diff --git a/.github/workflows/build-docker-images.yml b/.github/workflows/build-docker-images.yml index feffebe..a8bfa50 100644 --- a/.github/workflows/build-docker-images.yml +++ b/.github/workflows/build-docker-images.yml @@ -10,9 +10,13 @@ env: PI_BASE_IMAGE: "https://downloads.raspberrypi.org/raspios_lite_arm64/images/raspios_lite_arm64-2023-05-03/2023-05-03-raspios-bullseye-arm64-lite.img.xz" jobs: - rugpi-bakery-metadata: + metadata: name: Docker Metedata runs-on: ubuntu-latest + outputs: + labels: ${{ steps.meta.outputs.labels }} + json: ${{ steps.meta.outputs.json }} + version: ${{ steps.meta.outputs.version }} steps: - name: Docker Meta id: meta @@ -30,3 +34,94 @@ jobs: labels: | org.opencontainers.image.title=Rugpi Bakery org.opencontainers.image.vendor=Silitics GmbH + + build-platform-images: + name: Build Docker Images + runs-on: ubuntu-latest + needs: [metadata] + strategy: + matrix: + platform: [linux/amd64, linux/arm64] + steps: + - name: Checkout Repository + uses: actions/checkout@v3 + with: + lfs: true + + - name: Set up QEMU + uses: docker/setup-qemu-action@v2 + + - name: Set up Docker Buildx + uses: docker/setup-buildx-action@v2 + + - name: Login to Container Registry + uses: docker/login-action@v2 + with: + registry: ${{ env.REGISTRY }} + username: ${{ github.actor }} + password: ${{ secrets.GITHUB_TOKEN }} + + - name: Build and Push Image + id: build + uses: docker/build-push-action@v4 + with: + context: . + file: docker/Dockerfile.rugpi-bakery + platforms: ${{ matrix.platform }} + labels: ${{ needs.metadata.outputs.labels }} + push: true + tags: ${{ env.IMAGE_NAME }} + cache-from: type=gha + cache-to: type=gha,mode=max + outputs: type=image,name=${{ env.IMAGE_NAME }},push-by-digest=true,name-canonical=true,push=true + build-args: | + BUILDTIME=${{ fromJSON(needs.metadata.outputs.json).labels['org.opencontainers.image.created'] }} + VERSION=${{ fromJSON(needs.metadata.outputs.json).labels['org.opencontainers.image.version'] }} + REVISION=${{ fromJSON(needs.metadata.outputs.json).labels['org.opencontainers.image.revision'] }} + + - name: Export Digest + run: | + mkdir -p /tmp/digests + digest="${{ steps.build.outputs.digest }}" + touch "/tmp/digests/${digest#sha256:}" + + - name: Upload Digest + uses: actions/upload-artifact@v3 + with: + name: digests + path: /tmp/digests/* + if-no-files-found: error + retention-days: 1 + + build-and-push: + name: Build and Push Docker Image + runs-on: ubuntu-latest + needs: + - metadata + - build-platform-images + steps: + - name: Download Digests + uses: actions/download-artifact@v3 + with: + name: digests + path: /tmp/digests + + - name: Set up Docker Buildx + uses: docker/setup-buildx-action@v2 + + - name: Login to Container Registry + uses: docker/login-action@v2 + with: + registry: ${{ env.REGISTRY }} + username: ${{ github.actor }} + password: ${{ secrets.GITHUB_TOKEN }} + + - name: Create Manifest List and Push + working-directory: /tmp/digests + run: | + docker buildx imagetools create $(jq -cr '.tags | map("-t " + .) | join(" ")' <<< "${{ needs.metadata.outputs.json }}") \ + $(printf '${{ env.IMAGE_NAME }}@sha256:%s ' *) + + - name: Inspect Image + run: | + docker buildx imagetools inspect ${{ env.IMAGE_NAME }}:${{ needs.metadata.outputs.version }}