diff options
| -rw-r--r-- | .github/workflows/image.yml | 127 |
1 files changed, 127 insertions, 0 deletions
diff --git a/.github/workflows/image.yml b/.github/workflows/image.yml new file mode 100644 index 000000000..7ce504770 --- /dev/null +++ b/.github/workflows/image.yml @@ -0,0 +1,127 @@ +name: Build Docker image + +on: + push: + + # Run on pull requests to verify that the image still builds correctly + # The image is not pushed on pull requests + pull_request: + paths: + - Dockerfile + - .github/workflows/image.yml + +permissions: + packages: write + +env: + REGISTRY_IMAGE: ghcr.io/gohugoio/hugo + +jobs: + build: + runs-on: ubuntu-latest + strategy: + fail-fast: false + matrix: + platform: + - linux/amd64 + - linux/arm64 + steps: + - name: Prepare + run: | + platform=${{ matrix.platform }} + echo "PLATFORM_PAIR=${platform//\//-}" >> $GITHUB_ENV + + - name: Checkout + uses: actions/[email protected] + + - name: Docker meta + id: meta + uses: docker/[email protected] + with: + images: ${{ env.REGISTRY_IMAGE }} + + - name: Set up QEMU + uses: docker/[email protected] + + - name: Set up Docker Buildx + uses: docker/[email protected] + + - name: Login to GHCR + # Login is only needed when the image is pushed + if: ${{ startsWith(github.ref, 'refs/tags') }} + uses: docker/[email protected] + with: + registry: ghcr.io + username: ${{ github.repository_owner }} + password: ${{ secrets.GITHUB_TOKEN }} + + - name: Build and push by digest + id: build + uses: docker/[email protected] + with: + context: . + push: ${{ startsWith(github.ref, 'refs/tags') }} + platforms: ${{ matrix.platform }} + labels: ${{ steps.meta.outputs.labels }} + outputs: type=image,name=${{ env.REGISTRY_IMAGE }},push-by-digest=true,name-canonical=true,push=true + + - name: Export digest + run: | + mkdir -p /tmp/digests + digest="${{ steps.build.outputs.digest }}" + touch "/tmp/digests/${digest#sha256:}" + + - name: Upload digest + uses: actions/[email protected] + with: + name: digests-${{ env.PLATFORM_PAIR }} + path: /tmp/digests/* + if-no-files-found: error + retention-days: 1 + + merge: + runs-on: ubuntu-latest + needs: + - build + if: ${{ startsWith(github.ref, 'refs/tags') }} + steps: + - name: Download digests + uses: actions/[email protected] + with: + path: /tmp/digests + pattern: digests-* + merge-multiple: true + + - name: Set up Docker Buildx + uses: docker/[email protected] + + - name: Docker meta + id: meta + uses: docker/[email protected] + with: + images: ${{ env.REGISTRY_IMAGE }} + + flavor: | + latest=false + + # Tag the image with the v-prefixed semver version on tags, tag with the ref on PRs + tags: | + type=semver,pattern={{raw}} + type=ref,event=pr + + - name: Login to GHCR + uses: docker/[email protected] + with: + registry: ghcr.io + username: ${{ github.repository_owner }} + password: ${{ secrets.GITHUB_TOKEN }} + + - name: Create manifest list and push + working-directory: /tmp/digests + run: | + docker buildx imagetools create $(jq -cr '.tags | map("-t " + .) | join(" ")' <<< "$DOCKER_METADATA_OUTPUT_JSON") \ + $(printf '${{ env.REGISTRY_IMAGE }}@sha256:%s ' *) + + - name: Inspect image + run: | + docker buildx imagetools inspect ${{ env.REGISTRY_IMAGE }}:${{ steps.meta.outputs.version }} |