Stijnc / container-template

Sample project for docker - GH actions - ACR integration

The sample focusses on the docker build, helm and ACR integration.

2 pipelines exist, but share the same principles.

1. build docker
2. push to acr
3. push helm chart
4. lock docker image for immutability

the ci_acrtask pipeline replaces the docker build for an acr build, enabling automatic base image update triggers.

todo

linting

• add superlinter

docker - local validation

• generate docker meta data
• setup QEMU
• setup dokcer buildx
• docker build
• [] inspect digest

docker - sinple build and push (local)

• include job services (local registry)
• generate docker meta data
• setup QEMU
• setup dokcer buildx
• docker build and push
• inspect image and digest

docker - simple build and push

• generate docker meta data
• setup QEMU
• setup dokcer buildx
• docker login
  • github registry
• docker build and push
• inspect image and digest

docker - advanced build and push

• include registry matrix (ghcr, acr)
• generate docker meta data
• setup QEMU
• setup dokcer buildx
• docker login (multiple registries)
• docker build and push
• inspect image and digest

docker - advanced bake file

• include registry matrix (ghcr, acr)
• generate docker meta data
• setup QEMU
• setup dokcer buildx
• docker login (multiple registries)
• docker bake
  • multi-arch (arm64, amd64, armv6, armv7)
• inspect image and digest

docker - advanced bake file and scanning

• include registry matrix (ghcr, acr)
• generate docker meta data
• setup QEMU
• setup dokcer buildx
• docker login (multiple registries)
• docker bake
  • [] multi-arch (arm64, amd64, armv6, armv7)
• inspect image and digest
• scan image (aqua / anchor)
• security center integration?