Schedule monthly automated builds for Ubuntu patch updates for backup-sealed-secrets and logical-backups

.github/workflows/backup-sealed-secrets-keys.yml

@@ -1,6 +1,8 @@
 name: Build backup-sealed-secrets-keys
 
 on:
+  schedule:
+    - cron: '0 0 6 * *'
   push:
     branches: ["*"]
     paths: "backup-sealed-secrets-keys/**"
@@ -9,7 +11,9 @@ on:
 jobs:
   build-and-push:
     runs-on: ubuntu-latest
-
+    permissions:
+      contents: read
+      packages: write
     steps:
       - name: Checkout code
         uses: actions/checkout@v2
@@ -23,6 +27,7 @@ jobs:
         with:
           images: ghcr.io/obmondo/backup-sealed-secrets-keys
           tags: |
+            type=schedule,pattern={{date 'YY.M'}}.0
             type=ref,event=branch,enable=${{ !endsWith(github.ref, github.event.repository.default_branch) }}
             type=raw,value=latest,enable=${{ endsWith(github.ref, github.event.repository.default_branch) }}
             type=ref,event=tag

.github/workflows/postgres-logical-backup.yml

@@ -1,6 +1,8 @@
 name: Build Logical backup
 
 on:
+  schedule:
+    - cron: '0 0 6 * *'
   push:
     branches: ["main"]
     paths:
@@ -10,7 +12,9 @@ on:
 jobs:
   build-and-push:
     runs-on: ubuntu-latest
-
+    permissions:
+      contents: read
+      packages: write
     steps:
       - name: Checkout code
         uses: actions/checkout@v2
@@ -24,8 +28,8 @@ jobs:
         with:
           images: ghcr.io/obmondo/postgres-logical-backup
           tags: |
+            type=schedule,pattern={{date 'YY.M'}}.0
             type=raw,value=latest
-            type=semver,pattern={{version}},value=v3.1.9
           flavor: |
             latest=false
       - name: Login to GitHub Container Registry

backup-sealed-secrets-keys/Dockerfile

@@ -1,7 +1,7 @@
 # Creator  David Darville - bw7
 # Maintainer Divyam Azad <nihaldivyam@gmail.com>
 # Start with Ubuntu LTS 22.04
-FROM ubuntu:jammy
+FROM ubuntu:resolute
 
 RUN apt-get update
 # Otherwise, the install requires keyboard interaction

postgres-logical-backup/Dockerfile

@@ -1,4 +1,4 @@
-FROM ubuntu:jammy
+FROM ubuntu:resolute
 LABEL maintainer="Divyam Azad divyam@obmondo.com"
 
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
@@ -16,13 +16,18 @@ RUN apt-get update     \
         gnupg \
         gcc \
         libffi-dev \
+        unzip \
     && curl -sL https://aka.ms/InstallAzureCLIDeb | bash \
-    && pip3 install --upgrade pip \
-    && pip3 install --no-cache-dir awscli --upgrade \
-    && pip3 install --no-cache-dir gsutil --upgrade \
-    && echo "deb http://apt.postgresql.org/pub/repos/apt/ $(lsb_release -cs)-pgdg main" > /etc/apt/sources.list.d/pgdg.list \
+    && export CPU_ARCHITECTURE=$([ "$(uname -m)" = "x86_64" ] && echo "x86_64" || echo "aarch64") \
+    && curl -sSf "https://awscli.amazonaws.com/awscli-exe-linux-${CPU_ARCHITECTURE}.zip" -o /tmp/awscli.zip \
+    && unzip -q /tmp/awscli.zip -d /tmp \
+    && /tmp/aws/install \
+    && rm -rf /tmp/awscli.zip /tmp/aws \
+    && pip3 install --no-cache-dir --break-system-packages gsutil \
+    && mkdir -p /etc/apt/keyrings \
+    && curl --silent https://www.postgresql.org/media/keys/ACCC4CF8.asc | gpg --dearmor > /etc/apt/keyrings/pgdg.gpg \
+    && echo "deb [signed-by=/etc/apt/keyrings/pgdg.gpg] http://apt.postgresql.org/pub/repos/apt/ $(lsb_release -cs)-pgdg main" > /etc/apt/sources.list.d/pgdg.list \
     && cat /etc/apt/sources.list.d/pgdg.list \
-    && curl --silent https://www.postgresql.org/media/keys/ACCC4CF8.asc | apt-key add - \
     && apt-get update \
     && apt-get install --no-install-recommends -y  \
         postgresql-client-18  \