Build Cloud and Vagrant Images #45
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build Cloud and Vagrant Images | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| version_major: | |
| description: 'AlmaLinux major version' | |
| required: true | |
| default: '10' | |
| type: choice | |
| options: | |
| - kitten_10 | |
| - 10 | |
| - 9 | |
| - 8 | |
| test_ami: | |
| description: "Test built AMI" | |
| required: true | |
| type: boolean | |
| default: true | |
| notify_mattermost: | |
| description: "Send notification to Mattermost" | |
| required: true | |
| type: boolean | |
| default: true | |
| x86_64_ami_id: | |
| description: "AMI ID (x86_64)" | |
| required: true | |
| default: 'ami-07e27acb2fc6e5168' | |
| aarch64_ami_id: | |
| description: "AMI ID (aarch64)" | |
| required: true | |
| default: 'ami-00be7f42a81b0fbc6' | |
| env: | |
| ALMALINUX_AWS_ACCOUNT_ID: 764336703387 | |
| PACKER_GITHUB_API_TOKEN: ${{ secrets.GIT_HUB_TOKEN }} | |
| jobs: | |
| build-ami: | |
| name: Build ${{ matrix.variant }} ${{ matrix.arch }} AMI | |
| runs-on: ubuntu-24.04 | |
| outputs: | |
| ami_x86_64: ${{ steps.get-ami-id.outputs.ami_x86_64 }} | |
| ami_aarch64: ${{ steps.get-ami-id.outputs.ami_aarch64 }} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| variant: ${{ fromJSON(format('["{0}"]', inputs.version_major )) }} | |
| arch: | |
| - x86_64 | |
| - aarch64 | |
| steps: | |
| - uses: actions/checkout@v4 | |
| # - name: Configure AWS credentials | |
| # uses: aws-actions/configure-aws-credentials@v4.0.2 | |
| # with: | |
| # aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| # aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| # aws-region: ${{ vars.AWS_REGION }} | |
| # - name: Prepare staff | |
| # run: | | |
| # packer_template=amazon-ebssurrogate.almalinux_${{ matrix.variant }}_ami_${{ matrix.arch }} | |
| # echo "PACKER_TEMPLATE=${packer_template}" >> $GITHUB_ENV | |
| # variant="${{ matrix.variant }}" | |
| # variant="${variant^}" | |
| # variant="${variant//_/ }" | |
| # SOURCE_AMI_ID=$(aws ec2 describe-images --owners ${{ env.ALMALINUX_AWS_ACCOUNT_ID }} --query "Images | max_by(@, &CreationDate) | ImageId" --filters "Name=name,Values=AlmaLinux OS ${variant}*${{ matrix.arch }}" --region ${{ vars.AWS_REGION }} --output text) | |
| # if [[ "${SOURCE_AMI_ID}" == "" || "${SOURCE_AMI_ID}" == "None" ]]; then | |
| # echo "[Error] Failed to get AMI ID for AlmaLinux ${variant} ${{ matrix.arch }}." | |
| # exit 1 | |
| # else | |
| # echo "[Debug] Source AMI ID: '${SOURCE_AMI_ID}'" | |
| # fi | |
| # echo "SOURCE_AMI_ID=${SOURCE_AMI_ID}" >> $GITHUB_ENV | |
| # - name: Update system | |
| # run: | | |
| # sudo apt-get -y update | |
| # - name: Add Hashicorp repository | |
| # run: | | |
| # wget -O - https://apt.releases.hashicorp.com/gpg | sudo gpg --dearmor -o /usr/share/keyrings/hashicorp-archive-keyring.gpg | |
| # echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/hashicorp-archive-keyring.gpg] https://apt.releases.hashicorp.com $(lsb_release -cs) main" | sudo tee /etc/apt/sources.list.d/hashicorp.list | |
| # sudo apt-get -y update | |
| # - name: Install packer | |
| # run: | | |
| # sudo apt-get -y install packer | |
| # - name: Install ansible | |
| # run: sudo apt-get -y install ansible | |
| # - name: Initialize packer | |
| # run: packer init -upgrade . | |
| # - name: Build ${{ matrix.variant }} ${{ matrix.arch }} AMI | |
| # run: | | |
| # packer build \ | |
| # -var='aws_source_ami_${{ matrix.variant }}_${{ matrix.arch }}=${{ env.SOURCE_AMI_ID }}' \ | |
| # -var='aws_ami_region=${{ vars.AWS_REGION }}' \ | |
