.gitlab-ci.yml

 include:
   - component: $CI_SERVER_HOST/xrow-public/ci-tools/common@$CI_COMMIT_SHA
+  - component: $CI_SERVER_HOST/xrow-public/ci-tools/bash@$CI_COMMIT_SHA
   - component: $CI_SERVER_HOST/xrow-public/ci-tools/semantic-release@$CI_COMMIT_SHA
   - component: $CI_SERVER_HOST/xrow-public/ci-tools/mkdocs@$CI_COMMIT_SHA
   - component: $CI_SERVER_HOST/xrow-public/ci-tools/helm@$CI_COMMIT_SHA
@@ -21,7 +22,6 @@ include:
       args: "RH_USERNAME RH_PASSWORD"
   - component: $CI_SERVER_HOST/xrow-public/ci-tools/container@$CI_COMMIT_SHA
     inputs:
-      image: registry.access.redhat.com/ubi9/podman:9.3-10
       name: podman
       stage: .pre
       path: container/podman
@@ -64,6 +64,10 @@ workflow:
   auto_cancel:
     on_new_commit: interruptible
 
+build:podman:
+  variables:
+    CI_IMAGE_PODMAN: registry.access.redhat.com/ubi9/podman:latest
+
 test:load-library:
   stage: .pre
   script:

container/centos/Containerfile

-FROM registry.gitlab.com/xrow-public/ci-tools/centos:main
+FROM quay.io/centos/centos:stream9
 
 LABEL maintainer="bjoern@xrow.de" \
     org.label-schema.name="Builder and management image for cloud native systems with S2I, Docker in Docker, Operators, HELM, Kubernetes Deployments …" \

docs/files/debug.yml

@@ -6,7 +6,6 @@ metadata:
 spec:
   containers:
   - name: tools
-    # image: registry.gitlab.com/xrow-public/ci-tools/tools:main
     image: quay.io/podman/stable:latest
     privileged: true
     securityContext:

drafts/pack/template.yml

@@ -4,7 +4,7 @@ spec: {}
 
 pack:
   stage: build
-  image: registry.gitlab.com/xrow-public/ci-tools/tools:main
+  image: $CI_IMAGE_TOOLS
   variables:
     BUILDPACK_SRC_DIR: "."
   allow_failure: true

scripts/files/components/s2i/go/Containerfile

@@ -9,7 +9,6 @@ ARG BUILD_CACHE_DIR
 ENV CI_COMMIT_BRANCH=${CI_COMMIT_BRANCH}
 ENV CI_COMMIT_REF_SLUG=${CI_COMMIT_REF_SLUG}
 ENV CI_COMMIT_REF_NAME=${CI_COMMIT_REF_NAME}
-ENV CI_COMMIT_MESSAGE=${CI_COMMIT_MESSAGE}
 ENV CI_COMMIT_SHA=${CI_COMMIT_SHA}
 ENV CI_COMMIT_SHORT_SHA=${CI_COMMIT_SHORT_SHA}
 ENV CI_COMMIT_TAG=${CI_COMMIT_TAG}

scripts/files/components/s2i/html/Containerfile

@@ -9,7 +9,6 @@ ARG BUILD_CACHE_DIR
 ENV CI_COMMIT_BRANCH=${CI_COMMIT_BRANCH}
 ENV CI_COMMIT_REF_SLUG=${CI_COMMIT_REF_SLUG}
 ENV CI_COMMIT_REF_NAME=${CI_COMMIT_REF_NAME}
-ENV CI_COMMIT_MESSAGE=${CI_COMMIT_MESSAGE}
 ENV CI_COMMIT_SHA=${CI_COMMIT_SHA}
 ENV CI_COMMIT_SHORT_SHA=${CI_COMMIT_SHORT_SHA}
 ENV CI_COMMIT_TAG=${CI_COMMIT_TAG}

scripts/files/components/s2i/java/Containerfile

@@ -9,7 +9,6 @@ ARG BUILD_CACHE_DIR
 ENV CI_COMMIT_BRANCH=${CI_COMMIT_BRANCH}
 ENV CI_COMMIT_REF_SLUG=${CI_COMMIT_REF_SLUG}
 ENV CI_COMMIT_REF_NAME=${CI_COMMIT_REF_NAME}
-ENV CI_COMMIT_MESSAGE=${CI_COMMIT_MESSAGE}
 ENV CI_COMMIT_SHA=${CI_COMMIT_SHA}
 ENV CI_COMMIT_SHORT_SHA=${CI_COMMIT_SHORT_SHA}
 ENV CI_COMMIT_TAG=${CI_COMMIT_TAG}

