Update actions/checkout digest to 11bd719

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Jake Jarvis <jake@jarv.is>

.github/workflows/build.yml

@@ -0,0 +1,92 @@
+name: Build and Push
+
+on:
+  push:
+    branches:
+      - master
+  pull_request:
+    branches:
+      - master
+  merge_group:
+  workflow_dispatch:
+
+# https://docs.github.com/en/actions/using-jobs/using-concurrency#example-only-cancel-in-progress-jobs-or-runs-for-the-current-workflow
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+
+env:
+  HUB_IMAGE: jakejarvis/hugo-extended
+  GHCR_IMAGE: ghcr.io/jakejarvis/hugo-extended
+
+jobs:
+  docker:
+    runs-on: ubuntu-latest
+    if: "!contains(github.event.head_commit.message, '[skip ci]')"
+    steps:
+      - name: Checkout
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          fetch-depth: 0
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        id: buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Login to DockerHub
+        if: ${{ github.ref == 'refs/heads/master' }}
+        uses: docker/login-action@v3
+        with:
+          username: jakejarvis
+          password: ${{ secrets.DOCKER_HUB_TOKEN }}
+
+      - name: Login to GitHub Container Registry
+        if: ${{ github.ref == 'refs/heads/master' }}
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GHCR_PAT }}
+
+      - name: Cache Docker layers
+        uses: actions/cache@v4
+        with:
+          path: /tmp/.buildx-cache
+          key: ${{ runner.os }}-buildx-${{ github.sha }}
+          restore-keys: |
+            ${{ runner.os }}-buildx-
+
+      - name: Parse Hugo version
+        id: parse_version
+        run: |
+          HUGO_VERSION="$(grep -oP '(?<=^ARG HUGO_VERSION=).+$' Dockerfile)"
+          echo "HUGO_VERSION=$HUGO_VERSION" >> $GITHUB_OUTPUT
+
+      - name: Build and push
+        id: build
+        uses: docker/build-push-action@v5
+        with:
+          builder: ${{ steps.buildx.outputs.name }}
+          context: .
+          file: ./Dockerfile
+          platforms: linux/amd64,linux/arm64
+          push: ${{ github.ref == 'refs/heads/master' }}
+          tags: "${{ env.HUB_IMAGE }}:latest,${{ env.GHCR_IMAGE }}:latest,${{ env.HUB_IMAGE }}:${{ steps.parse_version.outputs.HUGO_VERSION }},${{ env.GHCR_IMAGE }}:${{ steps.parse_version.outputs.HUGO_VERSION }}"
+          cache-from: type=local,src=/tmp/.buildx-cache
+          cache-to: type=local,dest=/tmp/.buildx-cache
+
+      - name: Image digest
+        run: echo ${{ steps.build.outputs.digest }}
+
+      - name: Update hub description
+        uses: peter-evans/dockerhub-description@v4
+        if: ${{ github.ref == 'refs/heads/master' }}
+        with:
+          username: jakejarvis
+          password: ${{ secrets.DOCKER_HUB_TOKEN }}
+          repository: ${{ env.HUB_IMAGE }}
+          short-description: "✏️ Hugo Extended for x64 and ARM64 with PostCSS, Babel, Pandoc, and more baked in."
+          readme-filepath: ./README.md
+          enable-url-completion: true