| # -only=${{ env.PACKER_TEMPLATE }} . |& tee ${{ matrix.variant }}_${{ matrix.arch }}_build.log | |
| # exit_code=${PIPESTATUS[0]} | |
| # if [[ "${exit_code}" != "0" ]]; then | |
| # exit 1 | |
| # fi | |
| # - uses: actions/upload-artifact@v4 | |
| # name: Store build log as artifact | |
| # if: always() | |
| # with: | |
| # compression-level: 6 | |
| # name: ${{ matrix.variant }}_${{ matrix.arch }}_build.log | |
| # path: ${{ matrix.variant }}_${{ matrix.arch }}_build.log | |
| # - name: Get AMI ID | |
| # id: get-ami-id | |
| # run: | | |
| # AMI_ID=$(grep -E '${{ vars.AWS_REGION }}: ami-' ${{ matrix.variant }}_${{ matrix.arch }}_build.log | awk '{print $2}') | |
| # if [[ "${AMI_ID}" == "" ]]; then | |
| # exit 1 | |
| # else | |
| # echo "[Debug] AMI ID found in the build log: '${AMI_ID}'" | |
| # fi | |
| # echo "AMI_ID=${AMI_ID}" >> $GITHUB_ENV | |
| # echo "ami_${{ matrix.arch }}=${AMI_ID}" >> $GITHUB_OUTPUT | |
| # - name: Get AMI Name | |
| # run: | | |
| # AMI_NAME=$(aws ec2 describe-images --filters "Name=image-id,Values=${{ env.AMI_ID }}" --query 'Images[0].Name' --output text) | |
| # if [[ "${AMI_NAME}" == "" || "${AMI_NAME}" == "None" ]]; then | |
| # exit 1 | |
| # else | |
| # echo "[Debug] AMI Name: '${AMI_NAME}'" | |
| # fi | |
| # echo "AMI_NAME=${AMI_NAME}" >> $GITHUB_ENV | |
| # - name: Print AMI summary | |
| # uses: actions/github-script@v7 | |
| # with: | |
| # result-encoding: string | |
| # script: | | |
| # core.summary | |
| # .addHeading('${{ env.AMI_NAME }}', '4') | |
| # .addHeading('AMI ID: ${{ env.AMI_ID }}', '5') | |
| # .write() | |
| # - name: Send notification to Mattermost | |
| # uses: mattermost/action-mattermost-notify@master | |
| # if: inputs.notify_mattermost | |
| # with: | |
| # MATTERMOST_WEBHOOK_URL: ${{ secrets.MATTERMOST_WEBHOOK_URL }} | |
| # MATTERMOST_CHANNEL: ${{ vars.MATTERMOST_CHANNEL }} | |
| # MATTERMOST_USERNAME: ${{ github.triggering_actor }} | |
| # TEXT: | | |
| # :almalinux: **${{ env.AMI_NAME }}** AWS AMI, built by the GitHub [Action](${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}) | |
| # **AMI ID**: `${{ env.AMI_ID }}` | |
| - name: Set AMI ID | |
| id: get-ami-id | |
| run: | | |
| echo "ami_${{ matrix.arch }}=${{ matrix.arch == 'x86_64' && inputs.x86_64_ami_id || inputs.aarch64_ami_id }}" >> $GITHUB_OUTPUT | |
| # runner-on-ami: | |
| # name: Runner on AMI ID ${{ matrix.ami_id }} | |
| # if: inputs.test_ami | |
| # runs-on: ubuntu-24.04 | |
| # needs: [build-ami] | |
| # strategy: | |
| # fail-fast: false | |
| # matrix: | |
| # ami_id: ${{ fromJSON(format('["{0}", "{1}"]', needs.build-ami.outputs.ami_x86_64, needs.build-ami.outputs.ami_aarch64)) }} | |
| # exclude: | |
| # - ami_id: '' | |
| # steps: | |
| # - name: Configure AWS credentials | |
| # uses: aws-actions/configure-aws-credentials@v4.0.2 | |
| # with: | |
| # aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| # aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| # aws-region: ${{ vars.AWS_REGION }} | |
| # - name: Get AMI architecture | |
| # run: | | |
| # AMI_ARCH=$(aws ec2 describe-images --filters "Name=image-id,Values=${{ matrix.ami_id }}" --query 'Images[0].Architecture' --output text) | |
| # if [[ "${AMI_ARCH}" == "" || "${AMI_ARCH}" == "None" ]]; then | |
| # exit 1 | |
| # else | |
| # echo "[Debug] AMI Name: '${AMI_ARCH}'" | |
| # fi | |
| # echo "AMI_ARCH=${AMI_ARCH}" >> $GITHUB_ENV | |
| # - name: Setup and start runner | |
| # uses: NextChapterSoftware/ec2-action-builder@v1.10 | |
| # with: | |
| # github_token: ${{ secrets.GIT_HUB_TOKEN }} | |
