1
0
mirror of https://github.com/phusion/baseimage-docker.git synced 2026-03-26 04:18:46 +00:00

Automated weekly security rebuilds for all active Ubuntu LTS tracks (#652)

* Add scheduled security builds for multiple LTS tracks (jammy + noble)

Co-authored-by: Theaxiom <57013+Theaxiom@users.noreply.github.com>

* Address review feedback: checkout at release tag, exclude pre-releases/drafts, warn on unknown tag prefix

Co-authored-by: Theaxiom <57013+Theaxiom@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Theaxiom <57013+Theaxiom@users.noreply.github.com>
This commit is contained in:
Copilot
2026-02-27 13:01:16 +02:00
committed by GitHub
parent 2403c58254
commit 44a761d9eb
2 changed files with 104 additions and 0 deletions

View File

@@ -20,6 +20,17 @@ jobs:
# Set the platforms to build for here and thus reduce duplicating it.
PLATFORMS=amd64,arm,arm64
TAGS="${DOCKER_IMAGE}:${GIT_BRANCH}, ghcr.io/${{ github.repository_owner }}/baseimage:${GIT_BRANCH}"
# Determine BASE_IMAGE from release tag prefix (e.g. noble-1.0.2 -> ubuntu:24.04)
if [[ "${GIT_BRANCH}" == noble-* ]]; then
BASE_IMAGE="ubuntu:24.04"
elif [[ "${GIT_BRANCH}" == jammy-* ]]; then
BASE_IMAGE="ubuntu:22.04"
else
# Default to noble (latest LTS) for unrecognised tag prefixes
echo "::warning::Unrecognized release tag prefix '${GIT_BRANCH}'. Expected it to start with 'noble-' or 'jammy-'. Defaulting BASE_IMAGE to ubuntu:24.04 (Noble)."
BASE_IMAGE="ubuntu:24.04"
fi
# Set output parameters.
@@ -32,6 +43,7 @@ jobs:
echo "docker_image=${DOCKER_IMAGE}" >> $GITHUB_OUTPUT
fi
echo "platforms=${PLATFORMS}" >> $GITHUB_OUTPUT
echo "base_image=${BASE_IMAGE}" >> $GITHUB_OUTPUT
- name: Set up QEMU
@@ -71,3 +83,4 @@ jobs:
platforms: ${{ steps.prep.outputs.platforms }}
push: ${{ steps.prep.outputs.push }}
tags: ${{ steps.prep.outputs.tags }}
build-args: BASE_IMAGE=${{ steps.prep.outputs.base_image }}