Commit Graph

66 Commits

Author SHA1 Message Date
renovate[bot]
8c598b2996 chore(deps): update github/codeql-action digest to ff0a06e (#199)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-16 15:12:53 +02:00
renovate[bot]
45bdcfd4ad chore(deps): update sigstore/cosign-installer digest to 3454372 (#194)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-16 15:12:38 +02:00
renovate[bot]
0c29118218 chore(deps): update docker/build-push-action digest to 1dc7386 (#193)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-16 15:12:30 +02:00
renovate[bot]
3eab60524c chore(deps): update docker/bake-action digest to 212c367 (#192)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-16 15:12:17 +02:00
renovate[bot]
44cb72b1e6 chore(deps): update sigstore/cosign-installer digest to d7d6bc7 (#183)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-15 14:49:56 +02:00
dependabot[bot]
1a8f19fd76 Bump sigstore/cosign-installer from 3.8.1 to 3.8.2 (#182)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.8.1 to 3.8.2.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](d7d6bc7722...3454372f43)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-version: 3.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-05-07 09:44:05 +02:00
renovate[bot]
0fae613f7a chore(deps): update sigstore/cosign-installer digest to d7d6bc7 (#181)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-05 14:56:46 +02:00
renovate[bot]
acc0426450 chore(deps): update github/codeql-action digest to 60168ef (#179)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-05 14:54:21 +02:00
dependabot[bot]
8aae5cc080 Bump sigstore/cosign-installer from 3.8.1 to 3.8.2 (#178) 2025-05-05 14:50:28 +02:00
renovate[bot]
48b6e1b541 chore(deps): pin dependencies (#176)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-30 17:22:58 +02:00
Francesco Canovai
2ebeecec48 ci: pin pip version (#171)
Pip 25.1 breaks the creation of the requirements.txt. 
Pin to a lower version.

Closes #169

Signed-off-by: Francesco Canovai <francesco.canovai@enterprisedb.com>
2025-04-28 13:50:15 +02:00
Niccolò Fei
012f3b6677 chore: fix LZ4 builds on arm64 (#162)
build-essential and python3-dev are required to build LZ4 on arm64 since there aren't pre-compiled wheel available for this architecture. 
Also, switch back to using the latest qemu image.

Signed-off-by: Niccolò Fei <niccolo.fei@enterprisedb.com>
2025-03-11 16:42:03 +01:00
Niccolò Fei
4f2f2958be ci: workaround for segfault in the latest binfmt image (#156)
Signed-off-by: Niccolò Fei <niccolo.fei@enterprisedb.com>
2025-02-24 19:26:38 +01:00
Francesco Canovai
fbff03889c ci: copy and sign prod images (#143)
Use skopeo to copy testing images to the production registry when they
pass the security tests, instead of rebuilding them. 
After that, we sign the production images too.

Signed-off-by: Francesco Canovai <francesco.canovai@enterprisedb.com>
Signed-off-by: Jonathan Gonzalez V <jonathan.gonzalez@enterprisedb.com>
Signed-off-by: Niccolò Fei <niccolo.fei@enterprisedb.com>
Co-authored-by: Jonathan Gonzalez V <jonathan.gonzalez@enterprisedb.com>
Co-authored-by: Niccolò Fei <niccolo.fei@enterprisedb.com>
2025-01-27 14:37:52 +01:00
renovate[bot]
058205b63e chore(deps): update dependency ubuntu to v24 (#146)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-23 10:47:17 +01:00
Jonathan Gonzalez V.
980c2fabc8 feat: add cosign to sign the images (#137)
Using the output from the bake action, we sign every 
container image tag plus each specific digest using cosign.

Closes #136

Signed-off-by: Francesco Canovai <francesco.canovai@enterprisedb.com>
Signed-off-by: Jonathan Gonzalez V <jonathan.gonzalez@enterprisedb.com>
Signed-off-by: Gabriele Bartolini <gabriele.bartolini@enterprisedb.com>
Co-authored-by: Francesco Canovai <francesco.canovai@enterprisedb.com>
Co-authored-by: Gabriele Bartolini <gabriele.bartolini@enterprisedb.com>
2025-01-22 15:02:22 +01:00
Francesco Canovai
c330729d7f ci: build minimal and standard images (#135)
Build images without barman-cloud, to be used with backup plugins.

