@@ -108,73 +108,20 @@ jobs:
108108 patch Dockerfile docker.patch
109109 echo "dockerfile=Dockerfile" >> $GITHUB_OUTPUT
110110 fi
111- - name : Check signing supported
112- id : check-signing-support
113- run : |
114- if test -f "./scripts/sign-multiarch.sh"; then
115- echo "sign=true" >> $GITHUB_OUTPUT
116- else
117- echo "sign=false" >> $GITHUB_OUTPUT
118- fi
119111 - name : Update signing scripts from main
120- if : steps.check-signing-support.outputs.sign == 'true'
121112 run : |
122113 git fetch origin main --depth=1
123114 git checkout origin/main -- scripts/sign.sh scripts/sign-multiarch.sh scripts/verify.sh
124- - name : Check for devbox
125- id : check-devbox
126- run : |
127- if test -f "devbox.json"; then
128- echo "devbox-build=true" >> $GITHUB_OUTPUT
129- else
130- echo "devbox-build=false" >> $GITHUB_OUTPUT
131- fi
132- - name : Set up Go (Non Devbox)
133- uses : actions/setup-go@v7
134- if : steps.check-devbox.outputs.devbox-build == 'false'
135- with :
136- go-version-file : " ${{ github.workspace }}/go.mod"
137- cache : false
138-
139- - name : Setup cache (Non Devbox)
140- uses : actions/cache@v6
141- if : steps.check-devbox.outputs.devbox-build == 'false'
142- with :
143- path : |
144- ~/.cache/go-build
145- ~/go/pkg/mod
146- key : ${{ runner.os }}-build-${{ hashFiles('**/go.sum', '**/go.mod') }}
147-
148- - name : Download go build dependencies (Non Devbox)
149- if : steps.check-devbox.outputs.devbox-build == 'false'
150- shell : bash
151- run : |
152- go mod download
153-
154- - name : Build all platforms & check version (Non Devbox)
155- if : steps.pick-dockerfile.outputs.dockerfile == 'fast.Dockerfile' && steps.check-devbox.outputs.devbox-build == 'false'
156- run : |
157- make all-platforms VERSION=${{ matrix.version }}
158- # not all versions Makefiles support the version check
159- if make |grep -q check-version; then
160- echo "Checking version..."
161- make check-version VERSION=${{ matrix.version }}
162- else
163- echo "Skipped version check"
164- fi
165-
166115 - name : Install devbox
167116 uses : jetify-com/devbox-install-action@v0.15.0
168117 with :
169118 enable-cache : ' true'
170- if : steps.check-devbox.outputs.devbox-build == 'true'
171119
172- - name : Download Go build dependencies (Devbox)
120+ - name : Download Go build dependencies
173121 run : devbox run -- 'go mod download'
174- if : steps.check-devbox.outputs.devbox-build == 'true'
175122 shell : bash
176123
177- - name : Build all platforms & check version (Devbox)
124+ - name : Build all platforms & check version
178125 run : |
179126 devbox run -- '
180127 make all-platforms VERSION=${{ matrix.version }}
@@ -185,7 +132,6 @@ jobs:
185132 else
186133 echo "Skipped version check"
187134 fi'
188- if : steps.check-devbox.outputs.devbox-build == 'true'
189135 shell : bash
190136 - name : " Set up Docker Buildx"
191137 uses : docker/setup-buildx-action@v4
@@ -219,40 +165,15 @@ jobs:
219165 quay.io/${{ env.IMAGE_REPOSITORY }}:${{ steps.daily-tag.outputs.daily-tag }}
