|
|
@@ -1,89 +1,173 @@
|
|
|
-name: Build and Push Docker Image
|
|
|
+name: Publish Docker image (Multi-arch)
|
|
|
|
|
|
on:
|
|
|
push:
|
|
|
branches:
|
|
|
- main
|
|
|
tags:
|
|
|
- - 'v*'
|
|
|
+ - '*'
|
|
|
+ - '!nightly*'
|
|
|
workflow_dispatch:
|
|
|
-
|
|
|
-env:
|
|
|
- DOCKER_REPO: t0ngyu/new-api-alpha
|
|
|
+ inputs:
|
|
|
+ tag:
|
|
|
+ description: 'Tag name to build (e.g., v0.10.8)'
|
|
|
+ required: false
|
|
|
+ type: string
|
|
|
|
|
|
jobs:
|
|
|
- build-and-push:
|
|
|
- runs-on: ubuntu-latest
|
|
|
-
|
|
|
+ build_single_arch:
|
|
|
+ name: Build & push (${{ matrix.arch }})
|
|
|
+ strategy:
|
|
|
+ fail-fast: false
|
|
|
+ matrix:
|
|
|
+ include:
|
|
|
+ - arch: amd64
|
|
|
+ platform: linux/amd64
|
|
|
+ runner: ubuntu-latest
|
|
|
+ - arch: arm64
|
|
|
+ platform: linux/arm64
|
|
|
+ runner: ubuntu-24.04-arm
|
|
|
+ runs-on: ${{ matrix.runner }}
|
|
|
+ outputs:
|
|
|
+ tag: ${{ steps.version.outputs.tag }}
|
|
|
+ is_tag: ${{ steps.version.outputs.is_tag }}
|
|
|
+
|
|
|
+ permissions:
|
|
|
+ packages: write
|
|
|
+ contents: read
|
|
|
+ id-token: write
|
|
|
+
|
|
|
steps:
|
|
|
- - name: Checkout code
|
|
|
- uses: actions/checkout@v5
|
|
|
+ - name: Check out
|
|
|
+ uses: actions/checkout@v4
|
|
|
+ with:
|
|
|
+ fetch-depth: ${{ github.event_name == 'workflow_dispatch' && 0 || 1 }}
|
|
|
+ ref: ${{ github.event.inputs.tag || github.ref }}
|
|
|
|
|
|
- - name: Save version info
|
|
|
+ - name: Resolve version
|
|
|
+ id: version
|
|
|
run: |
|
|
|
- if [[ "${{ github.ref }}" == refs/tags/* ]]; then
|
|
|
- # For tags, use the tag name
|
|
|
- echo "${GITHUB_REF#refs/tags/}" > VERSION
|
|
|
+ IS_TAG=false
|
|
|
+ if [ -n "${{ github.event.inputs.tag }}" ]; then
|
|
|
+ TAG="${{ github.event.inputs.tag }}"
|
|
|
+ if ! git rev-parse "refs/tags/$TAG" >/dev/null 2>&1; then
|
|
|
+ echo "::error::Tag '$TAG' does not exist"
|
|
|
+ exit 1
|
|
|
+ fi
|
|
|
+ IS_TAG=true
|
|
|
+ elif [[ "${GITHUB_REF}" == refs/tags/* ]]; then
|
|
|
+ TAG="${GITHUB_REF#refs/tags/}"
|
|
|
+ IS_TAG=true
|
|
|
else
|
|
|
- # For branches, use date and commit hash
|
|
|
- echo "$(date +'%Y%m%d')-$(git rev-parse --short HEAD)" > VERSION
|
|
|
