docker-build-deeploy.yml

# SPDX-FileCopyrightText: 2025 ETH Zurich and University of Bologna
#
# SPDX-License-Identifier: Apache-2.0

---
name: Docker • Build Deeploy Container

"on":
  workflow_dispatch:
    inputs:
      docker_image_toolchain:
        description: "Deeploy Toolchain Image to use"
        required: false
        default: "ghcr.io/pulp-platform/deeploy-toolchain:latest"

jobs:
  prepare:
    name: Fetch branch name or tag
    runs-on: ubuntu-latest
    outputs:
      docker_tag: ${{ steps.generate_tag.outputs.docker_tag }}
      docker_release_tag: ${{ steps.detect_release_tag.outputs.release_tag }}
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Set up environment variables
        run: |
          echo "BRANCH_NAME=${GITHUB_REF##*/}" >> $GITHUB_ENV
          echo "TAG_NAME=${GITHUB_REF##*/}" >> $GITHUB_ENV
          echo "IS_TAG=${GITHUB_REF_TYPE}" >> $GITHUB_ENV

      - name: Set Docker tag
        id: generate_tag
        run: |
          if [[ "${{ env.IS_TAG }}" == "tag" ]]; then
            echo "docker_tag=${{ env.TAG_NAME }}" >> $GITHUB_OUTPUT
          else
            echo "docker_tag=${{ env.BRANCH_NAME }}" >> $GITHUB_OUTPUT
          fi

      - name: Detect release tag on HEAD
        id: detect_release_tag
        run: |
          TAG_ON_HEAD=$(git tag --points-at HEAD | head -n 1 || true)
          if [[ -n "$TAG_ON_HEAD" && "$IS_TAG" != "tag" ]]; then
            echo "release_tag=$TAG_ON_HEAD" >> $GITHUB_OUTPUT
          else
            echo "release_tag=" >> $GITHUB_OUTPUT
          fi

  build-deeploy:
    name: Build Deploy Image
    needs: [prepare]
    runs-on: ${{ matrix.runner }}
    outputs:
      digest-amd64: ${{ steps.digest.outputs.digest-amd64 }}
      digest-arm64: ${{ steps.digest.outputs.digest-arm64 }}
    strategy:
      fail-fast: false
      matrix:
        platform: [amd64, arm64]
        include:
          - platform: amd64
            runner: ubuntu-latest
          - platform: arm64
            runner: ubuntu-22.04-arm
    steps:
      - uses: actions/checkout@v4

      - name: Free up disk space
        uses: jlumbroso/free-disk-space@v1.3.1
        with:
          tool-cache: true
          android: true
          dotnet: true
          haskell: true
          large-packages: true

      - uses: docker/setup-buildx-action@v3

      - name: GHCR Log-in
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Build Cache for Docker
        id: cache
        uses: actions/cache@v4
        with:
          path: var-ccache
          key: ${{ runner.os }}-${{ matrix.platform }}-build-cache-deeploy

      - name: Inject build-cache
        uses: reproducible-containers/buildkit-cache-dance@v3.1.0
        with:
          cache-map: |
            {
              "var-ccache": "/ccache"
            }
          skip-extraction: ${{ steps.cache.outputs.cache-hit }}

      - name: Lower Case Repository Name
        run: |
          echo "OWNER_LC=${OWNER,,}" >>${GITHUB_ENV}
        env:
          OWNER: "${{ github.repository_owner }}"

      - name: Build and push final Deeploy image
        id: build
        uses: docker/build-push-action@v6
        with:
          platforms: linux/${{ matrix.platform }}
          context: .
          cache-from: type=gha
          cache-to: type=gha,mode=min
          file: Container/Dockerfile.deeploy
          push: true
          build-args: |
            BASE_IMAGE=${{ github.event.inputs.docker_image_toolchain }}
          outputs: type=image,name=ghcr.io/${{ env.OWNER_LC }}/deeploy,annotation-index=true,name-canonical=true,push=true

      - name: Extract image digest
        id: digest
        run: echo "digest-${{ matrix.platform }}=${{ steps.build.outputs.digest }}" >> $GITHUB_OUTPUT

  merge-deeploy-images:
    name: Merge Deeploy Images
    runs-on: ubuntu-latest
    needs: [prepare, build-deeploy]
    steps:
      - name: GHCR Log-in
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Lower Case Repository Name
        run: |
          echo "OWNER_LC=${OWNER,,}" >>${GITHUB_ENV}
        env:
          OWNER: "${{ github.repository_owner }}"

      - name: Prepare manifest tags
        id: manifest_tags
        run: |
          OWNER_LC_VALUE=${OWNER,,}
          {
            echo "tags<<EOF"
            echo "ghcr.io/${OWNER_LC_VALUE}/deeploy:latest,"
            if [[ -n "${RELEASE_TAG}" ]]; then
              echo "ghcr.io/${OWNER_LC_VALUE}/deeploy:${DOCKER_TAG},"
              echo "ghcr.io/${OWNER_LC_VALUE}/deeploy:${RELEASE_TAG}"
            else
              echo "ghcr.io/${OWNER_LC_VALUE}/deeploy:${DOCKER_TAG}"
            fi
            echo "EOF"
          } >> $GITHUB_OUTPUT
        env:
          OWNER: ${{ github.repository_owner }}
          DOCKER_TAG: ${{ needs.prepare.outputs.docker_tag }}
          RELEASE_TAG: ${{ needs.prepare.outputs.docker_release_tag }}

      - name: Merge Deeploy Images
        uses: Noelware/docker-manifest-action@v1
        with:
          inputs: |
            ghcr.io/${{ env.OWNER_LC }}/deeploy@${{ needs.build-deeploy.outputs.digest-amd64 }},
            ghcr.io/${{ env.OWNER_LC }}/deeploy@${{ needs.build-deeploy.outputs.digest-arm64 }}
          tags: ${{ steps.manifest_tags.outputs.tags }}
          push: true