mirror of
https://tangled.org/evan.jarrett.net/at-container-registry
synced 2026-08-29 04:06:58 +00:00
big scary refactor. sync enable_bluesky_posts with captain record. implement oauth logout handler. implement crew assignment to hold. this caused a lot of circular dependencies and needed to move functions around in order to fix
This commit is contained in:
Evan Jarrett
+165
-32
@@ -1,54 +1,187 @@
|
||||
#!/bin/bash
|
||||
set -e
|
||||
|
||||
# Configuration
|
||||
SOURCE_REGISTRY="ghcr.io/evanjarrett/hsm-secrets-operator"
|
||||
TARGET_REGISTRY="atcr.io/evan.jarrett.net/hsm-secrets-operator"
|
||||
TAG="latest"
|
||||
# Usage function
|
||||
usage() {
|
||||
echo "Usage: $0 <source-image> [target-image]"
|
||||
echo ""
|
||||
echo "Examples:"
|
||||
echo " $0 ghcr.io/evanjarrett/myapp:latest"
|
||||
echo " $0 ghcr.io/evanjarrett/myapp:latest atcr.io/evan.jarrett.net/myapp:latest"
|
||||
echo ""
|
||||
echo "If target-image is not specified, it will use atcr.io/<username>/<repo>:<tag>"
|
||||
exit 1
|
||||
}
|
||||
|
||||
# Image digests
|
||||
AMD64_DIGEST="sha256:274284a623810cf07c5b4735628832751926b7d192863681d5af1b4137f44254"
|
||||
ARM64_DIGEST="sha256:b57929fd100033092766aad1c7e747deef9b1e3206756c11d0d7a7af74daedff"
|
||||
# Check arguments
|
||||
if [ $# -lt 1 ]; then
|
||||
usage
|
||||
fi
|
||||
|
||||
echo "=== Migrating multi-arch image from GHCR to ATCR ==="
|
||||
echo "Source: ${SOURCE_REGISTRY}"
|
||||
echo "Target: ${TARGET_REGISTRY}:${TAG}"
|
||||
SOURCE_IMAGE="$1"
|
||||
TARGET_IMAGE="${2:-}"
|
||||
|
||||
# Parse source image to extract components
|
||||
# Format: [registry/]repository[:tag|@digest]
|
||||
parse_image_ref() {
|
||||
local ref="$1"
|
||||
local registry=""
|
||||
local repository=""
|
||||
local tag="latest"
|
||||
|
||||
# Remove digest if present (we'll fetch the manifest-list)
|
||||
ref="${ref%@*}"
|
||||
|
||||
# Extract tag
|
||||
if [[ "$ref" == *:* ]]; then
|
||||
tag="${ref##*:}"
|
||||
ref="${ref%:*}"
|
||||
fi
|
||||
|
||||
# Extract registry and repository
|
||||
if [[ "$ref" == */*/* ]]; then
|
||||
# Has registry
|
||||
registry="${ref%%/*}"
|
||||
repository="${ref#*/}"
|
||||
else
|
||||
# No registry, assume Docker Hub
|
||||
registry="docker.io"
|
||||
repository="$ref"
|
||||
fi
|
||||
|
||||
echo "$registry" "$repository" "$tag"
|
||||
}
|
||||
|
||||
# Parse source image
|
||||
read -r SOURCE_REGISTRY SOURCE_REPO SOURCE_TAG <<< "$(parse_image_ref "$SOURCE_IMAGE")"
|
||||
|
||||
# If no target specified, auto-generate it
|
||||
if [ -z "$TARGET_IMAGE" ]; then
|
||||
# Extract just the repo name (last component)
|
||||
REPO_NAME="${SOURCE_REPO##*/}"
|
||||
# Try to extract username from source
|
||||
if [[ "$SOURCE_REPO" == */* ]]; then
|
||||
USERNAME="${SOURCE_REPO%/*}"
|
||||
USERNAME="${USERNAME##*/}"
|
||||
else
|
||||
USERNAME="default"
|
||||
fi
|
||||
TARGET_IMAGE="atcr.io/${USERNAME}/${REPO_NAME}:${SOURCE_TAG}"
|
||||
fi
|
||||
|
||||
# Parse target image
|
||||
read -r TARGET_REGISTRY TARGET_REPO TARGET_TAG <<< "$(parse_image_ref "$TARGET_IMAGE")"
|
||||
|
||||
echo "=== Migrating multi-arch image ==="
|
||||
echo "Source: ${SOURCE_REGISTRY}/${SOURCE_REPO}:${SOURCE_TAG}"
|
||||
echo "Target: ${TARGET_REGISTRY}/${TARGET_REPO}:${TARGET_TAG}"
|
||||
echo ""
|
||||
|
||||
# Tag and push amd64 image
|
||||
echo ">>> Tagging and pushing amd64 image..."
