fix: pass docker_username, docker_password to publish stage

Reviewed-on: #1

.woodpecker.yml

@@ -2,21 +2,36 @@
 #
 # SPDX-License-Identifier: AGPL-3.0-or-later
 
+---
+variables:
+  - &repo 'git.schmidl.dev/schtobia/buildimage'
 steps:
   docker-build:
     image: woodpeckerci/plugin-docker-buildx
+    group: build
     settings:
-      repo: git.schmidl.dev/${CI-REPO_OWNER}/buildimage
+      repo: *repo
       registry: git.schmidl.dev
       dry_run: true
-      output: type=oci,dest=${CI_REPO_OWNER}-buildimage.tar
+    when:
+      branch:
+        exclude: [ master ]
+      event: push
+
   publish-next-agent:
     image: woodpeckerci/plugin-docker-buildx
+    group: publish
     secrets: [docker_username, docker_password]
     settings:
-      repo: git.schmidl.dev/${CI-REPO_OWNER}/buildimage
+      repo: *repo
+      registry: git.schmidl.dev
       dockerfile: dockerfile
       platforms: linux/amd64,linux/arm64/v8
-    when:
-      branch: ${CI_REPO_DEFAULT_BRANCH}
-      event: push
+      username:
+        from_secret: docker_username
+      password:
+        from_secret: docker_password
+    #when:
+    #  branch: master
+    #  event: push
+...

Makefile

@@ -5,10 +5,11 @@
 DOCKER := docker
 BUILDER := ${DOCKER} buildx
 TAG := git.schmidl.dev/schtobia/buildimage
+URL:= https://${TAG}
 VERSION = $(shell git describe --tags --always --dirty)
 
 build: dockerfile
-	@${BUILDER} build --build-arg=GIT_COMMIT=$(shell git describe --always) --build-arg=VERSION=${VERSION} --build-arg=TIMESTAMP="$(shell date -u -Iseconds)" -t ${TAG} -t ${TAG}:${VERSION} .
+	@${BUILDER} build --label org.opencontainers.image.revision=$(shell git describe --always) --label org.opencontainers.image.version=${VERSION} --label org.opencontainers.image.created="$(shell date -u -Iseconds)" --label org.opencontainers.image.source=https://${TAG}.git  --label org.opencontainers.image.url=https://${TAG} -t ${TAG} -t ${TAG}:${VERSION} .
 
 .PHONY: publish
 publish: build

dockerfile

@@ -5,19 +5,14 @@
 FROM debian:bullseye-slim
 
 ARG DEBIAN_FRONTEND=noninteractive
-ARG GIT_COMMIT
-ARG VERSION
-ARG TIMESTAMP
 LABEL org.opencontainers.image.licenses="AGPL-3.0-or-later" \
 org.opencontainers.image.base.name="docker.io/debian:bullseye-slim" \
-org.opencontainers.image.title=buildimage \
-org.opencontainers.image.source="https://git.schmidl.dev/schtobia/buildimage" \
-org.opencontainers.image.url="https://git.schmidl.dev/schtobia/buildimage"
+org.opencontainers.image.title=buildimage
 
 # editorconfig-checker-disable
 
 RUN apt update \
- && apt install --assume-yes --no-install-recommends \
+ && apt install --assume-yes --no-install-recommends --quiet \
         build-essential \
         dpkg-sig \
         git \
@@ -30,7 +25,3 @@ RUN useradd -rm builder
 USER builder
 
 WORKDIR /workdir
-
-LABEL org.opencontainers.image.revision=${GIT_COMMIT}
-LABEL org.opencontainers.image.version=${VERSION}
-LABEL org.opencontainers.image.created=${TIMESTAMP}