use kaniko

.woodpecker.yml

@@ -1,19 +1,33 @@
+#steps:
+#  build:
+#    image: quay.io/podman/stable
+#    secrets:
+#      - source: system_container_registry
+#        target: CONTAINER_REGISTRY
+#      - source: system_container_registry_username
+#        target: CONTAINER_REGISTRY_USERNAME
+#      - source: system_container_registry_password
+#        target: CONTAINER_REGISTRY_PASSWORD
+#    commands:
+#      - IMAGE_NAME="$CONTAINER_REGISTRY/$CI_REPO"
+#      - if [ "$CI_COMMIT_TAG" != "" ]; then IMAGE_TAG=$CI_COMMIT_TAG; else IMAGE_TAG=$CI_COMMIT_SHA; fi
+#      - FULL_IMAGE_TAG="$IMAGE_NAME:$IMAGE_TAG"
+#      - podman build --build-arg="VERSION=$CI_COMMIT_SHA" -t $FULL_IMAGE_TAG .
+#      - podman login -u $${CONTAINER_REGISTRY_USERNAME} -p $${CONTAINER_REGISTRY_PASSWORD} ${CONTAINER_REGISTRY}
+#      - podman push $FULL_IMAGE_TAG
+
 steps:
-  build:
+  publish-docker-image:
-    image: quay.io/podman/stable
+    image: plugins/kaniko
     secrets:
       - source: system_container_registry
         target: CONTAINER_REGISTRY
-      - source: system_container_registry_username
+    settings:
-        target: CONTAINER_REGISTRY_USERNAME
+      repo: ${CONTAINER_REGISTRY}/${CI_REPO}
-      - source: system_container_registry_password
+      tags: latest, ${CI_COMMIT_SHA}
-        target: CONTAINER_REGISTRY_PASSWORD
+      username:
-    commands:
+        from_secret: system_container_registry_username
-      - IMAGE_NAME="$CONTAINER_REGISTRY/$CI_REPO"
+      password:
-      - if [ "$CI_COMMIT_TAG" != "" ]; then IMAGE_TAG=$CI_COMMIT_TAG; else IMAGE_TAG=$CI_COMMIT_SHA; fi
+        from_secret: system_container_registry_password
-      - FULL_IMAGE_TAG="$IMAGE_NAME:$IMAGE_TAG"
+      dockerfile: Dockerfile
-      - podman build --build-arg="VERSION=$CI_COMMIT_SHA" -t $FULL_IMAGE_TAG .
-      - podman login -u $${CONTAINER_REGISTRY_USERNAME} -p $${CONTAINER_REGISTRY_PASSWORD} ${CONTAINER_REGISTRY}
-      - podman push $FULL_IMAGE_TAG
-