docker.yml

name: Build and Push Docker Image

on:
  push:
    branches:
      - main
  workflow_dispatch:

jobs:
  build:
    runs-on: ${{ matrix.os }}

    strategy:
      matrix:
        os: [ubuntu-22.04, macos-14]

    steps:
      - name: Checkout
        uses: actions/checkout@v3
      - name: Get commit sha
        run: echo "COMMIT_SHA=$(git rev-parse --short=7 HEAD)" >> $GITHUB_ENV
      - name: Get os name
        run: echo "OS=$(echo ${{ matrix.os }} | cut -d'-' -f1)" >> $GITHUB_ENV
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v2
      - name: Build and Push
        id: buildx
        uses: docker/build-push-action@v4
        with:
          context: .
          push: true
          provenance: false
          cache-from: type=gha
          cache-to: type=gha,mode=max
          # image to tar
          outputs: type=local,dest=./${{ matrix.os }}-image.tar
      - name: Image ID Output
        run: echo "${{ steps.buildx.outputs.imageid }}" > "${{ env.OS }}-image.id"
      - name: Upload image id
        uses: actions/upload-artifact@v4
        with:
          name: ${{ env.OS }}-image-id
          path: ${{ env.OS }}-image.id
      - name: Upload image tar
        uses: actions/upload-artifact@v4
        with:
          name: ${{ env.OS }}-image
          path: ${{ env.OS }}-image.tar
  tag-merge:
    permissions:
      contents: read
      id-token: write
    runs-on: ubuntu-22.04

    needs: build

    steps:
      - name: Download image id
        uses: actions/download-artifact@v4
        with:
          name: ubuntu-image-id
          path: ubuntu-image.id
      - name: Download image id
        uses: actions/download-artifact@v4
        with:
          name: macos-image-id
          path: macos-image.id
      - name: Download image tar
        uses: actions/download-artifact@v4
        with:
          name: ubuntu-image
          path: ubuntu-image.tar
      - name: Download image tar
        uses: actions/download-artifact@v4
        with:
          name: macos-image
          path: macos-image.tar
      - name: Set image id output
        id: imageid
        run: |
          echo "ubuntu-image=$(cat ubuntu-image.id)" >> $GITHUB_OUTPUT
          echo "macos-image=$(cat macos-image.id)" >> $GITHUB_OUTPUT
      - name: Authenticate to Google Cloud
        id: auth
        uses: google-github-actions/auth@v1
        with:
          token_format: access_token
          workload_identity_provider: ${{ secrets.IDENTITY_PROVIDER }}
          service_account: ${{ secrets.SERVICE_ACCOUNT }}
      - name: Login to Artifact Registry
        uses: docker/login-action@v2
        with:
          registry: ${{ secrets.ARTIFACT_REGISTRY }}
          username: oauth2accesstoken
          password: ${{ steps.auth.outputs.access_token }}
      - name: Set up Docker Buildx
        id: buildx
        uses: docker/setup-buildx-action@v2
      - name: Load image
        run: docker import ubuntu-image.tar
      - name: Load image
        run: docker import macos-image.tar
      - name: Tag
        run: |
          docker manifest create \
            ${{ secrets.ARTIFACT_REGISTRY }}/libnare/${{ github.event.repository.name }}/${{ github.ref_name }}:${{ github.sha }} \
            ${{ steps.imageid.outputs.ubuntu-image }} \
            ${{ steps.imageid.outputs.macos-image }}
          docker manifest annotate --arch amd64 \
            ${{ secrets.ARTIFACT_REGISTRY }}/libnare/${{ github.event.repository.name }}/${{ github.ref_name }}:${{ github.sha }} \
            ${{ steps.imageid.outputs.ubuntu-image }}
          docker manifest annotate --arch arm64 \
            ${{ secrets.ARTIFACT_REGISTRY }}/libnare/${{ github.event.repository.name }}/${{ github.ref_name }}:${{ github.sha }} \
            ${{ steps.imageid.outputs.macos-image }}
      - name: Push
        run: docker manifest push ${{ secrets.ARTIFACT_REGISTRY }}/libnare/${{ github.event.repository.name }}/${{ github.ref_name }}:${{ github.sha }}