ashwin/nxtgauge-backend-rust
0
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
nxtgauge-backend-rust/.forgejo/workflows/build.yaml
Ashwin Kumar Sivakumar c8fa02a9a4
Some checks failed
build-and-release / build (push) Failing after 16s
Details
fix(ci): derive DOCKER_HOST from the job container's own default gateway 
--add-host=host.docker.internal:host-gateway is not being honored by
this act_runner setup (tried via the runner's global container.options
and a per-job container: block; neither worked, confirmed by two
separate failed runs with identical DNS-lookup errors). Read the
container's real default-route gateway from /proc/net/route instead
(portable, no iproute2 dependency) and export it as DOCKER_HOST via
GITHUB_ENV. This is the actual IP of the dind engine that spawned the
job container, regardless of hostname-aliasing support.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-07 22:50:54 +05:30

187 lines
8.3 KiB
YAML
Raw Blame History

name: build-and-release
on:
push:
branches:
- main
- high-performance
concurrency:
group: backend-build-${{ github.ref }}
cancel-in-progress: true
jobs:
build:
runs-on: docker-ready
env:
DOCKER_BUILDKIT: "1"
steps:
- name: Checkout
uses: actions/checkout@v4
with:
fetch-depth: 0
- name: Point DOCKER_HOST at this container's own gateway
run: |
set -euo pipefail
# 127.0.0.1 doesn't work: the job container is nested one level
# inside the runner pod's dind sidecar, so its own loopback isn't
# the sidecar's. --add-host=host.docker.internal:host-gateway is
# not being honored by this runner (tried via both global
# container.options and a per-job container: block — neither
# resolved), so read the container's actual default-route gateway
# directly instead, which is the dind engine that spawned it.
# Read directly from /proc/net/route instead of relying on the `ip`
# or `route` CLI tools being installed in the job image.
GATEWAY="$(awk '$2 == "00000000" {print $3}' /proc/net/route | head -1 | \
sed -E 's/(..)(..)(..)(..)/0x\4 0x\3 0x\2 0x\1/' | \
{ read -r a b c d; printf '%d.%d.%d.%d' "$a" "$b" "$c" "$d"; })"
echo "Detected docker host gateway: $GATEWAY"
echo "DOCKER_HOST=tcp://$GATEWAY:2375" >> "$GITHUB_ENV"
- name: Detect changed services
run: |
set -euo pipefail
ALL_SERVICES='gateway users companies jobs leads job-seekers customers payments employees photographers makeup-artists tutors developers video-editors graphic-designers social-media-managers fitness-trainers catering-services ugc-content-creators cron'
if git rev-parse --verify HEAD^ >/dev/null 2>&1; then
CHANGED_FILES="$(git diff --name-only HEAD^ HEAD)"
else
CHANGED_FILES="$(git ls-files)"
fi
LAST_COMMIT_MSG="$(git log -1 --pretty=%B | tr '\n' ' ')"
force_full_build=false
if echo "$LAST_COMMIT_MSG" | grep -Eiq 'trigger build|force build|rebuild all'; then
force_full_build=true
elif echo "$CHANGED_FILES" | grep -Eq '^(\.forgejo/workflows/|Dockerfile|Cargo\.toml|Cargo\.lock|crates/|scripts/)'; then
force_full_build=true
fi
if [ "$force_full_build" = true ]; then
printf '%s\n' $ALL_SERVICES > /tmp/changed-services.txt
exit 0
fi
: > /tmp/changed-services.txt
while IFS= read -r f; do
case "$f" in
apps/gateway/*) echo gateway >> /tmp/changed-services.txt ;;
apps/users/*) echo users >> /tmp/changed-services.txt ;;
apps/companies/*) echo companies >> /tmp/changed-services.txt ;;
apps/jobs/*) echo jobs >> /tmp/changed-services.txt ;;
apps/leads/*) echo leads >> /tmp/changed-services.txt ;;
apps/job_seekers/*) echo job-seekers >> /tmp/changed-services.txt ;;
apps/customers/*) echo customers >> /tmp/changed-services.txt ;;
apps/payments/*) echo payments >> /tmp/changed-services.txt ;;
apps/employees/*) echo employees >> /tmp/changed-services.txt ;;
apps/photographers/*) echo photographers >> /tmp/changed-services.txt ;;
apps/makeup_artists/*) echo makeup-artists >> /tmp/changed-services.txt ;;
apps/tutors/*) echo tutors >> /tmp/changed-services.txt ;;
apps/developers/*) echo developers >> /tmp/changed-services.txt ;;
apps/video_editors/*) echo video-editors >> /tmp/changed-services.txt ;;
apps/graphic_designers/*) echo graphic-designers >> /tmp/changed-services.txt ;;
apps/social_media_managers/*) echo social-media-managers >> /tmp/changed-services.txt ;;
apps/fitness_trainers/*) echo fitness-trainers >> /tmp/changed-services.txt ;;
apps/catering_services/*) echo catering-services >> /tmp/changed-services.txt ;;
apps/ugc_content_creators/*) echo ugc-content-creators >> /tmp/changed-services.txt ;;
apps/cron/*) echo cron >> /tmp/changed-services.txt ;;
esac
done <<<"$CHANGED_FILES"
sort -u /tmp/changed-services.txt -o /tmp/changed-services.txt
- name: Stop if nothing changed
run: |
set -euo pipefail
if [ ! -s /tmp/changed-services.txt ]; then
echo "No backend service changes detected."
