From a3a2e44ce78bc1681e36f239e9182a65f60af5b0 Mon Sep 17 00:00:00 2001
From: Dan Webb
Date: Wed, 7 Jan 2026 12:00:09 +0000
Subject: [PATCH] Add Docker build & push
Signed-off-by: Dan Webb
---
.github/workflows/release.yaml | 70 ++++++++++++++++++++++++++++++++++
renovate.json | 4 ++
2 files changed, 74 insertions(+)
create mode 100644 .github/workflows/release.yaml
create mode 100644 renovate.json
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
new file mode 100644
index 0000000000000..7baae62200ce6
--- /dev/null
+++ b/.github/workflows/release.yaml
@@ -0,0 +1,70 @@
+name: Release Container
+
+on:
+ push:
+ tags:
+ - "RELEASE.*"
+ workflow_dispatch:
+ inputs:
+ release:
+ description: "Release version (e.g., RELEASE.2024-01-01T00-00-00Z)"
+ required: true
+ type: string
+
+permissions:
+ contents: read
+ packages: write
+
+jobs:
+ build-and-push:
+ runs-on: ubuntu-latest
+ steps:
+ - name: Checkout
+ uses: actions/checkout@v4
+
+ - name: Set up QEMU
+ uses: docker/setup-qemu-action@v3
+
+ - name: Set up Docker Buildx
+ uses: docker/setup-buildx-action@v3
+
+ - name: Log in to GitHub Container Registry
+ uses: docker/login-action@v3
+ with:
+ registry: ghcr.io
+ username: ${{ github.actor }}
+ password: ${{ secrets.GITHUB_TOKEN }}
+
+ - name: Extract metadata for Docker
+ id: meta
+ uses: docker/metadata-action@v5
+ with:
+ images: ghcr.io/${{ github.repository }}
+ tags: |
+ type=ref,event=tag
+ type=raw,value=${{ inputs.release }},enable=${{ github.event_name == 'workflow_dispatch' }}
+ type=raw,value=latest,enable=${{ github.ref_type == 'tag' || github.event_name == 'workflow_dispatch' }}
+
+ - name: Extract release version
+ id: release
+ run: |
+ # Use input if provided (manual dispatch), otherwise use tag name
+ if [ -n "${{ inputs.release }}" ]; then
+ echo "version=${{ inputs.release }}" >> $GITHUB_OUTPUT
+ else
+ echo "version=${GITHUB_REF_NAME}" >> $GITHUB_OUTPUT
+ fi
+
+ - name: Build and push
+ uses: docker/build-push-action@v6
+ with:
+ context: .
+ file: ./Dockerfile.release
+ platforms: linux/amd64,linux/arm64
+ push: true
+ tags: ${{ steps.meta.outputs.tags }}
+ labels: ${{ steps.meta.outputs.labels }}
+ build-args: |
+ RELEASE=${{ steps.release.outputs.version }}
+ cache-from: type=gha
+ cache-to: type=gha,mode=max
diff --git a/renovate.json b/renovate.json
new file mode 100644
index 0000000000000..a5374f949cf9e
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,4 @@
+{
+ "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+ "extends": ["github>damacus/renovate-config"]
+}