42 lines
1.1 KiB
YAML
42 lines
1.1 KiB
YAML
workflow:
|
|
rules:
|
|
- if: $CI_COMMIT_BRANCH && $CI_OPEN_MERGE_REQUESTS && $CI_PIPELINE_SOURCE == "push"
|
|
when: never
|
|
- if: "$CI_COMMIT_TAG"
|
|
- if: $CI_PIPELINE_SOURCE == "merge_request_event"
|
|
- if: "$CI_COMMIT_BRANCH && $CI_OPEN_MERGE_REQUESTS"
|
|
when: never
|
|
- if: "$CI_COMMIT_BRANCH"
|
|
|
|
stages:
|
|
- build
|
|
|
|
variables:
|
|
ACTION:
|
|
description: "Action to perform for the pipeline."
|
|
value: "build-image"
|
|
options:
|
|
- "build-image"
|
|
|
|
build-image:
|
|
stage: build
|
|
image: ghcr.io/blue-build/cli:112-rfe-support-pushing-images-using-zstdchunked-compression
|
|
services:
|
|
- docker
|
|
rules:
|
|
- if: $ACTION == "build-image"
|
|
parallel:
|
|
matrix:
|
|
- RECIPE:
|
|
- recipe-jp-desktop-gaming.yml
|
|
- recipe-jp-laptop.yml
|
|
id_tokens:
|
|
SIGSTORE_ID_TOKEN:
|
|
aud: sigstore
|
|
before_script:
|
|
- curl --silent "https://gitlab.com/gitlab-org/incubation-engineering/mobile-devops/download-secure-files/-/raw/main/installer" | bash
|
|
- export COSIGN_PRIVATE_KEY=$(cat .secure_files/cosign.key)
|
|
script:
|
|
- sleep 5
|
|
- bluebuild build -v --push ./config/$RECIPE
|