45 commits

Author	SHA1	Message	Date
Tom Foster	6cf3c839e4	ci(release-image): Skip digest upload when not pushing images ... After #992, builds without registry credentials skip Docker image output but still extract binary artifacts. However, we were still trying to upload digests for images that weren't created. Add conditional check to only upload digests when actually pushing to registry.	2025-09-07 21:27:56 +01:00
Tom Foster	4a1091dd06	ci(release-image): Unify binary extraction using BuildKit local output ... Fork PRs currently fail binary extraction with 'invalid reference format' and 'must specify at least one container source' errors. This replaces the registry-specific docker create/copy method with BuildKit's local output feature for all builds. Uses multiple outputs in single build: image export plus local binary extraction from /sbin. Speeds up extracting binary artifacts and saves a couple of extra workflow steps in the process.	2025-09-07 20:46:11 +01:00
Tom Foster	1e9701f379	ci(release-image): Skip setup steps when using persistent BuildKit ... When BUILDKIT_ENDPOINT is set, builds run on a persistent BuildKit instance, making runner setup steps unnecessary. Skip Rust toolchain installation, QEMU setup, caching steps, and timelord to eliminate ~7 operations per job. Also adds output to git SHA and timestamp steps for visibility. Cuts at least a minute off average build time through fewer installs, cache restores, and cache saves.	2025-09-07 18:59:05 +01:00
Tom Foster	2cedf0d2e1	fix(ci): Use image output instead of docker for fork PRs ... Docker exporter doesn't support manifest lists (multi-platform builds). For fork PRs without registry credentials, use 'type=image,push=false' instead of 'type=docker' to build multi-platform images locally without pushing.	2025-09-07 18:32:38 +01:00
Tom Foster	84fdcd326a	fix(ci): Resolve registry push failures for fork PRs ... Fork PRs now fail during Docker image build with 'tag is needed when pushing to registry' because BUILTIN_REGISTRY_ENABLED evaluates to false without proper credentials, leaving the images list empty. This appears to be due to recent Forgejo permission changes affecting fork access to repository secrets. Add fallback to official registry when credentials unavailable, skip registry login and push operations for forks, and make merge job conditional since no digests exist without push. This allows forks to test Docker builds whilst avoiding authentication failures.	2025-09-07 17:39:18 +01:00
Tom Foster	fff9629b0f	fix(docker): Resolve liburing.so.2 loading error for non-root users ... Container failed to start when running as non-root (user 1000:1000) because copied directories had restrictive 770 permissions, likely due to different umask in persistent BuildKit. Non-root users couldn't access /usr/lib to load required dynamic libraries. Introduces prepper stage using Ubuntu to organize files into layered structure with explicit 755 directory permissions before copying to scratch image. Also fixes workflow syntax error and removes docker/** from paths-ignore to ensure Docker changes trigger CI builds.	2025-09-07 14:13:14 +01:00
Jade Ellis	cd238b05de	fix: Remove bad colon in workflow	2025-09-06 16:21:21 +01:00
Tom Foster	2516e783ba	ci: Support optional persistent BuildKit endpoints in Docker builds ... Allows us to use runners with persistent BuildKit containers for improved caching and faster build times. Falls back to standard docker-container driver when BUILDKIT_ENDPOINT environment variable is not set.	2025-09-06 16:05:51 +01:00
Jade Ellis	fdf5771387	ci: Fix CI not triggering on external pull requests	2025-09-06 15:21:39 +01:00
Ginger	58bbc0e676	fix: Move packaging files from dist/ to pkg/	2025-09-06 14:03:57 +00:00
