Skip to content

feat(release): publish watchdog image to GHCR and Docker Hub#17

Merged
stephenctw merged 4 commits into
mainfrom
feature/release-publish-watchdog-ghcr
Jun 24, 2026
Merged

feat(release): publish watchdog image to GHCR and Docker Hub#17
stephenctw merged 4 commits into
mainfrom
feature/release-publish-watchdog-ghcr

Conversation

@stephenctw

Copy link
Copy Markdown
Collaborator

Push ghcr.io/cartesi/sequencer-watchdog: (multi-arch manifest) alongside existing docker-save tarballs. Mirrors cartesi/cli container publishing so operators can COPY --from= in custom rootfs builds (e.g. Fly.io).

Requires DOCKERHUB_USERNAME and DOCKERHUB_TOKEN repo secrets for Docker Hub mirror.

Push ghcr.io/cartesi/sequencer-watchdog:<tag> (multi-arch manifest) alongside
existing docker-save tarballs. Mirrors cartesi/cli container publishing so
operators can COPY --from= in custom rootfs builds (e.g. Fly.io).

Requires DOCKERHUB_USERNAME and DOCKERHUB_TOKEN repo secrets for Docker Hub mirror.
@stephenctw stephenctw self-assigned this Jun 23, 2026

@endersonmaia endersonmaia left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I strongly suggest using the docker/build-push-action instead of handling stuff via docker commands.

Comment thread .github/workflows/release.yml Outdated
Comment thread .github/workflows/release.yml Outdated
Comment thread .github/workflows/release.yml Outdated
Address PR review: push ghcr.io and docker.io tags without arch suffixes
(buildx assembles the multi-arch manifest), replace shell docker build/push
with docker/build-push-action, and drop the separate imagetools manifest job.
@stephenctw stephenctw force-pushed the feature/release-publish-watchdog-ghcr branch from 19faf39 to 9abc31a Compare June 23, 2026 13:41
@stephenctw

Copy link
Copy Markdown
Collaborator Author

I strongly suggest using the docker/build-push-action instead of handling stuff via docker commands.

Can you take a look if the new change makes sense?

Comment thread .github/workflows/release.yml Outdated
Comment thread .github/workflows/release.yml
Comment thread docs/watchdog/operator-deployment.md Outdated
Drop docker-save tarballs from GitHub Releases; publish watchdog via GHCR and
Docker Hub only. Single build-push job with setup-qemu for amd64+arm64 manifest.
Pass per-arch cartesi-machine deb SHA256 via Dockerfile TARGETARCH.
@stephenctw stephenctw force-pushed the feature/release-publish-watchdog-ghcr branch from 8a8e3c3 to b038061 Compare June 24, 2026 00:18
@stephenctw stephenctw requested a review from endersonmaia June 24, 2026 00:19

@endersonmaia endersonmaia left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

I tested building locally, it seems ok but the release CI will only run with a tag, right?

Let's see if it works 😅

Then I can use it from a Dockerfile like suggested in the docs.

@endersonmaia endersonmaia self-requested a review June 24, 2026 12:52

@endersonmaia endersonmaia left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

While closing my review editor, I see that there's a reference for a 0.20.0-test2 version of machine-emulator

Shouldn't that be a final 0.20.0 tag?

https://github.com/cartesi/sequencer/blob/feature/release-publish-watchdog-ghcr/toolchain-pins.env#L13

Use the final v0.20.0 machine-emulator release (not v0.20.0-test2) with
updated deb SHA256s. Derive canonical-app cartesi-machine and
machine-linux-image versions from toolchain-pins.env, extend
verify-toolchain-pins.sh cross-checks, and update staging-drills for GHCR.
@stephenctw

Copy link
Copy Markdown
Collaborator Author

While closing my review editor, I see that there's a reference for a 0.20.0-test2 version of machine-emulator

Shouldn't that be a final 0.20.0 tag?

https://github.com/cartesi/sequencer/blob/feature/release-publish-watchdog-ghcr/toolchain-pins.env#L13

Great catch! I've updated. Let's try to merge and trigger the release process :]

@endersonmaia endersonmaia self-requested a review June 24, 2026 13:30
@stephenctw stephenctw merged commit 0b62e48 into main Jun 24, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants