From 53186e9a3597ead5dda4f3f53de5954f31e66033 Mon Sep 17 00:00:00 2001 From: Haylan Date: Fri, 17 Jul 2026 12:07:31 +0200 Subject: [PATCH 1/5] feat(ci): add GitHub Actions workflow for testing and Docker builds --- .gitea/workflows/test.yml | 62 +++++++++++++++++++++++++++++++++++++++ 1 file changed, 62 insertions(+) create mode 100644 .gitea/workflows/test.yml diff --git a/.gitea/workflows/test.yml b/.gitea/workflows/test.yml new file mode 100644 index 0000000..37654e4 --- /dev/null +++ b/.gitea/workflows/test.yml @@ -0,0 +1,62 @@ +name: Tests + +on: + push: + branches: [main] + pull_request: + branches: [main] + +jobs: + test: + runs-on: ubuntu-latest + steps: + - name: Checkout + uses: actions/checkout@v4 + + - name: Set up PHP + uses: shivammathur/setup-php@v2 + with: + php-version: "8.4" + extensions: intl, zip, opcache + coverage: none + + - name: Cache Composer dependencies + uses: actions/cache@v4 + with: + path: ~/.composer/cache + key: composer-${{ hashFiles('composer.lock') }} + restore-keys: composer- + + - name: Install dependencies + run: composer install --no-interaction --prefer-dist + + - name: Run PHPUnit + run: vendor/bin/phpunit --testdox + + - name: Run PHPStan + run: composer phpstan + + docker-build: + runs-on: ubuntu-latest + steps: + - name: Checkout + uses: actions/checkout@v4 + + - name: Set up Docker Buildx + uses: docker/setup-buildx-action@v3 + + - name: Build prod image (final target) + uses: docker/build-push-action@v5 + with: + context: . + file: Dockerfile + target: final + push: false + + - name: Build dev image (dev target) + uses: docker/build-push-action@v5 + with: + context: . + file: Dockerfile.dev + target: dev + push: false -- 2.54.0 From 14b325b3bf9d5ca8fe4466cb3bc3745cc9206bd8 Mon Sep 17 00:00:00 2001 From: Haylan Date: Fri, 17 Jul 2026 12:18:24 +0200 Subject: [PATCH 2/5] refactor(ci): migrate PHP setup to Docker for testing workflow --- .gitea/workflows/test.yml | 31 ++++++++++++++----------------- 1 file changed, 14 insertions(+), 17 deletions(-) diff --git a/.gitea/workflows/test.yml b/.gitea/workflows/test.yml index 37654e4..0454909 100644 --- a/.gitea/workflows/test.yml +++ b/.gitea/workflows/test.yml @@ -12,29 +12,26 @@ jobs: steps: - name: Checkout uses: actions/checkout@v4 - - - name: Set up PHP - uses: shivammathur/setup-php@v2 - with: - php-version: "8.4" - extensions: intl, zip, opcache - coverage: none - - name: Cache Composer dependencies - uses: actions/cache@v4 - with: - path: ~/.composer/cache - key: composer-${{ hashFiles('composer.lock') }} - restore-keys: composer- + - name: Set up Docker Buildx + uses: docker/setup-buildx-action@v3 - - name: Install dependencies - run: composer install --no-interaction --prefer-dist + - name: Build dev image (PHP 8.4 + composer deps) + uses: docker/build-push-action@v5 + with: + context: . + file: Dockerfile.dev + target: dev + load: true + tags: graph-dev:ci + cache-from: type=gha + cache-to: type=gha,mode=max - name: Run PHPUnit - run: vendor/bin/phpunit --testdox + run: docker run --rm graph-dev:ci vendor/bin/phpunit --testdox - name: Run PHPStan - run: composer phpstan + run: docker run --rm graph-dev:ci composer phpstan docker-build: runs-on: ubuntu-latest -- 2.54.0 From 211edc4538b67cafb8850778bcbb498c3ba38b36 Mon Sep 17 00:00:00 2001 From: Haylan Date: Fri, 17 Jul 2026 12:27:41 +0200 Subject: [PATCH 3/5] refactor(ci): reorganize test workflow to streamline Docker image handling --- .gitea/workflows/test.yml | 45 ++++++++++++++++++++++++++------------- 1 file changed, 30 insertions(+), 15 deletions(-) diff --git a/.gitea/workflows/test.yml b/.gitea/workflows/test.yml index 0454909..c848f86 100644 --- a/.gitea/workflows/test.yml +++ b/.gitea/workflows/test.yml @@ -7,7 +7,7 @@ on: branches: [main] jobs: - test: + build-dev: runs-on: ubuntu-latest steps: - name: Checkout @@ -22,18 +22,19 @@ jobs: context: . file: Dockerfile.dev target: dev - load: true + outputs: type=docker,dest=/tmp/graph-dev.tar tags: graph-dev:ci cache-from: type=gha cache-to: type=gha,mode=max - - name: Run PHPUnit - run: docker run --rm graph-dev:ci vendor/bin/phpunit --testdox - - - name: Run PHPStan - run: docker run --rm graph-dev:ci composer phpstan - - docker-build: + - name: Upload dev image + uses: actions/upload-artifact@v4 + with: + name: graph-dev-image + path: /tmp/graph-dev.tar + retention-days: 1 + build-prod: + needs: build-dev runs-on: ubuntu-latest steps: - name: Checkout @@ -50,10 +51,24 @@ jobs: target: final push: false - - name: Build dev image (dev target) - uses: docker/build-push-action@v5 + test: + needs: build-dev + runs-on: ubuntu-latest + steps: + - name: Checkout + uses: actions/checkout@v4 + + - name: Download dev image + uses: actions/download-artifact@v4 with: - context: . - file: Dockerfile.dev - target: dev - push: false + name: graph-dev-image + path: /tmp + + - name: Load dev image + run: docker load --input /tmp/graph-dev.tar + + - name: Run PHPUnit + run: docker run --rm graph-dev:ci vendor/bin/phpunit --testdox + + - name: Run PHPStan + run: docker run --rm graph-dev:ci composer phpstan -- 2.54.0 From d6a4f7c41fe27ddce256e830fcba8aecec101ce7 Mon Sep 17 00:00:00 2001 From: Haylan Date: Fri, 17 Jul 2026 12:37:12 +0200 Subject: [PATCH 4/5] feat(ci): update Gitea workflow to include registry login and cache handling adjustments --- .gitea/workflows/test.yml | 17 +++++++++++++++-- CLAUDE.md | 17 +++++++++++++++++ 2 files changed, 32 insertions(+), 2 deletions(-) diff --git a/.gitea/workflows/test.yml b/.gitea/workflows/test.yml index c848f86..97e0e53 100644 --- a/.gitea/workflows/test.yml +++ b/.gitea/workflows/test.yml @@ -6,6 +6,9 @@ on: pull_request: branches: [main] +env: + REGISTRY: git.arthurerlich.de + jobs: build-dev: runs-on: ubuntu-latest @@ -16,6 +19,16 @@ jobs: - name: Set up Docker Buildx uses: docker/setup-buildx-action@v3 + # type=gha depends on act_runner's internal cache proxy, which is unreachable + # from job containers on this runner (dial tcp ... i/o timeout). Use the + # registry cache backend instead, same as docker-publish.yml. + - name: Log in to Gitea registry + uses: docker/login-action@v3 + with: + registry: ${{ env.REGISTRY }} + username: ${{ gitea.actor }} + password: ${{ secrets.REGISTRY_TOKEN }} + - name: Build dev image (PHP 8.4 + composer deps) uses: docker/build-push-action@v5 with: @@ -24,8 +37,8 @@ jobs: target: dev outputs: type=docker,dest=/tmp/graph-dev.tar tags: graph-dev:ci - cache-from: type=gha - cache-to: type=gha,mode=max + cache-from: type=registry,ref=${{ env.REGISTRY }}/${{ gitea.repository }}:buildcache-dev + cache-to: type=registry,ref=${{ env.REGISTRY }}/${{ gitea.repository }}:buildcache-dev,mode=max - name: Upload dev image uses: actions/upload-artifact@v4 diff --git a/CLAUDE.md b/CLAUDE.md index d9384df..49dd6e4 100644 --- a/CLAUDE.md +++ b/CLAUDE.md @@ -138,12 +138,29 @@ Workflow files live in [.gitea/workflows/](.gitea/workflows/). This project uses - Secrets are set under Repository → Settings → Secrets → Actions - The registry hostname must be derived from `gitea.server_url` (strip the protocol prefix) - Triggers use standard `on:` syntax; `tags: '*.