init

.forgejo/workflows/build.yml

@@ -0,0 +1,101 @@
+name: Auto Build Docker Container From Alpine PKG
+enable-email-notifications: true
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '12 */3 * * *'
+
+jobs:
+  build:
+    runs-on: dind
+
+    env:
+      PACKAGE: rsync
+      DOCKER_REGISTRY: git.shork.ch
+      REGISTRY_USER: docker-images
+      COMMIT_AUTHOR_NAME: "forgejo-runner"
+      COMMIT_AUTHOR_EMAIL: "forgejo-runner@shork.ch"
+      COMMIT_MESSAGE: "Update build metadata"
+      REBUILD_ALL_X_DAYS: 3
+
+    steps:
+      - name: Install dependencies
+        shell: sh
+        run: |
+          echo "Run because of ${{ github.event_name }}"
+          apk add --no-cache git nodejs npm bash sed curl jq yq $PACKAGE
+
+      - uses: actions/checkout@v3
+
+      - name: Get latest package version
+        run: |
+          main_version=$(curl -s https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz \
+          | tar -xzO \
+          | awk '$0=="P:rsync" { getline; if ($0 ~ /^V:/) print substr($0,3) }' \
+          | sort -V | tail -n 1)
+
+          community_version=$(curl -s https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz \
+          | tar -xzO \
+          | awk '$0=="P:rsync" { getline; if ($0 ~ /^V:/) print substr($0,3) }' \
+          | sort -V | tail -n 1)
+
+          testing_version=$(curl -s https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz \
+          | tar -xzO \
+          | awk '$0=="P:rsync" { getline; if ($0 ~ /^V:/) print substr($0,3) }' \
+          | sort -V | tail -n 1)
+
+          newest_version=$(echo -e "$main_version\n$community_version\n$testing_version" | sort -V | tail -n 1)
+
+          echo "NEWEST_VERSION=$newest_version" >> $GITHUB_ENV
+
+      - name: Determine if update is needed
+        run: |
+          last_version_file=".last_version"
+          last_rebuild_file=".last_rebuild"
+          last_dockerfile_hash_file=".dockerfile_hash"
+
+          last_version=$(cat $last_version_file 2>/dev/null || echo "none")
+          last_rebuild=$(cat $last_rebuild_file 2>/dev/null || echo 0)
+          last_dockerfile_hash=$(cat $last_dockerfile_hash_file 2>/dev/null || echo "none")
+          dockerfile_hash=$(sha256sum Dockerfile | awk '{print $1}' || echo "nuh")
+          current_day=$(( $(date +%s) / 86400 ))
+
+          update="false"
+          if [ ${{ github.event_name }} == "workflow_dispatch" ] || [ "$last_version" != "$NEWEST_VERSION" ] || [ "$last_dockerfile_hash" != "$dockerfile_hash" ] || [ $((current_day - last_rebuild)) -gt "$REBUILD_ALL_X_DAYS" ]; then
+            update="true"
+          fi
+
+          echo "UPDATE=$update" >> $GITHUB_ENV
+          echo "DOCKERFILE_HASH=$dockerfile_hash" >> $GITHUB_ENV
+
+      - name: Start Docker daemon
+        if: env.UPDATE == 'true'
+        run: |
+          dockerd-entrypoint.sh &
+          for i in {1..10}; do
+            docker info && break
+            echo "Waiting for Docker daemon..."
+            sleep 3
+          done
+          docker info || { echo "Docker daemon failed to start."; exit 1; }
+
+      - name: Build and push Docker image
+        if: env.UPDATE == 'true'
+        run: |
+          docker build -t $DOCKER_REGISTRY/$REGISTRY_USER/docker-$PACKAGE:latest -t $DOCKER_REGISTRY/$REGISTRY_USER/$PACKAGE-alpine:$NEWEST_VERSION .
+          echo "${{ secrets.DOCKER_PASSWORD }}" | docker login $DOCKER_REGISTRY -u $REGISTRY_USER --password-stdin
+          docker push --all-tags $DOCKER_REGISTRY/$REGISTRY_USER/$PACKAGE-alpine
+          echo "$NEWEST_VERSION" > .last_version
+          echo $(( $(date +%s) / 86400 )) > .last_rebuild
+          echo "$DOCKERFILE_HASH" > .dockerfile_hash
+
+      - name: Commit updated metadata
+        if: env.UPDATE == 'true'
+        run: |
+          git config user.name "$COMMIT_AUTHOR_NAME"
+          git config user.email "$COMMIT_AUTHOR_EMAIL"
+          git add .last_version .last_rebuild .dockerfile_hash
+          git commit -m "$COMMIT_MESSAGE" || echo "No commit"
+          git push
+

Dockerfile

@@ -0,0 +1,17 @@
+FROM git.shork.ch/docker-images/alpine-edge:latest
+
+RUN apk upgrade --no-cache && \
+    apk add --no-cache su-exec curl rsync && \
+    adduser -D -u 1000 rsync
+
+RUN mkdir /data && \
+    chown rsync:rsync /data && \
+    chmod 500 /data
+
+RUN touch /var/run/rsyncd.lock && \
+    chown rsync:rsync /var/run/rsyncd.lock
+
+USER rsync
+
+CMD ["rsync", "--version"]
+