build: generate docker images with arch variants

Author: SergioRibera

.github/workflows/release.yml

@@ -49,6 +49,9 @@ jobs:
           echo "$MATRIX"
           echo "matrix=$MATRIX" >> $GITHUB_OUTPUT
 
+          ARCH_LIST=$(echo "$MATRIX" | jq -r '.[].arch' | jq -R -s -c 'split("\n") | map(select(. != ""))')
+          echo "arch_list=$ARCH_LIST" >> $GITHUB_OUTPUT
+
   build:
     runs-on: ubuntu-latest
     needs: generate-matrix
@@ -132,3 +135,63 @@ jobs:
           files: |
             artifacts/*
             CHANGES.md
+
+  docker-build:
+    runs-on: ubuntu-latest
+    needs: [generate-matrix]
+    strategy:
+      fail-fast: false
+      matrix:
+        include: ${{ fromJson(needs.generate-matrix.outputs.matrix) }}
+    env:
+      VERSION: ${{ github.event.inputs.release_name || github.ref_name }}
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install Nix
+        uses: cachix/install-nix-action@v30
+        with:
+          nix_path: nixpkgs=channel:nixos-unstable
+          github_access_token: ${{ secrets.GITHUB_TOKEN }}
+          extra_nix_config: |
+            experimental-features = nix-command flakes
+
+      - name: Build individual images with Nix
+        run: |
+          nix build .#image-${{ matrix.arch }}
+          docker load < ./result
+          docker tag grhooks:${{ env.VERSION }} ghcr.io/${{ github.repository_owner }}/grhooks:${{ matrix.arch }}
+
+      - name: Create and push unified manifest
+        run: |
+          docker manifest create ghcr.io/${{ github.repository_owner }}/grhooks:${{ env.VERSION }} \
+            --amend ghcr.io/${{ github.repository_owner }}/grhooks:${{ matrix.arch }}
+
+  docker-publish:
+    runs-on: ubuntu-latest
+    needs: [generate-matrix, docker-build]
+    env:
+      VERSION: ${{ github.event.inputs.release_name || github.ref_name }}
+    steps:
+      - name: Log in to GHCR
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Create and push manifest
+        run: |
+          IMAGE=ghcr.io/${{ github.repository_owner }}/grhooks:${{ env.VERSION }}
+          ARCHS='${{ needs.generate-matrix.outputs.arch_list }}'
+
+          echo "Creating manifest for architectures: $ARCHS"
+
+          manifest_args=""
+          for arch in $(echo "$ARCHS" | jq -r '.[]'); do
+            manifest_args="$manifest_args --amend ghcr.io/${{ github.repository_owner }}/grhooks:$arch"
+          done
+
+          echo "Running docker manifest create $IMAGE $manifest_args"
+          eval docker manifest create $IMAGE $manifest_args
+          docker manifest push $IMAGE

flake.nix

@@ -11,6 +11,7 @@
   outputs = { nixpkgs, flake-utils, rust-overlay, ... }:
     flake-utils.lib.eachDefaultSystem (baseSystem:
       let
+        cargoManifest = builtins.fromTOML (builtins.readFile ./Cargo.toml);
         overlays = [ (import rust-overlay) ];
         pkgs = import nixpkgs {
           system = baseSystem;
@@ -67,6 +68,19 @@
             ++ lib.optionals (os == "macos") [ clang darwin.apple_sdk.frameworks.CoreFoundation ];
         };
 
+        containerPkg = variant: let
+          pkg = mkPackage variant;
+          # arch = if variant.arch == "x86_64" then "amd" else "arm";
+        in pkgs.dockerTools.buildLayeredImage rec {
+          name = cargoManifest.package.name;
+          tag = cargoManifest.package.version;
+          created = "now";
+          # architecture = "linux/${arch}64";
+
+          contents = [ pkg ];
+          config.Cmd = ["/bin/${name}"];
+        };
+
         generatedMatrixJson = builtins.toJSON (lib.flatten (map ({ arch, os, formats, ... }:
           map (format: {
             arch = arch;
@@ -112,6 +126,8 @@
               echo -e "\033[0;35mAvailable OS:\033[0m"
               ${lib.concatMapStringsSep "\n" (os: ''echo "  - ${os}"'') (lib.lists.unique (map ({ os, ... }: os) architectures))}
               echo ""
+              echo -e "\033[0;32mTo build docker image, use:\033[0m"
+              echo "  nix build .#image-<arch>"
               echo -e "\033[0;32mTo build a specific variant, use:\033[0m"
               echo "  nix build .#<os>-<arch>"
               echo ""
@@ -127,7 +143,10 @@
               echo '${generatedMatrixJson}'
             '');
           };
-        };
+        }// (pkgs.lib.listToAttrs (map ({arch, ...} @ args: {
+          name = "image-${arch}";
+          value = containerPkg args;
+        }) architectures));
 
         bundlers = let
           compress = ext: name: drv: pkgs.stdenv.mkDerivation {