| # aws_access_key_id: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| # aws_secret_access_key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| # aws_region: ${{ vars.AWS_REGION }} | |
| # ec2_ami_id: ${{ matrix.ami_id }} | |
| # ec2_subnet_id: ${{ secrets.EC2_SUBNET_ID}} | |
| # ec2_security_group_id: ${{ secrets.EC2_SECURITY_GROUP_ID }} | |
| # ec2_instance_type: ${{ contains(env.AMI_ARCH, 'arm64') && 't4g.medium' || 't3.medium' }} | |
| # # aarch64 - t4g.medium | |
| # # x86_64 - t3.medium | |
| # ec2_root_disk_size_gb: "16" # override default size which is too small for actions and tests stuff | |
| # ec2_root_disk_ebs_class: "gp3" # use faster and cheeper storage instead of default 'gp2' | |
| # ec2_instance_ttl: 30 # Optional (default is 60 minutes) | |
| # ec2_spot_instance_strategy: None # Other options are: SpotOnly, BestEffort, MaxPerformance | |
| # ec2_instance_tags: > # Required for IAM role resource permission scoping | |
| # [ | |
| # {"Key": "Project", "Value": "GitHub Actions Self-hosted Runners"} | |
| # ] | |
| test-ami: | |
| name: Test ${{ inputs.version_major }} ${{ matrix.arch }} AMI | |
| if: inputs.test_ami | |
| needs: [build-ami] | |
| runs-on: ${{ format('runs-on={0}/ami={1}/region={2}', github.run_id, contains(matrix.arch, 'aarch64') && needs.build-ami.outputs.ami_aarch64 || needs.build-ami.outputs.ami_x86_64, vars.AWS_REGION )}} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| arch: | |
| - aarch64 | |
| - x86_64 | |
| steps: | |
| - name: Configure AWS credentials | |
| uses: aws-actions/configure-aws-credentials@v4.0.2 | |
| with: | |
| aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| aws-region: ${{ vars.AWS_REGION }} | |
| - name: Install aws CLI | |
| run: | | |
| # Install aws CLI | |
| sudo dnf install -y -q unzip | |
| curl "https://awscli.amazonaws.com/awscli-exe-linux-$(uname -m).zip" -o "awscliv2.zip" | |
| unzip -qq awscliv2.zip | |
| sudo ./aws/install | |
| - name: Get AMI ID | |
| run: | | |
| AMI_ID=${{ matrix.arch == 'x86_64' && needs.build-ami.outputs.ami_x86_64 || needs.build-ami.outputs.ami_aarch64 }} | |
| echo "AMI_ID=${AMI_ID}" >> $GITHUB_ENV | |
| - name: Get AMI architecture | |
| run: | | |
| AMI_ARCH=$(aws ec2 describe-images --image-ids ${{ env.AMI_ID }} --query 'Images[0].Tags' | jq -r '.[] | select(.Key == "Architecture") | .Value') | |
| if [[ "${AMI_ARCH}" == "" || "${AMI_ARCH}" == "None" ]]; then | |
| exit 1 | |
| else | |
| echo "[Debug] AMI Arch: '${AMI_ARCH}'" | |
| fi | |
| echo "AMI_ARCH=${AMI_ARCH}" >> $GITHUB_ENV | |
| - name: Get AlmaLinux versions | |
| id: ami-version | |
| run: | | |
| AMI_VERSION=$(aws ec2 describe-images --image-ids ${{ env.AMI_ID }} --query 'Images[0].Tags' | jq -r '.[] | select(.Key == "Version") | .Value') | |
| if [[ "${AMI_VERSION}" == "" || "${AMI_VERSION}" == "None" ]]; then | |
| exit 1 | |
| else | |
| echo "[Debug] AMI Version: '${AMI_VERSION}'" | |
| fi | |
| echo "AMI_VERSION=${AMI_VERSION}" >> $GITHUB_ENV | |
| echo "OS_VERSION=$(echo $AMI_VERSION | sed 's/\.[0-9]\{8\}.*$//g')" >> $GITHUB_ENV | |
| - name: Test AMI | |
| run: | | |
| case "${{ env.OS_VERSION }}" in | |
| 10) | |
| OS_RELEASE="AlmaLinux Kitten release ${{ env.OS_VERSION }}" | |
| ;; | |
| *) | |
| OS_RELEASE="AlmaLinux release ${{ env.OS_VERSION }}" | |
| ;; | |
| esac | |
| echo "[Debug] AlmaLinux release:" | |
| grep "${OS_RELEASE}" /etc/almalinux-release || exit 1 | |
| echo "[Debug] System architecture:" | |
| rpm -q --qf='%{ARCH}\n' $(rpm -qf /etc/almalinux-release) | grep '${{ env.AMI_ARCH }}' || exit 1 | |
| echo "[Debug] Check for updates:" | |
| dnf check-update || exit 1 |