From 6d0dabd81ec37aa4e6f09762c22d0a0cd39a6206 Mon Sep 17 00:00:00 2001 From: Hyounggyu Choi Date: Mon, 22 May 2023 18:31:56 +0200 Subject: [PATCH] gha: build secure image for s390x release This is add a build target boot-image-se with a host-key-document config for s390x. Signed-off-by: Hyounggyu Choi --- .github/workflows/build-kata-static-tarball-s390x.yaml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/.github/workflows/build-kata-static-tarball-s390x.yaml b/.github/workflows/build-kata-static-tarball-s390x.yaml index f37056cc68..f9f3f7aade 100644 --- a/.github/workflows/build-kata-static-tarball-s390x.yaml +++ b/.github/workflows/build-kata-static-tarball-s390x.yaml @@ -27,6 +27,7 @@ jobs: strategy: matrix: asset: + - boot-image-se - kernel - qemu - rootfs-image @@ -59,6 +60,13 @@ jobs: env: TARGET_BRANCH: ${{ inputs.target-branch }} + - name: Place a host key document + run: | + mkdir -p "host-key-document" + cp "${CI_HKD_PATH}" "host-key-document" + env: + CI_HKD_PATH: ${{ secrets.CI_HKD_PATH }} + - name: Build ${{ matrix.asset }} run: | make "${KATA_ASSET}-tarball" @@ -74,6 +82,7 @@ jobs: ARTEFACT_REGISTRY_USERNAME: ${{ github.actor }} ARTEFACT_REGISTRY_PASSWORD: ${{ secrets.GITHUB_TOKEN }} TARGET_BRANCH: ${{ inputs.target-branch }} + HKD_PATH: "host-key-document" - name: store-artifact ${{ matrix.asset }} uses: actions/upload-artifact@v3