Other changes:

- Implement timestamp-based versioning for images
- Simplify build workflows for enhanced local testing and contribution
- Adopt OCI annotations and generate SBOMs for improved transparency

Closes #132

Signed-off-by: Francesco Canovai <francesco.canovai@enterprisedb.com>
Signed-off-by: Gabriele Bartolini <gabriele.bartolini@enterprisedb.com>
Signed-off-by: Marco Nenciarini <marco.nenciarini@enterprisedb.com>
Signed-off-by: Niccolò Fei <niccolo.fei@enterprisedb.com>
Co-authored-by: Gabriele Bartolini <gabriele.bartolini@enterprisedb.com>
Co-authored-by: Marco Nenciarini <marco.nenciarini@enterprisedb.com>
Co-authored-by: Niccolò Fei <niccolo.fei@enterprisedb.com>
2025-01-16 14:03:20 +01:00
Jonathan Gonzalez V.
47d165dfe8 ci: run the update workflow every Mon (#127)
Signed-off-by: Jonathan Gonzalez V <jonathan.gonzalez@enterprisedb.com>
Signed-off-by: Marco Nenciarini <marco.nenciarini@enterprisedb.com>
Signed-off-by: Gabriele Bartolini <gabriele.bartolini@enterprisedb.com>
Co-authored-by: Marco Nenciarini <marco.nenciarini@enterprisedb.com>
Co-authored-by: Gabriele Bartolini <gabriele.bartolini@enterprisedb.com>
2024-12-27 11:37:33 +01:00
Niccolò Fei
57be4d409f feat: immutable digest for the most specific tags (#113)
Detect updates of the Dockerfile template and Barman python
dependencies, and increase the imageReleaseVersion accordingly.
Avoid pushing an image if its most specific tag (fullTag)
already exists, thus preventing the override of the
existing digest.

Signed-off-by: Niccolò Fei <niccolo.fei@enterprisedb.com>
2024-09-05 16:48:18 +02:00
dependabot[bot]
f0469fce8d Bump docker/build-push-action from 5 to 6 (#114)
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 5 to 6.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/v5...v6)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-23 12:22:23 +02:00
Jonathan Gonzalez V
6a2cd25a07 ci: defer creating major version tag until release (#108)
Previously, we were always setting the `version` tag (e.g., 16, 17) when building
a container image. However, version 17 is still in beta and was tagged with `17`,
which could cause confusion. Users might mistake it for a stable release,
and tools like Renovate might attempt to update to this version.

This change ensures that the major `version` tag is not created until the version
is officially released.

Signed-off-by: Jonathan Gonzalez V <jonathan.gonzalez@enterprisedb.com>
Signed-off-by: Niccolò Fei <niccolo.fei@enterprisedb.com>
Co-authored-by: Niccolò Fei <niccolo.fei@enterprisedb.com>
2024-07-01 12:10:00 +02:00
Niccolò Fei
8093cb966f ci: do not trigger the CD on imageCatalog updates (#99)
Signed-off-by: Niccolò Fei <niccolo.fei@enterprisedb.com>
2024-05-13 09:29:28 +02:00
Niccolò Fei
baed8316c7 feat: generate Debian (12) Bookworm images (#62)
Add Debian 12 images and the related ClusterImageCatalog
---------

Signed-off-by: Niccolò Fei <niccolo.fei@enterprisedb.com>
Signed-off-by: Jonathan Gonzalez V <jonathan.gonzalez@enterprisedb.com>
Signed-off-by: Francesco Canovai <francesco.canovai@enterprisedb.com>
Co-authored-by: Jonathan Gonzalez V <jonathan.gonzalez@enterprisedb.com>
Co-authored-by: Francesco Canovai <francesco.canovai@enterprisedb.com>
2024-05-09 18:41:06 +02:00
Niccolò Fei
13c0eaf635 feat: generate a ClusterImageCatalog on image update (#97)
The image catalog YAML file will be committed an updated every time
an image is updated, thus, we provide a catalog with all the images in this repo.

