Draft - Diff with the community to look at

.editorconfig

@@ -0,0 +1,17 @@
+# EditorConfig: https://EditorConfig.org
+
+# top-most EditorConfig file
+root = true
+
+# Unix-style newlines with a newline ending every file
+[*]
+end_of_line = lf
+insert_final_newline = true
+indent_style = space
+indent_size = 4
+
+# Secrets and defaults should not have a newline at their eof.
+[secrets/*,defaults/*]
+end_of_line = lf
+insert_final_newline = false
+indent_size = 0

.env

@@ -0,0 +1,34 @@
+# Provide environment variables for configuring docker-compose, *not* the
+# containers themselves.
+#
+# Note that this is simple string assignment, quotes should *not* be used.
+# Multiple lines or commands, or bash syntax will not work.
+#
+# References:
+# - https://docs.docker.com/compose/env-file/
+# - https://docs.docker.com/compose/reference/envvars/
+COMPOSE_PROJECT_NAME=isle-buildkit
+
+# Use buildkit when building images.
+COMPOSE_DOCKER_CLI_BUILD=1
+DOCKER_BUILDKIT=1
+
+# Required for traefik on OSX (inconsistent behavior).
+DOCKER_CLIENT_TIMEOUT=120
+COMPOSE_HTTP_TIMEOUT=120
+
+# The consistency requirements for bind mounts; one of:
+#
+# - consistent: Full consistency. The container runtime and the host maintain an identical view of the mount at all times.
+# - cached:     The host's view of the mount is authoritative. There may be delays before updates made on the host are visible within a container.
+# - delegated:  The container runtime's view of the mount is authoritative. There may be delays before updates made in a container are visible on the host.
+#
+# Note that using 'consistent' can be very slow.
+CONSISTENCY=delegated
+
+# The Docker image repository, to use for isle-buildkit images.
+#
+REPOSITORY=islandora
+
+# The version of the isle-buildkit images to use.
+TAG=local

.github/workflows/build.yml

@@ -0,0 +1,58 @@
+name: Build
+on:
+  workflow_call:
+    inputs:
+      repository:
+        required: true
+        type: string
+      image:
+        required: true
+        type: string
+      tags:
+        required: true
+        type: string
+      contexts:
+        required: false
+        type: string
+    outputs:
+      digest:
+        description: "Digest argument for Gradle"
+        value: ${{ jobs.build.outputs.digest }}
+      context:
+        description: "Context to use in dependent images"
+        value: ${{ jobs.build.outputs.context }}
+    secrets:
+      registry_user:
+        required: true
+      registry_password:
+        required: true
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    outputs:
+      digest: ${{ steps.build.outputs.digest }}
+      context: ${{ steps.build.outputs.context }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v2
+      - name: Set up Docker Buildx
+        id: buildx
+        uses: docker/setup-buildx-action@v2
+        with:
+          driver-opts: |
+            image=moby/buildkit:v0.11.1
+            network=host
+      - name: Login to Docker Hub
+        uses: docker/login-action@v2
+        with:
+          username: ${{ secrets.registry_user }}
+          password: ${{ secrets.registry_password }}
+      - id: build
+        name: Build and push
+        run: |
+          set -ex
+          make push manifest "PROGRESS=plain" "BUILDER=${{ steps.buildx.outputs.name }}" "TARGET=${{ inputs.image }}-ci" "TAGS=${{ inputs.tags }}" "CONTEXTS=${{ inputs.contexts }}"
+          echo "digest=-Pisle.${{ inputs.image }}.digest=${{ inputs.repository }}/${{ inputs.image }}@sha256:$(cat build/${{ inputs.image }}.digest)" >> $GITHUB_OUTPUT
+          echo "context=docker-image://${{ inputs.repository }}/${{ inputs.image }}@sha256:$(cat build/${{ inputs.image }}.digest)" >> $GITHUB_OUTPUT

.github/workflows/cleanup.yml

@@ -0,0 +1,21 @@
+name: Delete old DockerHub tags
+on:
+  schedule:
+    - cron: "0 13 * * 0" # Every Sunday at 1PM UTC (9AM EST)
+jobs:
+  clean:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+      - uses: actions/setup-java@v3
+        with:
+          distribution: temurin
+          java-version: 11
+      - name: Setup Gradle
+        uses: gradle/gradle-build-action@v2
+        with:
+          arguments: |
+            deleteEligibleDockerHubTags
+            '-Pisle.dockerhub.personal.access.token=${{ secrets.registry_token }}'
+            --no-parallel

