Base image definitions (one dir per image, matrix CI)
Arthur Zinck
b709b57fc5
All checks were successful
build-images / build (build-elixir) (push) Successful in 11s
build-images / build (build-node) (push) Successful in 9s
build-images / build (build-jdk) (push) Successful in 27s
build-images / build (build-python) (push) Successful in 8s
build-images / build (build-go) (push) Successful in 32s
build-images / build (runtime-beam) (push) Successful in 9s
build-images / build (runtime-cc) (push) Successful in 12s
build-images / build (runtime-jre) (push) Successful in 23s
build-images / build (build-rust) (push) Successful in 50s
build-images / build (build-ruby) (push) Successful in 1m2s
build-images / build (runtime-node) (push) Successful in 14s
build-images / build (runtime-python) (push) Successful in 16s
build-images / build (runtime-php) (push) Successful in 35s
build-images / build (runtime-static) (push) Successful in 9s
build-images / build (runtime-ruby) (push) Successful in 26s
build-images / build (runtime-web) (push) Successful in 19s
build-images / build (workspace) (push) Successful in 3m58s
|
||
|---|---|---|
| .forgejo/workflows | ||
| build-elixir | ||
| build-go | ||
| build-jdk | ||
| build-node | ||
| build-python | ||
| build-ruby | ||
| build-rust | ||
| runtime-beam | ||
| runtime-cc | ||
| runtime-jre | ||
| runtime-node | ||
| runtime-php | ||
| runtime-python | ||
| runtime-ruby | ||
| runtime-static | ||
| runtime-web | ||
| workspace | ||
| README.md | ||
z3k platform base images
One directory per image; every push rebuilds and publishes
git.z3k.sh/z3k-images/<name>:1. Templates build FROM these, which makes
tenant builds fast (bases warm in the runners' caches, no external registry
round-trips) and hardened by construction.
Conventions baked in:
- runtimes run as a non-root numeric user, write only under /tmp, carry no file capabilities (setcap stripped), and satisfy readOnlyRootFilesystem
- builders come pre-provisioned (ruby: build-essential; elixir: hex/rebar)
- every FROM here is fully qualified — buildah enforces it