Merge pull request #110 from ublue-os/renovate/pin-dependencies

fix(deps): update dependency nicegui to v2.14.1

.devcontainer/devcontainer.json

@@ -7,7 +7,7 @@
   "features": {
     "ghcr.io/devcontainers/features/python:1": {
       "installTools": true,
-      "version": "3.11"
+      "version": "3.13"
     },
     "ghcr.io/devcontainers-contrib/features/black:2": {
       "version": "24.4.1"

.github/dependabot.yml

@@ -1,17 +0,0 @@
-# To get started with Dependabot version updates, you'll need to specify which
-# package ecosystems to update and where the package manifests are located.
-# Please see the documentation for more information:
-# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
-# https://containers.dev/guide/dependabot
-
-version: 2
-updates:
-  - package-ecosystem: "devcontainers"
-    directory: "/"
-    schedule:
-      interval: weekly
-
-  - package-ecosystem: "github-actions"
-    directory: "/"
-    schedule:
-      interval: "weekly"

.github/workflows/generate_changelog.yml

@@ -16,7 +16,7 @@ jobs:
   release-please:
     runs-on: ubuntu-latest
     steps:
-      - uses: google-github-actions/release-please-action@v4
+      - uses: google-github-actions/release-please-action@e4dc86ba9405554aeba3c6bb2d169500e7d3b4ee # v4
         id: release-please
         with:
           release-type: simple

.vscode/cspell_custom.txt

@@ -1,19 +1,25 @@
 aggrid
+AKMODS
 CHACHA
 configmap
 Containerfile
 containerignore
 devcontainer
 devcontainers
+dialtimeout
 dotenv
 ENDCOLOR
 ensurepath
 envsubst
 filepicker
+forwardingtimeouts
 getent
 gitmessage
+HHMMSS
 hostvars
 humanfriendly
+idleconntimeout
+idletimeout
 keygen
 LAZYGIT
 lightspeed
@@ -30,10 +36,13 @@ notranslate
 pipx
 posix
 Proto
+readtimeout
 redirections
 refreshable
 rvproxy
 serverstransport
+serverstransports
+silverblue
 traefik
 ublue
 varnames
@@ -41,3 +50,4 @@ venvs
 VIRTUALENVS
 wantlist
 websecure
+writetimeout

CHANGELOG.md

@@ -1,5 +1,38 @@
 # Changelog
 
+## [0.2.1](https://github.com/ublue-os/forge/compare/v0.2.0...v0.2.1) (2025-02-21)
+
+
+### Bug Fixes
+
+* **deps:** update dependency ansible-core to v2.18.2 ([e0f7d5f](https://github.com/ublue-os/forge/commit/e0f7d5fe43db8c0ac8e473232e884cdca75cd3e3))
+* **deps:** update dependency humanize to v4.11.0 ([a32d754](https://github.com/ublue-os/forge/commit/a32d754c70c74c3193c09cde97ba34b6553c6903))
+* **deps:** update dependency humanize to v4.12.1 ([c5d6cb0](https://github.com/ublue-os/forge/commit/c5d6cb072542cc9632e5d4b934b0c084224b3aca))
+* **deps:** update dependency nicegui to v1.4.37 ([46202de](https://github.com/ublue-os/forge/commit/46202de6ba15671a6b3ae0c0bedf1199a496b9a6))
+* **deps:** update dependency nicegui to v2 ([a043aa9](https://github.com/ublue-os/forge/commit/a043aa9ecc1e9a0bd645427a31e766f2611e0547))
+* **deps:** update dependency nicegui to v2.10.0 ([8345361](https://github.com/ublue-os/forge/commit/8345361fccc43a1362005b32359c816e3fa33506))
+* **deps:** update dependency nicegui to v2.10.1 ([e70dc98](https://github.com/ublue-os/forge/commit/e70dc983a8cb437824007e69e22ae2aa15b7562d))
+* **deps:** update dependency nicegui to v2.9.1 [security] ([725673e](https://github.com/ublue-os/forge/commit/725673e5e7901778ad2154e5991c31b0616effbd))
+* **deps:** update dependency pandas to v2.2.3 ([37137ef](https://github.com/ublue-os/forge/commit/37137ef32bdebcaa3dcedcc1ce7aecb0bba32f19))
+
+## [0.2.0](https://github.com/ublue-os/forge/compare/v0.1.0...v0.2.0) (2024-05-27)
+
+
+### Features
+
+* **ansible:** add additional tags to container image ([6297b8f](https://github.com/ublue-os/forge/commit/6297b8f951eaa597d2499116a1f4ab0c0ff0fa8c))
+* **ansible:** add example configurations to the setup ([#45](https://github.com/ublue-os/forge/issues/45)) ([e0df500](https://github.com/ublue-os/forge/commit/e0df50076e6067ad65588a7bfe77818470b495c6))
+* **ansible:** add possibility to add build-args to podman build job ([#51](https://github.com/ublue-os/forge/issues/51)) ([cec7512](https://github.com/ublue-os/forge/commit/cec7512c570dd100d87b079c350440207abafde9))
+* **nicegui:** easy navigation to home ([327c010](https://github.com/ublue-os/forge/commit/327c010ddddc62dfb7873adfe0b36d14ed567e2e))
+* **nicegui:** make image table sortable ([af3bdc3](https://github.com/ublue-os/forge/commit/af3bdc37fb4d8b65043981257e942dfd8ba6651d))
+
+
+### Bug Fixes
+
+* **ansible:** use registry url for container image name ([d1a0f7f](https://github.com/ublue-os/forge/commit/d1a0f7fff2be3854a9b6765dea77eedb529f42a3))
+* **nicegui:** empty image table should use same column names as when images are available ([ae10ebc](https://github.com/ublue-os/forge/commit/ae10ebc4acdf8e9bfab792cb2dbcaa22257c00d1))
+* **registry:** disable performance constraints ([#52](https://github.com/ublue-os/forge/issues/52)) ([b213c82](https://github.com/ublue-os/forge/commit/b213c826cf224b5a21d45dcf3c0b5ef526f22ecd))
+
 ## 0.1.0 (2024-05-24)
 
