chore(deps): lock file maintenance #621
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Docker | |
| on: | |
| push: | |
| branches: ['main'] | |
| pull_request: | |
| workflow_dispatch: | |
| jobs: | |
| build: | |
| name: Build image | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| arch: [x86_64, aarch64] | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Install Nix | |
| uses: DeterminateSystems/nix-installer-action@v14 | |
| - name: Setup Nix cache | |
| uses: DeterminateSystems/magic-nix-cache-action@v8 | |
| - name: Build Docker image | |
| id: build | |
| env: | |
| ARCH: ${{ matrix.arch }} | |
| run: | | |
| nix build --print-build-logs .#container-"$ARCH" | |
| [ ! -L result ] && exit 1 | |
| echo "path=$(readlink -f result)" >> "$GITHUB_OUTPUT" | |
| - name: Upload image | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: container-${{ matrix.arch }} | |
| path: ${{ steps.build.outputs.path }} | |
| if-no-files-found: error | |
| retention-days: 3 | |
| push: | |
| name: Push image | |
| needs: build | |
| runs-on: ubuntu-latest | |
| permissions: | |
| packages: write | |
| env: | |
| REGISTRY: ghcr.io | |
| USERNAME: ${{ github.actor }} | |
| if: github.event_name == 'push' | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Determine image name | |
| run: | | |
| echo "IMAGE_NAME=${REPOSITORY,,}" >> "$GITHUB_ENV" | |
| env: | |
| REPOSITORY: '${{ github.repository }}' | |
| - name: Download images | |
| uses: actions/download-artifact@v4 | |
| with: | |
| path: images | |
| - name: Login to registry | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: ${{ env.REGISTRY }} | |
| username: ${{ env.USERNAME }} | |
| password: ${{ github.token }} | |
| - name: Push to registry | |
| env: | |
| TAG: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest | |
| run: | | |
| set -eu | |
| architectures=("x86_64" "aarch64") | |
| for arch in "${architectures[@]}"; do | |
| docker load < images/container-"$arch"/*.tar.gz | |
| docker tag refraction:latest-"$arch" "$TAG"-"$arch" | |
| docker push ${{ env.TAG }}-"$arch" | |
| done | |
| docker manifest create "$TAG" \ | |
| --amend "$TAG"-x86_64 \ | |
| --amend "$TAG"-aarch64 | |
| docker manifest push "$TAG" |