zuul/zuul-jobs
Code Issues Proposed changes

mirror-container-images: use skopeo to mirror multiarch images

Browse Source 
Use skopeo to copy images between registries instead of docker/podman as
this allows to copy layers and manifests of different architectures. The
same would require far more steps with docker/podman.

Change-Id: I1e6cda57d1eb827cc95eee54b19e9fd952cbf99e
This commit is contained in:
Benjamin Schanzel 2025-03-18 16:12:00 +01:00
parent 2334a41776
commit 1cd5f68e1a
No known key found for this signature in database
5 changed files with 15 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
playbooks/container-image/mirror-pre.yaml Normal file
View File

@ -0,0 +1,3 @@
- hosts: all
roles:
- ensure-skopeo

16
roles/mirror-container-images/tasks/inner.yaml
View File

@ -13,19 +13,13 @@
msg: "{{ zj_image.repository }} not permitted by {{ container_registry_credentials[zj_image.dest_registry].repository }}" msg: "{{ zj_image.repository }} not permitted by {{ container_registry_credentials[zj_image.dest_registry].repository }}"
- name: Log in to registry - name: Log in to registry
command: "{{ container_command }} login -u {{ container_registry_credentials[zj_image.dest_registry].username }} -p {{ container_registry_credentials[zj_image.dest_registry].password }} {{ zj_image.dest_registry }}" command: "skopeo login -u {{ container_registry_credentials[zj_image.dest_registry].username }} -p {{ container_registry_credentials[zj_image.dest_registry].password }} {{ zj_image.dest_registry }}"
no_log: true no_log: true
- name: Push and pull image - name: Copy image
block: block:
- name: "Pull image {{ zj_image.src_repository }}:{{ zj_image.src_tag }}" - name: "Copy to {{ zj_image.dest_repository }}:{{ zj_image.dest_tag }}"
command: "{{ container_command }} pull {{ zj_image.src_repository }}:{{ zj_image.src_tag }}" command: "skopeo copy --all docker://{{ zj_image.src_repository }}:{{ zj_image.src_tag }} docker://{{ zj_image.dest_repository }}:{{ zj_image.dest_tag }}"
- name: Retag image
command: "{{ container_command }} tag {{ zj_image.src_repository }}:{{ zj_image.src_tag }} {{ zj_image.dest_repository }}:{{ zj_image.dest_tag }}"
- name: "Push image {{ zj_image.dest_repository }}:{{ zj_image.dest_tag }}"
command: "{{ container_command }} push {{ zj_image.dest_repository }}:{{ zj_image.dest_tag }}"
always: always:
- name: Log out of registry - name: Log out of registry
command: "{{ container_command }} logout {{ zj_image.dest_registry }}" command: "skopeo logout {{ zj_image.dest_registry }}"

2
roles/mirror-container-images/tasks/main.yaml
View File

@ -1,4 +1,4 @@
- name: Pull and push images - name: Copy images
with_items: "{{ mirror_container_images_images }}" with_items: "{{ mirror_container_images_images }}"
include_tasks: inner.yaml include_tasks: inner.yaml
loop_control: loop_control:

5
test-playbooks/registry/test-registry-pre.yaml
View File

@ -48,3 +48,8 @@
name: ensure-skopeo name: ensure-skopeo
vars: vars:
ensure_skopeo_install_from_upstream: true ensure_skopeo_install_from_upstream: true
- hosts: builder
name: Provide skopeo for the builder
roles:
- ensure-skopeo

2
zuul.d/container-jobs.yaml
View File

@ -37,5 +37,5 @@
.. include:: ../../playbooks/container-image/README.rst .. include:: ../../playbooks/container-image/README.rst
.. include:: ../../playbooks/container-image/credentials.rst .. include:: ../../playbooks/container-image/credentials.rst
pre-run: playbooks/container-image/pre.yaml pre-run: playbooks/container-image/mirror-pre.yaml
run: playbooks/container-image/mirror.yaml run: playbooks/container-image/mirror.yaml