 

anvil/Containerfile

@@ -1,5 +1,5 @@
 # Source Image
-FROM docker.io/library/python:3.11-alpine3.19
+FROM docker.io/library/python:3.13-alpine3.19@sha256:8287ca207e905649e9f399b5f91a119e5e9051d8cd110d5f8c3b4bd9458ebd1d
 
 # Environment vars
 ENV PROJECT_DIR="/anvil"

anvil/ansible/collections/requirements.yml

@@ -1,8 +1,8 @@
 ---
 collections:
   - name: ansible.posix
-    version: 1.5.4
+    version: 2.0.0
   - name: community.general
-    version: 8.6.0
+    version: 10.5.0
   - name: containers.podman
-    version: 1.13.0
+    version: 1.16.3

anvil/ansible/group_vars/all/container.yml

@@ -1,3 +1,6 @@
 ---
+forge_container_name: "{{ forge_registry_url }}/{{ forge_git_repository_url | regex_search('(?<=/)[^/]+(?=\\.git)') }}"
+forge_container_tag: "{{ ansible_date_time.date }}_{{ ansible_date_time.time | replace(':','')}}"
 forge_container_file: "Containerfile"
 forge_container_format: "oci"
+forge_container_extra_args: []

anvil/ansible/group_vars/all/git.yml

@@ -1,5 +1,5 @@
 ---
 # git variables
-forge_git_repository_url: "https://github.com/ublue-os/bluefin.git"
-forge_git_repository_destination: "{{ forge_data_volume_mountpoint }}/data/bluefin"
+forge_git_repository_url: ""
+forge_git_repository_destination: ""
 forge_git_repository_version: "main"

anvil/ansible/playbooks/configure_host.yml

@@ -36,19 +36,19 @@
       changed_when: false
       become: true
 
-    - name: Create example extra-vars configuration file
-      ansible.builtin.copy:
-        dest: "{{ forge_data_volume_mountpoint }}/forge_example_vars.yml"
-        content: |
-          ## ublue-os forge extra-vars example configuration
-          ## For more details got to https://github.com/ublue-os/forge/blob/main/docs/variables.md
-          ---
-          {% for item in __vars_used %}
-          {{ item }}: {{ lookup('ansible.builtin.vars', item) }}
-          {% endfor %}
+    - name: Create example directory
+      ansible.builtin.file:
+        path: "{{ forge_data_volume_mountpoint }}/examples/"
+        state: directory
+        mode: "0755"
+
+    - name: Create example configuration files
+      ansible.builtin.template:
+        src: "{{ item }}"
+        dest: "{{ forge_data_volume_mountpoint }}/examples/{{ item | regex_search(__regex_search) }}"
         backup: true
         owner: "{{ ansible_facts.env.USER }}"
         mode: "0644"
+      with_fileglob: "files/examples/*"
       vars:
-        __vars_used: "{{ lookup('ansible.builtin.varnames', __regex_search, wantlist=true) }}"
-        __regex_search: ^forge_(?!data).+
+        __regex_search: "[^\/]+$"

