base-docker/docker-compose.yaml at main · opensafely-core/base-docker · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
services:
  base-docker:
    build:
      context: .
      target: base-docker
      cache_from:  # should speed up the build in CI, where we have a cold cache
        - ghcr.io/opensafely-core/base-docker
      secrets:
        - ubuntu_pro_token
      args:
        # this makes the image work for later cache_from: usage
        - BUILDKIT_INLINE_CACHE=1
        # env vars supplied by make/just
        - BASE_CREATED
        - BASE_GITREF
    # we also need to pass the secret at runtime for tests.sh to use.
    secrets:
      - ubuntu_pro_token
    init: true

  base-docker-20.04:
    extends: base-docker
    image: "base-docker:20.04"
    build:
      args:
        - UBUNTU_VERSION=ubuntu:20.04

  base-docker-22.04:
    extends: base-docker
    image: "base-docker:22.04"
    build:
      args:
        - UBUNTU_VERSION=ubuntu:22.04

  base-docker-24.04:
    extends: base-docker
    image: "base-docker:24.04"
    build:
      args:
        - UBUNTU_VERSION=ubuntu:24.04

  base-action-20.04:
    extends: base-docker
    image: "base-action:20.04"
    build:
      args:
        - UBUNTU_VERSION=ubuntu:20.04
      target: base-action

  base-action-22.04:
    extends: base-docker
    image: "base-action:22.04"
    build:
      args:
        - UBUNTU_VERSION=ubuntu:22.04
      target: base-action

  base-action-24.04:
    extends: base-docker
    image: "base-action:24.04"
    build:
      args:
        - UBUNTU_VERSION=ubuntu:24.04
      target: base-action

secrets:
  ubuntu_pro_token:
    file: ${UBUNTU_PRO_TOKEN_FILE:-.secrets/ubuntu_pro_token}