adopt generic iocs container build CI

Author: gilesknap

.github/workflows/code.yml

@@ -1,82 +1,93 @@
-name: Code CI
+name: Build and publish image to ghcr.io/epics-containers
 
 on:
   push:
-    branches:
-      - main
-    tags:
-      - "*"
   pull_request:
 
 jobs:
-  make-container:
-    runs-on: ubuntu-latest
+  build:
+    # pull requests are a duplicate of a branch push if within the same repo.
+    if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name != github.repository
     permissions:
       contents: read
       packages: write
+    strategy:
+      fail-fast: false
+      matrix:
+        epics-target: [linux-x86_64]
+
+    runs-on: ${{ matrix.os }}
+    outputs:
+      developer-tag: ${{ steps.meta-developer.outputs.tags }}
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
+        with:
+          submodules: recursive
 
       - name: Log in to GitHub Docker Registry
-        if: github.event_name != 'pull_request'
-        uses: docker/login-action@v1
+        uses: docker/login-action@v3
         with:
-          registry: ghcr.io
+          registry: ghcr.io/${{ github.repository_owner }}
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Docker meta
-        id: meta
-        uses: docker/metadata-action@v4
-        with:
-          images: ghcr.io/${{ github.repository }}
-          tags: |
-            type=ref,event=tag
-            type=raw,value=latest
-
       - name: Set up Docker Buildx
-        id: buildx
-        uses: docker/setup-buildx-action@v1
+        uses: docker/setup-buildx-action@v3
 
-      - name: Cache Docker layers
-        uses: actions/cache@v2
+      - name: Build image
+        uses: docker/build-push-action@v5
         with:
-          path: /tmp/.buildx-cache
-          key: ${{ runner.os }}-buildx-${{ github.sha }}
-          restore-keys: |
-            ${{ runner.os }}-buildx-
+          context: .
+          platforms: ${{ matrix.platform }}
+          target: runtime
+          build-args: |
+            IMAGE_EXT=${{ matrix.extension }}
+          cache-from: type=gha,scope=${{ matrix.epics-target }}
+          cache-to: type=gha,mode=max,scope=${{ matrix.epics-target }}
+          tags: ci_test
+          load: true
 
-      - name: Build runtime image
-        uses: docker/build-push-action@v2
+      - name: Developer target metadata
+        id: meta-developer
+        uses: docker/metadata-action@v3
         with:
-          context: docker
-          push: ${{ github.event_name != 'pull_request' }}
-          tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
-          cache-from: type=local,src=/tmp/.buildx-cache
-          cache-to: type=local,dest=/tmp/.buildx-cache-new
-
-      # Stop the cache growing indefinitely (remove when the below is fixed)
-      # When removing this change cache-to above
-      # https://github.com/docker/build-push-action/issues/252#issuecomment-744400434
-      - name: Move cache
-        run: |
-          rm -rf /tmp/.buildx-cache
-          mv /tmp/.buildx-cache-new /tmp/.buildx-cache
+          images: |
+            ghcr.io/${{ github.repository_owner }}/${{ github.event.repository.name }}
+          tags: |
+            type=raw,value=${{ github.ref_name }}
 
+      - name: Push developer image
+        if: ${{ github.event_name == 'push' && github.ref_type == 'tag' }}
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          platforms: ${{ matrix.platform }}
+          target: developer
+          build-args: |
+            IMAGE_EXT=${{ matrix.extension }}
+          tags: ${{ steps.meta-developer.outputs.tags }}
+          labels: ${{ steps.meta-developer.outputs.labels }}
+          push: true
   release:
-    needs: [make-container]
-    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
-    runs-on: "ubuntu-latest"
+    # Release on tag push - publish ioc schema
+    needs: [build]
+    if: ${{ github.event_name == 'push' && github.ref_type == 'tag' }}
+    runs-on: ubuntu-latest
+
+    # this job runs in the native developer container we just made
+    container:
+      image: ${{ needs.build.outputs.developer-tag }}
+
     steps:
-      - name: Checkout
-        uses: actions/checkout@v2
+      - name: report container tag name
+        run: |
+          echo developer container image tag is ${{ needs.build.outputs.developer-tag }}
 
       - name: Github Release
-        uses: softprops/action-gh-release@1e07f4398721186383de40550babbdf2b84acfc5 # v0.1.14
+        uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v0.1.15
         with:
+          files: |
+            ibek.ioc.schema.json
           generate_release_notes: true
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}