Menu
CI/CD pipeline for haven-docker including the GitHub Actions workflow for GHCR publishing, Makefile-driven DockerHub release, cosign image signing, and version management. Use when modifying build automation, release processes, or image signing.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Dockerfile multi-stage build, compose.yml service config, image tagging, volume mounts, and resource limits for the haven-docker project. Use when modifying the Docker build, changing volumes, updating compose settings, or troubleshooting container issues.
Configuration reference for Haven relay including .env variables, relay JSON files, database engine selection, backup providers, and rate limiter tuning. Use when modifying relay settings, adding new config variables, or debugging configuration issues.
Tor hidden service integration for Haven relay including start.sh entrypoint logic, torrc configuration, and data volume persistence. Use when enabling Tor, debugging hidden service issues, or modifying the container entrypoint.
| name | ci-cd |
| description | CI/CD pipeline for haven-docker including the GitHub Actions workflow for GHCR publishing, Makefile-driven DockerHub release, cosign image signing, and version management. Use when modifying build automation, release processes, or image signing. |
docker-publish.ymlLocated at .github/workflows/docker-publish.yml.
main branch or semver tags (v*.*.*)mainghcr.io) using GITHUB_TOKENghcr.io/sudocarlos/haven-docker (automated via Actions)sudocarlos/haven (manual via make release)Makefilemake release
This runs the push and tag targets:
TAG= line in Dockerfiledocker buildx (no cache), pushes latest + version tagsdockerhub-<version>Individual steps can be run separately with make push or make tag.
docker login)The Haven version is pinned in Dockerfile:
ARG TAG=v1.2.0-rc2
ARG COMMIT=986c21b79c93779a449a52f6414ea267c83428bb
The Makefile extracts the version with:
VERSION := $(shell awk -F '=' '/TAG=/{print $$NF}' Dockerfile)
To bump: update TAG and COMMIT in Dockerfile, then run make release.