE_NAME}.tar"
49
+
50
+
buildah manifest create "${FULL}:${TANGLED_REF_NAME}"
51
+
buildah manifest add "${FULL}:${TANGLED_REF_NAME}" "${IMAGE_NAME}:amd64"
52
+
buildah manifest add "${FULL}:${TANGLED_REF_NAME}" "${IMAGE_NAME}:arm64"
53
+
54
+
buildah manifest push --all \
55
+
"${FULL}:${TANGLED_REF_NAME}" \
56
+
"docker://${FULL}:${TANGLED_REF_NAME}"
57
+
58
+
buildah manifest push --all \
59
+
"${FULL}:${TANGLED_REF_NAME}" \
60
+
"docker://${FULL}:latest"
+60
.tangled/workflows/release-scanner.yml
+60
.tangled/workflows/release-scanner.yml
···
1
+
# ATCR Scanner Release
2
+
# Builds multi-arch (amd64 + arm64) container image and publishes a manifest list.
3
+
4
+
when:
5
+
- event: ["push"]
6
+
tag: ["v*"]
7
+
8
+
engine: kubernetes
9
+
image: quay.io/buildah/stable:latest
10
+
architecture: [amd64, arm64]
11
+
12
+
environment:
13
+
IMAGE_REGISTRY: atcr.io
14
+
IMAGE_USER: atcr.io
15
+
IMAGE_NAME: scanner
16
+
DOCKERFILE: ./Dockerfile.scanner
17
+
18
+
steps:
19
+
- name: Build image archive
20
+
command: |
21
+
set -e
22
+
mkdir -p /artifacts
23
+
buildah bud \
24
+
--tag "${IMAGE_NAME}:${TANGLED_ARCHITECTURE}" \
25
+
--file "${DOCKERFILE}" \
26
+
.
27
+
buildah push \
28
+
"${IMAGE_NAME}:${TANGLED_ARCHITECTURE}" \
29
+
"oci-archive:/artifacts/${IMAGE_NAME}.tar"
30
+
31
+
final:
32
+
architecture: amd64
33
+
image: quay.io/buildah/stable:latest
34
+
steps:
35
+
- name: Login to registry
36
+
command: |
37
+
echo "${APP_PASSWORD}" | buildah login \
38
+
-u "${IMAGE_USER}" \
39
+
--password-stdin \
40
+
"${IMAGE_REGISTRY}"
41
+
42
+
- name: Create and push multi-arch manifest
43
+
command: |
44
+
set -e
45
+
FULL="${IMAGE_REGISTRY}/${IMAGE_USER}/${IMAGE_NAME}"
46
+
47
+
buildah pull "oci-archive:/artifacts/amd64/${IMAGE_NAME}.tar"
48
+
buildah pull "oci-archive:/artifacts/arm64/${IMAGE_NAME}.tar"
49
+
50
+
buildah manifest create "${FULL}:${TANGLED_REF_NAME}"
51
+
buildah manifest add "${FULL}:${TANGLED_REF_NAME}" "${IMAGE_NAME}:amd64"
52
+
buildah manifest add "${FULL}:${TANGLED_REF_NAME}" "${IMAGE_NAME}:arm64"
53
+
54
+
buildah manifest push --all \
55
+
"${FULL}:${TANGLED_REF_NAME}" \
56
+
"docker://${FULL}:${TANGLED_REF_NAME}"
57
+
58
+
buildah manifest push --all \
59
+
"${FULL}:${TANGLED_REF_NAME}" \
60
+
"docker://${FULL}:latest"
-80
.tangled/workflows/release.yml
-80
.tangled/workflows/release.yml
···
1
-
# ATCR Release Pipeline for Tangled.org
2
-
# Builds multi-arch container images (amd64 + arm64) and creates manifest lists
3
-
4
-
when:
5
-
- event: ["push"]
6
-
tag: ["v*"]
7
-
8
-
engine: kubernetes
9
-
image: quay.io/buildah/stable:latest
10
-
architecture: [amd64, arm64]
11
-
12
-
environment:
13
-
IMAGE_REGISTRY: atcr.io
14
-
IMAGE_USER: atcr.io
15
-
16
-
steps:
17
-
- name: Login to registry
18
-
command: |
19
-
echo "${APP_PASSWORD}" | buildah login \
20
-
-u "${IMAGE_USER}" \
21
-
--password-stdin \
22
-
${IMAGE_REGISTRY}
23
-
24
-
- name: Build and push AppView image
25
-
command: |
26
-
TAG="${IMAGE_REGISTRY}/${IMAGE_USER}/appview:${TANGLED_REF_NAME}-${TANGLED_ARCHITECTURE}"
27
-
buildah bud \
28
-
--tag "${TAG}" \
29
-
--file ./Dockerfile.appview \
30
-
.
31
-
buildah push "${TAG}"
32
-
mkdir -p /artifacts
33
-
echo "${TAG}" > /artifacts/appview.txt
34
-
35
-
- name: Build and push Hold image
36
-
command: |
37
-
TAG="${IMAGE_REGISTRY}/${IMAGE_USER}/hold:${TANGLED_REF_NAME}-${TANGLED_ARCHITECTURE}"
38
-
buildah bud \
39
-
--tag "${TAG}" \
40
-
--file ./Dockerfile.hold \
41
-
.
42
-
buildah push "${TAG}"
43
-
echo "${TAG}" > /artifacts/hold.txt
44
-
45
-
- name: Build and push Scanner image
46
-
command: |
47
-
TAG="${IMAGE_REGISTRY}/${IMAGE_USER}/scanner:${TANGLED_REF_NAME}-${TANGLED_ARCHITECTURE}"
48
-
buildah bud \
49
-
--tag "${TAG}" \
50
-
--file ./Dockerfile.scanner \
51
-
.
52
-
buildah push "${TAG}"
53
-
echo "${TAG}" > /artifacts/scanner.txt
54
-
55
-
final:
56
-
architecture: amd64
57
-
image: quay.io/buildah/stable:latest
58
-
steps:
59
-
- name: Login to registry
60
-
command: |
61
-
echo "${APP_PASSWORD}" | buildah login \
62
-
-u "${IMAGE_USER}" \
63
-
--password-stdin \
64
-
${IMAGE_REGISTRY}
65
-
66
-
- name: Create and push multi-arch manifests
67
-
command: |
68
-
for IMAGE in appview hold scanner; do
69
-
FULL="${IMAGE_REGISTRY}/${IMAGE_USER}/${IMAGE}"
70
-
71
-
AMD64_TAG=$(cat /artifacts/amd64/${IMAGE}.txt)
72
-
ARM64_TAG=$(cat /artifacts/arm64/${IMAGE}.txt)
73
-
74
-
buildah manifest create "${FULL}:${TANGLED_REF_NAME}"
75
-
buildah manifest add "${FULL}:${TANGLED_REF_NAME}" "docker://${AMD64_TAG}"
76
-
buildah manifest add "${FULL}:${TANGLED_REF_NAME}" "docker://${ARM64_TAG}"
77
-
buildah manifest push --all "${FULL}:${TANGLED_REF_NAME}" "docker://${FULL}:${TANGLED_REF_NAME}"
78
-
79
-
buildah manifest push --all "${FULL}:${TANGLED_REF_NAME}" "docker://${FULL}:latest"
80
-
done