containerdeploy.yml

name: Deploy container images
on:
  workflow_dispatch:
  push:
    branches:
      - nightly
    tags:
      - "Release*"
      - "Release/*"

jobs:
  deploy-docker:
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        include:
          - os: ubuntu-22.04
            platform: linux/amd64
          - os: ubuntu-22.04-arm
            platform: linux/arm64
    outputs:
      tag_name: ${{ steps.tag_name.outputs.tag }}
      downcase_repo: ${{ steps.downcase_repo.outputs.repo }}
    steps:
      - name: Free up space on the runner
        run: |
          # see: https://github.com/actions/runner-images/issues/2840
          df -h
          sudo rm -rf /usr/share/dotnet
          sudo rm -rf "/usr/local/share/boost"
          sudo rm -rf "/opt/ghc"
          sudo rm -rf "$AGENT_TOOLSDIRECTORY"
          df -h
      - name: Extract branch name
        shell: bash
        run: echo "branch=${GITHUB_REF#refs/heads/}" >> $GITHUB_OUTPUT
        id: extract_branch
      - name: Define tag name
        shell: bash
        run: |
            BRANCH=${{ steps.extract_branch.outputs.branch }}
            ## use latest to follow docker conventions
            if [[ "$BRANCH" == "develop" || "$BRANCH" == "nightly" || "$BRANCH" == "feat/singularity" ]]
            then 
              BRANCH="latest"
            fi
            ## Remove release/ from release branch name (or keep the non-release name)
            echo "tag=${BRANCH#release/}" >> $GITHUB_OUTPUT
        id: tag_name
      - name: Downcase REPO
        run: echo "repo=${GITHUB_REPOSITORY,,}" >> $GITHUB_OUTPUT
        id: downcase_repo
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
      - name: Login to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 1
      - name: Test docker build in runtime base
        uses: docker/build-push-action@v5
        with:
          load: true # so other build steps can make use of cache layers from this build
          file: dockerfiles/Dockerfile
          target: test
          platforms: ${{ matrix.platform }}
          build-args: |
            NUM_BUILD_CORES=4
            BUILDKIT_CONTEXT_KEEP_GIT_DIR=1
            OPENMS_VERSION_TAG=${{ steps.tag_name.outputs.tag }}
          # cache-from: type=gha
          # cache-to: type=gha,mode=max
      - name: Build and push library image
        uses: docker/build-push-action@v5
        with:
          push: true # Will only build if this is not here
          file: dockerfiles/Dockerfile
          target: library
          platforms: ${{ matrix.platform }}
          provenance: mode=max
          build-args: |
            NUM_BUILD_CORES=4
            BUILDKIT_CONTEXT_KEEP_GIT_DIR=1
            OPENMS_VERSION_TAG=${{ steps.tag_name.outputs.tag }}
          tags: |
            ghcr.io/${{ steps.downcase_repo.outputs.repo }}-library:${{ steps.tag_name.outputs.tag }}
          # cache-from: type=gha
          # cache-to: type=gha,mode=max
      - name: Build and push tools image
        uses: docker/build-push-action@v6
        with:
          push: true # Will only build if this is not here
          file: dockerfiles/Dockerfile
          target: tools
          platforms: ${{ matrix.platform }}
          provenance: mode=max
          build-args: |
            NUM_BUILD_CORES=4
            BUILDKIT_CONTEXT_KEEP_GIT_DIR=1
            OPENMS_VERSION_TAG=${{ steps.tag_name.outputs.tag }}
          tags: |
            ghcr.io/${{ steps.downcase_repo.outputs.repo }}-executables:${{ steps.tag_name.outputs.tag }}
            ghcr.io/${{ steps.downcase_repo.outputs.repo }}-tools:${{ steps.tag_name.outputs.tag }}
          # cache-from: type=gha
          # cache-to: type=gha,mode=max
      - name: Build and push tools + thirdparty image
        uses: docker/build-push-action@v5
        with:
          push: true # Will only build if this is not here
          file: dockerfiles/Dockerfile
          target: tools-thirdparty
          platforms: ${{ matrix.platform }}
          provenance: mode=max
          build-args: |
            NUM_BUILD_CORES=4
            BUILDKIT_CONTEXT_KEEP_GIT_DIR=1
            OPENMS_VERSION_TAG=${{ steps.tag_name.outputs.tag }}
          tags: |
            ghcr.io/${{ steps.downcase_repo.outputs.repo }}-tools-thirdparty:${{ steps.tag_name.outputs.tag }}
          # cache-from: type=gha
          # cache-to: type=gha,mode=max
  deploy-singularity:
    runs-on: ubuntu-latest
    needs: deploy-docker
    steps:
      - name: Login to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      # install glib2.0 development package needed by singularity
      - name: Install Dependencies
        run: |
          sudo apt-get update
          sudo apt-get install -y libglib2.0-dev          
      - name: Singularity install with defaults
        uses: singularityhub/install-singularity@main
        with:
          singularity-version: '3.11.5'
      - name: Build Singularity library image
        shell: bash
        run: |
            sudo singularity build library.sif docker://ghcr.io/${{ needs.deploy-docker.outputs.downcase_repo }}-library:${{ needs.deploy-docker.outputs.tag_name }}
      - name: Build Singularity tools image
        shell: bash
        run: |
            sudo singularity build executables.sif docker://ghcr.io/${{ needs.deploy-docker.outputs.downcase_repo }}-executables:${{ needs.deploy-docker.outputs.tag_name }}
      - name: Build Singularity tools + thirdparty image
        shell: bash
        run: |
            sudo singularity build executables-thirdparty.sif docker://ghcr.io/${{ needs.deploy-docker.outputs.downcase_repo }}-tools-thirdparty:${{ needs.deploy-docker.outputs.tag_name }}
      - name: Upload Singularity images to ghcr.io
        shell: bash
        run: |
            echo ${{ secrets.GITHUB_TOKEN }} | singularity remote login -u jpfeuffer --password-stdin oras://ghcr.io
            singularity push library.sif oras://ghcr.io/${{ needs.deploy-docker.outputs.downcase_repo }}-library-sif:${{ needs.deploy-docker.outputs.tag_name }}
            singularity push executables.sif oras://ghcr.io/${{ needs.deploy-docker.outputs.downcase_repo }}-executables-sif:${{ needs.deploy-docker.outputs.tag_name }}
            singularity push executables-thirdparty.sif oras://ghcr.io/${{ needs.deploy-docker.outputs.downcase_repo }}-tools-thirdparty-sif:${{ needs.deploy-docker.outputs.tag_name }}