jharmison-redhat/bootc image builder

Perform bootc image build, rechunk using bootc-base-imagectl, and optionally publish in a single action.

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Maintainedlast commit Oct 20, 2025
License
Apache 2.0

Pinned Snippet

workflow.ymlSHA-pinned
uses: jharmison-redhat/action-bootc-build@d3c254510a6e962044ffb9e2eaa440fccb307a03 # v1.0.3

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
annotationsAnotations to apply during the build, separated by newlinesno
archSet the ARCH of the images to the provided value, instead of the architecture of the build hostnoamd64
authfileAlternative authfile location to use for podman push and/or layer cacheno
build-argsBuild arguments to pass during the build, separated by newlinesno
cache-repoAn OCI repository to use for image layer cache on the initial build onlyno
contextThe build context to use for the initial build, if anything other than the repository rootno
extra-argsArbitrary extra arguments provided to the podman build - avoid whitespace, quoting is possible but unreliable no
filePath or URL for the Containerfile to build, otherwise it follows podman's automatic discovery logicno
graphrootA path to use as backing storage for the podman graphroot, via bind mount, to ensure enough space for the image build (on GitHub Hosted Runners, /mnt is a dedicated partition with around 60 GB of free space) no/mnt/containers-storage
labelsLabels to apply during the build, separated by newlinesno
max-layersThe maximum number of layers to chunk the final image intono
no-cacheDisable the layer cache when building all images ("true" for true, anything else is false)nofalse
pullBase image pull policy for the initial build ("always"|"missing"|"never"|"newer")nonewer
pushPush the final chunked image to the tag after build ("true" for true, anything else is false) NOTE: Requires that you already be logged into the registry using redhat-actions/podman-login@v1 or similar. nofalse
rechunk-imageAn alternate image to use for rechunking (will reuse the unchunked image if not provided)no
secretSecrets to make available to RUN instructions in the Containerfile from a file or environment, separated by newlines ("id=mysecret,src=MYSECRET,type=env" or "id=mysecret,src=.mysecret,type=file")no
shm-sizeThe size of /dev/shm for the initial buildno
tagTagged name to apply to the final built imageno
namedescription
iidThe Podman ImageID of the chunked image left in root's containers-storage
tagThe Podman image tag of the chunked image left in root's containers-storage
manifestThe skopeo manifest of the rechunked image