scripts/files/components/s2i/nginx/Containerfile

@@ -5,7 +5,6 @@ FROM ${DOLLAR}S2I_IMAGE
 ENV CI_COMMIT_BRANCH=${CI_COMMIT_BRANCH}
 ENV CI_COMMIT_REF_SLUG=${CI_COMMIT_REF_SLUG}
 ENV CI_COMMIT_REF_NAME=${CI_COMMIT_REF_NAME}
-ENV CI_COMMIT_MESSAGE=${CI_COMMIT_MESSAGE}
 ENV CI_COMMIT_SHA=${CI_COMMIT_SHA}
 ENV CI_COMMIT_SHORT_SHA=${CI_COMMIT_SHORT_SHA}
 ENV CI_COMMIT_TAG=${CI_COMMIT_TAG}

scripts/files/components/s2i/nodejs/Containerfile

@@ -7,7 +7,6 @@ ARG BUILD_CACHE_DIR
 ENV CI_COMMIT_BRANCH=${CI_COMMIT_BRANCH}
 ENV CI_COMMIT_REF_SLUG=${CI_COMMIT_REF_SLUG}
 ENV CI_COMMIT_REF_NAME=${CI_COMMIT_REF_NAME}
-ENV CI_COMMIT_MESSAGE=${CI_COMMIT_MESSAGE}
 ENV CI_COMMIT_SHA=${CI_COMMIT_SHA}
 ENV CI_COMMIT_SHORT_SHA=${CI_COMMIT_SHORT_SHA}
 ENV CI_COMMIT_TAG=${CI_COMMIT_TAG}

scripts/files/components/s2i/php/Containerfile

@@ -14,7 +14,6 @@ ARG COMPOSER_PROCESS_TIMEOUT
 ENV CI_COMMIT_BRANCH=${CI_COMMIT_BRANCH}
 ENV CI_COMMIT_REF_SLUG=${CI_COMMIT_REF_SLUG}
 ENV CI_COMMIT_REF_NAME=${CI_COMMIT_REF_NAME}
-ENV CI_COMMIT_MESSAGE=${CI_COMMIT_MESSAGE}
 ENV CI_COMMIT_SHA=${CI_COMMIT_SHA}
 ENV CI_COMMIT_SHORT_SHA=${CI_COMMIT_SHORT_SHA}
 ENV CI_COMMIT_TAG=${CI_COMMIT_TAG}

scripts/files/components/s2i/python/Containerfile

@@ -9,7 +9,6 @@ ARG BUILD_CACHE_DIR
 ENV CI_COMMIT_BRANCH=${CI_COMMIT_BRANCH}
 ENV CI_COMMIT_REF_SLUG=${CI_COMMIT_REF_SLUG}
 ENV CI_COMMIT_REF_NAME=${CI_COMMIT_REF_NAME}
-ENV CI_COMMIT_MESSAGE=${CI_COMMIT_MESSAGE}
 ENV CI_COMMIT_SHA=${CI_COMMIT_SHA}
 ENV CI_COMMIT_SHORT_SHA=${CI_COMMIT_SHORT_SHA}
 ENV CI_COMMIT_TAG=${CI_COMMIT_TAG}

scripts/lib/ci.sh

@@ -9,7 +9,7 @@ export XROW_SEMVER_PATTERN='^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[
 
 function ci_init() {
     if [[ -v CI_JOB_NAME ]]; then
-      echo "[info] Documention of job '${CI_JOB_NAME}': https://xrow-public.gitlab.io/ci-tools/#${CI_JOB_NAME}"
+      echo "[info] Documentation of job '${CI_JOB_NAME}': https://xrow-public.gitlab.io/ci-tools/#${CI_JOB_NAME}"
     fi
     [ "${BASH_VERSINFO:-0}" -lt 4 ] && echo "Bash versions lesser 5 are not supported." && exit 1
 

scripts/lib/util.sh

@@ -11,6 +11,6 @@ function ci_envsubst {
   ci_util_init
   if [[ -f "${file}" ]]; then
     cat "${file}" | envsubst "$(awk 'BEGIN { for (var in ENVIRON) printf "$%s ", var; print "" }' </dev/null)" > "${file}"
-    echo "[info] Modified: ${file}"
+    echo "[info] Modified: ${file} with size of $(stat -c %s ${file}) bytes"
   fi
 }
\ No newline at end of file

templates/ansible-collection/template.yml

@@ -4,8 +4,6 @@ spec:
       default: "xrow.common"
     path:
       default: "."
-    image: 
-      default: "registry.gitlab.com/xrow-public/ci-tools/ansible:main"
     server: 
       default: "https://galaxy.ansible.com"
 ---
@@ -19,7 +17,7 @@ variables:
 
 lint:collection:$[[ inputs.name ]]:
   stage: lint
-  image: $[[ inputs.image ]]
+  image: ${CI_IMAGE_ANSIBLE}
   script:
     - pipx ensurepath
     - cd $[[ inputs.path ]]
@@ -27,7 +25,7 @@ lint:collection:$[[ inputs.name ]]:
 
 build:collection:$[[ inputs.name ]]:
   stage: build
-  image: $[[ inputs.image ]]
+  image: ${CI_IMAGE_ANSIBLE}
   script:
     - |
       pipx ensurepath
@@ -45,7 +43,7 @@ build:collection:$[[ inputs.name ]]:
 
 publish:collection:$[[ inputs.name ]]:
   stage: .post
-  image: $[[ inputs.image ]]
+  image: ${CI_IMAGE_ANSIBLE}
   needs:
     - build:collection:$[[ inputs.name ]]
   script:

templates/ansible-ee/template.yml

 spec:
   inputs:
-    image:
-      default: registry.gitlab.com/xrow-public/ci-tools/podman:main
     name:
       default: container
     path:
@@ -38,7 +36,6 @@ include:
     path: $[[ inputs.path ]]
     args: $[[ inputs.args ]]
     stage: $[[ inputs.stage ]]
-    image: $[[ inputs.image ]]
     scanning-allow-failure: $[[ inputs.scanning-allow-failure ]]
     scanning-enabled: $[[ inputs.scanning-enabled ]]
     scanning-severity: $[[ inputs.scanning-severity ]]

templates/ansible-runner/template.yml

@@ -16,8 +16,6 @@ spec:
       default: ""
     path:
       default: "."
-    image: 
-      default: "registry.gitlab.com/xrow-public/ci-tools/ansible-ee:main"
     stage: 
       default: deploy
     timeout:
@@ -29,7 +27,7 @@ include:
 
 ansible:$[[ inputs.name ]]:
   stage: $[[ inputs.stage ]]
-  image: $[[ inputs.image ]]
+  image: ${CI_IMAGE_ANSIBLE_EE}
   timeout: $[[ inputs.timeout ]]
   dependencies: []
   resource_group: "$[[ inputs.environment ]]"

templates/bash/template.yml

@@ -6,7 +6,7 @@ spec:
 
 lint:bash:
   stage: lint
-  image: registry.gitlab.com/xrow-public/ci-tools/centos:main
+  image: $CI_IMAGE_TOOLS
   needs: []
   dependencies: []
   allow_failure: true

templates/common/template.yml

 spec:
   inputs:
-    stage:
-      default: lint
+    stages:
+      description: The stages available in the pipeline.
+      default:
+        - lint 
+        - build
+        - test
+        - deploy
+      type: array
     flag-fastestmirror:
       default: "false"
+      type: string
+    image-trivy:
+      default: docker.io/aquasec/trivy:latest
+      description: The image to use for trivy.
+      type: string
+    image-podman:
+      default: registry.gitlab.com/xrow-public/ci-tools/podman:main
+      description: The image to use for podman.
+      type: string
+    image-ansible:
+      default: registry.gitlab.com/xrow-public/ci-tools/ansible:main
+      description: The image to use for ansible.
+      type: string
+    image-ansible-ee:
+      default: registry.gitlab.com/xrow-public/ci-tools/ansible-ee:main
+      description: The image to use for ansible.
+      type: string
+    image-tools:
+      default: registry.gitlab.com/xrow-public/ci-tools/tools:main
+      description: The image to use for tools.
+      type: string
+    image-lint:
+      default: registry.gitlab.com/xrow-public/ci-tools/lint:main
+      description: The image to use for lint.
+      type: string
+    image-mkdocs:
+      default: registry.gitlab.com/xrow-public/ci-tools/mkdocs:main
+      description: The image to use for mkdocs.
+      type: string
+    image-semantic-release:
+      default: registry.gitlab.com/xrow-public/ci-tools/semantic-release:main
+      description: The image to use for semantic-release.
+      type: string
 ---
 
