feat: add reproducible imgproxy runtime release

2026-07-15 11:25:32 +08:00
parent 87b03f7848
commit 3eee44ef5b
6 changed files with 171 additions and 0 deletions
@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT="$(cd "$(dirname "$0")/.." && pwd)"
+IMAGE_REF="${IMGPROXY_IMAGE_REF:-darthsim/imgproxy@sha256:3819ccd5ee26b83b27f8184b17a0a0c6f0eb21052efa9f554b23a7c39a3e6a1f}"
+IMAGE_TAG="${IMGPROXY_IMAGE_TAG:-tkmind/imgproxy-runtime:20260715-3819ccd5}"
+OUT_DIR="${IMGPROXY_RUNTIME_OUT_DIR:-${ROOT}/.runtime/imgproxy}"
+DRY_RUN=0
+
+[[ "${1:-}" != "--dry-run" ]] || DRY_RUN=1
+
+mkdir -p "$OUT_DIR"
+if [[ "$DRY_RUN" == 1 ]]; then
+  printf 'image_ref=%s\nimage_tag=%s\nout_dir=%s\n' "$IMAGE_REF" "$IMAGE_TAG" "$OUT_DIR"
+  exit 0
+fi
+
+command -v docker >/dev/null || { echo 'docker is required to build the imgproxy runtime image' >&2; exit 1; }
+docker pull --platform linux/arm64 "$IMAGE_REF"
+docker tag "$IMAGE_REF" "$IMAGE_TAG"
+docker save "$IMAGE_TAG" | gzip -c > "$OUT_DIR/imgproxy-runtime-image.tar.gz"
+shasum -a 256 "$OUT_DIR/imgproxy-runtime-image.tar.gz" > "$OUT_DIR/imgproxy-runtime-image.tar.gz.sha256"
+printf '%s\n' "$IMAGE_TAG" > "$OUT_DIR/image-tag.txt"