220166 quay.io/${{ env.IMAGE_REPOSITORY }}:${{ matrix.version }}
221167 - name : Configure AWS credentials for DevProd Platforms ECR
222- if : steps.check-signing-support.outputs.sign == 'true'
223168 uses : aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6
224169 with :
225170 role-to-assume : ${{ secrets.DEVPROD_PLATFORMS_ECR_ROLE_ARN }}
226171 aws-region : us-east-1
227172 - name : Login to DevProd Platforms ECR
228- if : steps.check-signing-support.outputs.sign == 'true'
229173 uses : docker/login-action@v4
230174 with :
231175 registry : 901841024863.dkr.ecr.us-east-1.amazonaws.com
232- - name : Sign images (Non Devbox)
233- if : steps.check-signing-support.outputs.sign == 'true' && steps.check-devbox.outputs.devbox-build == 'false'
234- env :
235- PKCS11_URI : ${{ secrets.PKCS11_URI }}
236- GRS_USERNAME : ${{ secrets.GRS_USERNAME }}
237- GRS_PASSWORD : ${{ secrets.GRS_PASSWORD }}
238- run : |
239- make sign IMG="${{ env.IMAGE_REPOSITORY }}:${{ steps.daily-tag.outputs.daily-tag }}" SIGNATURE_REPO=${{ env.IMAGE_REPOSITORY }}
240- make sign IMG="quay.io/${{ env.IMAGE_REPOSITORY }}:${{ steps.daily-tag.outputs.daily-tag }}" SIGNATURE_REPO="quay.io/${{ env.IMAGE_REPOSITORY }}"
241- make sign IMG="${{ env.IMAGE_REPOSITORY }}:${{ steps.daily-tag.outputs.daily-tag }}" SIGNATURE_REPO=mongodb/signatures
242-
243- - name : Self-verify images (Non Devbox)
244- if : steps.check-signing-support.outputs.sign == 'true' && steps.check-devbox.outputs.devbox-build == 'false'
245- env :
246- PKCS11_URI : ${{ secrets.PKCS11_URI }}
247- GRS_USERNAME : ${{ secrets.GRS_USERNAME }}
248- GRS_PASSWORD : ${{ secrets.GRS_PASSWORD }}
249- run : |
250- make verify IMG="${{ env.IMAGE_REPOSITORY }}:${{ steps.daily-tag.outputs.daily-tag }}" SIGNATURE_REPO=${{ env.IMAGE_REPOSITORY }}
251- make verify IMG="quay.io/${{ env.IMAGE_REPOSITORY }}:${{ steps.daily-tag.outputs.daily-tag }}" SIGNATURE_REPO="quay.io/${{ env.IMAGE_REPOSITORY }}"
252- make verify IMG="${{ env.IMAGE_REPOSITORY }}:${{ steps.daily-tag.outputs.daily-tag }}" SIGNATURE_REPO=mongodb/signatures
253-
254- - name : Sign images (Devbox)
255- if : steps.check-signing-support.outputs.sign == 'true' && steps.check-devbox.outputs.devbox-build == 'true'
176+ - name : Sign images
256177 env :
257178 PKCS11_URI : ${{ secrets.PKCS11_URI }}
258179 GRS_USERNAME : ${{ secrets.GRS_USERNAME }}
@@ -262,8 +183,7 @@ jobs:
262183 devbox run -- 'make sign IMG="quay.io/${{ env.IMAGE_REPOSITORY }}:${{ steps.daily-tag.outputs.daily-tag }}" SIGNATURE_REPO="quay.io/${{ env.IMAGE_REPOSITORY }}"'
263184 devbox run -- 'make sign IMG="${{ env.IMAGE_REPOSITORY }}:${{ steps.daily-tag.outputs.daily-tag }}" SIGNATURE_REPO=mongodb/signatures'
264185
265- - name : Self-verify images (Devbox)
266- if : steps.check-signing-support.outputs.sign == 'true' && steps.check-devbox.outputs.devbox-build == 'true'
186+ - name : Self-verify images
267187 env :
268188 PKCS11_URI : ${{ secrets.PKCS11_URI }}
269189 GRS_USERNAME : ${{ secrets.GRS_USERNAME }}
0 commit comments