dash/.github/workflows/build-container.yml at develop · dashpay/dash · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
name: Build container

on:
  workflow_call:
    inputs:
      context:
        description: "Path to use for build context"
        required: true
        type: string
      file:
        description: "Path to Dockerfile"
        required: true
        type: string
      name:
        description: "Container name"
        required: true
        type: string
      runs-on-amd64:
        description: "Runner label to use for amd64 jobs"
        required: true
        type: string
      runs-on-arm64:
        description: "Runner label to use for arm64 jobs"
        required: true
        type: string
    outputs:
      path:
        description: "Path to built container"
        value: ghcr.io/${{ jobs.build-amd64.outputs.repo }}/${{ inputs.name }}:${{ jobs.build-amd64.outputs.tag }}

jobs:
  build-amd64:
    name: Build container (amd64)
    runs-on: ${{ inputs.runs-on-amd64 }}
    outputs:
      tag: ${{ steps.prepare.outputs.tag }}
      repo: ${{ steps.prepare.outputs.repo }}
      digest: ${{ steps.build.outputs.digest }}
    steps:
      - name: Checkout code
        uses: actions/checkout@v6
        with:
          ref: ${{ github.event.pull_request.head.sha }}

      - name: Prepare variables
        id: prepare
        run: |
          BRANCH_NAME=$(echo "${GITHUB_REF##*/}" | tr '[:upper:]' '[:lower:]')
          REPO_NAME=$(echo "${{ github.repository }}" | tr '[:upper:]' '[:lower:]')
          echo "tag=${BRANCH_NAME}" >> "$GITHUB_OUTPUT"
          echo "repo=${REPO_NAME}" >> "$GITHUB_OUTPUT"

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v4

      - name: Login to GitHub Container Registry
        uses: docker/login-action@v4
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Build and push Docker image
        id: build
        uses: docker/build-push-action@v7
        with:
          context: ${{ inputs.context }}
          file: ${{ inputs.file }}
          push: true
          platforms: linux/amd64
          tags: |
            ghcr.io/${{ steps.prepare.outputs.repo }}/${{ inputs.name }}:${{ hashFiles(inputs.file) }}-amd64
          cache-from: |
            type=registry,ref=ghcr.io/${{ steps.prepare.outputs.repo }}/${{ inputs.name }}:${{ hashFiles(inputs.file) }}-amd64
            type=registry,ref=ghcr.io/${{ steps.prepare.outputs.repo }}/${{ inputs.name }}:${{ steps.prepare.outputs.tag }}
          cache-to: type=inline

  build-arm64:
    name: Build container (arm64)
    runs-on: ${{ inputs.runs-on-arm64 }}
    outputs:
      digest: ${{ steps.build.outputs.digest }}
    steps:
      - name: Checkout code
        uses: actions/checkout@v6
        with:
          ref: ${{ github.event.pull_request.head.sha }}

      - name: Prepare variables
        id: prepare
        run: |
          BRANCH_NAME=$(echo "${GITHUB_REF##*/}" | tr '[:upper:]' '[:lower:]')
          REPO_NAME=$(echo "${{ github.repository }}" | tr '[:upper:]' '[:lower:]')
          echo "tag=${BRANCH_NAME}" >> "$GITHUB_OUTPUT"
          echo "repo=${REPO_NAME}" >> "$GITHUB_OUTPUT"

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v4

      - name: Login to GitHub Container Registry
        uses: docker/login-action@v4
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Build and push Docker image
        id: build
        uses: docker/build-push-action@v7
        with:
          context: ${{ inputs.context }}
          file: ${{ inputs.file }}
          push: true
          platforms: linux/arm64
          tags: |
            ghcr.io/${{ steps.prepare.outputs.repo }}/${{ inputs.name }}:${{ hashFiles(inputs.file) }}-arm64
          cache-from: |
            type=registry,ref=ghcr.io/${{ steps.prepare.outputs.repo }}/${{ inputs.name }}:${{ hashFiles(inputs.file) }}-arm64
            type=registry,ref=ghcr.io/${{ steps.prepare.outputs.repo }}/${{ inputs.name }}:${{ steps.prepare.outputs.tag }}
          cache-to: type=inline

  create-manifest:
    name: Create multi-arch manifest
    runs-on: ${{ inputs.runs-on-arm64 }}
    needs: [build-amd64, build-arm64]
    steps:
      - name: Checkout code
        uses: actions/checkout@v6
        with:
          ref: ${{ github.event.pull_request.head.sha }}

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v4

      - name: Login to GitHub Container Registry
        uses: docker/login-action@v4
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Create and push multi-arch manifest
        run: |
          REPO="ghcr.io/${{ needs.build-amd64.outputs.repo }}/${{ inputs.name }}"
          TAG="${{ needs.build-amd64.outputs.tag }}"
          HASH_TAG="${{ hashFiles(inputs.file) }}"

          # Create manifest from arch-specific images
          docker buildx imagetools create -t "${REPO}:${HASH_TAG}" \
            "${REPO}:${HASH_TAG}-amd64" \
            "${REPO}:${HASH_TAG}-arm64"

          docker buildx imagetools create -t "${REPO}:${TAG}" \
            "${REPO}:${HASH_TAG}-amd64" \
            "${REPO}:${HASH_TAG}-arm64"

          docker buildx imagetools create -t "${REPO}:latest" \
            "${REPO}:${HASH_TAG}-amd64" \
            "${REPO}:${HASH_TAG}-arm64"