Files
kms/.github/workflows/build-server-self.yml
T
Hanzo AI da574aa1db lux/kms: orphan history at f2e793bf8 (was: kms: wire luxfi/mpc as REK backend)
Squashes all pre-rewrite history into a single root commit. Previous tree:
- 14506 commits including upstream Infisical fork history
- Multiple merge chains carrying pre-purge content

Force-rewrite per disk-space reclamation discipline. GHCR images
(1.9.9, 1.9.11) remain immutable; their git lineage is no longer
materialized.
2026-06-07 14:28:09 -07:00

54 lines
1.4 KiB
YAML

name: Build KMS Server (self-contained)
# Self-contained workflow — does NOT call hanzoai/.github reusable workflow.
# Runs directly on the amd64 ARC pool to bypass the cross-org `secrets:
# inherit` initialization failure that's blocking the standard pipeline.
on:
push:
branches: [main]
paths:
- 'cmd/**'
- 'pkg/**'
- 'go.mod'
- 'go.sum'
- 'Dockerfile.server'
- '.github/workflows/build-server-self.yml'
workflow_dispatch:
permissions:
contents: read
packages: write
jobs:
build:
runs-on: lux-build
timeout-minutes: 30
steps:
- uses: actions/checkout@v4
- name: Login to GHCR
uses: docker/login-action@v3
with:
registry: ghcr.io
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Set up Buildx
uses: docker/setup-buildx-action@v3
- name: Build and push (linux/amd64, headless server)
uses: docker/build-push-action@v6
with:
context: .
file: Dockerfile.server
platforms: linux/amd64
build-args: |
GITHUB_TOKEN=${{ secrets.GITHUB_TOKEN }}
push: true
tags: |
ghcr.io/luxfi/kms:server
ghcr.io/luxfi/kms:server-${{ github.sha }}
cache-from: type=gha
cache-to: type=gha,mode=max