|
||||
docker tag "${SOURCE_REGISTRY}@${AMD64_DIGEST}" "${TARGET_REGISTRY}:${TAG}-amd64"
|
||||
docker push "${TARGET_REGISTRY}:${TAG}-amd64"
|
||||
# Full source reference
|
||||
SOURCE_REF="${SOURCE_REGISTRY}/${SOURCE_REPO}:${SOURCE_TAG}"
|
||||
TARGET_REF="${TARGET_REGISTRY}/${TARGET_REPO}:${TARGET_TAG}"
|
||||
|
||||
# Fetch the manifest list
|
||||
echo ">>> Fetching manifest list from source..."
|
||||
MANIFEST_JSON=$(docker manifest inspect "$SOURCE_REF" 2>/dev/null || {
|
||||
echo "Error: Failed to fetch manifest list. This may not be a multi-arch image."
|
||||
echo "Trying as single-arch image..."
|
||||
|
||||
# Try pulling as single image
|
||||
docker pull "$SOURCE_REF"
|
||||
docker tag "$SOURCE_REF" "$TARGET_REF"
|
||||
docker push "$TARGET_REF"
|
||||
echo "=== Migration complete (single-arch) ==="
|
||||
exit 0
|
||||
})
|
||||
|
||||
# Check if this is a manifest list
|
||||
MEDIA_TYPE=$(echo "$MANIFEST_JSON" | jq -r '.mediaType // .schemaVersion')
|
||||
if [[ ! "$MEDIA_TYPE" =~ "manifest.list" ]] && [[ ! "$MEDIA_TYPE" =~ "index" ]]; then
|
||||
echo "Warning: Source appears to be a single-arch image, not a manifest list."
|
||||
docker pull "$SOURCE_REF"
|
||||
docker tag "$SOURCE_REF" "$TARGET_REF"
|
||||
docker push "$TARGET_REF"
|
||||
echo "=== Migration complete (single-arch) ==="
|
||||
exit 0
|
||||
fi
|
||||
|
||||
echo "Found multi-arch manifest list"
|
||||
echo ""
|
||||
|
||||
# Tag and push arm64 image
|
||||
echo ">>> Tagging and pushing arm64 image..."
|
||||
docker tag "${SOURCE_REGISTRY}@${ARM64_DIGEST}" "${TARGET_REGISTRY}:${TAG}-arm64"
|
||||
docker push "${TARGET_REGISTRY}:${TAG}-arm64"
|
||||
echo ""
|
||||
# Extract platform information and digests
|
||||
PLATFORMS=$(echo "$MANIFEST_JSON" | jq -r '.manifests[] | "\(.platform.os)|\(.platform.architecture)|\(.platform.variant // "")|\(.digest)"')
|
||||
|
||||
# Create multi-arch manifest using the pushed tags
|
||||
# Arrays to store pushed images for manifest creation
|
||||
declare -a PUSHED_IMAGES
|
||||
declare -a PLATFORM_INFO
|
||||
|
||||
# Process each platform
|
||||
while IFS='|' read -r os arch variant digest; do
|
||||
# Create platform tag (e.g., "linux-amd64" or "linux-arm-v7")
|
||||
PLATFORM_TAG="${os}-${arch}"
|
||||
if [ -n "$variant" ]; then
|
||||
PLATFORM_TAG="${PLATFORM_TAG}-${variant}"
|
||||
fi
|
||||
|
||||
echo ">>> Processing ${os}/${arch}${variant:+/$variant}..."
