technitium-api-proxy/.github/workflows/publish-dockerhub.yml at 79859ad0fecc07581780ca8ac7fc53bcc31c1b69 · spaaleks/technitium-api-proxy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
name: Publish Docker Hub

on:
  push:
    branches:
      - main
      - dev
      - 'dev-*'
    tags:
      - '*'
  workflow_dispatch:

jobs:
  wait-for-tests:
    runs-on: ubuntu-latest
    steps:
      - name: Wait for Unit Tests
        uses: fountainhead/action-wait-for-check@v1.2.0
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          checkName: unit-tests
          ref: ${{ github.sha }}
          timeoutSeconds: 600
          intervalSeconds: 15

      - name: Wait for E2E Tests
        uses: fountainhead/action-wait-for-check@v1.2.0
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          checkName: e2e
          ref: ${{ github.sha }}
          timeoutSeconds: 600
          intervalSeconds: 15

  publish:
    needs: wait-for-tests
    runs-on: ubuntu-latest
    permissions:
      contents: read
    env:
      DOCKERHUB_USER: ${{ vars.DOCKERHUB_USER }}
      DOCKERHUB_PASSWORD: ${{ secrets.DOCKERHUB_PASSWORD }}
      DOCKERHUB_IMAGE: ${{ vars.DOCKERHUB_IMAGE }}
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Validate configuration
        run: |
          set -euo pipefail
          for var in DOCKERHUB_USER DOCKERHUB_PASSWORD DOCKERHUB_IMAGE; do
            if [ -z "${!var}" ]; then
              echo "Missing value for $var" >&2
              exit 1
            fi
          done

      - name: Determine tags
        id: tags
        run: |
          set -euo pipefail
          ref="${GITHUB_REF}"
          ref_name="${GITHUB_REF_NAME}"
          sha_short="$(printf '%s' "${GITHUB_SHA}" | cut -c1-7)"
          if [[ "${ref}" == refs/tags/* ]]; then
            suffix="${ref#refs/tags/}"
          elif [[ "${ref_name}" == "main" ]]; then
            suffix="latest"
          else
            slug="$(printf '%s' "${ref_name}" | tr '[:upper:]' '[:lower:]' | sed -E 's/[^a-z0-9]+/-/g' | sed -E 's/^-+|-+$//g')"
            [[ -z "${slug}" ]] && slug="sha-${sha_short}"
            suffix="${slug}"
          fi
          base_tag="docker.io/${DOCKERHUB_IMAGE}:${suffix}"
          echo "BASE_TAG=${base_tag}" >> "${GITHUB_ENV}"
          echo "AMD64_TAG=${base_tag}-amd64" >> "${GITHUB_ENV}"
          echo "ARM64_TAG=${base_tag}-arm64" >> "${GITHUB_ENV}"

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to Docker Hub
        uses: docker/login-action@v3
        with:
          username: ${{ env.DOCKERHUB_USER }}
          password: ${{ env.DOCKERHUB_PASSWORD }}

      - name: Build and push linux/amd64 image
        env:
          BASE_TAG: ${{ env.BASE_TAG }}
          AMD64_TAG: ${{ env.AMD64_TAG }}
        run: |
          set -euo pipefail
          docker buildx build \
            --platform linux/amd64 \
            --push \
            --tag "${AMD64_TAG}" \
            --tag "${BASE_TAG}" \
            .

      - name: Build and push linux/arm64 image
        env:
          ARM64_TAG: ${{ env.ARM64_TAG }}
        run: |
          set -euo pipefail
          docker buildx build \
            --platform linux/arm64 \
            --push \
            --tag "${ARM64_TAG}" \
            .