.github/workflows/publish.yml

@@ -1,52 +0,0 @@
-name: Publish to GitHub Container Registry
-
-on:
-  push:
-    # Publish `v*` tags as releases.
-    tags:
-    - v*
-  pull_request:
-
-env:
-  IMAGE_NAME: hugo-extended
-
-jobs:
-  build:
-    runs-on: ubuntu-latest
-    steps:
-    - uses: actions/checkout@v2
-    - name: Build image
-      run: docker build . --file Dockerfile
-
-  # Push image to GitHub Container Registry
-  push:
-    runs-on: ubuntu-latest
-    if: github.event_name == 'push'
-    needs: build
-    steps:
-    - uses: actions/checkout@v2
-    - name: Build image
-      run: docker build . --file Dockerfile --tag $IMAGE_NAME
-    - name: Login to GitHub Container Registry
-      run: echo "${{ secrets.GHCR_PAT }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin
-    - name: Push image to GitHub
-      run: |
-        IMAGE_ID=ghcr.io/${{ github.repository_owner }}/$IMAGE_NAME
-
-        # Change all uppercase to lowercase
-        IMAGE_ID=$(echo $IMAGE_ID | tr '[A-Z]' '[a-z]')
-
-        # Strip git ref prefix from version
-        VERSION=$(echo "${{ github.ref }}" | sed -e 's,.*/\(.*\),\1,')
-
-        # Strip "v" prefix from tag name
-        [[ "${{ github.ref }}" == "refs/tags/"* ]] && VERSION=$(echo $VERSION | sed -e 's/^v//')
-
-        echo IMAGE_ID=$IMAGE_ID
-        echo VERSION=$VERSION
-
-        # Push image with both version tag and `latest` tag
-        docker tag $IMAGE_NAME $IMAGE_ID:$VERSION
-        docker tag $IMAGE_NAME $IMAGE_ID:latest
-        docker push $IMAGE_ID:$VERSION
-        docker push $IMAGE_ID:latest

Dockerfile

@@ -1,56 +1,149 @@
-# Hugo doesn't require Go to run, *except* if you're using Hugo Modules. It's
-# much easier to install Node on the Go base image than vice-versa.
-FROM golang:1.14-alpine
-
 # the following version can be overridden at image build time with --build-arg
-ARG HUGO_VERSION=0.76.5
-# remove/comment the following line completely to build with vanilla Hugo:
-ARG HUGO_EXTENDED=1
+# renovate: datasource=github-releases depName=gohugoio/hugo
+ARG HUGO_VERSION=0.124.1
+
+# remove/comment the following line completely to compile vanilla Hugo:
+ARG HUGO_BUILD_TAGS=extended
+
+# ---
+
+# Hugo >= v0.81.0 requires Go 1.16+ to build
+FROM golang:1.22-alpine3.18 AS build
+
+# renew global args from above
+# https://docs.docker.com/engine/reference/builder/#scope
+ARG HUGO_VERSION
+ARG HUGO_BUILD_TAGS
+
+ARG CGO=1
+ENV CGO_ENABLED=${CGO}
+ENV GOOS=linux
+ENV GO111MODULE=on
+
+WORKDIR /go/src/github.com/gohugoio/hugo
+
+# gcc/g++ are required to build SASS libraries for extended version
+RUN apk add --update --no-cache \
+      gcc \
+      g++ \
+      musl-dev \
+      git
+
+# clone source from Git repo:
+RUN git clone \
+      --branch "v${HUGO_VERSION}" \
+      --single-branch \
+      --depth 1 \
+      https://github.com/gohugoio/hugo.git ./
+
+# https://github.com/gohugoio/hugo/commit/241481931f5f5f2803cd4be519936b26d8648dfd
+RUN go build -v -ldflags "-X github.com/gohugoio/hugo/common/hugo.vendorInfo=docker" -tags "$HUGO_BUILD_TAGS" && \
+    mv ./hugo /go/bin/hugo
+
+# fix potential stack size problems on Alpine
+# https://github.com/microsoft/vscode-dev-containers/blob/fb63f7e016877e13535d4116b458d8f28012e87f/containers/hugo/.devcontainer/Dockerfile#L19
+RUN go install github.com/yaegashi/muslstack@latest && \
+    muslstack -s 0x800000 /go/bin/hugo
+
+# ---
+
+FROM alpine:3.18
+
+# renew global args from above & pin any dependency versions
+ARG HUGO_VERSION
+# https://github.com/jgm/pandoc/releases
+# renovate: datasource=github-releases depName=jgm/pandoc
+ARG PANDOC_VERSION=3.1.13
+# https://github.com/sass/dart-sass-embedded/releases
+# renovate: datasource=github-releases depName=sass/dart-sass-embedded
+ARG DART_SASS_VERSION=1.62.1
 
 LABEL version="${HUGO_VERSION}"
 LABEL repository="https://github.com/jakejarvis/hugo-docker"
 LABEL homepage="https://jarv.is/"
 LABEL maintainer="Jake Jarvis <jake@jarv.is>"
 
