Skip to content

build: add Docker image build support with RPM-based workflow#96

Open
imlk0 wants to merge 1 commit intomasterfrom
docker
Open

build: add Docker image build support with RPM-based workflow#96
imlk0 wants to merge 1 commit intomasterfrom
docker

Conversation

@imlk0
Copy link
Copy Markdown
Collaborator

@imlk0 imlk0 commented Mar 26, 2026

  • Add unified Dockerfile with multi-stage builds for fde, crypt, and verity
    • Builder stage creates RPM packages using make create-tarball and rpmbuild
    • Three release targets (release-fde, release-crypt, release-verity) share builder cache
    • Runtime dependencies automatically resolved via yum install from RPM spec
  • Add GitHub Actions workflow .github/workflows/build-docker.yml
    • Sequential build steps to maximize Docker cache reuse
    • Build, test, and push stages in single job
    • Support for branch, tag, and PR triggers
    • Push to GHCR on tags and master/main branches
  • Add Makefile targets for Docker builds
    • docker-build-fde, docker-build-crypt, docker-build-verity
    • docker-build and docker-build-all for building all images
  • Enhance bump-version to update APPLICATION buildspec.yml files
    • Automatically sync version tags across all three buildspec.yml files
    • Maintains consistency with Cargo.toml, spec, and debian changelog

- Add unified Dockerfile with multi-stage builds for fde, crypt, and verity
  - Builder stage creates RPM packages using make create-tarball and rpmbuild
  - Three release targets (release-fde, release-crypt, release-verity) share builder cache
  - Runtime dependencies automatically resolved via yum install from RPM spec
- Add GitHub Actions workflow .github/workflows/build-docker.yml
  - Sequential build steps to maximize Docker cache reuse
  - Build, test, and push stages in single job
  - Support for branch, tag, and PR triggers
  - Push to GHCR on tags and master/main branches
- Add Makefile targets for Docker builds
  - docker-build-fde, docker-build-crypt, docker-build-verity
  - docker-build and docker-build-all for building all images
- Enhance bump-version to update APPLICATION buildspec.yml files
  - Automatically sync version tags across all three buildspec.yml files
  - Maintains consistency with Cargo.toml, spec, and debian changelog
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant