Merge pull request #2 from fabio-garavini/dev

addon codenotary signing

cloudflared/Dockerfile

@@ -1,5 +1,6 @@
-ARG BUILD_VERSION
-FROM cloudflare/cloudflared:${BUILD_VERSION}
+ARG BUILD_FROM
+
+FROM ${BUILD_FROM}
 
 COPY --from=busybox:1.37-uclibc /bin/sh /bin/mv /bin/cat /bin/find /bin/head /bin/basename /bin/xargs /bin/
 

cloudflared/build.yaml

@@ -0,0 +1,5 @@
+build_from:
+  aarch64: cloudflare/cloudflared:2025.1.0
+  amd64: cloudflare/cloudflared:2025.1.0
+codenotary:
+  signer: [email protected]

cloudflared/config.yaml

@@ -1,6 +1,7 @@
 name: Cloudflared
-version: "2025.1.0"
+version: "2025.1.0-v0"
 slug: cloudflared
+codenotary: [email protected]
 description: Cloudflare tunneling and Zero Trust service
 arch:
   - aarch64

gitea/Dockerfile

@@ -1,7 +1,6 @@
 ARG BUILD_FROM
-ARG BUILD_VERSION
 
-FROM $BUILD_FROM:$BUILD_VERSION
+FROM $BUILD_FROM
 
 ENV GITEA_WORK_DIR=/data
 
@@ -10,4 +9,31 @@ RUN apk --no-cache add \
     jq; \
     rm -rf /var/cache/apk/*
 
-COPY rootfs/ /
+COPY rootfs/ /
+
+ARG BUILD_VERSION
+ARG BUILD_ARCH
+ARG BUILD_DATE
+ARG BUILD_DESCRIPTION
+ARG BUILD_NAME
+ARG BUILD_REF
+ARG BUILD_REPOSITORY
+
+LABEL \
+    io.hass.name="${BUILD_NAME}" \
+    io.hass.description="${BUILD_DESCRIPTION}" \
+    io.hass.arch="${BUILD_ARCH}" \
+    io.hass.type="addon" \
+    io.hass.version="${BUILD_VERSION}" \
+    maintainer="Fabio Garavini <[email protected]>" \
+    org.opencontainers.image.title="${BUILD_NAME}" \
+    org.opencontainers.image.description="${BUILD_DESCRIPTION}" \
+    org.opencontainers.image.vendor="Fabio Garavini Hassio Add-ons" \
+    org.opencontainers.image.authors="Fabio Garavini <[email protected]>" \
+    org.opencontainers.image.licenses="MIT" \
+    org.opencontainers.image.url="https://github.com/fabio-garavini" \
+    org.opencontainers.image.source="https://github.com/${BUILD_REPOSITORY}" \
+    org.opencontainers.image.documentation="https://github.com/${BUILD_REPOSITORY}/blob/main/README.md" \
+    org.opencontainers.image.created=${BUILD_DATE} \
+    org.opencontainers.image.revision=${BUILD_REF} \
+    org.opencontainers.image.version=${BUILD_VERSION}

gitea/build.yaml

@@ -1,3 +1,5 @@
 build_from:
-  aarch64: gitea/gitea
-  amd64: gitea/gitea
+  aarch64: gitea/gitea:1.23.1
+  amd64: gitea/gitea:1.23.1
+codenotary:
+  signer: [email protected]

gitea/config.yaml

@@ -1,6 +1,7 @@
 name: Gitea
-version: "1.23.1"
+version: "1.23.1-v2"
 slug: gitea
+codenotary: [email protected]
 description: Gitea is a Git hosting, code review, team collaboration, package registry, and CI/CD
 url: https://about.gitea.com/
 webui: http://[HOST]:[PORT:3000]

gitlab/Dockerfile

@@ -2,7 +2,7 @@ ARG BUILD_FROM
 
 FROM $BUILD_FROM
 
-ARG BUILD_VERSION
+ARG GITLAB_VERSION=17.7.1-ce.0
 ARG BUILD_ARCH
 
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
@@ -54,7 +54,7 @@ ARG TARGETARCH
 
 RUN { \
     echo 'RELEASE_PACKAGE=gitlab-ce'; \
-    echo 'RELEASE_VERSION=${BUILD_VERSION}'; \
+    echo 'RELEASE_VERSION=${GITLAB_VERSION}'; \
 } > /RELEASE
 
 RUN \
@@ -63,7 +63,7 @@ RUN \
     else \
         export DOWNLOAD_ARCH=${BUILD_ARCH}; \
     fi; \
-    wget --quiet "https://packages.gitlab.com/gitlab/gitlab-ce/packages/ubuntu/jammy/gitlab-ce_${BUILD_VERSION}_${DOWNLOAD_ARCH}.deb/download.deb" -O /tmp/gitlab.deb; \
+    wget --quiet "https://packages.gitlab.com/gitlab/gitlab-ce/packages/ubuntu/jammy/gitlab-ce_${GITLAB_VERSION}_${DOWNLOAD_ARCH}.deb/download.deb" -O /tmp/gitlab.deb; \
     dpkg -i /tmp/gitlab.deb; \
     rm -rf /tmp/gitlab.deb /var/lib/apt/lists/*
 
@@ -87,6 +87,7 @@ CMD ["/assets/wrapper"]
 HEALTHCHECK --interval=60s --timeout=30s --retries=5 \
 CMD /opt/gitlab/bin/gitlab-healthcheck --fail --max-time 10
 
+ARG BUILD_VERSION
 ARG BUILD_DATE
 ARG BUILD_DESCRIPTION
 ARG BUILD_NAME

gitlab/build.yaml

@@ -1,3 +1,6 @@
 build_from:
   aarch64: ghcr.io/hassio-addons/ubuntu-base/aarch64:9.0.5
-  amd64: ghcr.io/hassio-addons/ubuntu-base/amd64:9.0.5
+  amd64: ghcr.io/hassio-addons/ubuntu-base/amd64:9.0.5
+codenotary:
+  signer: [email protected]
+  base_image: [email protected]

gitlab/config.yaml

@@ -1,6 +1,7 @@
 name: Gitlab
-version: 17.7.1-ce.0
+version: 17.7.1-ce.0-v0
 slug: gitlab
+codenotary: [email protected]
 description: Gitlab Comunity Edition
 url: https://gitlab.com/rluna-gitlab/gitlab-ce
 webui: http://[HOST]:[PORT:80]

immich/build.yaml

@@ -1,3 +1,5 @@
 build_from:
   aarch64: ghcr.io/imagegenius/immich:1.124.2
-  amd64: ghcr.io/imagegenius/immich:1.124.2
+  amd64: ghcr.io/imagegenius/immich:1.124.2
+codenotary:
+  signer: [email protected]

immich/config.yaml

@@ -1,6 +1,7 @@
 name: Immich
-version: "1.124.2-v0"
+version: "1.124.2-v1"
 slug: immich
+codenotary: [email protected]
 description: High performance self-hosted photo and video management solution
 url: https://immich.app
 webui: http://[HOST]:[PORT:8080]

nextcloud/build.yaml

@@ -1,3 +1,5 @@
 build_from:
   amd64: ghcr.io/linuxserver/baseimage-alpine-nginx:3.20
-  aarch64: ghcr.io/linuxserver/baseimage-alpine-nginx:3.20
+  aarch64: ghcr.io/linuxserver/baseimage-alpine-nginx:3.20
+codenotary:
+  signer: [email protected]

nextcloud/config.yaml

@@ -1,6 +1,7 @@
 name: Nextcloud
-version: "30.0.5-v0"
+version: "30.0.5-v1"
 slug: nextcloud
+codenotary: [email protected]
 description: Nextcloud all-in-one
 url: https://nextcloud.com
 arch:

paperless/build.yaml

@@ -1,3 +1,5 @@
 build_from:
   amd64: ghcr.io/paperless-ngx/paperless-ngx
-  aarch64: ghcr.io/paperless-ngx/paperless-ngx
+  aarch64: ghcr.io/paperless-ngx/paperless-ngx
+codenotary:
+  signer: [email protected]

paperless/config.yaml

@@ -1,6 +1,7 @@
 name: Paperless
-version: "2.13.5-v0"
+version: "2.13.5-v1"
 slug: paperless
+codenotary: [email protected]
 description: Document management system that transforms your physical documents into a searchable online archive
 url: https://docs.paperless-ngx.com
 webui: http://[HOST]:[PORT:8000]

pocketbase/Dockerfile

@@ -3,7 +3,7 @@ ARG BUILD_FROM
 FROM $BUILD_FROM
 
 ARG BUILD_ARCH
-ARG BUILD_VERSION
+ARG POCKETBASE_VERSION=0.24.3
 
 RUN apk add --no-cache \
     unzip \
@@ -16,9 +16,36 @@ RUN \
     else \
         export DOWNLOAD_ARCH=${BUILD_ARCH}; \
     fi; \
-    wget --quiet https://github.com/pocketbase/pocketbase/releases/download/v${BUILD_VERSION}/pocketbase_${BUILD_VERSION}_linux_${DOWNLOAD_ARCH}.zip -O /tmp/pb.zip; \
+    wget --quiet https://github.com/pocketbase/pocketbase/releases/download/v${POCKETBASE_VERSION}/pocketbase_${POCKETBASE_VERSION}_linux_${DOWNLOAD_ARCH}.zip -O /tmp/pb.zip; \
     unzip /tmp/pb.zip -d /pb/
 
 COPY rootfs/ /
 
-EXPOSE 8080
+EXPOSE 8080
+
+ARG BUILD_VERSION
+ARG BUILD_ARCH
+ARG BUILD_DATE
+ARG BUILD_DESCRIPTION
+ARG BUILD_NAME
+ARG BUILD_REF
+ARG BUILD_REPOSITORY
+
+LABEL \
+    io.hass.name="${BUILD_NAME}" \
+    io.hass.description="${BUILD_DESCRIPTION}" \
+    io.hass.arch="${BUILD_ARCH}" \
+    io.hass.type="addon" \
+    io.hass.version="${BUILD_VERSION}" \
+    maintainer="Fabio Garavini <[email protected]>" \
+    org.opencontainers.image.title="${BUILD_NAME}" \
+    org.opencontainers.image.description="${BUILD_DESCRIPTION}" \
+    org.opencontainers.image.vendor="Fabio Garavini Hassio Add-ons" \
+    org.opencontainers.image.authors="Fabio Garavini <[email protected]>" \
+    org.opencontainers.image.licenses="MIT" \
+    org.opencontainers.image.url="https://github.com/fabio-garavini" \
+    org.opencontainers.image.source="https://github.com/${BUILD_REPOSITORY}" \
+    org.opencontainers.image.documentation="https://github.com/${BUILD_REPOSITORY}/blob/main/README.md" \
+    org.opencontainers.image.created=${BUILD_DATE} \
+    org.opencontainers.image.revision=${BUILD_REF} \
+    org.opencontainers.image.version=${BUILD_VERSION}

pocketbase/build.yaml

@@ -3,4 +3,5 @@ build_from:
   amd64: ghcr.io/hassio-addons/base:stable
   armv7: ghcr.io/hassio-addons/base:stable
 codenotary:
+  signer: [email protected]
   base_image: [email protected]

pocketbase/config.yaml

@@ -1,6 +1,7 @@
 name: PocketBase
-version: 0.24.3
+version: "0.24.3-v0"
 slug: pocketbase
+codenotary: [email protected]
 description: Pocketbase is an open source backend
 url: "https://pocketbase.io"
 webui: "http://[HOST]:[PORT:8090]/_/"

postgres_16/build.yaml

@@ -1,3 +1,5 @@
 build_from:
   aarch64: tensorchord/pgvecto-rs:pg16-v0.3.0
-  amd64: tensorchord/pgvecto-rs:pg16-v0.3.0
+  amd64: tensorchord/pgvecto-rs:pg16-v0.3.0
+codenotary:
+  signer: [email protected]

postgres_16/config.yaml

@@ -1,6 +1,7 @@
 name: Postgres 16
-version: "pg16-v0.3.0"
+version: "pg16-v0.3.0-v0"
 slug: postgres_16
+codenotary: [email protected]
 description: Postgres 16 with pgvecto.rs
 url: https://www.postgresql.org/about/news/postgresql-16-released-2715
 startup: initialize

prometheus/Dockerfile

@@ -1,5 +1,5 @@
-ARG BUILD_VERSION
-FROM prom/prometheus:${BUILD_VERSION}
+ARG BUILD_FROM
+FROM ${BUILD_FROM}
 
 USER root
 

prometheus/build.yaml

@@ -0,0 +1,5 @@
+build_from:
+  aarch64: prom/prometheus:v3.1.0
+  amd64: prom/prometheus:v3.1.0
+codenotary:
+  signer: [email protected]

prometheus/config.yaml

@@ -1,6 +1,7 @@
 name: Prometheus
-version: v3.1.0
+version: v3.1.0-v0
 slug: prometheus
+codenotary: [email protected]
 description: Prometheus monitoring system
 url: https://prometheus.io
 startup: initialize
@@ -21,4 +22,5 @@ map:
 ports:
   9090/tcp: null
 ports_description:
-  9090/tcp: Metrics
+  9090/tcp: Metrics
+image: fabioogaravini/hassio-{arch}-prometheus

redis/Dockerfile

@@ -1,9 +1,8 @@
 ARG BUILD_FROM
-ARG BUILD_VERSION
 
 FROM oliver006/redis_exporter:alpine AS redis-exporter
 
-FROM ${BUILD_FROM}:${BUILD_VERSION}
+FROM ${BUILD_FROM}
 
 ENV REDIS_DATA_DIR="/config" \
     RIPORT=8001

redis/build.yaml

@@ -1,3 +1,5 @@
 build_from:
-  aarch64: redis/redis-stack
-  amd64: redis/redis-stack
+  aarch64: redis/redis-stack:7.4.0-v2
+  amd64: redis/redis-stack:7.4.0-v2
+codenotary:
+  signer: [email protected]

redis/config.yaml

@@ -1,6 +1,7 @@
 name: Redis DB
-version: 7.4.0-v2
+version: 7.4.0-v2-v0
 slug: redis
+codenotary: [email protected]
 description: Redis database
 url: https://redis.io
 startup: initialize

syncthing/Dockerfile

@@ -1,7 +1,6 @@
 ARG BUILD_FROM
-ARG BUILD_VERSION
 
-FROM ${BUILD_FROM}:${BUILD_VERSION}
+FROM ${BUILD_FROM}
 
 COPY rootfs/ /
 

syncthing/build.yaml

@@ -1,4 +1,5 @@
 build_from:
-  armv7: ghcr.io/linuxserver/syncthing
-  aarch64: ghcr.io/linuxserver/syncthing
-  amd64: ghcr.io/linuxserver/syncthing
+  aarch64: ghcr.io/linuxserver/syncthing:1.29.2
+  amd64: ghcr.io/linuxserver/syncthing:1.29.2
+codenotary:
+  signer: [email protected]

syncthing/config.yaml

@@ -1,6 +1,7 @@
 name: Syncthing
-version: "1.29.2"
+version: 1.29.2-v0
 slug: syncthing
+codenotary: [email protected]
 description: "Open Source Continuous File Synchronization"
 url: https://syncthing.net
 ingress: true