-include:
-- component: $CI_SERVER_HOST/xrow-public/ci-tools/bash@main
-
 variables:
   GIT_STRATEGY: fetch
   GIT_DEPTH: 3
@@ -19,9 +55,13 @@ variables:
   FF_GITLAB_REGISTRY_HELPER_IMAGE: 1
   FF_ENABLE_BASH_EXIT_CODE_CHECK: "true"
   CI_CONFIG_FLAG_FASTESTMIRROR: "$[[ inputs.flag-fastestmirror ]]"
+  CI_IMAGE_TOOLS: "$[[ inputs.image-tools ]]"
+  CI_IMAGE_LINT: "$[[ inputs.image-lint ]]"
+  CI_IMAGE_MKDOCS: "$[[ inputs.image-mkdocs ]]"
+  CI_IMAGE_PODMAN: "$[[ inputs.image-podman ]]"
+  CI_IMAGE_TRIVY: "$[[ inputs.image-trivy ]]"
+  CI_IMAGE_ANSIBLE: "$[[ inputs.image-ansible ]]"
+  CI_IMAGE_ANSIBLE_EE: "$[[ inputs.image-ansible-ee ]]"
+  CI_IMAGE_SEMANTIC_RELEASE: "$[[ inputs.image-semantic-release ]]"
 
-stages:
-  - lint 
-  - build
-  - test
-  - deploy
\ No newline at end of file
+stages: $[[ inputs.stages ]]

templates/component/template.yml

@@ -7,7 +7,7 @@ spec:
 
 lint:$[[ inputs.name ]]:
   stage: lint
-  image: registry.gitlab.com/xrow-public/ci-tools/centos:main
+  image: $CI_IMAGE_TOOLS
   script:
   - |
     if [[ ! -v GITLAB_TOKEN ]]; then

templates/container/template.yml

 spec:
   inputs:
-    image:
-      description: Image to use for building the container.
-      default: registry.gitlab.com/xrow-public/ci-tools/podman:main
     name:
       description: Name for the pipeline jobs and the container.
       default: container
@@ -15,6 +12,10 @@ spec:
     stage:
       description: The pipeline stage that the jobs belongs to.
       default: build
+    needs:
+      description: The jobs that this job depends on.
+      default: []
+      type: array
     #@TODO https://gitlab.com/gitlab-org/gitlab/-/issues/434826
     scanning-allow-failure:
       description: Should the pipeline fail if scanning the built container image fails?
@@ -42,9 +43,6 @@ spec:
       default: "xrow-public/repository"
 ---
 
-include:
-- component: $CI_SERVER_HOST/xrow-public/ci-tools/common@main
-
 build:$[[ inputs.name ]]:
   variables:
     BUILD_DIR: "$[[ inputs.path ]]"
@@ -53,8 +51,9 @@ build:$[[ inputs.name ]]:
     CI_RELEASE_REGISTRY: "$[[ inputs.release-registry ]]"
     CI_RELEASE_REPOSITORY: "$[[ inputs.release-repository ]]"
   stage: $[[ inputs.stage ]]
-  needs: []
-  image: $[[ inputs.image ]]
+  needs:
+    - $[[ inputs.needs ]]
+  image: $CI_IMAGE_PODMAN
   script:
     - |
       source <(curl -s https://$CI_SERVER_HOST/xrow-public/ci-tools/-/raw/main/scripts/library.sh)
@@ -67,7 +66,7 @@ build:$[[ inputs.name ]]:
 
 scan:$[[ inputs.name ]]:
   image:
-    name: docker.io/aquasec/trivy:latest
+    name: $CI_IMAGE_TRIVY
     entrypoint: [""]
   stage: $[[ inputs.stage ]]
   variables:
@@ -80,7 +79,9 @@ scan:$[[ inputs.name ]]:
       - gl-container-scanning-report.json
     when: always
   dependencies: []
-  needs: ["build:$[[ inputs.name ]]"]
+  needs: 
+    - "build:$[[ inputs.name ]]"
+    - $[[ inputs.needs ]]
   script:
     - |
       export TRIVY_USERNAME="$CI_REGISTRY_USER"