GitHub Actions: multi-platform container builder

.github/workflows/publish-container.yml

@@ -27,13 +27,20 @@ jobs:
       packages: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
+
+      # Set up QEMU for multi-platform build
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
 
       # Login against a Docker registry except on PR
       # https://github.com/docker/login-action
       - name: Log into registry ${{ env.REGISTRY }}
         if: github.event_name != 'pull_request'
-        uses: docker/login-action@28218f9b04b4f3f62068d7b6ce6ca5b26e35336c
+        uses: docker/login-action@v3
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
@@ -43,16 +50,17 @@ jobs:
       # https://github.com/docker/metadata-action
       - name: Extract Docker metadata
         id: meta
-        uses: docker/metadata-action@98669ae865ea3cffbcbaa878cf57c20bbf1c6c38
+        uses: docker/metadata-action@v5
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
 
       # Build and push Docker image with Buildx (don't push on PR)
       # https://github.com/docker/build-push-action
       - name: Build and push Docker image
-        uses: docker/build-push-action@ad44023a93711e3deb337508980b4b5e9bcdc5dc
+        uses: docker/build-push-action@v5
         with:
           context: .
+          platforms: linux/amd64,linux/arm64
           push: ${{ github.event_name != 'pull_request' }}
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}

Dockerfile

@@ -4,12 +4,12 @@ FROM ubuntu:22.04
 # https://pythonspeed.com/articles/alpine-docker-python/
 # https://pythonspeed.com/articles/base-image-python-docker-images/
 
-ARG build_date=unspecified
+ARG build_date=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
 # After releasing 1.5.5, Hashicorp changed the license from MPL to BSL.
 # Unless OSPO/Cisco Legal confirms that we can keep using Terraform under the
 # new license, we shouldn't update this version.
 ARG terraform_version=1.5.5
-ARG arch=amd64
+ARG TARGETARCH
 
 LABEL org.opencontainers.image.title="Cisco SD-WAN" \
       org.opencontainers.image.description="Cisco SD-WAN DevOps" \
@@ -24,10 +24,10 @@ RUN apt update && \
     apt clean && \
     rm -rf /var/lib/apt/lists/*
 
-RUN curl -#O https://releases.hashicorp.com/terraform/${terraform_version}/terraform_${terraform_version}_linux_${arch}.zip
-RUN unzip terraform_${terraform_version}_linux_${arch}.zip
+RUN curl -#O https://releases.hashicorp.com/terraform/${terraform_version}/terraform_${terraform_version}_linux_${TARGETARCH}.zip
+RUN unzip terraform_${terraform_version}_linux_${TARGETARCH}.zip
 RUN mv terraform /usr/bin
-RUN rm terraform_${terraform_version}_linux_${arch}.zip
+RUN rm terraform_${terraform_version}_linux_${TARGETARCH}.zip
 
 # This adds almost 1GB to the container size. Installing the .deb package has
 # similar results, and it doesn't support arm64. We really need to find a way