1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
|
# Various one-liners which I'm too lazy to remember.
# Basically a collection of really small shell scripts.
MAKEFLAGS += --no-builtin-rules --no-builtin-variables --warn-undefined-variables
unexport MAKEFLAGS
.DEFAULT_GOAL := all
.DELETE_ON_ERROR:
.SUFFIXES:
SHELL := bash
.SHELLFLAGS := -eu -o pipefail -c
.PHONY: DO
DO:
escape = $(subst ','\'',$(1))
define noexpand
ifeq ($$(origin $(1)),environment)
$(1) := $$(value $(1))
endif
ifeq ($$(origin $(1)),environment override)
$(1) := $$(value $(1))
endif
ifeq ($$(origin $(1)),command line)
override $(1) := $$(value $(1))
endif
endef
PROJECT := cgitize
# Enable buildx support:
export DOCKER_CLI_EXPERIMENTAL := enabled
# Target platforms (used by buildx):
PLATFORMS := linux/amd64,linux/armhf
# In case buildx isn't installed (e.g. on Ubuntu):
BUILDX_VERSION := v0.4.2
# Docker Hub credentials:
DOCKER_USERNAME := egortensin
ifdef DOCKER_PASSWORD
$(eval $(call noexpand,DOCKER_PASSWORD))
endif
.PHONY: all
all: build
.PHONY: login
login:
ifndef DOCKER_PASSWORD
$(error Please define DOCKER_PASSWORD)
endif
@echo '$(call escape,$(DOCKER_PASSWORD))' | docker login --username '$(call escape,$(DOCKER_USERNAME))' --password-stdin
.PHONY: build
# Build natively by default.
build: docker/build
.PHONY: clean
clean:
docker system prune --all --force --volumes
.PHONY: push
# Push multi-arch images by default.
push: buildx/push
.PHONY: check-build
check-build:
ifndef FORCE
$(warning Going to build natively; consider `docker buildx build` instead)
endif
.PHONY: check-push
check-push:
ifndef FORCE
$(error Please use `docker buildx build --push` instead)
endif
.PHONY: docker/build
# `docker build` has week support for multiarch repos (you need to use multiple
# Dockerfile's, create a manifest manually, etc.), so it's only here for
# testing purposes, and native builds.
docker/build: check-build
docker build -t '$(call escape,$(DOCKER_USERNAME))/$(call escape,$(PROJECT))' .
.PHONY: docker/push
# `docker push` would replace the multiarch repo with a single image by default
# (you'd have to create a manifest and push it instead), so it's only here for
# testing purposes.
docker/push: check-push docker/build
docker push '$(call escape,$(DOCKER_USERNAME))/$(call escape,$(PROJECT))'
# The simple way to build multiarch repos is `docker buildx`.
binfmt_image := docker/binfmt:66f9012c56a8316f9244ffd7622d7c21c1f6f28d
.PHONY: fix-binfmt
fix-binfmt:
docker run --rm --privileged '$(call escape,$(binfmt_image))'
curl := curl --silent --show-error --location --dump-header - --connect-timeout 20
buildx_url := https://github.com/docker/buildx/releases/download/$(BUILDX_VERSION)/buildx-$(BUILDX_VERSION).linux-amd64
.PHONY: buildx/install
buildx/install:
mkdir -p -- ~/.docker/cli-plugins/
$(curl) --output ~/.docker/cli-plugins/docker-buildx -- '$(call escape,$(buildx_url))'
chmod +x -- ~/.docker/cli-plugins/docker-buildx
.PHONY: buildx/create
buildx/create: fix-binfmt
docker buildx create --use --name '$(call escape,$(PROJECT))_builder'
.PHONY: buildx/rm
buildx/rm:
docker buildx rm '$(call escape,$(PROJECT))_builder'
.PHONY: buildx/build
buildx/build:
docker buildx build -t '$(call escape,$(DOCKER_USERNAME))/$(call escape,$(PROJECT))' --platform '$(call escape,$(PLATFORMS))' --progress plain .
.PHONY: buildx/push
buildx/push:
docker buildx build -t '$(call escape,$(DOCKER_USERNAME))/$(call escape,$(PROJECT))' --platform '$(call escape,$(PLATFORMS))' --progress plain --push .
|