anvil/ansible/playbooks/files/examples/bluefin-39.yml

@@ -0,0 +1,11 @@
+## ublue-os forge example configuration for bluefin
+## For more details got to https://github.com/ublue-os/forge/blob/main/docs/variables.md
+---
+forge_git_repository_url: https://github.com/ublue-os/bluefin.git
+forge_git_repository_destination: "{{ forge_data_volume_mountpoint }}/data/bluefin"
+forge_container_extra_args:
+  - --build-arg="BASE_IMAGE_NAME=silverblue"
+  - --build-arg="IMAGE_FLAVOR=main"
+  - --build-arg="AKMODS_FLAVOR=main"
+  - --build-arg="FEDORA_MAJOR_VERSION=39"
+  - --build-arg="TARGET_BASE=bluefin"

anvil/ansible/playbooks/project_build.yml

@@ -8,34 +8,59 @@
         name: debug_forge_vars
 
   tasks:
-    - name: Build and push image to registry
+    - name: Build and upload container image
       containers.podman.podman_image:
-        name: "{{ forge_git_repository_url | regex_search(__regex_search) }}"
+        name: "{{ forge_container_name }}"
         tag: latest
         path: "{{ forge_git_repository_destination }}"
         build:
-          file: "{{ forge_container_file | default('Containerfile') }}"
-          format: "{{ forge_container_format | default('oci') }}"
+          file: "{{ forge_container_file }}"
+          format: "{{ forge_container_format }}"
+          extra_args: "{{ forge_container_extra_args | join(' ') }}"
         pull: false
         push: true
-        push_args:
-          dest: "{{ forge_registry_url }}"
-      vars:
-        __regex_search: (?<=/)[^/]+(?=\.git)
-      async: 1800
+      async: 900
       poll: 0
       register: __podman_image
 
-    - name: Waiting for container build to finish
+    - name: Waiting for container build and upload to finish
       ansible.builtin.async_status:
         jid: "{{ __podman_image.ansible_job_id }}"
       register: __job_result
       until: __job_result.finished
-      retries: 1800
+      retries: 900
       delay: 1
 
-    - name: INFO | Status from build and push
+    - name: INFO | Result from container image build
       ansible.builtin.debug:
         msg:
           - "{{ __job_result.actions | to_nice_yaml(indent=2) }}"
           - "{{ __job_result.image | to_nice_yaml(indent=2) }}"
+
+    - name: Add additional tag to container image
+      containers.podman.podman_tag:
+        image: "{{ forge_container_name }}:latest"
+        target_names:
+          - "{{ forge_container_name }}:{{ forge_container_tag }}"
+
+    - name: Push additional container image tag to registry
+      containers.podman.podman_image:
+        name: "{{ forge_container_name }}"
+        tag: "{{ forge_container_tag }}"
+        pull: false
+        push: true
+      async: 15
+      poll: 0
+      register: __podman_image
+
+    - name: Waiting for additional container image tag push to finish
+      ansible.builtin.async_status:
+        jid: "{{ __podman_image.ansible_job_id }}"
+      register: __job_result
+      until: __job_result.finished
+      retries: 15
+      delay: 1
+
+    - name: INFO | Result from additional container image tag push
+      ansible.builtin.debug:
+        msg: "{{ __job_result.actions | to_nice_yaml(indent=2) }}"

anvil/nicegui/pages/ansible.py

@@ -14,7 +14,9 @@ ANSIBLE_EXTRA_VARS = None
 async def load_configuration_file() -> None:
     global ANSIBLE_EXTRA_VARS
     result = await local_file_picker(
-        directory="/data", multiple=False, file_name_filter=".yml"
+        directory="/data",
+        multiple=False,
+        # file_name_filter=".yml", # TODO: limit to yml files but make sure folders are visible as well
     )
     file_path = result[0]
     with open(file_path, "r") as file:

