trdl.yaml

dockerImage: registry.deckhouse.io/base_images@sha256:4aaf81659fa6ea3cbbb0f241d739dda485bce79ec98b0fd5014ef4f4210e1cd5 # from: golang:1.25.8-bookworm
commands:
  - export TASK_VERSION=v3.41.0
  - export TASK_SHA256=0a2595f7fa3c15a62f8d0c244121a4977018b3bfdec7c1542ac2a8cf079978b8
  - apt-get update && apt-get install -y libbtrfs-dev apt-utils libelf-dev libssl-dev libuv1-dev libzstd-dev file git gcc dnsutils
  - ln -fs "$(dpkg -L libuv1-dev | grep -F '/libuv_a.a')" /usr/local/lib/libuv.a
  - curl -LO https://github.com/go-task/task/releases/download/$TASK_VERSION/task_linux_amd64.tar.gz
  - echo "$TASK_SHA256  task_linux_amd64.tar.gz" | sha256sum -c
  - tar -xf task_linux_amd64.tar.gz
  - rm -rf task_linux_amd64.tar.gz
  - mv task /usr/local/bin/
  - eval "$(ssh-agent -s)" && base64 -d /run/secrets/stronghold-ssh > /dev/shm/stronghold-ssh && chmod 400 /dev/shm/stronghold-ssh && ssh-add /dev/shm/stronghold-ssh
  - rm /dev/shm/stronghold-ssh
  - export PRIVATE_REPO=$(cat /run/secrets/deckhouse-private-repo)
  - mkdir -p ~/.ssh && touch ~/.ssh/known_hosts
  - ssh-keyscan -H ${PRIVATE_REPO} >> ~/.ssh/known_hosts
  - git config --global url."ssh://git@${PRIVATE_REPO}/".insteadOf "https://flant.internal/"
  - git config --global --add safe.directory '*'
  - task -o group -p build:dist:all version={{ .Tag }}
  - mkdir -p /result
  - cp -a ./dist/{{ .Tag }}/* /result