-# only install libc6-compat & libstdc++ if we're building extended Hugo
-# https://gitlab.com/yaegashi/hugo/commit/22f0d5cbd6114210ba7835468facbdee60609aa2
-RUN apk update && \
-    apk add --no-cache \
+# https://docs.github.com/en/free-pro-team@latest/packages/managing-container-images-with-github-container-registry/connecting-a-repository-to-a-container-image#connecting-a-repository-to-a-container-image-on-the-command-line
+LABEL org.opencontainers.image.source="https://github.com/jakejarvis/hugo-docker"
+
+# bring over patched binary from build stage
+COPY --from=build /go/bin/hugo /usr/bin/hugo
+
+# this step is intentionally a bit of a mess to minimize the number of layers in the final image
+RUN set -euo pipefail && \
+    if [ "$(uname -m)" = "x86_64" ]; then \
+      ARCH="amd64"; \
+    elif [ "$(uname -m)" = "aarch64" ]; then \
+      ARCH="arm64"; \
+    else \
+      echo "Unknown build architecture, quitting." && exit 2; \
+    fi && \
+    # alpine packages
+    # libc6-compat & libstdc++ are required for extended SASS libraries
+    # ca-certificates are required to fetch outside resources (like Twitter oEmbeds)
+    apk add --update --no-cache \
       ca-certificates \
+      tzdata \
       git \
       nodejs \
       npm \
-      yarn \
+      go \
       python3 \
       py3-pip \
       ruby \
-      ${HUGO_EXTENDED:+libc6-compat libstdc++} && \
+      libc6-compat \
+      libstdc++ && \
     update-ca-certificates && \
-    npm install --global postcss postcss-cli autoprefixer @babel/core @babel/cli && \
-    pip3 install --upgrade Pygments==2.* && \
+    # npm packages
+    npm install --global --production \
+      yarn \
+      postcss \
+      postcss-cli \
+      autoprefixer \
+      @babel/core \
+      @babel/cli && \
+    npm cache clean --force && \
+    # ruby gems
     gem install asciidoctor && \
-    wget https://github.com/gohugoio/hugo/releases/download/v${HUGO_VERSION}/hugo_${HUGO_EXTENDED:+extended_}${HUGO_VERSION}_Linux-64bit.tar.gz && \
-    wget https://github.com/gohugoio/hugo/releases/download/v${HUGO_VERSION}/hugo_${HUGO_VERSION}_checksums.txt && \
-    grep hugo_${HUGO_EXTENDED:+extended_}${HUGO_VERSION}_Linux-64bit.tar.gz hugo_${HUGO_VERSION}_checksums.txt | sha256sum -c && \
-    tar xf hugo_${HUGO_EXTENDED:+extended_}${HUGO_VERSION}_Linux-64bit.tar.gz && \
-    mv ./hugo /usr/local/bin/ && \
-    chmod +x /usr/local/bin/hugo && \
-    rm -rf hugo_* LICENSE README.md
-
-# verify everything's OK, exit otherwise
-RUN hugo version && \
+    # python packages
+    python3 -m pip install --no-cache-dir --upgrade Pygments==2.* docutils && \
+    # manually fetch pandoc binary
+    wget -O pandoc.tar.gz https://github.com/jgm/pandoc/releases/download/${PANDOC_VERSION}/pandoc-${PANDOC_VERSION}-linux-${ARCH}.tar.gz && \
+    tar xf pandoc.tar.gz && \
+    mv ./pandoc-${PANDOC_VERSION}/bin/pandoc /usr/bin/ && \
+    chmod +x /usr/bin/pandoc && \
+    rm -rf pandoc.tar.gz pandoc-${PANDOC_VERSION} && \
+    # manually fetch Dart SASS binary (on x64 only)
+    if [ "$ARCH" = "amd64" ]; then \
+      wget -O sass-embedded.tar.gz https://github.com/sass/dart-sass-embedded/releases/download/${DART_SASS_VERSION}/sass_embedded-${DART_SASS_VERSION}-linux-x64.tar.gz && \
+      tar xf sass-embedded.tar.gz && \
+      mv ./sass_embedded/dart-sass-embedded /usr/bin/ && \
+      chmod +x /usr/bin/dart-sass-embedded && \
+      rm -rf sass-embedded.tar.gz sass_embedded; \
+    fi && \
+    # clean up some junk
+    rm -rf /tmp/* /var/tmp/* /var/cache/apk/* && \
+    # tell git to trust /src
+    git config --global --add safe.directory /src && \
+    # make super duper sure that everything went OK, exit otherwise
     hugo env && \
+    go version && \
+    node --version && \
+    npm --version && \
+    yarn --version && \
     postcss --version && \
     autoprefixer --version && \
     babel --version && \
     pygmentize -V && \
-    asciidoctor --version
+    asciidoctor --version && \
+    pandoc --version && \
+    rst2html.py --version
 
 # add site source as volume
 VOLUME /src
 WORKDIR /src
 
-# expose live-refresh server
+# expose live-refresh server on default port
 EXPOSE 1313
 
 ENTRYPOINT ["hugo"]

README.md

@@ -1,8 +1,8 @@
-# ✏️ [Hugo Extended](https://github.com/gohugoio/hugo) via Docker 
+# ✏️ [Hugo Extended](https://github.com/gohugoio/hugo) via Docker
 
-[![Build docs](https://img.shields.io/docker/cloud/build/jakejarvis/hugo-extended?label=Docker%20Hub&logo=docker&logoColor=%23fff)](https://hub.docker.com/r/jakejarvis/hugo-extended)
+[![Build](https://github.com/jakejarvis/hugo-docker/actions/workflows/build.yml/badge.svg?branch=master)](https://github.com/jakejarvis/hugo-docker/actions/workflows/build.yml)
 
-A base image to ease local development of Hugo sites, including [Hugo Extended](https://gohugo.io/troubleshooting/faq/#i-get-tocss-this-feature-is-not-available-in-your-current-hugo-version) (with SASS/SCSS support) and optional third-party tools ([listed below](#third-party-software)).
+A base image to ease local development of Hugo sites, including [Hugo Extended](https://gohugo.io/troubleshooting/faq/#i-get-tocss-this-feature-is-not-available-in-your-current-hugo-version) (with SASS/SCSS support) and optional third-party tools ([listed below](#third-party-software)). Now with [multi-architecture images](https://docs.docker.com/docker-for-mac/multi-arch/) for native AMD64 and ARM64 support!
 
 ## Usage
 
@@ -35,15 +35,18 @@ When using Docker to run a live server (i.e. `hugo server`), you must pass `--bi
 
 ## Third-party software
 
-Just in case, the final container includes a few small third-party tools that are required by certain optional Hugo features:
+Just in case, the final Alpine Linux container includes a few small third-party tools that are required by certain optional Hugo features:
 
-- [PostCSS (CLI)](https://github.com/postcss/postcss-cli)
+- [PostCSS](https://github.com/postcss/postcss-cli)
 - [Autoprefixer](https://github.com/postcss/autoprefixer)
-- [Babel (CLI)](https://babeljs.io/)
+- [Babel](https://babeljs.io/)
 - [Pygments](https://pygments.org/)
 - [Asciidoctor](https://asciidoctor.org/)
+- [Pandoc](https://pandoc.org/)
+- [Docutils](https://docutils.sourceforge.io/) / [RST](https://docutils.sourceforge.io/rst.html)
+- [Embedded Dart Sass](https://github.com/sass/dart-sass-embedded) (amd64 only)
 
-Node (with NPM and Yarn) and Go (for [Hugo Modules](https://gohugo.io/hugo-modules/) support) are also pre-installed.
+Node (with NPM and Yarn), Go (for [Hugo Modules](https://gohugo.io/hugo-modules/) support), and Python are also pre-installed.
 
 ## Licenses
 

renovate.json

@@ -0,0 +1,27 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:base"
+  ],
+  "automerge": true,
+  "platformAutomerge": true,
+  "regexManagers": [
+    {
+      "fileMatch": [
+        "^Dockerfile$"
+      ],
+      "matchStrings": [
+        "# renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)( versioning=(?<versioning>.*?))?( registryUrl=(?<registryUrl>.*?))?\\s.*?_VERSION=(?<currentValue>.*)\\s"
+      ],
+      "versioningTemplate": "{{#if versioning}}{{{versioning}}}{{else}}semver{{/if}}"
+    }
+  ],
+  "packageRules": [
+    {
+      "matchFiles": [
+        "^Dockerfile$"
+      ],
+      "extractVersion": "^v(?<version>.*)$"
+    }
+  ]
+}