build_docker.yml

---
name: Build sha-p2pool docker images

'on':
  push:
    paths-ignore:
      - '**/*.md'
    tags:
      - 'v[0-9]+.[0-9]+.[0-9]*'
    branches:
      - 'build-all-*'
      - 'build-dockers-*'
  schedule:
    - cron: '05 00 * * *'
  workflow_dispatch:
    inputs:
      version:
        type: string
        description: 'override image tag/version'
      tag_alias:
        type: string
        description: 'image tag alias'

env:
  DOCKER_IMAGE: sha-p2pool
  DAYS_to_EXPIRE: 30

concurrency:
  # https://docs.github.com/en/actions/examples/using-concurrency-expressions-and-a-test-matrix
  group: '${{ github.workflow }} @ ${{ github.event.pull_request.head.label || github.head_ref || github.ref }}'
  cancel-in-progress: ${{ !startsWith(github.ref, 'refs/tags/v') || github.ref != 'refs/heads/development' }}

permissions: {}

jobs:
  builds_envs_setup:
    name: Build envs setup
    runs-on: ubuntu-latest
    outputs:
      version: ${{ steps.envs_setup.outputs.version }}

    steps:
      - name: Prep docker build environment
        id: envs_setup
        shell: bash
        run: |
          #TESHA_SHORT=$(git rev-parse --short HEAD)
          TESHA_SHORT=${GITHUB_SHA::7}
          if [[ "${{ github.ref }}" =~ ^refs\/tags\/v[0-9]+\.[0-9]+\.[0-9]+.*$ ]]; then
            VERSION="${{ github.ref_name }}_$(date -u '+%Y%m%d')_${TESHA_SHORT}"
            echo "TAG_ALIAS=${{ secrets.DOCKER_PROVIDER }}/${{ secrets.DOCKER_REPO }}/${{ env.DOCKER_IMAGE }}:${{ github.ref_name }}" >> $GITHUB_ENV
          else
            if [ -z "${{ inputs.version }}" ] ; then
              VERSION="${{ github.ref_name }}_$(date -u '+%Y%m%d')_${TESHA_SHORT}"
            else
              VERSION=${{ inputs.version }}
            fi
          fi
          echo "Setting ${VERSION} as docker tag"
          echo "VERSION=${VERSION}" >> $GITHUB_ENV
          echo "version=${VERSION}" >> $GITHUB_OUTPUT
          if [ ! -z "${{ inputs.tag_alias }}" ] ; then
            echo "Setup tag_alias"
            echo "TAG_ALIAS=${{ secrets.DOCKER_PROVIDER }}/${{ secrets.DOCKER_REPO }}/${{ env.DOCKER_IMAGE }}:${{ inputs.tag_alias }}" >> $GITHUB_ENV
          fi

  docker_build:
    name: Docker building
    needs: builds_envs_setup
    runs-on: ubuntu-latest

    outputs:
      version: ${{ steps.envs_setup.outputs.version }}

    permissions:
      contents: read
      packages: write

    strategy:
      fail-fast: false
      matrix:
        platform: [amd64, arm64]

    steps:
      - name: Checkout p2pool explorer
        uses: actions/checkout@v4

      - name: Set up QEMU for Docker
        uses: docker/setup-qemu-action@v3
        with:
          platforms: all

      - name: Expire setup
        shell: bash
        run: |
          if [[ "${{ github.ref }}" =~ ^refs\/tags\/v[0-9]+\.[0-9]+\.[0-9]+.*$ ]]; then
            echo "No Expire for release"
          else
            echo "EXPIRATION=${{ env.DAYS_to_EXPIRE }}d" >> $GITHUB_ENV
          fi
          echo "VERSION=${{ needs.builds_envs_setup.outputs.version }}" >> $GITHUB_ENV

      - name: Extract metadata (tags, labels) for Docker
        id: meta
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/${{ github.repository_owner }}/${{ env.DOCKER_IMAGE }}
            ${{ secrets.DOCKER_PROVIDER }}/${{ secrets.DOCKER_REPO }}/${{ env.DOCKER_IMAGE }}
          tags: |
            type=schedule
            type=ref,event=branch
            type=ref,event=pr
            type=semver,pattern={{version}}
            type=semver,pattern={{major}}.{{minor}}
            type=sha
          labels: |
            maintainer=${{ github.actor }}
            quay.expires-after=${{ env.EXPIRATION }}
            org.opencontainers.image.vendor=TariLabs
            org.opencontainers.image.title=${{ env.DOCKER_IMAGE }}
            org.opencontainers.image.description=Multi-arch Docker image for ${{ env.DOCKER_IMAGE }}
            org.opencontainers.image.url=https://github.com/${{ github.repository }}
            org.opencontainers.image.source=https://github.com/${{ github.repository }}
          flavor: |
            suffix=-${{ matrix.platform }}

      - name: Login to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.repository_owner }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Login to Docker Image Provider
        uses: docker/login-action@v3
        with:
          registry: ${{ secrets.DOCKER_PROVIDER }}
          username: ${{ secrets.DOCKER_USERNAME }}
          password: ${{ secrets.DOCKER_PASSWORD }}