Closes #96 

Signed-off-by: Niccolò Fei <niccolo.fei@enterprisedb.com>
Signed-off-by: Francesco Canovai <francesco.canovai@enterprisedb.com>
Co-authored-by: Francesco Canovai <francesco.canovai@enterprisedb.com>
2024-04-22 15:35:55 +02:00
Niccolò Fei
6d2b8cbd74 ci: temporary workaround for the snyk failure (#95)
The Sarif upload action is currently failing because of github/codeql-action#2187, which turned out being related to how snyk produces the sarif.
While the issue is being investigated with snyk, let's deploy a temporary workaround to allow the push of new images.
2024-03-13 13:21:06 +01:00
dependabot[bot]
0a9cc0a599 chore(deps): Bump nick-fields/retry from 2 to 3 (#84)
Bumps [nick-fields/retry](https://github.com/nick-fields/retry) from 2 to 3.
- [Release notes](https://github.com/nick-fields/retry/releases)
- [Changelog](https://github.com/nick-fields/retry/blob/master/.releaserc.js)
- [Commits](https://github.com/nick-fields/retry/compare/v2...v3)

---
updated-dependencies:
- dependency-name: nick-fields/retry
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-02-09 14:42:50 +01:00
dependabot[bot]
cf6a56c045 chore(deps): Bump github/codeql-action from 2 to 3 (#81)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2 to 3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-20 15:54:12 +01:00
dependabot[bot]
a2e966c1ec chore(deps): Bump actions/setup-python from 4 to 5 (#80)
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4 to 5.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-20 15:53:51 +01:00
dependabot[bot]
62f0c47a6a chore(deps): Bump benjefferies/branch-protection-bot from 1.0.9 to 1.1.2 (#79)
Bumps [benjefferies/branch-protection-bot](https://github.com/benjefferies/branch-protection-bot) from 1.0.9 to 1.1.2.
- [Release notes](https://github.com/benjefferies/branch-protection-bot/releases)
- [Commits](https://github.com/benjefferies/branch-protection-bot/compare/1.0.9...v1.1.2)

---
updated-dependencies:
- dependency-name: benjefferies/branch-protection-bot
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-20 15:53:30 +01:00
Tao Li
d3dca68e7f fix: match python version in update workflow to the container content (#82)
Signed-off-by: Tao Li <tao.li@enterprisedb.com>
2023-12-19 12:45:59 +01:00
Jonathan Gonzalez V
cfddaadf01 chore: add Snyk container scanner (#60)
Signed-off-by: Jonathan Gonzalez V <jonathan.gonzalez@enterprisedb.com>
2023-11-02 19:17:03 +01:00
Niccolò Fei
5f9bb5e555 chore: set latest tag to v16 (#76)
Signed-off-by: Niccolò Fei <niccolo.fei@enterprisedb.com>
2023-09-26 11:42:53 -03:00
dependabot[bot]
76548b335e chore(deps): Bump docker/setup-qemu-action from 2 to 3 (#66)
* chore(deps): Bump docker/setup-qemu-action from 2 to 3

Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 2 to 3.
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](https://github.com/docker/setup-qemu-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore: use the latest qemu image

Signed-off-by: Niccolò Fei <niccolo.fei@enterprisedb.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Niccolò Fei <niccolo.fei@enterprisedb.com>
Co-authored-by: Niccolò Fei <niccolo.fei@enterprisedb.com>
2023-09-12 14:51:28 +02:00
dependabot[bot]
d2e4999687 chore(deps): Bump docker/login-action from 2 to 3 (#69)
Bumps [docker/login-action](https://github.com/docker/login-action) from 2 to 3.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-12 14:37:04 +02:00
dependabot[bot]
88ecae188b chore(deps): Bump docker/setup-buildx-action from 2 to 3 (#67)
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 2 to 3.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-12 14:32:18 +02:00
dependabot[bot]
221c00988e chore(deps): Bump docker/build-push-action from 4 to 5 (#68)
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 4 to 5.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/v4...v5)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-12 14:31:50 +02:00
dependabot[bot]
04047f3d6b chore(deps): Bump actions/checkout from 3 to 4 (#65)
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-12 14:31:17 +02:00
dependabot[bot]
3d9694b3a1 chore(deps): Bump benjefferies/branch-protection-bot from 1.0.8 to 1.0.9 (#64)
Bumps [benjefferies/branch-protection-bot](https://github.com/benjefferies/branch-protection-bot) from 1.0.8 to 1.0.9.
- [Release notes](https://github.com/benjefferies/branch-protection-bot/releases)
- [Commits](https://github.com/benjefferies/branch-protection-bot/compare/1.0.8...1.0.9)