|
||||
echo " Digest: $digest"
|
||||
|
||||
# Pull by digest
|
||||
echo " Pulling image..."
|
||||
docker pull "${SOURCE_REGISTRY}/${SOURCE_REPO}@${digest}"
|
||||
|
||||
# Tag for target
|
||||
TARGET_PLATFORM_REF="${TARGET_REGISTRY}/${TARGET_REPO}:${TARGET_TAG}-${PLATFORM_TAG}"
|
||||
echo " Tagging as: ${TARGET_PLATFORM_REF}"
|
||||
docker tag "${SOURCE_REGISTRY}/${SOURCE_REPO}@${digest}" "${TARGET_PLATFORM_REF}"
|
||||
|
||||
# Push platform-specific image
|
||||
echo " Pushing..."
|
||||
docker push "${TARGET_PLATFORM_REF}"
|
||||
|
||||
# Store for manifest creation
|
||||
PUSHED_IMAGES+=("${TARGET_PLATFORM_REF}")
|
||||
PLATFORM_INFO+=("${os}|${arch}|${variant}")
|
||||
|
||||
echo ""
|
||||
done <<< "$PLATFORMS"
|
||||
|
||||
# Create multi-arch manifest
|
||||
echo ">>> Creating multi-arch manifest..."
|
||||
docker manifest create "${TARGET_REGISTRY}:${TAG}" \
|
||||
--amend "${TARGET_REGISTRY}:${TAG}-amd64" \
|
||||
--amend "${TARGET_REGISTRY}:${TAG}-arm64"
|
||||
MANIFEST_CREATE_CMD="docker manifest create ${TARGET_REF}"
|
||||
for img in "${PUSHED_IMAGES[@]}"; do
|
||||
MANIFEST_CREATE_CMD="${MANIFEST_CREATE_CMD} --amend ${img}"
|
||||
done
|
||||
|
||||
eval "$MANIFEST_CREATE_CMD"
|
||||
echo ""
|
||||
|
||||
# Annotate the manifest with platform information
|
||||
# Annotate each platform
|
||||
echo ">>> Annotating manifest with platform information..."
|
||||
docker manifest annotate "${TARGET_REGISTRY}:${TAG}" \
|
||||
"${TARGET_REGISTRY}:${TAG}-amd64" \
|
||||
--os linux --arch amd64
|
||||
for i in "${!PUSHED_IMAGES[@]}"; do
|
||||
IFS='|' read -r os arch variant <<< "${PLATFORM_INFO[$i]}"
|
||||
|
||||
docker manifest annotate "${TARGET_REGISTRY}:${TAG}" \
|
||||
"${TARGET_REGISTRY}:${TAG}-arm64" \
|
||||
--os linux --arch arm64
|
||||
ANNOTATE_CMD="docker manifest annotate ${TARGET_REF} ${PUSHED_IMAGES[$i]} --os ${os} --arch ${arch}"
|
||||
if [ -n "$variant" ]; then
|
||||
ANNOTATE_CMD="${ANNOTATE_CMD} --variant ${variant}"
|
||||
fi
|
||||
|
||||
echo " Annotating ${os}/${arch}${variant:+/$variant}..."
|
||||
eval "$ANNOTATE_CMD"
|
||||
done
|
||||
echo ""
|
||||
|
||||
# Push the manifest list
|
||||
echo ">>> Pushing multi-arch manifest..."
|
||||
docker manifest push "${TARGET_REGISTRY}:${TAG}"
|
||||
docker manifest push "${TARGET_REF}"
|
||||
echo ""
|
||||
|
||||
echo "=== Migration complete! ==="
|
||||
echo "You can now pull: docker pull ${TARGET_REGISTRY}:${TAG}"
|
||||
echo "You can now pull: docker pull ${TARGET_REF}"
|
||||
echo ""
|
||||
echo "Migrated platforms:"
|
||||
for i in "${!PLATFORM_INFO[@]}"; do
|
||||
IFS='|' read -r os arch variant <<< "${PLATFORM_INFO[$i]}"
|
||||
echo " - ${os}/${arch}${variant:+/$variant}"
|
||||
done
|
||||
|
||||
Reference in New Issue
Block a user