Commit Graph

21 Commits

Author SHA1 Message Date
Florian Stosse
0f7ac9dcae Try to remove QEMU 2025-08-29 19:11:58 +02:00
Florian Stosse
8526139f0b Fix docker commands 2025-08-29 19:00:39 +02:00
Florian Stosse
ab37db82ff Fix tags 2025-08-29 18:57:49 +02:00
Florian Stosse
a13fb9aeab Fix tags 2025-08-29 18:56:17 +02:00
Florian Stosse
d6a2233103 Incrase shared memory size 2025-08-29 18:52:41 +02:00
Florian Stosse
7870295ac5 Build and test on arm arch 2025-08-29 18:45:05 +02:00
Florian Stosse
57ab970594 Fix typo 2025-08-29 18:43:45 +02:00
Florian Stosse
6ded0090e8 Use native arm runner 2025-08-29 18:39:53 +02:00
dependabot[bot]
cf1a92d7b0 actions: bump actions/attest-build-provenance
Bumps the actions-dependencies group with 1 update: [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance).


Updates `actions/attest-build-provenance` from 2.4.0 to 3.0.0
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](e8998f9491...977bb373ed)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-08-29 14:26:20 +00:00
Florian Stosse
939bc727ee Wait for deploy 2025-08-26 18:21:14 +02:00
Florian Stosse
cad3c52719 Add SBOM as job 2025-08-26 18:20:45 +02:00
Florian Stosse
1b46a636c9 Install cosign in deploy job 2025-08-26 17:59:58 +02:00
Florian Stosse
14255f678a Add permissions 2025-08-26 17:50:08 +02:00
Florian Stosse
40524599c9 CI: improve Docker build 2025-08-26 16:38:24 +02:00
dependabot[bot]
f29d029244 actions: bump the actions-dependencies group with 7 updates
Bumps the actions-dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `3.6.0` | `5.0.0` |
| [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `2.2.0` | `3.6.0` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `2.10.0` | `3.11.1` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `3.3.1` | `6.18.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `3.2.1` | `4.6.2` |
| [docker/metadata-action](https://github.com/docker/metadata-action) | `4.6.0` | `5.8.0` |
| [docker/login-action](https://github.com/docker/login-action) | `2.2.0` | `3.5.0` |


Updates `actions/checkout` from 3.6.0 to 5.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](f43a0e5ff2...08c6903cd8)

Updates `docker/setup-qemu-action` from 2.2.0 to 3.6.0
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](2b82ce82d5...29109295f8)

Updates `docker/setup-buildx-action` from 2.10.0 to 3.11.1
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](885d1462b8...e468171a9d)

Updates `docker/build-push-action` from 3.3.1 to 6.18.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](1104d47137...263435318d)

Updates `actions/upload-artifact` from 3.2.1 to 4.6.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](ff15f0306b...ea165f8d65)

Updates `docker/metadata-action` from 4.6.0 to 5.8.0
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](818d4b7b91...c1e51972af)

Updates `docker/login-action` from 2.2.0 to 3.5.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](465a07811f...184bdaa072)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-dependencies
- dependency-name: docker/setup-qemu-action
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-dependencies
- dependency-name: docker/setup-buildx-action
  dependency-version: 3.11.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-dependencies
- dependency-name: docker/build-push-action
  dependency-version: 6.18.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-dependencies
- dependency-name: actions/upload-artifact
  dependency-version: 4.6.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-dependencies
- dependency-name: docker/metadata-action
  dependency-version: 5.8.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-dependencies
- dependency-name: docker/login-action
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-08-26 14:21:18 +00:00
StepSecurity Bot
6d521cf63a [StepSecurity] Apply security best practices
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
2025-08-26 13:15:43 +00:00
Robin C. Ladiges
10571b77b7 validate version tags (#308)
so non-semver tags don't trigger a deployment that will fail.

It's not a normal regexp syntax. Dots `.` will only match dots and not any characters.
2022-09-27 10:04:05 -04:00
Robin C. Ladiges
afd62f33a0 multiarch build for additional linux/arm64/v8 support (#292)
* multiarch build for additional linux/arm64/v8 and linux/arm/v7 support

This commit fixes issue #291

* print logs of run command

* drop arm/v7 for now (untested)

* build arm64/v8 parallel during the build stage (without testing the image)
2022-07-19 08:59:17 +02:00
Robin C. Ladiges
cffbd7be5b changed volume paths ; FLAT_NODES=enabled (#261)
Changes:
- /var/lib/postgresql/14/main/            => /data/database/
- /var/lib/mod_tile/                      => /data/tiles/
- /home/renderer/src/openstreetmap-carto/ => /data/style/
- /data.osm.pbf                           => /data/region.osm.pbf
- /data.poly                              => /data/region.poly
- /nodes/flat_nodes.bin                   => deprecated (use FLAT_NODES=enabled instead)

Because some files are needed later and should never be separated from the database, the import does save those files now into /data/databases/:
- /data/database/region.poly
- /data/database/flat_nodes.bin
- /data/database/planet-import-complete
- and automatic update artifacts
2022-04-09 15:00:29 +02:00
Robin C. Ladiges
d0673dc72d cancel outdated jobs for the same reference (#263) 2022-04-09 08:45:57 +02:00
Robin C. Ladiges
522f66437c Build, test and deploy with Github Actions (#260)
* workflow: build and test pushes and pull_requests to master ; deploy image to GHCR

* improved tiles verification (*)

- Export the tiles as an artifact before verifying.
- Only empty.png is verified via checksum.
- Verify that all tiles are image/png files.
- Verify that all tiles are different from another.

* import and start the test server with automatic updates

* DockerHub deployment (*)

if secrets.DOCKERHUB_USERNAME and secrets.DOCKERHUB_PASSWORD are non-empty
2022-04-08 22:50:56 +02:00