Добавлен параметр TAG для указания версии образа в скрипте docker-build.sh и изменена команда rclone в minio_uploader.sh для пропуска существующих файлов.

.gitea/workflows/docker-build.yml

@@ -11,50 +11,29 @@ permissions:
 
 jobs:
   build:
-    runs-on: dind
+    name: Build image
+    runs-on: ubuntu-22.04
+    container: catthehacker/ubuntu:act-latest
     env:
-      REGISTRY: hub.realmanual.ru
-      IMAGE_NAME: pub/sqlite-backup/backup
+      REGISTRY: git.realmanual.ru
+      IMAGE_NAME: ${{ gitea.repository }}
     steps:
-      - name: Checkout (git)
-        shell: bash
-        env:
-          TOKEN: ${{ secrets.GITEA_TOKEN }}
-        run: |
-          set -euo pipefail
-          : "${GITHUB_SERVER_URL:?}"
-          : "${GITHUB_REPOSITORY:?}"
-          : "${GITHUB_SHA:?}"
-          git init .
-          git remote add origin "${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}.git"
-          git -c http.extraHeader="Authorization: Bearer ${TOKEN}" fetch --no-tags --depth=1 origin "${GITHUB_SHA}"
-          git checkout --detach "${GITHUB_SHA}"
+      - name: Checkout repository
+        uses: actions/checkout@v4
 
-      - name: Extract tag
-        id: vars
-        shell: bash
-        run: |
-          TAG_REF="${GITHUB_REF#refs/tags/}"
-          echo "tag=$TAG_REF" >> "$GITHUB_OUTPUT"
+      - name: Log in to the Container registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ gitea.actor }}
+          password: ${{ secrets.PUSH_TOKEN }}
 
-      - name: Docker login
-        shell: bash
-        run: |
-          set -euo pipefail
-          echo "${{ secrets.GITEA_TOKEN }}" | docker login "${{ env.REGISTRY }}" --username "${{ github.actor }}" --password-stdin
-
-      - name: Build image
-        shell: bash
-        run: |
-          set -euo pipefail
-          docker build \
-            -t "${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.vars.outputs.tag }}" \
-            -t "${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest" \
-            .
-
-      - name: Push images
-        shell: bash
-        run: |
-          set -euo pipefail
-          docker push "${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.vars.outputs.tag }}"
-          docker push "${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest"
+      - name: Build and push Docker image
+        id: push
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          push: true
+          tags: |
+            ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ gitea.ref_name }}
+            ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest

README.md

@@ -3,7 +3,7 @@
 ```yaml
 services:
   sqlite_backup:
-    image: hub.realmanual.ru/pub/sqlite-backup/backup:latest
+    image: git.realmanual.ru/pub/sqlite-backup-s3
     container_name: sqlite_backup
     restart: always
     volumes:

docker-build.sh

@@ -1,6 +1,9 @@
 #!/bin/bash
 
-DOCKER_BASEIMAGE=alpine:latest
+TAG=$1
 
-docker buildx build --platform linux/amd64,linux/arm64 --push -t hub.realmanual.ru/pub/sqlite-backup \
-        --build-arg DOCKER_BASEIMAGE=${DOCKER_BASEIMAGE} .
+if [ -z "$TAG" ]; then
+  TAG=latest
+fi
+
+docker buildx build --platform linux/amd64,linux/arm64 --push -t git.realmanual.ru/pub/sqlite-backup:${TAG} .

docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   sqlite_backup:
-    image: hub.realmanual.ru/pub/sqlite-backup/backup:latest
+    image: git.realmanual.ru/pub/sqlite-backup/backup:latest
     container_name: sqlite_backup
     restart: always
     volumes:

scripts/entrypoint.sh

@@ -1,6 +1,8 @@
 #!/bin/sh
 
-echo "${CRONTAB} /scripts/backup.sh" > /etc/crontabs/root
+# Create crontab in a writable location
+mkdir -p /tmp/crontabs
+echo "${CRONTAB} /scripts/backup.sh" > /tmp/crontabs/root
 
 /scripts/backup.sh
-exec crond -f
+exec crond -f -c /tmp/crontabs

scripts/minio_uploader.sh

@@ -1,18 +1,32 @@
 #!/bin/bash
 
-rclone config create myminio s3 provider Minio access_key_id $MINIO_ACCOUNT_ID secret_access_key $MINIO_APPLICATION_KEY endpoint $MINIO_ENDPOINT region $MINIO_LOCATION acl private
+# Create rclone config on-the-fly in a writable location
+RCLONE_CONFIG_DIR="/tmp/rclone"
+mkdir -p "$RCLONE_CONFIG_DIR"
+export RCLONE_CONFIG="$RCLONE_CONFIG_DIR/rclone.conf"
+
+cat > "$RCLONE_CONFIG" << EOF
+[myminio]
+type = s3
+provider = Minio
+access_key_id = $MINIO_ACCOUNT_ID
+secret_access_key = $MINIO_APPLICATION_KEY
+endpoint = $MINIO_ENDPOINT
+region = $MINIO_LOCATION
+acl = private
+EOF
 
 case $1 in
 	copy)
 		echo "copy from $2 to $3"
-		rclone copy --progress $2 $3
+		rclone copy --progress --skip-existing $2 myminio:$3
 	;;
 	list)
 		echo "list $2"
-		rclone ls $2
+		rclone ls myminio:$2
 	;;
 	delete)
 		echo "delete $2"
-		rclone delete $2
+		rclone delete myminio:$2
 	;;
 esac