---
updated-dependencies:
- dependency-name: benjefferies/branch-protection-bot
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-27 12:41:02 +02:00
Jonathan Gonzalez V
e7be7616c4 chore: update ubuntu and python versions (#61) 2023-06-13 14:40:19 +02:00
Niccolò Fei
2c44fb1272 chore: cleanup EDB references (#55)
Signed-off-by: Niccolò Fei <niccolo.fei@enterprisedb.com>
2023-04-28 19:49:20 +02:00
dependabot[bot]
d6148aea8b chore(deps): Bump benjefferies/branch-protection-bot from 1.0.7 to 1.0.8 (#54)
Bumps [benjefferies/branch-protection-bot](https://github.com/benjefferies/branch-protection-bot) from 1.0.7 to 1.0.8.
- [Release notes](https://github.com/benjefferies/branch-protection-bot/releases)
- [Commits](https://github.com/benjefferies/branch-protection-bot/compare/1.0.7...1.0.8)

---
updated-dependencies:
- dependency-name: benjefferies/branch-protection-bot
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-28 18:37:48 +02:00
dependabot[bot]
0cae000947 chore(deps): Bump docker/build-push-action from 3 to 4 (#53)
* chore(deps): Bump docker/build-push-action from 3 to 4

Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 3 to 4.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore: remove workaround for buildkit

Signed-off-by: Jonathan Gonzalez V <jonathan.gonzalez@enterprisedb.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Jonathan Gonzalez V <jonathan.gonzalez@enterprisedb.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jonathan Gonzalez V <jonathan.gonzalez@enterprisedb.com>
2023-02-02 13:39:33 -03:00
Niccolò Fei
f198f7452e ci: implement workaround for push failures on ghcr (#52)
Signed-off-by: Niccolò Fei <niccolo.fei@enterprisedb.com>
2023-01-20 12:21:05 +01:00
Niccolò Fei
5287f3f26b chore: replace deprecated set-output command (#43)
Signed-off-by: Niccolò Fei <niccolo.fei@enterprisedb.com>
2022-11-11 09:20:13 +01:00
Niccolò Fei
c79ee8eb03 chore: set v15 as the latest tag (#42)
Signed-off-by: Niccolò Fei <niccolo.fei@enterprisedb.com>
2022-10-19 16:45:53 +08:00
Niccolò Fei
51078cb283 chore: Update Github actions (#38)
* chore: Update Github actions

Signed-off-by: Niccolò Fei <niccolo.fei@enterprisedb.com>
Co-authored-by: Hai He <hai.he@enterprisedb.com>
2022-10-19 13:28:59 +08:00
dependabot[bot]
b5778f5501 chore(deps): Bump docker/setup-qemu-action from 2.0.0 to 2.1.0 (#36)
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 2.0.0 to 2.1.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](https://github.com/docker/setup-qemu-action/compare/v2.0.0...v2.1.0)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-13 16:56:23 +02:00
dependabot[bot]
ed1361d04c chore(deps): Bump docker/login-action from 2.0.0 to 2.1.0 (#35)
Bumps [docker/login-action](https://github.com/docker/login-action) from 2.0.0 to 2.1.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v2.0.0...v2.1.0)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-13 12:47:45 +01:00
dependabot[bot]
c02647b4da chore(deps): Bump docker/setup-buildx-action from 2.0.0 to 2.1.0 (#33)
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 2.0.0 to 2.1.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/v2.0.0...v2.1.0)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-13 12:47:32 +01:00
dependabot[bot]
8acc5e5632 chore(deps): Bump docker/build-push-action from 3.1.1 to 3.2.0 (#34)
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 3.1.1 to 3.2.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/v3.1.1...v3.2.0)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-13 12:47:03 +01:00