Add rpc whitelist #16
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: ci | |
| on: | |
| push: | |
| branches: | |
| - main | |
| tags: | |
| - v* | |
| pull_request: | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| id-token: write | |
| packages: write | |
| contents: read | |
| attestations: write | |
| env: | |
| IMAGE_BASE: ghcr.io/${{ github.repository_owner }}/bitcoin-core-docker | |
| outputs: | |
| IMAGE: ${{ fromJson(steps.build.outputs.metadata)['image.name'] }} | |
| steps: | |
| - name: Set up QEMU | |
| uses: docker/setup-qemu-action@v3 | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@v3 | |
| - name: Login to GHCR | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Generate version | |
| run: | | |
| # Default tag as commit SHA | |
| VERSION=${GITHUB_SHA::7} | |
| # Use tag name if it's a tag push | |
| if [ "$GITHUB_EVENT_NAME" == "push" ] && [ "$GITHUB_REF_TYPE" == "tag" ]; then | |
| VERSION=${GITHUB_REF_NAME#v} | |
| fi | |
| echo "VERSION=$VERSION" >> $GITHUB_ENV | |
| - name: Build and push | |
| id: build | |
| uses: docker/build-push-action@v6 | |
| with: | |
| platforms: linux/amd64,linux/arm64,linux/arm/v7 | |
| push: true | |
| provenance: mode=max | |
| tags: "${{ env.IMAGE_BASE }}:${{ env.VERSION }}" | |
| cache-from: type=registry,ref=${{ env.IMAGE_BASE }}:buildcache | |
| cache-to: type=registry,ref=${{ env.IMAGE_BASE }}:buildcache,mode=max | |
| - name: Attest | |
| uses: actions/attest-build-provenance@v1 | |
| id: attest | |
| with: | |
| subject-name: ${{ env.IMAGE_BASE }} | |
| subject-digest: ${{ steps.build.outputs.digest }} | |
| push-to-registry: true | |
| test: | |
| runs-on: ubuntu-latest | |
| needs: build | |
| timeout-minutes: 45 | |
| env: | |
| CONTAINER_NAME: testnet4 | |
| steps: | |
| - run: | | |
| docker pull ${{ needs.build.outputs.IMAGE }} | |
| docker tag ${{ needs.build.outputs.IMAGE }} bitcoin-core-docker | |
| - uses: actions/checkout@v4 | |
| - name: Start ${{ env.CONTAINER_NAME }} | |
| run: ./examples/${CONTAINER_NAME}.sh | |
| - name: Wait for healthy | |
| run: | | |
| while ! docker exec -i ${CONTAINER_NAME} /opt/wallet-health.sh; do | |
| if ! docker ps | grep ${CONTAINER_NAME}; then | |
| echo "Container stopped?" | |
| exit 1 | |
| fi | |
| echo "waiting for ${CONTAINER_NAME} health" | |
| echo "Last log: $(docker logs -n1 ${CONTAINER_NAME})" | |
| sleep 15 | |
| done | |
| - name: Restart container | |
| run: | | |
| docker restart ${CONTAINER_NAME} | |
| - name: Wait for healthy after restart | |
| run: | | |
| while ! docker exec -i ${CONTAINER_NAME} /opt/wallet-health.sh; do | |
| if ! docker ps | grep ${CONTAINER_NAME}; then | |
| echo "Container stopped?" | |
| exit 1 | |
| fi | |
| echo "waiting for ${CONTAINER_NAME} health" | |
| echo "Last log: $(docker logs -n1 ${CONTAINER_NAME})" | |
| sleep 15 | |
| done | |
| - name: Ensure default user works with whitelist | |
| run: docker exec ${CONTAINER_NAME} bitcoin-cli -rpcuser=default -rpcpassword=default getblockcount |