.github/workflows/description.yml

@@ -0,0 +1,219 @@
+name: Update Docker Hub Description
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - "**/README.md"
+      - "**/README.dockerhub.md"
+      - ".github/workflows/dockerhub-description.yml"
+jobs:
+  description:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+
+      - name: Fix Relative Paths
+        run: |
+          find . -maxdepth 2 -mindepth 2 -type f -name "README*.md" -exec sed -i 's/](\.\.\/\([^/]*\).*)/](.\/\1)/g' {} \;
+
+      - name: ActiveMQ - Update Docker Hub Description
+        uses: peter-evans/dockerhub-description@v3
+        with:
+          username: ${{ secrets.registry_user }}
+          password: ${{ secrets.registry_password }}
+          repository: islandora/activemq
+          readme-filepath: ./activemq/README.md
+
+      - name: Alpaca - Update Docker Hub Description
+        uses: peter-evans/dockerhub-description@v3
+        with:
+          username: ${{ secrets.registry_user }}
+          password: ${{ secrets.registry_password }}
+          repository: islandora/alpaca
+          readme-filepath: ./alpaca/README.md
+
+      - name: Base - Update Docker Hub Description
+        uses: peter-evans/dockerhub-description@v3
+        with:
+          username: ${{ secrets.registry_user }}
+          password: ${{ secrets.registry_password }}
+          repository: islandora/base
+          readme-filepath: ./base/README.md
+
+      - name: Blazegraph - Update Docker Hub Description
+        uses: peter-evans/dockerhub-description@v3
+        with:
+          username: ${{ secrets.registry_user }}
+          password: ${{ secrets.registry_password }}
+          repository: islandora/blazegraph
+          readme-filepath: ./blazegraph/README.md
+
+      - name: cantaloupe - Update Docker Hub Description
+        uses: peter-evans/dockerhub-description@v3
+        with:
+          username: ${{ secrets.registry_user }}
+          password: ${{ secrets.registry_password }}
+          repository: islandora/cantaloupe
+          readme-filepath: ./cantaloupe/README.dockerhub.md
+
+      - name: Code-Server - Update Docker Hub Description
+        uses: peter-evans/dockerhub-description@v3
+        with:
+          username: ${{ secrets.registry_user }}
+          password: ${{ secrets.registry_password }}
+          repository: islandora/code-server
+          readme-filepath: ./code-server/README.md
+
+      - name: Crayfish - Update Docker Hub Description
+        uses: peter-evans/dockerhub-description@v3
+        with:
+          username: ${{ secrets.registry_user }}
+          password: ${{ secrets.registry_password }}
+          repository: islandora/crayfish
+          readme-filepath: ./crayfish/README.md
+
+      - name: CrayFits - Update Docker Hub Description
+        uses: peter-evans/dockerhub-description@v3
+        with:
+          username: ${{ secrets.registry_user }}
+          password: ${{ secrets.registry_password }}
+          repository: islandora/crayfits
+          readme-filepath: ./crayfits/README.md
+
+      - name: Drupal - Update Docker Hub Description
+        uses: peter-evans/dockerhub-description@v3
+        with:
+          username: ${{ secrets.registry_user }}
+          password: ${{ secrets.registry_password }}
+          repository: islandora/drupal
+          readme-filepath: ./drupal/README.md
+
+      - name: Fcrepo6 - Update Docker Hub Description
+        uses: peter-evans/dockerhub-description@v3
+        with:
+          username: ${{ secrets.registry_user }}
+          password: ${{ secrets.registry_password }}
+          repository: islandora/fcrepo6
+          readme-filepath: ./fcrepo6/README.md
+
+      - name: Fits - Update Docker Hub Description
+        uses: peter-evans/dockerhub-description@v3
+        with:
+          username: ${{ secrets.registry_user }}
+          password: ${{ secrets.registry_password }}
+          repository: islandora/fits
+          readme-filepath: ./fits/README.md
+
+      - name: Handle - Update Docker Hub Description
+        uses: peter-evans/dockerhub-description@v3
+        with:
+          username: ${{ secrets.registry_user }}
+          password: ${{ secrets.registry_password }}
+          repository: islandora/handle
+          readme-filepath: ./handle/README.md
+
+      - name: Homarus - Update Docker Hub Description
+        uses: peter-evans/dockerhub-description@v3
+        with:
+          username: ${{ secrets.registry_user }}
+          password: ${{ secrets.registry_password }}
+          repository: islandora/homarus
+          readme-filepath: ./homarus/README.md
+
+      - name: Houdini - Update Docker Hub Description
+        uses: peter-evans/dockerhub-description@v3