exit 0
fi
- name: Set up Docker Buildx
run: |
set -euo pipefail
[ -s /tmp/changed-services.txt ] || exit 0
docker version
docker buildx create --use --name nxtgauge-builder || docker buildx use nxtgauge-builder
docker buildx inspect --bootstrap
- name: Login to registry
env:
REGISTRY_HOST: ${{ secrets.REGISTRY_HOST || 'ci.nxtgauge.com' }}
REGISTRY_NAMESPACE: ${{ secrets.REGISTRY_NAMESPACE || 'ashwin' }}
REGISTRY_USERNAME: ${{ secrets.REGISTRY_USERNAME }}
REGISTRY_PASSWORD: ${{ secrets.REGISTRY_PASSWORD }}
run: |
set -euo pipefail
[ -s /tmp/changed-services.txt ] || exit 0
printf '%s' "$REGISTRY_PASSWORD" | docker login "$REGISTRY_HOST" -u "$REGISTRY_USERNAME" --password-stdin
- name: Build changed services
env:
REGISTRY_HOST: ${{ secrets.REGISTRY_HOST || 'ci.nxtgauge.com' }}
REGISTRY_NAMESPACE: ${{ secrets.REGISTRY_NAMESPACE || 'ashwin' }}
SHA: ${{ github.sha }}
run: |
set -euo pipefail
[ -s /tmp/changed-services.txt ] || exit 0
: > /tmp/built-services.tsv
while IFS= read -r service; do
[ -n "$service" ] || continue
metadata_file="/tmp/${service}-metadata.json"
image_ref="$REGISTRY_HOST/$REGISTRY_NAMESPACE/nxtgauge-rust-${service}:${SHA}"
docker buildx build --push \
--metadata-file "$metadata_file" \
-f Dockerfile.simple \
--build-arg SERVICE_NAME="$service" \
-t "$image_ref" \
.
digest="$(grep -o '"containerimage.digest":"sha256:[^"]*"' "$metadata_file" | cut -d'"' -f4)"
if [ -z "$digest" ]; then
echo "Failed to determine digest for $service" >&2
exit 1
fi
printf '%s\t%s\n' "$service" "$digest" >> /tmp/built-services.tsv
done < /tmp/changed-services.txt
- name: Update GitOps release state
env:
GITOPS_SERVER: ${{ secrets.GITOPS_SERVER || 'ci.nxtgauge.com' }}
GITOPS_OWNER: ${{ secrets.GITOPS_OWNER || 'ashwin' }}
GITOPS_REPO: ${{ secrets.GITOPS_REPO || 'nxtgauge-gitops' }}
GITOPS_BRANCH: ${{ secrets.GITOPS_BRANCH || 'main' }}
GITOPS_PUSH_USERNAME: ${{ secrets.GITOPS_PUSH_USERNAME }}
GITOPS_PUSH_TOKEN: ${{ secrets.GITOPS_PUSH_TOKEN }}
SHA: ${{ github.sha }}
run: |
set -euo pipefail
[ -s /tmp/built-services.tsv ] || exit 0
test -n "${GITOPS_PUSH_TOKEN:-}" || { echo "GITOPS_PUSH_TOKEN is empty"; exit 1; }
git clone "https://${GITOPS_PUSH_USERNAME}:${GITOPS_PUSH_TOKEN}@${GITOPS_SERVER}/${GITOPS_OWNER}/${GITOPS_REPO}.git" /tmp/nxtgauge-gitops
cd /tmp/nxtgauge-gitops
git checkout "$GITOPS_BRANCH"
while IFS=$'\t' read -r service digest; do
[ -n "$service" ] || continue
./scripts/set-backend-rust-release.sh "$service" "$digest"
done < /tmp/built-services.tsv
if git diff --quiet; then
echo "GitOps repo already up to date."
exit 0
fi
git config user.name "forgejo-actions[bot]"
git config user.email "forgejo-actions@ci.nxtgauge.com"
git add \
apps/nxtgauge-backend-rust/overlays/prod/backend-release-state.tsv \
apps/nxtgauge-backend-rust/overlays/prod/release-patches.yaml \
apps/nxtgauge-backend-rust/overlays/prod/disabled-deployments.yaml
git commit -m "chore(gitops): update backend rust images for ${SHA}"
git push origin "HEAD:${GITOPS_BRANCH}"
Reference in a new issue View git blame Copy permalink