fix: update Dockerfiles to use Go 1.25 to match go.mod requirement

go.mod requires go >= 1.25.5 but Dockerfiles were using golang:1.23-alpine. Updated all Go-based Dockerfiles to use golang:1.25-alpine. Affected files: - Dockerfile.server - Dockerfile.scanner - Dockerfile.migrate This fixes the build error: "go: go.mod requires go >= 1.25.5 (running go 1.23.12; GOTOOLCHAIN=local)"
fix: add extra_files to copy source directories into Docker build context
2026-07-22 06:20:09 +00:00 · 2026-01-03 23:50:55 +00:00 · 2026-01-03 23:41:13 +00:00 · 2026-01-03 23:34:10 +00:00 · 2026-01-03 23:14:27 +00:00 · 2026-01-03 23:00:08 +00:00
4 changed files with 87 additions and 67 deletions
@@ -7,14 +7,10 @@ project_name: gohoarder
 before:
  hooks:
    - go mod tidy
-    # Generate semantic version if not provided via git tag
-    # This script can be used by CI/CD to inject custom versions
-    # Usage: export GORELEASER_CURRENT_TAG=$(./script/generate-version.sh)
-    # - ./script/generate-version.sh

 # Build configuration
-# Builds run natively per-platform in split mode (no CGO cross-compilation)
-# Docker images also use multi-stage builds independently
+# Binary builds for direct downloads (darwin/arm64, linux/amd64)
+# Binaries use split mode to avoid CGO cross-compilation
 builds:
  - id: gohoarder
    main: ./cmd/gohoarder
@@ -123,52 +119,61 @@ release:
  prerelease: auto

 # Docker images (v2 - modern syntax)
+# All Dockerfiles are self-contained multi-stage builds
+# GoReleaser orchestrates buildx and passes build args
 dockers_v2:
  # 1. Application Engine - Main GoHoarder server
  - id: gohoarder-server
    images:
      - ghcr.io/lukaszraczylo/gohoarder-server
+    tags:
+      - "{{ .Version }}"
+      - latest
    platforms:
      - linux/amd64
      - linux/arm64
+    dockerfile: Dockerfile.server
    build_args:
      VERSION: "{{ .Version }}"
      GIT_COMMIT: "{{ .ShortCommit }}"
      BUILD_TIME: "{{ .Date }}"
-    tags:
-      - "{{ .Version }}"
-      - latest
-    dockerfile: Dockerfile.server
-    labels:
-      org.opencontainers.image.title: GoHoarder Server
-      org.opencontainers.image.description: Universal package cache proxy server
-      org.opencontainers.image.url: https://github.com/lukaszraczylo/gohoarder
-      org.opencontainers.image.source: https://github.com/lukaszraczylo/gohoarder
-      org.opencontainers.image.version: "{{ .Version }}"
-      org.opencontainers.image.created: "{{ .Date }}"
-      org.opencontainers.image.revision: "{{ .FullCommit }}"
+    flags:
+      - "--pull"
+      - "--label=org.opencontainers.image.title=GoHoarder Server"
+      - "--label=org.opencontainers.image.description=Universal package cache proxy server"
+      - "--label=org.opencontainers.image.url=https://github.com/lukaszraczylo/gohoarder"
+      - "--label=org.opencontainers.image.source=https://github.com/lukaszraczylo/gohoarder"
+      - "--label=org.opencontainers.image.version={{ .Version }}"
+      - "--label=org.opencontainers.image.created={{ .Date }}"
+      - "--label=org.opencontainers.image.revision={{ .FullCommit }}"
    extra_files:
+      - go.mod
+      - go.sum
+      - cmd
+      - pkg
+      - internal
      - config.yaml.example

