diff --git a/.github/workflows/build-blincusui-app.yml b/.github/workflows/build-blincusui-app.yml new file mode 100644 index 0000000..a58621a --- /dev/null +++ b/.github/workflows/build-blincusui-app.yml @@ -0,0 +1,108 @@ +name: Build and Push BlincusUI App Toolbox +on: + schedule: + - cron: '20 22 * * *' # 10:20pm everyday + pull_request: + merge_group: + workflow_dispatch: +env: + IMAGE_NAME: blincusui-distrobox + IMAGE_TAGS: latest + IMAGE_REGISTRY: ghcr.io/${{ github.repository_owner }} + +concurrency: + group: ${{ github.workflow }}-${{ github.ref || github.run_id }} + cancel-in-progress: true + +jobs: + push-ghcr: + name: Build and push image + runs-on: ubuntu-22.04 + permissions: + contents: read + packages: write + id-token: write + strategy: + fail-fast: false + steps: + # Checkout push-to-registry action GitHub repository + - name: Checkout Push to Registry action + uses: actions/checkout@v4 + + - name: Verify Ublue-OS Ubuntu toolbox + uses: EyeCantCU/cosign-action/verify@v0.2.2 + with: + containers: ubuntu-toolbox:latest + pubkey: https://raw.githubusercontent.com/ublue-os/toolboxes/main/cosign.pub + registry: ghcr.io/ublue-os + + # Build metadata + - name: Image Metadata + uses: docker/metadata-action@v5 + id: meta + with: + images: | + ${{ env.IMAGE_NAME }} + labels: | + io.artifacthub.package.readme-url=https://raw.githubusercontent.com/ublue-os/boxkit/main/README.md + + # Build image using Buildah action + - name: Build Image + id: build_image + uses: redhat-actions/buildah-build@v2 + with: + containerfiles: | + ./apps/blincusui/Containerfile.blincusui + image: ${{ env.IMAGE_NAME }} + tags: ${{ env.IMAGE_TAGS }} + labels: ${{ steps.meta.outputs.labels }} + oci: false + + # Workaround bug where capital letters in your GitHub username make it impossible to push to GHCR. + # https://github.com/macbre/push-to-ghcr/issues/12 + - name: Lowercase Registry + id: registry_case + uses: ASzc/change-string-case-action@v6 + with: + string: ${{ env.IMAGE_REGISTRY }} + + # Push the image to GHCR (Image Registry) + - name: Push To GHCR + uses: redhat-actions/push-to-registry@v2 + if: github.event_name != 'pull_request' + id: push + env: + REGISTRY_USER: ${{ github.actor }} + REGISTRY_PASSWORD: ${{ github.token }} + with: + image: ${{ steps.build_image.outputs.image }} + tags: ${{ steps.build_image.outputs.tags }} + registry: ${{ steps.registry_case.outputs.lowercase }} + username: ${{ env.REGISTRY_USER }} + password: ${{ env.REGISTRY_PASSWORD }} + - name: Login to GitHub Container Registry + uses: docker/login-action@v3 + if: github.event_name != 'pull_request' + with: + registry: ghcr.io + username: ${{ github.actor }} + password: ${{ secrets.GITHUB_TOKEN }} + + # Sign container + - uses: sigstore/cosign-installer@v3.4.0 + if: github.event_name != 'pull_request' + + - name: Sign container image + if: github.event_name != 'pull_request' + run: | + echo "${{ env.COSIGN_PRIVATE_KEY }}" > cosign.key + wc -c cosign.key + cosign sign -y --key cosign.key ${{ steps.registry_case.outputs.lowercase }}/${{ env.IMAGE_NAME }}@${TAGS} + env: + TAGS: ${{ steps.push.outputs.digest }} + COSIGN_EXPERIMENTAL: false + COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }} + + - name: Echo outputs + run: | + echo "${{ toJSON(steps.push.outputs) }}" diff --git a/apps/blincusui/Containerfile.blincusui b/apps/blincusui/Containerfile.blincusui new file mode 100644 index 0000000..5871f34 --- /dev/null +++ b/apps/blincusui/Containerfile.blincusui @@ -0,0 +1,23 @@ +FROM fedora:40 + +RUN dnf -y update \ + && dnf -y install \ + gtk4-devel \ + gobject-introspection-devel \ + libadwaita-devel \ + golang-go \ + libglvnd-gles \ + git \ + && dnf clean all + +RUN git clone https://github.com/ublue-os/blincus /app +WORKDIR /app +#temporary +RUN git checkout combined + +RUN go build -trimpath -o blincusui + +RUN cp /app/blincusui /usr/bin/blincusui +RUN cp /app/blincusui.svg /usr/share/icons/hicolor/scalable/apps/blincusui.svg +RUN cp /app/dev.brian.BlincusUI.desktop /usr/share/applications/blincusui.desktop +RUN cp /app/dev.brian.BlincusUI.appdata.xml /usr/share/metainfo/blincusui.appdata.xml \ No newline at end of file