Ginger	d19e0f0d97	feat: Move packaging scripts into dist/ and consolidate the service files	2025-09-06 14:03:57 +00:00
Renovate Bot	5cce024841	chore(deps): update https://github.com/reproducible-containers/buildkit-cache-dance action to v3.3.0	2025-08-31 00:44:28 +00:00
Jade Ellis	d74514f305	ci: Fix inverted latest tag	2025-07-20 20:59:29 +01:00
Jade Ellis	8fb94f99e9	ci: Upload binaries as artifacts	2025-07-07 01:40:59 +00:00
Jade Ellis	3977ccfcea	ci: Fix docker tags	2025-07-07 01:40:59 +00:00
Jade Ellis	01200d9b54	build: Allow specifying build profile ... Additionally splits caches by target CPU	2025-06-20 21:48:37 +01:00
Jade Ellis	d7514178ab	ci: Fix extra bracket in commit shorthash	2025-06-13 14:30:26 +01:00
Jade Ellis	3c44dccd65	ci: HACK, disable saving to actions cache	2025-05-26 19:16:50 +01:00
Jade Ellis	b9d60c64e5	ci: Don't specify container for image builder	2025-05-26 19:16:04 +01:00
Jade Ellis	7a46563f23	ci: Cache docker image build mounts	2025-05-21 01:48:25 +01:00
Jade Ellis	b5d2ef9a4a	ci: Refactor timelord to its own action	2025-05-20 21:36:01 +01:00
Jade Ellis	f14725a51b	ci: Check formatting ... Also moves rustup installation to a seperate workflow and enables caching. The sccache action required a github.com api token, so we set all that up too.	2025-05-20 21:31:41 +01:00
Jade Ellis	066794fe90	ci: Don't try build images on PR	2025-05-20 21:31:40 +01:00
Jade Ellis	d78fc53577	ci: Fix bad comparison	2025-05-01 21:27:12 +01:00
Jade Ellis	cbcf4300df	ci: Cache timelord-cli to avoid unnecesary compilation	2025-05-01 21:23:37 +01:00
Jade Ellis	a98da7d942	refactor: Move git version info gather in into a build script	2025-05-01 00:38:35 +01:00
Jade Ellis	e1655edd83	feat: HTML default page	2025-04-30 22:31:25 +01:00
Tom Foster	73c991edd0	Ignore all markdown for auto image builds	2025-04-27 18:13:10 +00:00
nex	0c302f3137	Don't re-build images for docs changes ... Ironically, this will trigger a rebuild anyway	2025-04-22 01:33:09 +00:00
Jade Ellis	1b1198771f	ci: Move timelord to actions to avoid bad cache invalidations from cargo	2025-04-19 20:25:55 +01:00
Jade Ellis	d4561e950b	ci: Run builtin registry whenever secret is available	2025-04-18 22:25:10 +01:00
Jade Ellis	298e2af3d7	ci: Try invert condition for branch prefix	2025-04-18 22:24:35 +01:00
Jade Ellis	c5b99fbccd	ci: Enable buildx caching	2025-04-18 21:05:17 +01:00
Jade Ellis	b16e26952a	ci: Use dind label	2025-04-18 14:09:20 +01:00
Jade Ellis	9e0530839d	ci: Remove non-functional cache steps	2025-04-18 14:09:19 +01:00
Jade Ellis	d85aaabe9e	fix: Disable buildkit caching ... This is for tom's runners, whilst they're having network issues	2025-04-18 14:09:19 +01:00
Jade Ellis	71d2421f55	ci: Only prefix non-default branches ... AKA, tag image:main as the latest commit	2025-04-18 14:09:19 +01:00
Jade Ellis	fb793e8315	ci: Limit concurrency ... Mainly to prevent runners from getting bogged down	2025-04-18 14:09:19 +01:00
Jade Ellis	10947f6f1a	fix: Replace rust cache with direct cache use, as Rust is not installed on CI image	2025-04-18 14:09:19 +01:00
Jade Ellis	93253237e9	ci: Prefix branch builds with branch-	2025-04-18 14:09:19 +01:00
Jade Ellis	0ac1ce9996	fix: Hardcode matrix	2025-04-18 14:09:19 +01:00
Jade Ellis	3ced2e2f90	fix: Use forgejo patched artifact actions	2025-04-18 14:09:18 +01:00
Jade Ellis	70cee36041	fix: Allow specifying user & password for builtin registry	2025-04-18 14:09:18 +01:00
Jade Ellis	cacaa6c512	build: Use hacks for a cached actions build ... - Use cache dance for github actions caching - Use timelord hack to avoid bad cache invalidation	2025-04-18 14:09:18 +01:00
Jade Ellis	6b92e96582	feat: Docker images built with Forgejo Actions	2025-04-18 14:09:18 +01:00