mirror of
https://github.com/blakeblackshear/frigate.git
synced 2026-11-10 15:43:01 +03:00
Josh HawkinsandGitHub
ca851a9238
* strip intel media driver on install The manually built iHD_drv_video.so was installed with full debug info, making it 513 MB in the image instead of 41 MB stripped. Installing with install/strip removes about 240 MB from the compressed amd64 image. * remove rjsf 6.11.0 dependabot hold The hold covered the GenAI form refilling the saved model after a provider switch. That was a GenAIModelWidget bug that rjsf 6.11 exposed, and it was fixed with the 6.11.1 bump in #24901, so no rjsf version needs holding. * strip intel media driver after install install/strip skipped iHD_drv_video.so because media-driver installs it with install(PROGRAMS), not as a target. Strip it directly instead. * bump dev docs version in header * attest published images with github build provenance Published images carried unsigned BuildKit provenance, so nothing tied an image digest to the commit it was built from. Each published image (the default multi-arch build and the six variants) now gets an actions/attest provenance attestation pushed to GHCR, verifiable with gh attestation verify. Release tags are skopeo copies with the same digest, so they're covered too. Storage records are off because they require an org-owned repo.
58 lines
2.0 KiB
YAML
58 lines
2.0 KiB
YAML
name: 'Setup'
|
|
description: 'Set up QEMU and Buildx'
|
|
inputs:
|
|
GITHUB_TOKEN:
|
|
required: true
|
|
outputs:
|
|
image-repo:
|
|
value: ghcr.io/${{ steps.lowercaseRepo.outputs.lowercase }}
|
|
image-name:
|
|
value: ghcr.io/${{ steps.lowercaseRepo.outputs.lowercase }}:${{ steps.create-short-sha.outputs.SHORT_SHA }}
|
|
cache-name:
|
|
value: ghcr.io/${{ steps.lowercaseRepo.outputs.lowercase }}:cache
|
|
runs:
|
|
using: "composite"
|
|
steps:
|
|
# Stop docker so we can mount more space at /var/lib/docker
|
|
- name: Stop docker
|
|
run: sudo systemctl stop docker
|
|
shell: bash
|
|
# This creates a virtual volume at /var/lib/docker to maximize the size
|
|
# As of 2/14/2024, this results in 97G for docker images
|
|
# Runners no longer have a separate /mnt disk, so the temp PV is also carved
|
|
# from root and temp-reserve-mb is what actually stays free on root. Keep 4G
|
|
# there for setup-qemu/buildx caches in ~/.docker and the tool cache
|
|
- name: Maximize build space
|
|
uses: easimon/maximize-build-space@master
|
|
with:
|
|
root-reserve-mb: 8192
|
|
temp-reserve-mb: 4096
|
|
remove-dotnet: 'true'
|
|
remove-android: 'true'
|
|
remove-haskell: 'true'
|
|
remove-codeql: 'true'
|
|
build-mount-path: '/var/lib/docker'
|
|
- name: Start docker
|
|
run: sudo systemctl start docker
|
|
shell: bash
|
|
- id: lowercaseRepo
|
|
uses: ASzc/change-string-case-action@v8
|
|
with:
|
|
string: ${{ github.repository }}
|
|
- name: Set up QEMU
|
|
uses: docker/setup-qemu-action@v4
|
|
- name: Set up Docker Buildx
|
|
uses: docker/setup-buildx-action@v4
|
|
- name: Log in to the Container registry
|
|
uses: docker/login-action@8aa5831fb8d48d8f76594c7ddde61ae58019f550
|
|
with:
|
|
registry: ghcr.io
|
|
username: ${{ github.actor }}
|
|
password: ${{ inputs.GITHUB_TOKEN }}
|
|
- name: Create version file
|
|
run: make version
|
|
shell: bash
|
|
- id: create-short-sha
|
|
run: echo "SHORT_SHA=${GITHUB_SHA::7}" >> $GITHUB_OUTPUT
|
|
shell: bash
|