docker.yml

on:
  schedule:
    - cron: "0 0 * * */7"
  workflow_dispatch:

name: Docker images

jobs:
  build-images:
    name: Build & push Docker images
    runs-on: ubuntu-22.04

    strategy:
      matrix:
        runtime:
          - name: freedesktop-22.08
            packages: org.freedesktop.Platform//22.08 org.freedesktop.Sdk//22.08
            remote: flathub

          - name: freedesktop-23.08
            packages: org.freedesktop.Platform//23.08 org.freedesktop.Sdk//23.08
            remote: flathub

          - name: gnome-44
            packages: org.gnome.Platform//44 org.gnome.Sdk//44
            remote: flathub

          - name: gnome-45
            packages: org.gnome.Platform//45 org.gnome.Sdk//45
            remote: flathub

          - name: kde-5.15-22.08
            packages: org.kde.Platform//5.15-22.08 org.kde.Sdk//5.15-22.08
            remote: flathub

          - name: kde-5.15-23.08
            packages: org.kde.Platform//5.15-23.08 org.kde.Sdk//5.15-23.08
            remote: flathub

          - name: kde-6.5
            packages: org.kde.Platform//6.5 org.kde.Sdk//6.5
            remote: flathub

          - name: kde-6.6
            packages: org.kde.Platform//6.6 org.kde.Sdk//6.6
            remote: flathub

    services:
      registry:
        image: registry:latest
        ports:
          - 5000:5000

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
        with:
          driver-opts: network=host

      - name: Cache Docker layers for the base image
        uses: actions/cache@v3
        with:
          path: /tmp/.buildx-cache
          key: ${{ runner.os }}-buildx-${{ github.sha }}
          restore-keys: |
            ${{ runner.os }}-buildx-

      - name: Build & push the base image to local registry
        uses: docker/build-push-action@v5
        with:
          cache-from: type=local,src=/tmp/.buildx-cache
          cache-to: type=local,dest=/tmp/.buildx-cache
          context: .
          file: Dockerfile
          pull: true
          push: true
          tags: localhost:5000/base:latest

      - name: Login to ghcr.io
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Write the Dockerfile for the ${{ matrix.runtime.name }} runtime
        run: |
          cat >> ${{ matrix.runtime.name }}.Dockerfile << EOF
          # syntax = docker/dockerfile:experimental
          FROM localhost:5000/base:latest
          RUN --security=insecure flatpak install -y --noninteractive ${{matrix.runtime.remote}} ${{ matrix.runtime.packages }}

      - name: Build & push the ${{ matrix.runtime.name }} image to Docker Hub
        uses: docker/build-push-action@v5
        with:
          allow: security.insecure
          context: .
          file: ${{ matrix.runtime.name }}.Dockerfile
          push: true
          tags: flathub-infra/flatpak-github-actions:${{ matrix.runtime.name }}
          cache-from: type=gha
          cache-to: type=gha,mode=max