anvil/nicegui/pages/registry.py

@@ -6,7 +6,7 @@ from utils.registry import DockerRegistry
 
 ## TODO: this should be async but I currently don't know how to implement this without button press
 def get_image_info() -> pandas.DataFrame:
-    data = pandas.DataFrame(columns=["image_name", "tag", "size"])
+    data = pandas.DataFrame(columns=["image", "tag", "size"])
     try:
         registry = DockerRegistry()
         all_image_info = registry.get_all_image_info()
@@ -24,8 +24,10 @@ def get_image_info() -> pandas.DataFrame:
                 lambda layers: sum(layer["size"] for layer in layers)
             )
         )
-        data = data[["image_name", "name", "size"]].rename(
-            columns={"image_name": "image", "name": "tag", "size": "size"}
+        data = (
+            data[["image_name", "name", "size"]]
+            .rename(columns={"image_name": "image", "name": "tag", "size": "size"})
+            .sort_values(by=["image", "tag"], ascending=False)
         )
         data["size"] = data["size"].apply(humanize.naturalsize)
         return data
@@ -39,4 +41,7 @@ def content() -> None:
         with ui.card().classes("w-full"):
             ui.label("Image Overview").classes("text-h5")
             data = get_image_info()
-            ui.table.from_pandas(df=data).classes("w-full")
+            with ui.table.from_pandas(df=data).classes("w-full") as table:
+                table.columns[0]["sortable"] = True
+                table.columns[1]["sortable"] = True
+                table.columns[2]["sortable"] = True

anvil/nicegui/theme.py

@@ -35,9 +35,10 @@ def frame(
         with ui.grid(columns=3).classes("w-full gap-0"):
             with ui.row(wrap=False).classes("col-span-1 justify-start"):
                 menu()
-                ui.image(source=f"{project_root}/pages/assets/ublue-mini.svg").props(
-                    "width=33px hight=auto"
-                )
+                with ui.link(target="/"):
+                    ui.image(
+                        source=f"{project_root}/pages/assets/ublue-mini.svg"
+                    ).props("width=33px hight=auto")
                 ui.label(text="Forge").classes("text-h5")
             with ui.row(wrap=False).classes("col-span-1 justify-center"):
                 ui.label(text=navigation_title).classes("text-h5")

anvil/pyproject.toml

@@ -10,15 +10,15 @@ readme = "../README.md"
 python = "^3.11"
 ansible-core = "^2.16"
 jmespath = "^1.0"
-nicegui = "^1.4.23"
+nicegui = "^2.9.1"
 ansible-runner = "^2.3.6"
-requests = "^2.31.0"
+requests = "^2.32.2"
 pandas = "^2.2.2"
 humanize = "^4.9.0"
 toml = "^0.10.2"
 
 [tool.poetry.group.dev.dependencies]
-ansible-lint = { version = "^24.2", markers = 'platform_system != "Windows"' } # https://github.com/ansible/ansible-lint/issues/2730#issuecomment-1330406601
+ansible-lint = { version = "25.2.1", markers = 'platform_system != "Windows"' } # https://github.com/ansible/ansible-lint/issues/2730#issuecomment-1330406601
 
 [build-system]
 requires = ["poetry-core"]

docs/index.md

@@ -41,21 +41,24 @@ ln -s $FORGE_POD_DATA_DIR $HOME/ublue-os_forge-data
 
 With this the data folder would be available in your home directory under `~/ublue-os_forge-data`
 
-In that folder you will find an example configuration similar to this:
+In that folder you will find an **examples** folder with example configurations similar to this:
 
 ```yaml
-## ublue-os forge extra-vars example configuration
+## ublue-os forge example configuration
 ## For more details got to https://github.com/ublue-os/forge/blob/main/docs/variables.md
 ---
 forge_git_repository_url: https://github.com/ublue-os/bluefin.git
-forge_git_repository_destination: /var/home/stephan/.local/share/containers/storage/volumes/ublue-os_forge-data/_data/data/bluefin
-forge_git_repository_version: main
-forge_registry_url: registry.ublue.local
+forge_git_repository_destination: "/var/home/stephan/.local/share/containers/storage/volumes/ublue-os_forge-data/_data/data/bluefin"
+forge_container_extra_args:
+  - --build-arg="BASE_IMAGE_NAME=silverblue"
+  - --build-arg="IMAGE_FLAVOR=main"
+  - --build-arg="AKMODS_FLAVOR=main"
+  - --build-arg="FEDORA_MAJOR_VERSION=39"
+  - --build-arg="TARGET_BASE=bluefin"
 ```
 
-This file acts as a template. It has all available settings outlined for you. Simple copy
-it and modify it to your liking. For each project you want to handle with the forge you can
-create a dedicated file.
+These files are a good starting point for your custom configuration. Simple copy those examples
+you are interested in modify them to your liking.
 