  # 2. Website - Frontend Dashboard
  - id: gohoarder-frontend
    images:
      - ghcr.io/lukaszraczylo/gohoarder-frontend
-    platforms:
-      - linux/amd64
-      - linux/arm64
    tags:
      - "{{ .Version }}"
      - latest
+    platforms:
+      - linux/amd64
+      - linux/arm64
    dockerfile: Dockerfile.frontend
-    labels:
-      org.opencontainers.image.title: GoHoarder Frontend
-      org.opencontainers.image.description: GoHoarder web dashboard
-      org.opencontainers.image.url: https://github.com/lukaszraczylo/gohoarder
-      org.opencontainers.image.source: https://github.com/lukaszraczylo/gohoarder
-      org.opencontainers.image.version: "{{ .Version }}"
-      org.opencontainers.image.created: "{{ .Date }}"
-      org.opencontainers.image.revision: "{{ .FullCommit }}"
+    flags:
+      - "--pull"
+      - "--label=org.opencontainers.image.title=GoHoarder Frontend"
+      - "--label=org.opencontainers.image.description=GoHoarder web dashboard"
+      - "--label=org.opencontainers.image.url=https://github.com/lukaszraczylo/gohoarder"
+      - "--label=org.opencontainers.image.source=https://github.com/lukaszraczylo/gohoarder"
+      - "--label=org.opencontainers.image.version={{ .Version }}"
+      - "--label=org.opencontainers.image.created={{ .Date }}"
+      - "--label=org.opencontainers.image.revision={{ .FullCommit }}"
    extra_files:
      - frontend

@@ -176,71 +181,86 @@ dockers_v2:
  - id: gohoarder-scanner
    images:
      - ghcr.io/lukaszraczylo/gohoarder-scanner
+    tags:
+      - "{{ .Version }}"
+      - latest
    platforms:
      - linux/amd64
      - linux/arm64
+    dockerfile: Dockerfile.scanner
    build_args:
      VERSION: "{{ .Version }}"
      GIT_COMMIT: "{{ .ShortCommit }}"
      BUILD_TIME: "{{ .Date }}"
-    tags:
-      - "{{ .Version }}"
-      - latest
-    dockerfile: Dockerfile.scanner
-    labels:
-      org.opencontainers.image.title: GoHoarder Scanner
-      org.opencontainers.image.description: GoHoarder vulnerability scanning engine
-      org.opencontainers.image.url: https://github.com/lukaszraczylo/gohoarder
-      org.opencontainers.image.source: https://github.com/lukaszraczylo/gohoarder
-      org.opencontainers.image.version: "{{ .Version }}"
-      org.opencontainers.image.created: "{{ .Date }}"
-      org.opencontainers.image.revision: "{{ .FullCommit }}"
+    flags:
+      - "--pull"
+      - "--label=org.opencontainers.image.title=GoHoarder Scanner"
+      - "--label=org.opencontainers.image.description=GoHoarder vulnerability scanning engine"
+      - "--label=org.opencontainers.image.url=https://github.com/lukaszraczylo/gohoarder"
+      - "--label=org.opencontainers.image.source=https://github.com/lukaszraczylo/gohoarder"
+      - "--label=org.opencontainers.image.version={{ .Version }}"
+      - "--label=org.opencontainers.image.created={{ .Date }}"
+      - "--label=org.opencontainers.image.revision={{ .FullCommit }}"
    extra_files:
+      - go.mod
+      - go.sum
+      - cmd
+      - pkg
+      - internal
      - config.yaml.example

  # 4. Gateway - Nginx reverse proxy for unified deployment
  - id: gohoarder-gateway
    images:
      - ghcr.io/lukaszraczylo/gohoarder-gateway
-    platforms:
-      - linux/amd64
-      - linux/arm64
    tags:
      - "{{ .Version }}"
      - latest
+    platforms:
+      - linux/amd64
+      - linux/arm64
    dockerfile: Dockerfile.gateway
-    labels:
-      org.opencontainers.image.title: GoHoarder Gateway
-      org.opencontainers.image.description: Nginx reverse proxy for unified GoHoarder deployment
-      org.opencontainers.image.url: https://github.com/lukaszraczylo/gohoarder
-      org.opencontainers.image.source: https://github.com/lukaszraczylo/gohoarder
-      org.opencontainers.image.version: "{{ .Version }}"
-      org.opencontainers.image.created: "{{ .Date }}"
-      org.opencontainers.image.revision: "{{ .FullCommit }}"
+    flags:
+      - "--pull"
+      - "--label=org.opencontainers.image.title=GoHoarder Gateway"
+      - "--label=org.opencontainers.image.description=Nginx reverse proxy for unified GoHoarder deployment"
+      - "--label=org.opencontainers.image.url=https://github.com/lukaszraczylo/gohoarder"
+      - "--label=org.opencontainers.image.source=https://github.com/lukaszraczylo/gohoarder"
+      - "--label=org.opencontainers.image.version={{ .Version }}"
+      - "--label=org.opencontainers.image.created={{ .Date }}"
+      - "--label=org.opencontainers.image.revision={{ .FullCommit }}"