+ TAG="$(date +'%Y%m%d')-$(git rev-parse --short HEAD)"
|
|
|
fi
|
|
|
- cat VERSION
|
|
|
+ echo "TAG=${TAG}" >> $GITHUB_ENV
|
|
|
+ echo "tag=${TAG}" >> $GITHUB_OUTPUT
|
|
|
+ echo "is_tag=${IS_TAG}" >> $GITHUB_OUTPUT
|
|
|
+ echo "${TAG}" > VERSION
|
|
|
+ echo "Building version: ${TAG} for ${{ matrix.arch }}"
|
|
|
|
|
|
- - name: Set up QEMU
|
|
|
- uses: docker/setup-qemu-action@v4
|
|
|
+ - name: Compute image tags
|
|
|
+ id: tags
|
|
|
+ run: |
|
|
|
+ TAGS="calciumion/new-api:${TAG}-${{ matrix.arch }}"
|
|
|
+ if [ "${{ steps.version.outputs.is_tag }}" = "true" ]; then
|
|
|
+ TAGS="${TAGS}"$'\n'"calciumion/new-api:latest-${{ matrix.arch }}"
|
|
|
+ else
|
|
|
+ TAGS="${TAGS}"$'\n'"calciumion/new-api:main-${{ matrix.arch }}"
|
|
|
+ fi
|
|
|
+ {
|
|
|
+ echo "tags<<EOF"
|
|
|
+ echo "${TAGS}"
|
|
|
+ echo "EOF"
|
|
|
+ } >> $GITHUB_OUTPUT
|
|
|
|
|
|
- name: Set up Docker Buildx
|
|
|
- uses: docker/setup-buildx-action@v4
|
|
|
- with:
|
|
|
- driver-opts: |
|
|
|
- image=moby/buildkit:latest
|
|
|
- network=host
|
|
|
+ uses: docker/setup-buildx-action@v3
|
|
|
|
|
|
- - name: Login to Docker Hub
|
|
|
- uses: docker/login-action@v4
|
|
|
+ - name: Log in to Docker Hub
|
|
|
+ uses: docker/login-action@v3
|
|
|
with:
|
|
|
- username: ${{ secrets.DOCKER_USERNAME }}
|
|
|
- password: ${{ secrets.DOCKER_PASSWORD }}
|
|
|
+ username: ${{ secrets.DOCKERHUB_USERNAME }}
|
|
|
+ password: ${{ secrets.DOCKERHUB_TOKEN }}
|
|
|
|
|
|
- - name: Extract metadata
|
|
|
+ - name: Extract metadata (labels)
|
|
|
id: meta
|
|
|
- uses: docker/metadata-action@v6
|
|
|
+ uses: docker/metadata-action@v5
|
|
|
with:
|
|
|
- images: ${{ env.DOCKER_REPO }}
|
|
|
- tags: |
|
|
|
- type=ref,event=branch
|
|
|
- type=ref,event=pr
|
|
|
- type=semver,pattern={{version}}
|
|
|
- type=semver,pattern={{major}}.{{minor}}
|
|
|
- type=semver,pattern={{major}}
|
|
|
- type=sha,prefix={{branch}}-
|
|
|
- type=raw,value=latest,enable={{is_default_branch}}
|
|
|
-
|
|
|
- - name: Build and push Docker image
|
|
|
+ images: calciumion/new-api
|
|
|
+
|
|
|
+ - name: Build & push
|
|
|
id: build
|
|
|
- uses: docker/build-push-action@v7
|
|
|
+ uses: docker/build-push-action@v6
|
|
|
with:
|
|
|
context: .
