# Kaniko build from: https://gitlab.com/guided-explorations/containers/kaniko-docker-build # Extended by: Bengt GIGER <bgiger@ethz.ch> with variables: KANIKO_CACHE_ARGS: "--cache=true --cache-copy-layers=true" VERSIONLABELMETHOD: "OnlyIfThisCommitHasVersion" # options: "OnlyIfThisCommitHasVersion","LastVersionTagInGit" IMAGE_LABELS: > --label org.opencontainers.image.vendor=$CI_SERVER_URL/$GITLAB_USER_LOGIN --label org.opencontainers.image.authors=$CI_SERVER_URL/$GITLAB_USER_LOGIN --label org.opencontainers.image.revision=$CI_COMMIT_SHA --label org.opencontainers.image.source=$CI_PROJECT_URL --label org.opencontainers.image.documentation=$CI_PROJECT_URL --label org.opencontainers.image.licenses=$CI_PROJECT_URL --label org.opencontainers.image.url=$CI_PROJECT_URL --label vcs-url=$CI_PROJECT_URL --label com.gitlab.ci.user=$CI_SERVER_URL/$GITLAB_USER_LOGIN --label com.gitlab.ci.email=$GITLAB_USER_EMAIL --label com.gitlab.ci.tagorbranch=$CI_COMMIT_REF_NAME --label com.gitlab.ci.pipelineurl=$CI_PIPELINE_URL --label com.gitlab.ci.commiturl=$CI_PROJECT_URL/commit/$CI_COMMIT_SHA --label com.gitlab.ci.cijoburl=$CI_JOB_URL --label com.gitlab.ci.mrurl=$CI_PROJECT_URL/-/merge_requests/$CI_MERGE_REQUEST_ID .build_with_kaniko: #Hidden job to use as an "extends" template stage: build image: name: gcr.io/kaniko-project/executor:debug entrypoint: [""] tags: - k8s-runner script: - | echo "Building and shipping image to $CI_REGISTRY_IMAGE" #Build date for opencontainers BUILDDATE="'$(date '+%FT%T%z' | sed -E -n 's/(\+[0-9]{2})([0-9]{2})$/\1:\2/p')'" #rfc 3339 date IMAGE_LABELS="$IMAGE_LABELS --label org.opencontainers.image.created=$BUILDDATE --label build-date=$BUILDDATE" #Description for opencontainers BUILDTITLE=$(echo $CI_PROJECT_TITLE | tr " " "_") IMAGE_LABELS="$IMAGE_LABELS --label org.opencontainers.image.title=$BUILDTITLE --label org.opencontainers.image.description=$BUILDTITLE" #Add ref.name for opencontainers IMAGE_LABELS="$IMAGE_LABELS --label org.opencontainers.image.ref.name=$CI_REGISTRY_IMAGE:$CI_COMMIT_REF_NAME" #Build Version Label and Tag from git tag, LastVersionTagInGit was placed by a previous job artifact if [[ "$VERSIONLABELMETHOD" == "LastVersionTagInGit" ]]; then VERSIONLABEL=$(cat VERSIONTAG.txt); fi if [[ "$VERSIONLABELMETHOD" == "OnlyIfThisCommitHasVersion" ]]; then VERSIONLABEL=$CI_COMMIT_TAG; fi if [[ ! -z "$VERSIONLABEL" ]]; then IMAGE_LABELS="$IMAGE_LABELS --label org.opencontainers.image.version=$VERSIONLABEL$TAG_EXT" ADDITIONALTAGLIST="$ADDITIONALTAGLIST $VERSIONLABEL$TAG_EXT latest$TAG_EXT" fi ADDITIONALTAGLIST="$ADDITIONALTAGLIST $CI_COMMIT_REF_NAME$TAG_EXT $CI_COMMIT_SHORT_SHA" if [[ "$CI_COMMIT_BRANCH" == "$CI_DEFAULT_BRANCH" ]]; then ADDITIONALTAGLIST="$ADDITIONALTAGLIST latest$TAG_EXT"; fi if [[ -n "$ADDITIONALTAGLIST" ]]; then for TAG in $ADDITIONALTAGLIST; do FORMATTEDTAGLIST="${FORMATTEDTAGLIST} --tag $CI_REGISTRY_IMAGE:$TAG"; done; fi #Reformat Docker tags to kaniko's --destination argument: FORMATTEDTAGLIST=$(echo "${FORMATTEDTAGLIST}" | sed s/\-\-tag/\-\-destination/g) echo "Kaniko arguments to run: --context $CI_PROJECT_DIR --dockerfile $CI_PROJECT_DIR/$DOCKERFILE $KANIKO_CACHE_ARGS $FORMATTEDTAGLIST $IMAGE_LABELS" mkdir -p /kaniko/.docker echo "{\"auths\":{\"$CI_REGISTRY\":{\"auth\":\"$(echo -n $CI_REGISTRY_USER:$CI_REGISTRY_PASSWORD | base64)\"}}}" > /kaniko/.docker/config.json /kaniko/executor --build-arg CI_BUILD_TAG=$CI_COMMIT_TAG --build-arg CI_REGISTRY_IMAGE=$CI_REGISTRY_IMAGE --compressed-caching=false --context $CI_PROJECT_DIR --dockerfile $CI_PROJECT_DIR/$DOCKERFILE $KANIKO_CACHE_ARGS $FORMATTEDTAGLIST $IMAGE_LABELS