Build amd64 and arm64 #107
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build amd64 and arm64 | |
| on: | |
| workflow_dispatch: | |
| schedule: | |
| # run every day at 03:00 UTC | |
| - cron: '00 03 * * *' | |
| env: | |
| LATEST_MAJOR: 9 | |
| IMAGE_NAME: almalinux-bootc | |
| VERSIONS_LIST: '"9"' # '"9", "10"' | |
| jobs: | |
| set-versions-matrix: | |
| name: Set versions matrix | |
| runs-on: ubuntu-24.04 | |
| outputs: | |
| matrix: ${{ steps.set-matrix.outputs.matrix }} | |
| date_stamp: ${{ steps.date-stamp.outputs.date_stamp }} | |
| steps: | |
| - name: Set matrix | |
| id: set-matrix | |
| run: echo "matrix=[${{ env.VERSIONS_LIST }}]" >> $GITHUB_OUTPUT | |
| - name: Dete stamp | |
| id: date-stamp | |
| run: | | |
| # date stamp | |
| date_stamp=$(date -u '+%Y%m%d') | |
| [ "x${date_stamp}" != "x" ] && echo "date_stamp=${date_stamp}" >> "$GITHUB_OUTPUT" | |
| build-amd64: | |
| name: amd64 image | |
| runs-on: ubuntu-24.04 | |
| needs: [set-versions-matrix] | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| VERSION_MAJOR: ${{ fromJSON(needs.set-versions-matrix.outputs.matrix) }} | |
| env: | |
| PLATFORM: linux/amd64 | |
| DATE_STAMP: ${{ needs.set-versions-matrix.outputs.date_stamp }} | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| submodules: true | |
| - uses: ./.github/actions/shared-steps | |
| name: Build and Push | |
| with: | |
| VERSION_MAJOR: ${{ matrix.VERSION_MAJOR }} | |
| DATE_STAMP: ${{ env.DATE_STAMP }} | |
| IMAGE_REGISTRY: ${{ secrets.IMAGE_REGISTRY }} | |
| REGISTRY_USER: ${{ secrets.REGISTRY_USER }} | |
| REGISTRY_PASSWORD: ${{ secrets.REGISTRY_PASSWORD }} | |
| start-arm64-runner: | |
| name: arm64 self-hosted runner | |
| timeout-minutes: 10 # normally it only takes 1-2 minutes | |
| runs-on: ubuntu-24.04 | |
| needs: [set-versions-matrix] | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| VERSION_MAJOR: ${{ fromJSON(needs.set-versions-matrix.outputs.matrix) }} | |
| steps: | |
| - name: Setup and start the runner | |
| id: start-ec2-runner | |
| uses: NextChapterSoftware/[email protected] | |
| with: | |
| github_token: ${{ secrets.GIT_HUB_TOKEN }} | |
| aws_access_key_id: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| aws_secret_access_key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| aws_region: ${{ secrets.AWS_REGION }} | |
| ec2_ami_id: ${{ secrets[format('EC2_AMI_ID_AL{0}', matrix.VERSION_MAJOR)] }} | |
| ec2_subnet_id: ${{ secrets.EC2_SUBNET_ID}} | |
| ec2_security_group_id: ${{ secrets.EC2_SECURITY_GROUP_ID }} | |
| ec2_instance_type: t4g.medium # 2 vCPU and 4 GiM Memory | |
| ec2_root_disk_size_gb: "16" # override default size which is too small for images | |
| ec2_root_disk_ebs_class: "gp3" # use faster and cheeper storage instead of default 'gp2' | |
| ec2_instance_ttl: 60 # Optional (default is 60 minutes) | |
| ec2_spot_instance_strategy: None # Other options are: SpotOnly, BestEffort, MaxPerformance | |
| ec2_instance_tags: > # Required for IAM role resource permission scoping | |
| [ | |
| {"Key": "Project", "Value": "GitHub Actions Self-hosted Runners"} | |
| ] | |
| build-arm64: | |
| if: ${{ always() && contains(join(needs.start-arm64-runner.result, ','), 'success') }} | |
| name: arm64 image | |
| runs-on: ${{ github.run_id }} | |
| needs: [set-versions-matrix, start-arm64-runner] | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| VERSION_MAJOR: ${{ fromJSON(needs.set-versions-matrix.outputs.matrix) }} | |
| env: | |
| PLATFORM: linux/arm64 | |
| DATE_STAMP: ${{ needs.set-versions-matrix.outputs.date_stamp }} | |
| steps: | |
| - name: Set envirounment | |
| run: | | |