 Details about the available variables are documented [here](./variables.md).
 

docs/variables.md

@@ -11,15 +11,15 @@ The following configuration variables are available and can be set to your likin
 <!-- markdownlint-disable MD013 -->
 
 | Name                               | Type | Default value                                                           | Description                                                                                                                  |
-| ---------------------------------- | ---- | ------------------------------------------------- | -------------------------------------------------------------------------------- |
+| ---------------------------------- | ---- | ----------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------- |
+| `forge_container_name`             | str  | Project name derived from `forge_git_repository_url` Example: `bluefin` | Container image name.                                                                                                        |
+| `forge_container_tag`              | str  | Evaluates to: `YYY-MM-DD_HHMMSS` Example: `2024-05-26_192206`           | Container image tag.                                                                                                         |
 | `forge_container_file`             | str  | Containerfile                                                           | Path to the Containerfile for Podman to build                                                                                |
 | `forge_container_format`           | str  | oci                                                                     | Format of the image Podman will build. Can be either `oci` or `docker`                                                       |
-| `forge_git_repository_url`         | str  | <https://github.com/ublue-os/bluefin.git>         | Git repository url                                                               |
-| `forge_git_repository_destination` | str  | `{{ forge_data_volume_mountpoint }}`/data/bluefin | Git destination where repository is cloned to. Can be any directory on your host |
+| `forge_container_extra_args`       | list | []                                                                      | List of extra arguments which gets passed to the podman build process. Example: `[--build-arg="BASE_IMAGE_NAME=silverblue"]` |
+| `forge_git_repository_url`         | str  |                                                                         | Git repository url                                                                                                           |
+| `forge_git_repository_destination` | str  |                                                                         | Git destination where repository is cloned to.                                                                               |
 | `forge_git_repository_version`     | str  | main                                                                    | Git repository branch or tag or commit version                                                                               |
 | `forge_registry_url`               | str  | registry.ublue.local                                                    | Container registry url                                                                                                       |
 
 <!-- markdownlint-enable MD013-->
-
-**_Note:_** The `{{ forge_data_volume_mountpoint }}` points to your ublue-os_forge-data
-podman volume.

forge-pod.yml

@@ -27,10 +27,6 @@ spec:
   containers:
     - name: traefik.${FORGE_DOMAIN_NAME}
       image: traefik # will be built on pod start
-      resources:
-        limits:
-          memory: 128Mi
-          cpu: 200m
       volumeMounts:
         - mountPath: /var/run/podman.sock
           name: podman-socket
@@ -77,10 +73,6 @@ spec:
   containers:
     - name: docker.${FORGE_DOMAIN_NAME}
       image: registry # will be built on pod start
-      resources:
-        limits:
-          memory: 512Mi
-          cpu: 200m
       volumeMounts:
         - mountPath: /certs
           name: ublue-os_forge-certs-pvc

minica/Containerfile

@@ -1,5 +1,5 @@
 # Source Image
-FROM docker.io/library/golang:1.20
+FROM docker.io/library/golang:1.24@sha256:d9db32125db0c3a680cfb7a1afcaefb89c898a075ec148fdc2f0f646cc2ed509
 
 # Copy script
 WORKDIR /certs

registry/Containerfile

@@ -1,5 +1,5 @@
 # Source Image
-FROM docker.io/library/registry:2.8
+FROM docker.io/library/registry:3.0@sha256:1fc7de654f2ac1247f0b67e8a459e273b0993be7d2beda1f3f56fbf1001ed3e7
 
 # Configure TLS certificates
 ENV REGISTRY_HTTP_TLS_CERTIFICATE="/certs/cert.pem"

renovate.json

@@ -0,0 +1,6 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:recommended"
+  ]
+}

traefik/Containerfile

@@ -1,5 +1,5 @@
 # Source Image
-FROM docker.io/traefik:v2.11
+FROM docker.io/traefik:v3.3@sha256:83f3c843133530e4aa45e6ddc415488583a8a01c88adc5022d415c6e97ceeaae
 
 # Add configuration file
 COPY ./config/*.yml /etc/traefik/