OPSEXP-3499: add Tomcat 11 support (#263) #642
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| name: Build the tomcats | |
| on: | |
| push: | |
| paths: | |
| - 'Dockerfile' | |
| - '.dockerignore' | |
| - '.github/workflows/main.yml' | |
| - 'tomcat*.json' | |
| schedule: | |
| - cron: '42 2 * * MON' | |
| env: | |
| IMAGE_REGISTRY_NAMESPACE: alfresco | |
| IMAGE_REPOSITORY: alfresco-base-tomcat | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref_name }} | |
| cancel-in-progress: true | |
| jobs: | |
| docker_images: | |
| name: >- | |
| Tomcat ${{ matrix.tomcat_major }} | |
| jre${{ matrix.java_major }} | |
| on ${{ matrix.base_image.flavor }}${{ matrix.base_image.major }} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - tomcat_major: 9 | |
| base_image: | |
| flavor: rockylinux | |
| major: 8 | |
| java_major: 11 | |
| - tomcat_major: 9 | |
| base_image: | |
| flavor: rockylinux | |
| major: 8 | |
| java_major: 17 | |
| - tomcat_major: 10 | |
| base_image: | |
| flavor: rockylinux | |
| major: 8 | |
| java_major: 11 | |
| - tomcat_major: 10 | |
| base_image: | |
| flavor: rockylinux | |
| major: 8 | |
| java_major: 17 | |
| - tomcat_major: 10 | |
| base_image: | |
| flavor: rockylinux | |
| major: 9 | |
| java_major: 17 | |
| - tomcat_major: 10 | |
| base_image: | |
| flavor: rockylinux | |
| major: 9 | |
| java_major: 21 | |
| - tomcat_major: 11 | |
| base_image: | |
| flavor: rockylinux | |
| major: 9 | |
| java_major: 21 | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 | |
| - uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.6.0 | |
| - uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1 | |
| - id: vars | |
| name: Compute Image Tag | |
| env: | |
| IMAGE_BASE_NAME: tomcat${{ matrix.tomcat_major }}-jre${{ matrix.java_major }}-${{ matrix.base_image.flavor }}${{ matrix.base_image.major }} | |
| run: | | |
| if [[ "${{ github.ref_name }}" == "master" ]]; then | |
| echo "image_tag=$IMAGE_BASE_NAME" >> $GITHUB_OUTPUT | |
| echo "image_labels=" >> $GITHUB_OUTPUT | |
| else | |
| echo "image_tag=${IMAGE_BASE_NAME}-${GITHUB_REF_NAME//\//-}" >> $GITHUB_OUTPUT | |
| echo "image_labels=quay.expires-after=2w" >> $GITHUB_OUTPUT | |
| fi | |
| echo "image_created=$(date -u +'%Y-%m-%dT%H:%M:%SZ')" >> $GITHUB_OUTPUT | |
| echo "timestamp=$(date -u +'%Y%m%d%H%M')" >> $GITHUB_OUTPUT | |
| echo "tomcat_version=$(jq -r .tomcat_version tomcat${{ matrix.tomcat_major }}.json)" >> $GITHUB_OUTPUT | |
| echo "tomcat_sha512=$(jq -r .tomcat_sha512 tomcat${{ matrix.tomcat_major }}.json)" >> $GITHUB_OUTPUT | |
| echo "tcnative_version=$(jq -r .tcnative_version tomcat${{ matrix.tomcat_major }}.json)" >> $GITHUB_OUTPUT | |
| echo "tcnative_sha512=$(jq -r .tcnative_sha512 tomcat${{ matrix.tomcat_major }}.json)" >> $GITHUB_OUTPUT | |
| echo "apr_version=$(jq -r .apr_version tomcat${{ matrix.tomcat_major }}.json)" >> $GITHUB_OUTPUT | |
| echo "apr_sha256=$(jq -r .apr_sha256 tomcat${{ matrix.tomcat_major }}.json)" >> $GITHUB_OUTPUT | |
| - name: Login to quay.io | |
| uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0 | |
| with: | |
| registry: quay.io | |
| username: ${{ secrets.QUAY_USERNAME }} | |
| password: ${{ secrets.QUAY_PASSWORD }} | |
| - name: Login to docker.io | |
| if: github.ref_name == 'master' | |
| uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0 | |
| with: | |
| username: ${{ secrets.DOCKER_USERNAME }} | |
| password: ${{ secrets.DOCKER_PASSWORD }} | |
| - name: Build image for tests | |
| uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0 | |
| with: | |
| load: true | |
| build-args: | | |
| DISTRIB_NAME=${{ matrix.base_image.flavor }} | |
| DISTRIB_MAJOR=${{ matrix.base_image.major }} | |
| JAVA_MAJOR=${{ matrix.java_major }} | |
| TOMCAT_MAJOR=${{ matrix.tomcat_major }} | |
| TOMCAT_VERSION=${{ steps.vars.outputs.tomcat_version }} | |
| TOMCAT_SHA512=${{ steps.vars.outputs.tomcat_sha512 }} | |
| TCNATIVE_VERSION=${{ steps.vars.outputs.tcnative_version }} | |
| TCNATIVE_SHA512=${{ steps.vars.outputs.tcnative_sha512 }} | |
| APR_VERSION=${{ steps.vars.outputs.apr_version }} | |