  # 5. Migration Engine - Database migration tool
  - id: gohoarder-migrate
    images:
      - ghcr.io/lukaszraczylo/gohoarder-migrate
+    tags:
+      - "{{ .Version }}"
+      - latest
    platforms:
      - linux/amd64
      - linux/arm64
+    dockerfile: Dockerfile.migrate
    build_args:
      VERSION: "{{ .Version }}"
      GIT_COMMIT: "{{ .ShortCommit }}"
      BUILD_TIME: "{{ .Date }}"
-    tags:
-      - "{{ .Version }}"
-      - latest
-    dockerfile: Dockerfile.migrate
-    labels:
-      org.opencontainers.image.title: GoHoarder Migrate
-      org.opencontainers.image.description: Database migration tool for GoHoarder V2 schema
-      org.opencontainers.image.url: https://github.com/lukaszraczylo/gohoarder
-      org.opencontainers.image.source: https://github.com/lukaszraczylo/gohoarder
-      org.opencontainers.image.version: "{{ .Version }}"
-      org.opencontainers.image.created: "{{ .Date }}"
-      org.opencontainers.image.revision: "{{ .FullCommit }}"
+    flags:
+      - "--pull"
+      - "--label=org.opencontainers.image.title=GoHoarder Migrate"
+      - "--label=org.opencontainers.image.description=Database migration tool for GoHoarder V2 schema"
+      - "--label=org.opencontainers.image.url=https://github.com/lukaszraczylo/gohoarder"
+      - "--label=org.opencontainers.image.source=https://github.com/lukaszraczylo/gohoarder"
+      - "--label=org.opencontainers.image.version={{ .Version }}"
+      - "--label=org.opencontainers.image.created={{ .Date }}"
+      - "--label=org.opencontainers.image.revision={{ .FullCommit }}"
+    extra_files:
+      - go.mod
+      - go.sum
+      - cmd
+      - pkg
+      - internal
+      - migrations

 # Artifact signing with cosign
 signs:
@@ -4,7 +4,7 @@ ARG TARGETOS=linux
 ARG TARGETARCH=amd64

 # Build stage
-FROM --platform=$TARGETOS/$TARGETARCH golang:1.23-alpine AS builder
+FROM --platform=$TARGETOS/$TARGETARCH golang:1.25-alpine AS builder

 # Install build dependencies for CGO
 RUN apk add --no-cache \
@@ -4,7 +4,7 @@ ARG TARGETOS=linux
 ARG TARGETARCH=amd64

 # Build stage
-FROM --platform=$TARGETOS/$TARGETARCH golang:1.23-alpine AS builder
+FROM --platform=$TARGETOS/$TARGETARCH golang:1.25-alpine AS builder

 # Install build dependencies for CGO
 RUN apk add --no-cache \
@@ -4,7 +4,7 @@ ARG TARGETOS=linux
 ARG TARGETARCH=amd64

 # Build stage
-FROM --platform=$TARGETOS/$TARGETARCH golang:1.23-alpine AS builder
+FROM --platform=$TARGETOS/$TARGETARCH golang:1.25-alpine AS builder

