ci: build and push multi-arch docker image on merge to main #4

hijynx · 2026-09-02T11:32:30-06:00

hijynx commented

2026-09-02 11:32:30 -06:00

Adds a Forgejo Actions workflow that runs on pushes to main and publishes git.w33ble.com/w33ble/pipit:latest for linux/amd64 + linux/arm64.

follows the lagom pattern: cross-compile Go (amd64/arm64) outside Docker and build the client bundle once with bun, then buildx a thin final image (Dockerfile.ci) with --platform linux/amd64,linux/arm64 --push
Dockerfile.ci has no RUN steps — arm64 layers are assembled via QEMU, which cannot execute apk; alpine:3.21 ships its own CA bundle
final image matches the source-build Dockerfile (non-root 1000:1000, same env/expose)

Checks: cross-compile, client build, multi-arch buildx build, and an amd64 container smoke test (/api/health ok, UI 200) all pass locally.

Requires repo secrets REGISTRY_USER and REGISTRY_TOKEN (same names as lagom).

Adds a Forgejo Actions workflow that runs on pushes to `main` and publishes `git.w33ble.com/w33ble/pipit:latest` for linux/amd64 + linux/arm64. - follows the lagom pattern: cross-compile Go (amd64/arm64) outside Docker and build the client bundle once with bun, then buildx a thin final image (`Dockerfile.ci`) with `--platform linux/amd64,linux/arm64 --push` - `Dockerfile.ci` has no RUN steps — arm64 layers are assembled via QEMU, which cannot execute `apk`; alpine:3.21 ships its own CA bundle - final image matches the source-build Dockerfile (non-root 1000:1000, same env/expose) Checks: cross-compile, client build, multi-arch buildx build, and an amd64 container smoke test (`/api/health` ok, UI 200) all pass locally. Requires repo secrets `REGISTRY_USER` and `REGISTRY_TOKEN` (same names as lagom).

hijynx added 1 commit

2026-09-02 11:32:30 -06:00

ci: build and push multi-arch docker image on merge to main

test / client (pull_request) Successful in 26s

Details

test / server (pull_request) Successful in 1m22s

Details

65f15a799a

w33ble requested changes

2026-09-02 11:36:37 -06:00

Dismissed

.forgejo/workflows/docker.yaml Outdated

					
				@ -0,0 +8,4 @@

				  docker:

				    runs-on: ubuntu-latest

				    steps:

				      - uses: https://data.forgejo.org/actions/checkout@v7

you don't need the full data.forgejo.org url, you can just use 'actions/checkout', 'actions/setup-go', etc.

Dockerfile.ci Outdated

					
				@ -0,0 +6,4 @@

				# No RUN steps: arm64 layers are emulated via QEMU, which cannot execute apk.

				# Alpine ships its own CA bundle at /etc/ssl/certs/ca-certificates.crt.

				FROM alpine:3.21