| APR_SHA256=${{ steps.vars.outputs.apr_sha256 }} | |
| tags: local/${{ env.IMAGE_REPOSITORY }}:ci | |
| - name: Test Built Image | |
| env: | |
| CATALINA_OUT: /tmp/catalina.out | |
| run: | | |
| echo -n "Checking for Tomcat config: " | |
| docker run local/${{ env.IMAGE_REPOSITORY }}:ci ./bin/catalina.sh configtest \ | |
| > ${{ env.CATALINA_OUT }} 2>&1 | |
| tail -1 ${{ env.CATALINA_OUT }} | grep '^INFO: Server initialization in ' | |
| echo -n "Checking for tcNative libs: " | |
| grep 'Loaded Apache Tomcat Native library .* using APR version' ${{ env.CATALINA_OUT }} | |
| echo -n "Checking shell environment: " | |
| BASH_LOGIN_STDERR="$(docker run local/${{ env.IMAGE_REPOSITORY }}:ci /bin/bash 2>&1 > /dev/null || true)" | |
| if [ -z "$BASH_LOGIN_STDERR" ]; then | |
| echo ok | |
| else echo 'bash reported an error' | |
| echo $BASH_LOGIN_STDERR | |
| exit 7 | |
| fi | |
| - name: Check Image size | |
| env: | |
| IMAGE_ARCH: ${{ runner.arch == 'X64' && 'amd64' || 'arm64' }} | |
| TOMCAT: tomcat${{ matrix.tomcat_major }} | |
| JAVA: jre${{ matrix.java_major }} | |
| DISTRIBUTION: ${{ matrix.base_image.flavor }}${{ matrix.base_image.major }} | |
| run: | | |
| IMAGE_PREV_SHA=$(docker manifest inspect ${IMAGE_REGISTRY_NAMESPACE}/${IMAGE_REPOSITORY}:${TOMCAT}-${JAVA}-${DISTRIBUTION} | jq -r '.manifests|map(select(.platform.architecture=="amd64"))[0].digest') | |
| if [ -z "$IMAGE_PREV_SHA" ]; then | |
| echo "No previous image found, skipping check" | |
| exit 0 | |
| else echo "Previous image found: $IMAGE_PREV_SHA" | |
| IMAGE_PREV_SIZE=$(docker manifest inspect ${IMAGE_REGISTRY_NAMESPACE}/${IMAGE_REPOSITORY}@${IMAGE_PREV_SHA} | jq '.layers|map(.size)|add') | |
| IMAGE_NEW_SIZE=$(docker save local/${{ env.IMAGE_REPOSITORY }}:ci | gzip -c | wc -c) | |
| if [ $(($IMAGE_NEW_SIZE*10)) -gt $(($IMAGE_PREV_SIZE*11)) ]; then | |
| echo "Image size increased beyond 10% (from $IMAGE_PREV_SIZE to $IMAGE_NEW_SIZE)" | |
| exit 1 | |
| else echo "Image size increase within 10% or below (from $IMAGE_PREV_SIZE to $IMAGE_NEW_SIZE)" | |
| fi | |
| fi | |
| - name: Build and Push Image to quay.io | |
| uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0 | |
| with: | |
| push: ${{ github.actor != 'dependabot[bot]' }} | |
| build-args: | | |
| DISTRIB_NAME=${{ matrix.base_image.flavor }} | |
| DISTRIB_MAJOR=${{ matrix.base_image.major }} | |
| JAVA_MAJOR=${{ matrix.java_major }} | |
| TOMCAT_MAJOR=${{ matrix.tomcat_major }} | |
| TOMCAT_VERSION=${{ steps.vars.outputs.tomcat_version }} | |
| TOMCAT_SHA512=${{ steps.vars.outputs.tomcat_sha512 }} | |
| TCNATIVE_VERSION=${{ steps.vars.outputs.tcnative_version }} | |
| TCNATIVE_SHA512=${{ steps.vars.outputs.tcnative_sha512 }} | |
| APR_VERSION=${{ steps.vars.outputs.apr_version }} | |
| APR_SHA256=${{ steps.vars.outputs.apr_sha256 }} | |
| REVISION=${{ github.run_number }} | |
| CREATED=${{ steps.vars.outputs.image_created }} | |
| tags: | | |
| quay.io/${{ env.IMAGE_REGISTRY_NAMESPACE }}/${{ env.IMAGE_REPOSITORY }}:${{ steps.vars.outputs.image_tag }} | |
| platforms: linux/amd64,linux/arm64/v8 | |
| labels: ${{ steps.vars.outputs.image_labels }} | |
| provenance: false | |
| - name: Push additional timestamped tag to quay.io | |
| if: github.ref_name == 'master' | |
| env: | |
| SRC_IMAGE: quay.io/${{ env.IMAGE_REGISTRY_NAMESPACE }}/${{ env.IMAGE_REPOSITORY }}:${{ steps.vars.outputs.image_tag }} | |
| DST_IMAGE: quay.io/${{ env.IMAGE_REGISTRY_NAMESPACE }}/${{ env.IMAGE_REPOSITORY }}:${{ steps.vars.outputs.image_tag }}-${{ steps.vars.outputs.timestamp }} | |
| run: | | |
| docker buildx imagetools create ${{ env.SRC_IMAGE }} -t ${{ env.DST_IMAGE }} | |
| - name: Push images to docker.io | |
| if: github.ref_name == 'master' | |
| env: | |
| SRC_IMAGE: quay.io/${{ env.IMAGE_REGISTRY_NAMESPACE }}/${{ env.IMAGE_REPOSITORY }}:${{ steps.vars.outputs.image_tag }} | |
| DST_IMAGE: ${{ env.IMAGE_REGISTRY_NAMESPACE }}/${{ env.IMAGE_REPOSITORY }}:${{ steps.vars.outputs.image_tag }} | |
| run: >- | |
| docker buildx imagetools create ${{ env.SRC_IMAGE }} | |
| -t ${{ env.DST_IMAGE }} | |
| -t ${{ env.DST_IMAGE }}-${{ steps.vars.outputs.timestamp }} |