Publish image with ko in CI

.gitea/workflows/ci.yaml

@@ -32,20 +32,27 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Install Docker and Skopeo
+      - name: Setup Go
-        run: |
+        uses: actions/setup-go@v5
-          apt-get update
+        with:
-          apt-get install -y docker.io skopeo
+          go-version-file: go.mod
 
-      - name: Build and Push Image
+      - name: Configure Registry Auth
         env:
           REGISTRY_HOST: ${{ vars.REGISTRY_HOST }}
           REGISTRY_PASSWORD: ${{ secrets.REGISTRY_PASSWORD }}
         run: |
-          local_image="${GITHUB_REPOSITORY##*/}:ci"
+          mkdir -p "${HOME}/.docker"
-          archive="/tmp/${GITHUB_REPOSITORY##*/}.tar"
+          auth="$(printf '%s:%s' "${GITHUB_REPOSITORY_OWNER}" "${REGISTRY_PASSWORD}" | base64 -w0)"
-          docker build -t "${local_image}" .
+          printf '{"auths":{"%s":{"auth":"%s"}}}\n' "${REGISTRY_HOST}" "${auth}" > "${HOME}/.docker/config.json"
-          docker save "${local_image}" -o "${archive}"
+          chmod 600 "${HOME}/.docker/config.json"
-          for tag in main "sha-${GITHUB_SHA}"; do
+
-            skopeo copy --dest-creds "${GITHUB_REPOSITORY_OWNER}:${REGISTRY_PASSWORD}" --dest-tls-verify=false "docker-archive:${archive}" "docker://${REGISTRY_HOST}/${GITHUB_REPOSITORY}:${tag}"
+      - name: Install ko
-          done
+        run: GOBIN=/usr/local/bin go install github.com/google/ko@v0.18.0
+
+      - name: Build and Push Image
+        env:
+          REGISTRY_HOST: ${{ vars.REGISTRY_HOST }}
+        run: |
+          export KO_DOCKER_REPO="${REGISTRY_HOST}/${GITHUB_REPOSITORY_OWNER}"
+          ko build --base-import-paths --insecure-registry --sbom=none --tags "main,sha-${GITHUB_SHA}" .