|
| 1 | +name: Continuous Delivery (CD) |
| 2 | + |
| 3 | +on: |
| 4 | + release: |
| 5 | + types: [published] |
| 6 | + |
| 7 | +# https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs |
| 8 | +permissions: |
| 9 | + contents: write |
| 10 | + packages: write |
| 11 | + |
| 12 | +jobs: |
| 13 | + publish-binary: |
| 14 | + name: Publish Binary |
| 15 | + runs-on: ${{ matrix.architecture }} |
| 16 | + strategy: |
| 17 | + matrix: |
| 18 | + architecture: [ubuntu-24.04, ubuntu-24.04-arm] |
| 19 | + steps: |
| 20 | + - name: Checkout code. |
| 21 | + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 |
| 22 | + - name: Setup Nix. |
| 23 | + uses: cachix/install-nix-action@4e002c8ec80594ecd40e759629461e26c8abed15 # v31.9.0 |
| 24 | + - name: Publish binary. |
| 25 | + run: nix develop -c make publish-binary RELEASE="${GITHUB_REF_NAME}" |
| 26 | + env: |
| 27 | + GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} # This token is provided by GitHub Actions. |
| 28 | + |
| 29 | + publish-docker-image: |
| 30 | + name: Publish Docker Image (${{ matrix.platform }}) |
| 31 | + runs-on: ${{ matrix.runner }} |
| 32 | + needs: [publish-binary] |
| 33 | + strategy: |
| 34 | + matrix: |
| 35 | + include: |
| 36 | + - platform: linux/amd64 |
| 37 | + runner: ubuntu-24.04 |
| 38 | + target: x86_64-unknown-linux-musl |
| 39 | + suffix: amd64 |
| 40 | + - platform: linux/arm64 |
| 41 | + runner: ubuntu-24.04-arm |
| 42 | + target: aarch64-unknown-linux-musl |
| 43 | + suffix: arm64 |
| 44 | + steps: |
| 45 | + - name: Checkout code. |
| 46 | + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 |
| 47 | + - name: Set up Docker Buildx |
| 48 | + uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0 |
| 49 | + - name: Login to GitHub Container Registry |
| 50 | + uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0 |
| 51 | + with: |
| 52 | + registry: ghcr.io |
| 53 | + username: ${{ github.actor }} |
| 54 | + password: ${{ secrets.GITHUB_TOKEN }} |
| 55 | + - name: Publish Docker Image |
| 56 | + run: make publish-docker-image RELEASE="${GITHUB_REF_NAME}" PLATFORM="${{ matrix.platform }}" TARGET="${{ matrix.target }}" SUFFIX="${{ matrix.suffix }}" |
| 57 | + env: |
| 58 | + GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} |
| 59 | + |
| 60 | + publish-docker-manifest: |
| 61 | + name: Publish Docker Manifest |
| 62 | + runs-on: ubuntu-24.04 |
| 63 | + needs: [publish-docker-image] |
| 64 | + steps: |
| 65 | + - name: Checkout code. |
| 66 | + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 |
| 67 | + - name: Set up Docker Buildx |
| 68 | + uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0 |
| 69 | + - name: Login to GitHub Container Registry |
| 70 | + uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0 |
| 71 | + with: |
| 72 | + registry: ghcr.io |
| 73 | + username: ${{ github.actor }} |
| 74 | + password: ${{ secrets.GITHUB_TOKEN }} |
| 75 | + - name: Publish Docker Manifest |
| 76 | + run: make publish-docker-manifest RELEASE="${GITHUB_REF_NAME}" |
0 commit comments