*.*'` matches semver pushes without a `v` prefix +- Do not use `cache-from/cache-to: type=gha` — on this instance's act_runner (v2.0.0), the internal GitHub Actions-cache-compatible proxy is not reachable from job containers (`dial tcp :: i/o timeout`), a known act_runner docker-executor networking limitation, not a workflow bug. Use `type=registry` instead (push cache blobs to `${{ env.REGISTRY }}/:buildcache*` — see both `test.yml` and `docker-publish.yml`); it requires a registry login step even for jobs that don't push the final image. **Current workflows:** | File | Trigger | Purpose | | -------------------- | ---------------- | --------------------------------------------------------- | | `docker-publish.yml` | Push tag `*.*.*` | Build & push multi-arch image to Gitea container registry | +| `test.yml` | Push/PR to `main`| Build dev+prod images, run PHPUnit and PHPStan | + +### Release testing with `act` + +Before tagging a release (anything that would trigger `docker-publish.yml`), run `test.yml` locally with [`act`](https://github.com/nektos/act) to catch pipeline failures before pushing. `test.yml` uses plain GitHub Actions syntax (no `gitea.*` contexts), so it runs under `act` unmodified. + +```bash +act -j test \ + -P ubuntu-latest=catthehacker/ubuntu:act-latest \ + --artifact-server-path /tmp/act-artifacts +``` + +- `-P ubuntu-latest=catthehacker/ubuntu:act-latest` — default act runner image lacks a Docker CLI, which the `test` job needs for its nested `docker run` steps +- `--artifact-server-path` — required for the `upload-artifact`/`download-artifact` steps to work; without it they silently no-op + +**If `act` is not installed:** warn the user it's missing and how to install it (`sudo pacman -S act`, or see the repo above) — do not install it yourself or force the check. `docker-publish.yml` is out of scope for `act` (it needs real `gitea.*` context and a live registry secret); don't try to run it locally. ## Docker -- 2.54.0 From f3491ef4a65b62a2f1cde87465662fc5699b27dc Mon Sep 17 00:00:00 2001 From: Haylan Date: Fri, 17 Jul 2026 12:41:35 +0200 Subject: [PATCH 5/5] fix(ci): downgrade actions/upload-artifact and actions/download-artifact to v3 for compatibility --- .gitea/workflows/test.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.gitea/workflows/test.yml b/.gitea/workflows/test.yml index 97e0e53..39ae604 100644 --- a/.gitea/workflows/test.yml +++ b/.gitea/workflows/test.yml @@ -41,7 +41,7 @@ jobs: cache-to: type=registry,ref=${{ env.REGISTRY }}/${{ gitea.repository }}:buildcache-dev,mode=max - name: Upload dev image - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v3 with: name: graph-dev-image path: /tmp/graph-dev.tar @@ -72,7 +72,7 @@ jobs: uses: actions/checkout@v4 - name: Download dev image - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v3 with: name: graph-dev-image path: /tmp -- 2.54.0