 # Install build dependencies for CGO
 RUN apk add --no-cache \
Author	SHA1	Message	Date
lukaszraczylo	0a2c5f6c2c	fix: update Dockerfiles to use Go 1.25 to match go.mod requirement go.mod requires go >= 1.25.5 but Dockerfiles were using golang:1.23-alpine. Updated all Go-based Dockerfiles to use golang:1.25-alpine. Affected files: - Dockerfile.server - Dockerfile.scanner - Dockerfile.migrate This fixes the build error: "go: go.mod requires go >= 1.25.5 (running go 1.23.12; GOTOOLCHAIN=local)"	2026-01-03 23:50:55 +00:00
lukaszraczylo	ae632a3dd7	fix: add extra_files to copy source directories into Docker build context GoReleaser creates a temporary build context with only binaries, but our Dockerfiles are multi-stage builds that need the full source code to compile. Added extra_files to copy necessary directories. Files copied per image: - gohoarder-server: go.mod, go.sum, cmd, pkg, internal, config - gohoarder-scanner: go.mod, go.sum, cmd, pkg, internal, config - gohoarder-migrate: go.mod, go.sum, cmd, pkg, internal, migrations - gohoarder-frontend: frontend/ directory (Node.js source) - gohoarder-gateway: no extra files needed (static config) This fixes the build context error: "Seems like you tried to copy a file that is not available in the build context."	2026-01-03 23:41:13 +00:00
lukaszraczylo	c212077478	refactor: rebuild GoReleaser configuration with dockers_v2 Completely rebuilt GoReleaser Pro configuration using modern dockers_v2 syntax to fix Docker build issues. All Dockerfiles are self-contained multi-stage builds that compile their own binaries. Key changes: - Migrated from deprecated 'dockers' to 'dockers_v2' - Removed 'use: buildx' (implicit in dockers_v2) - Changed 'image_templates' to 'images' + 'tags' structure - Replaced 'build_flag_templates' with 'build_args' + 'flags' - Removed incorrect 'extra_files' that caused build context errors - Added 'platforms' for multi-arch support (linux/amd64, linux/arm64) Binary builds: - gohoarder: darwin/arm64, linux/amd64 (CGO enabled) - migrate: darwin/arm64, linux/amd64 (CGO enabled) - linux/arm64 binaries skipped (Docker provides multi-arch) Docker images (all self-building): - gohoarder-server (Go multi-stage build) - gohoarder-scanner (Go multi-stage build) - gohoarder-migrate (Go multi-stage build) - gohoarder-frontend (Node.js multi-stage build) - gohoarder-gateway (Nginx static config)	2026-01-03 23:34:10 +00:00
lukaszraczylo	af5e08a864	fix: disable SBOM attestations for Docker builds Docker SBOM attestations require docker-container driver which is not available in the default Docker driver used by GoReleaser. Disabled SBOM generation for all Docker images to prevent build failures. Error fixed: - "Attestation is not supported for the docker driver" Applied to all Docker images: - gohoarder-server - gohoarder-frontend - gohoarder-scanner - gohoarder-gateway - gohoarder-migrate	2026-01-03 23:14:27 +00:00
lukaszraczylo	adc7388ee1	fix: revert to using shared workflow (now fixed upstream) Removed local workflow copy and reverted to using the shared workflow from lukaszraczylo/shared-actions@main, which now has the proper if condition to prevent the release job from being skipped.	2026-01-03 23:00:08 +00:00
lukaszraczylo	116ba9b006	fix: add missing condition to release job to prevent skipping Problem: - Release job (merge phase) was being skipped even though all builds succeeded - The shared workflow's release job has `needs: [version, build]` but no `if` condition - Without `if: always()`, GitHub Actions skips the job if dependencies have non-success status - Frontend job being skipped caused downstream effects Solution: - Created local copy of go-release-cgo.yaml workflow - Added explicit condition to release job: if: \| always() && needs.version.result == 'success' && needs.build.result == 'success' - Updated release.yaml to use local workflow instead of remote This ensures the release/merge phase runs as long as version and build jobs succeed, regardless of optional jobs like frontend being skipped. Note: This is a workaround until the fix is merged upstream in shared-actions repo.	2026-01-03 22:57:21 +00:00