| # Redefine VERSION_MAJOR | |
| release=$(rpm -q --qf="%{VERSION}\n" almalinux-release 2>/dev/null) | |
| VERSION_MAJOR=$(cut -d '.' -f 1 <<< "$release") | |
| [ "x${VERSION_MAJOR}" != "x" ] && echo "VERSION_MAJOR=${VERSION_MAJOR}" >> "$GITHUB_ENV" | |
| - name: Install dependencies (${{ env.VERSION_MAJOR }}) | |
| run: | | |
| sudo yum -y -q update | |
| sudo yum -y -q install podman git | |
| - uses: actions/checkout@v4 | |
| with: | |
| submodules: true | |
| - uses: ./.github/actions/shared-steps | |
| name: Build and Push (${{ env.VERSION_MAJOR }}) | |
| with: | |
| VERSION_MAJOR: ${{ env.VERSION_MAJOR }} # redefined VERSION_MAJOR, not from the matrix | |
| DATE_STAMP: ${{ env.DATE_STAMP }} | |
| IMAGE_REGISTRY: ${{ secrets.IMAGE_REGISTRY }} | |
| REGISTRY_USER: ${{ secrets.REGISTRY_USER }} | |
| REGISTRY_PASSWORD: ${{ secrets.REGISTRY_PASSWORD }} | |
| push-manifest: | |
| if: ${{ always() && contains(join(needs.*.result, ','), 'success') }} | |
| name: Push manifest | |
| needs: [set-versions-matrix, build-amd64, start-arm64-runner, build-arm64] | |
| runs-on: ubuntu-24.04 | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| VERSION_MAJOR: ${{ fromJSON(needs.set-versions-matrix.outputs.matrix) }} | |
| env: | |
| DATE_STAMP: ${{ needs.set-versions-matrix.outputs.date_stamp }} | |
| steps: | |
| - name: Set envirounment | |
| run: | | |
| # Minor version for both amd64 and arm64 | |
| for MACHINE in x86_64 aarch64; do | |
| release=$(rpm -q --qf="%{VERSION}\n" https://repo.almalinux.org/almalinux/almalinux-release-latest-${{ matrix.VERSION_MAJOR }}.${MACHINE}.rpm 2>/dev/null) | |
| VERSION_MINOR=$(cut -d '.' -f 2 <<< "$release") | |
| [ "x${VERSION_MINOR}" != "x" ] && echo "VERSION_MINOR_${MACHINE}=${VERSION_MINOR}" >> "$GITHUB_ENV" | |
| unset VERSION_MINOR | |
| done | |
| - name: Login to registry (docker) | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: ${{ secrets.IMAGE_REGISTRY }} | |
| username: ${{ secrets.REGISTRY_USER }} | |
| password: ${{ secrets.REGISTRY_PASSWORD }} | |
| - name: Create and push manifest (docker) | |
| run: | | |
| # Manifest for both amd64 and arm64 | |
| IMAGE_DEST=${{ secrets.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }} | |
| amd64_exists=0 | |
| arm64_exists=0 | |
| docker manifest inspect ${IMAGE_DEST}:${{ matrix.VERSION_MAJOR }}.${{ env.VERSION_MINOR_x86_64 }}-${{ env.DATE_STAMP }}-amd64 >/dev/null 2>&1 \ | |
| || amd64_exists=$? | |
| docker manifest inspect ${IMAGE_DEST}:${{ matrix.VERSION_MAJOR }}.${{ env.VERSION_MINOR_aarch64 }}-${{ env.DATE_STAMP }}-arm64 >/dev/null 2>&1 \ | |
| || arm64_exists=$? | |
| [ $amd64_exists -ne 0 -o $arm64_exists -ne 0 ] && exit 0 | |
| # Don't push manifest if amd64 and arm64 minor versions differ | |
| VERSION_MINOR=${{ env.VERSION_MINOR_x86_64 }} | |
| [ "${{ env.VERSION_MINOR_x86_64 }}" != "${{ env.VERSION_MINOR_aarch64 }}" ] && exit 0 | |
| # Loop over need tags: latest, VERSION_MAJOR, VERSION_MAJOR.VERSION_MINOR, VERSION_MAJOR.VERSION_MINOR-DATE_STAMP | |
| for tag in latest ${{ matrix.VERSION_MAJOR }} ${{ matrix.VERSION_MAJOR }}.${VERSION_MINOR} ${{ matrix.VERSION_MAJOR }}.${VERSION_MINOR}-${{ env.DATE_STAMP }}; do | |
| [ ${{ matrix.VERSION_MAJOR }} != ${{ env.LATEST_MAJOR }} -a "${tag}" = "latest" ] && continue | |
| docker manifest create ${IMAGE_DEST}:${tag} \ | |
| ${IMAGE_DEST}:${{ matrix.VERSION_MAJOR }}.${VERSION_MINOR}-${{ env.DATE_STAMP }}-amd64 \ | |
| ${IMAGE_DEST}:${{ matrix.VERSION_MAJOR }}.${VERSION_MINOR}-${{ env.DATE_STAMP }}-arm64 | |
| docker manifest inspect ${IMAGE_DEST}:${tag} | |
| docker manifest push ${IMAGE_DEST}:${tag} | |
| done |