.github/workflows/container_build.yml - main - githubmirror/rsyslog

.github/workflows/container_build.yml
93 строки3 KB
dependabot[bot]
ci: bump the github-actions group with 6 updates
21 июл 2026, 18:56
21 июл 2026, 18:563b40a2a
---
name: container image build

on:
  pull_request:
    paths:
      - 'packaging/docker/rsyslog/**'
      - '.github/workflows/container_build.yml'
  push:
    branches: [main, master]
    paths:
      - 'packaging/docker/rsyslog/**'
      - '.github/workflows/container_build.yml'
  workflow_dispatch:

permissions:
  contents: read

concurrency:
  group: >-
    ${{ github.workflow }}-${{ github.event_name }}-${{
    github.event.pull_request.number || github.ref }}
  cancel-in-progress: true

jobs:
  build_containers:
    runs-on: ubuntu-latest
    timeout-minutes: 90
    steps:
      - name: Checkout repository
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false
          fetch-depth: 0

      - name: Build rsyslog container family
        # CI intentionally uses a non-release `ci-<sha>` tag. Stable release
        # workflows must inject their own explicit release version instead.
        id: build_containers
        run: |
          short_sha="$(git rev-parse --short=12 HEAD)"
          echo "short_sha=${short_sha}" >> "$GITHUB_OUTPUT"
          make -C packaging/docker/rsyslog all VERSION="ci-${short_sha}"

      - name: Smoke-test rsyslog container family
        # Keep smoke coverage lightweight: validate the packaged startup and
        # config contracts for each role without requiring external services.
        # These runs are short-lived and use representative environment values
        # for images whose entrypoint/config expects them.
        # This workflow is intentionally path-scoped because these tests
        # validate the PPA-backed container image family, not arbitrary source
        # changes from normal pull requests.
        env:
          IMAGE_TAG_SUFFIX: ${{ steps.build_containers.outputs.short_sha }}
        run: |
          tag="ci-${IMAGE_TAG_SUFFIX}"

          docker run --rm \
            --entrypoint id \
            "rsyslog/rsyslog-minimal:${tag}" \
            -u | grep -Fx 101

          docker run --rm \
            "rsyslog/rsyslog-minimal:${tag}" \
            rsyslogd -N1 -f /etc/rsyslog.conf

          docker run --rm \
            --entrypoint id \
            "rsyslog/rsyslog:${tag}" \
            -u | grep -Fx 101

          docker run --rm \
            "rsyslog/rsyslog:${tag}" \
            rsyslogd -N1 -f /etc/rsyslog.conf

          docker run --rm \
            -e ENABLE_RELP=on \
            "rsyslog/rsyslog-collector:${tag}" \
            rsyslogd -N1 -f /etc/rsyslog.conf

          docker run --rm \
            -e REMOTE_SERVER_NAME=collector \
            -e REMOTE_SERVER_PORT=514 \
            "rsyslog/rsyslog-dockerlogs:${tag}" \
            rsyslogd -N1 -f /etc/rsyslog.conf

          docker run --rm \
            -e VESPA_NAMESPACE=default \
            -e VESPA_DOCTYPE=logs \
            -e VESPA_SERVER=vespa \
            -e VESPA_PORT=8080 \
            "rsyslog/rsyslog-etl:${tag}" \
            rsyslogd -N1 -f /etc/rsyslog.conf