+        with:
+          username: ${{ secrets.registry_user }}
+          password: ${{ secrets.registry_password }}
+          repository: islandora/houdini
+          readme-filepath: ./houdini/README.md
+
+      - name: hypercube - Update Docker Hub Description
+        uses: peter-evans/dockerhub-description@v3
+        with:
+          username: ${{ secrets.registry_user }}
+          password: ${{ secrets.registry_password }}
+          repository: islandora/hypercube
+          readme-filepath: ./hypercube/README.md
+
+      - name: Java - Update Docker Hub Description
+        uses: peter-evans/dockerhub-description@v3
+        with:
+          username: ${{ secrets.registry_user }}
+          password: ${{ secrets.registry_password }}
+          repository: islandora/java
+          readme-filepath: ./java/README.md
+
+      - name: MariaDB - Update Docker Hub Description
+        uses: peter-evans/dockerhub-description@v3
+        with:
+          username: ${{ secrets.registry_user }}
+          password: ${{ secrets.registry_password }}
+          repository: islandora/mariadb
+          readme-filepath: ./mariadb/README.md
+
+      - name: Matomo - Update Docker Hub Description
+        uses: peter-evans/dockerhub-description@v3
+        with:
+          username: ${{ secrets.registry_user }}
+          password: ${{ secrets.registry_password }}
+          repository: islandora/matomo
+          readme-filepath: ./matomo/README.md
+
+      - name: Milliner - Update Docker Hub Description
+        uses: peter-evans/dockerhub-description@v3
+        with:
+          username: ${{ secrets.registry_user }}
+          password: ${{ secrets.registry_password }}
+          repository: islandora/milliner
+          readme-filepath: ./milliner/README.md
+
+      - name: Nginx - Update Docker Hub Description
+        uses: peter-evans/dockerhub-description@v3
+        with:
+          username: ${{ secrets.registry_user }}
+          password: ${{ secrets.registry_password }}
+          repository: islandora/nginx
+          readme-filepath: ./nginx/README.md
+
+      - name: PostgreSQL - Update Docker Hub Description
+        uses: peter-evans/dockerhub-description@v3
+        with:
+          username: ${{ secrets.registry_user }}
+          password: ${{ secrets.registry_password }}
+          repository: islandora/postgresql
+          readme-filepath: ./postgresql/README.md
+
+      - name: RipRap - Update Docker Hub Description
+        uses: peter-evans/dockerhub-description@v3
+        with:
+          username: ${{ secrets.registry_user }}
+          password: ${{ secrets.registry_password }}
+          repository: islandora/riprap
+          readme-filepath: ./riprap/README.md
+
+      - name: Solr - Update Docker Hub Description
+        uses: peter-evans/dockerhub-description@v3
+        with:
+          username: ${{ secrets.registry_user }}
+          password: ${{ secrets.registry_password }}
+          repository: islandora/solr
+          readme-filepath: ./solr/README.md
+
+      - name: Test - Update Docker Hub Description
+        uses: peter-evans/dockerhub-description@v3
+        with:
+          username: ${{ secrets.registry_user }}
+          password: ${{ secrets.registry_password }}
+          repository: islandora/tomcat
+          readme-filepath: ./test/README.md
+
+      - name: Tomcat - Update Docker Hub Description
+        uses: peter-evans/dockerhub-description@v3
+        with:
+          username: ${{ secrets.registry_user }}
+          password: ${{ secrets.registry_password }}
+          repository: islandora/tomcat
+          readme-filepath: ./tomcat/README.md

.github/workflows/grype.yml

@@ -0,0 +1,40 @@
+name: Grype
+on:
+  workflow_call:
+    inputs:
+      image:
+        required: true
+        type: string
+      digest:
+        required: true
+        type: string
+    secrets:
+      registry_user:
+        required: true
+      registry_password:
+        required: true
+jobs:
+  grype:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+      - name: Login to Docker Hub
+        uses: docker/login-action@v2
+        with:
+          username: ${{ secrets.registry_user }}
+          password: ${{ secrets.registry_password }}
+      - uses: actions/setup-java@v3
+        with:
+          distribution: temurin
+          java-version: 11
+      - name: Setup Gradle
+        uses: gradle/gradle-build-action@v2
+        with:
+          cache-read-only: false
+          arguments: ${{ inputs.image }}:grype ${{ inputs.digest }} --info
+      - uses: actions/upload-artifact@v3
+        if: always()
+        with:
+          name: Grype Reports
+          path: build/**/*-grype.*