      - name: Docker image build and push
        id: docker_build
        uses: docker/build-push-action@v6
        with:
          context: .
          file: Dockerfile.cross-compile
          platforms: linux/${{ matrix.platform }}
          push: true
          provenance: false
          labels: ${{ steps.meta.outputs.labels }}
          build-args: |
            VERSION=${{ env.VERSION }}
          tags: |
            ${{ steps.meta.outputs.tags }}
            ${{ secrets.DOCKER_PROVIDER }}/${{ secrets.DOCKER_REPO }}/${{ env.DOCKER_IMAGE }}:${{ env.VERSION }}-${{ matrix.platform }}
            ghcr.io/${{ github.repository_owner }}/${{ env.DOCKER_IMAGE }}:latest-${{ matrix.platform }}
            ${{ secrets.DOCKER_PROVIDER }}/${{ secrets.DOCKER_REPO }}/${{ env.DOCKER_IMAGE }}:latest-${{ matrix.platform }}
            ${{ env.TAG_ALIAS }}
          outputs: |
            type=registry,annotation-manifest-descriptor.org.opencontainers.image.title=${{ fromJSON(steps.meta.outputs.json).labels['org.opencontainers.image.title'] }},annotation-manifest-descriptor.org.opencontainers.image.description=${{ fromJSON(steps.meta.outputs.json).labels['org.opencontainers.image.description'] }},annotation.org.opencontainers.image.title=${{ fromJSON(steps.meta.outputs.json).labels['org.opencontainers.image.title'] }},annotation.org.opencontainers.image.description=${{ fromJSON(steps.meta.outputs.json).labels['org.opencontainers.image.description'] }},annotation-index.org.opencontainers.image.title=${{ fromJSON(steps.meta.outputs.json).labels['org.opencontainers.image.title'] }},annotation-index.org.opencontainers.image.description=${{ fromJSON(steps.meta.outputs.json).labels['org.opencontainers.image.description'] }}

      - name: Image digest
        run: echo ${{ steps.docker_build.outputs.digest }}

  create-manifest:
    needs: [ builds_envs_setup, docker_build ]
    runs-on: ubuntu-latest

    permissions:
      contents: read
      packages: write

    steps:
      - name: Log in to Registries
        run: |
          echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin
          echo "${{ secrets.DOCKER_PASSWORD }}" | docker login ${{ secrets.DOCKER_PROVIDER }} -u ${{ secrets.DOCKER_USERNAME }} --password-stdin

      # Create and push the multi-arch image to both registries
      - name: Push multi-arch image
        run: |
          DVERSION=${{ needs.builds_envs_setup.outputs.version }}
          for DREGISTRY in ghcr.io quay.io; do
            if [[ "${DREGISTRY}" == "ghcr.io" ]]; then
              repo="${{ github.repository_owner }}"
            else
              repo="${{ secrets.DOCKER_REPO }}"
            fi

            echo "Registry run - ${DREGISTRY}"
            echo "Creating multi-arch image for ${repo}/${{ env.DOCKER_IMAGE }} for ${DVERSION}"
            docker manifest create \
              ${DREGISTRY}/${repo}/${{ env.DOCKER_IMAGE }}:${DVERSION} \
                --amend ${DREGISTRY}/${repo}/${{ env.DOCKER_IMAGE }}:latest-amd64 \
                --amend ${DREGISTRY}/${repo}/${{ env.DOCKER_IMAGE }}:latest-arm64

            echo "Inspect multi-arch image for ${repo}/${{ env.DOCKER_IMAGE }}"
            docker manifest inspect ${DREGISTRY}/${repo}/${{ env.DOCKER_IMAGE }}:${DVERSION} > manifest.json
            cat manifest.json
            echo "Pushing multi-arch image for ${repo}/${{ env.DOCKER_IMAGE }}"
            docker manifest push ${DREGISTRY}/${repo}/${{ env.DOCKER_IMAGE }}:${DVERSION} || true

            if [[ "${{ github.ref }}" =~ ^refs\/tags\/v[0-9]+\.[0-9]+\.[0-9]+.*$ ]]; then
              echo "Release Multi-Arch Tag"
              docker manifest create \
                ${DREGISTRY}/${repo}/${{ env.DOCKER_IMAGE }}:${{ github.ref_name }} \
                  --amend ${DREGISTRY}/${repo}/${{ env.DOCKER_IMAGE }}:latest-amd64 \
                  --amend ${DREGISTRY}/${repo}/${{ env.DOCKER_IMAGE }}:latest-arm64
              docker manifest push ${DREGISTRY}/${repo}/${{ env.DOCKER_IMAGE }}:${{ github.ref_name }} || true
            fi

            echo "Latest Multi-Arch tag"
            docker manifest create \
              ${DREGISTRY}/${repo}/${{ env.DOCKER_IMAGE }}:latest \
                --amend ${DREGISTRY}/${repo}/${{ env.DOCKER_IMAGE }}:latest-amd64 \
                --amend ${DREGISTRY}/${repo}/${{ env.DOCKER_IMAGE }}:latest-arm64
            #docker manifest annotate ${DREGISTRY}/${repo}/${{ env.DOCKER_IMAGE }}:latest --file manifest.json
            docker manifest push ${DREGISTRY}/${repo}/${{ env.DOCKER_IMAGE }}:latest || true

          done