|
|
|
- file: ./Dockerfile
|
|
|
- platforms: linux/amd64
|
|
|
+ platforms: ${{ matrix.platform }}
|
|
|
push: true
|
|
|
- tags: ${{ steps.meta.outputs.tags }}
|
|
|
+ tags: ${{ steps.tags.outputs.tags }}
|
|
|
labels: ${{ steps.meta.outputs.labels }}
|
|
|
- # Enable BuildKit cache mounts and GHA cache
|
|
|
cache-from: type=gha
|
|
|
cache-to: type=gha,mode=max
|
|
|
- build-args: |
|
|
|
- BUILDKIT_INLINE_CACHE=1
|
|
|
+ provenance: mode=max
|
|
|
+ sbom: true
|
|
|
+
|
|
|
+ - name: Install cosign
|
|
|
+ if: steps.version.outputs.is_tag == 'true'
|
|
|
+ uses: sigstore/cosign-installer@v3
|
|
|
+
|
|
|
+ - name: Sign image with cosign
|
|
|
+ if: steps.version.outputs.is_tag == 'true'
|
|
|
+ run: cosign sign --yes calciumion/new-api@${{ steps.build.outputs.digest }}
|
|
|
|
|
|
- name: Image summary
|
|
|
run: |
|
|
|
- echo "### Docker Image Built Successfully! 🚀" >> $GITHUB_STEP_SUMMARY
|
|
|
- echo "" >> $GITHUB_STEP_SUMMARY
|
|
|
- echo "**Tags:**" >> $GITHUB_STEP_SUMMARY
|
|
|
+ echo "### Docker Image Digest (${{ matrix.arch }})" >> $GITHUB_STEP_SUMMARY
|
|
|
echo '```' >> $GITHUB_STEP_SUMMARY
|
|
|
- echo "${{ steps.meta.outputs.tags }}" >> $GITHUB_STEP_SUMMARY
|
|
|
+ echo "calciumion/new-api:${TAG}-${{ matrix.arch }}" >> $GITHUB_STEP_SUMMARY
|
|
|
+ echo "${{ steps.build.outputs.digest }}" >> $GITHUB_STEP_SUMMARY
|
|
|
echo '```' >> $GITHUB_STEP_SUMMARY
|
|
|
- echo "" >> $GITHUB_STEP_SUMMARY
|
|
|
- echo "**Digest:** \`${{ steps.build.outputs.digest }}\`" >> $GITHUB_STEP_SUMMARY
|
|
|
|
|
|
+ create_manifests:
|
|
|
+ name: Create multi-arch manifests
|
|
|
+ needs: [build_single_arch]
|
|
|
+ runs-on: ubuntu-latest
|
|
|
+
|
|
|
+ steps:
|
|
|
+ - name: Set version
|
|
|
+ run: echo "TAG=${{ needs.build_single_arch.outputs.tag }}" >> $GITHUB_ENV
|
|
|
+
|
|
|
+ - name: Log in to Docker Hub
|
|
|
+ uses: docker/login-action@v3
|
|
|
+ with:
|
|
|
+ username: ${{ secrets.DOCKERHUB_USERNAME }}
|
|
|
+ password: ${{ secrets.DOCKERHUB_TOKEN }}
|
|
|
+
|
|
|
+ - name: Create & push manifest (version)
|
|
|
+ run: |
|
|
|
+ docker buildx imagetools create \
|
|
|
+ -t calciumion/new-api:${TAG} \
|
|
|
+ calciumion/new-api:${TAG}-amd64 \
|
|
|
+ calciumion/new-api:${TAG}-arm64
|
|
|
+
|
|
|
+ - name: Create & push manifest (latest)
|
|
|
+ if: needs.build_single_arch.outputs.is_tag == 'true'
|
|
|
+ run: |
|
|
|
+ docker buildx imagetools create \
|
|
|
+ -t calciumion/new-api:latest \
|
|
|
+ calciumion/new-api:latest-amd64 \
|
|
|
+ calciumion/new-api:latest-arm64
|
|
|
+
|
|
|
+ - name: Create & push manifest (main)
|
|
|
+ if: needs.build_single_arch.outputs.is_tag != 'true'
|
|
|
+ run: |
|
|
|
+ docker buildx imagetools create \
|
|
|
+ -t calciumion/new-api:main \
|
|
|
+ calciumion/new-api:main-amd64 \
|
|
|
+ calciumion/new-api:main-arm64
|
|
|
+
|
|
|
+ - name: Manifest summary
|
|
|
+ run: |
|
|
|
+ echo "### Multi-arch Manifest" >> $GITHUB_STEP_SUMMARY
|
|
|
+ echo '```' >> $GITHUB_STEP_SUMMARY
|
|
|
+ docker buildx imagetools inspect calciumion/new-api:${TAG} >> $GITHUB_STEP_SUMMARY
|
|
|
+ echo '```' >> $GITHUB_STEP_SUMMARY
|
CaIon