bitwarden-dc-docker/.github/workflows/build.yml at main · acm-uiuc/bitwarden-dc-docker · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
name: Build Multi-Arch Docker Image

on:
    workflow_dispatch:
        inputs:
            BWDC_VERSION:
                description: "BWDC Version (used as build arg and image tag)"
                required: true
                type: string
    push:
        tags:
            - "v*"

env:
    REGISTRY: ghcr.io
    IMAGE_NAME: ${{ github.repository }}

jobs:
    build:
        strategy:
            matrix:
                include:
                    - platform: linux/amd64
                      runner: ubuntu-latest
                    - platform: linux/arm64
                      runner: ubuntu-24.04-arm

        runs-on: ${{ matrix.runner }}

        permissions:
            contents: read
            packages: write

        steps:
            - name: Checkout
              uses: actions/checkout@v4

            - name: Set version
              id: version
              run: |
                  if [ -n "${{ inputs.BWDC_VERSION }}" ]; then
                    echo "version=${{ inputs.BWDC_VERSION }}" >> $GITHUB_OUTPUT
                  else
                    echo "version=${GITHUB_REF_NAME#v}" >> $GITHUB_OUTPUT
                  fi

            - name: Log in to registry
              uses: docker/login-action@v3
              with:
                  registry: ${{ env.REGISTRY }}
                  username: ${{ github.actor }}
                  password: ${{ secrets.GITHUB_TOKEN }}

            - name: Set up Docker Buildx
              uses: docker/setup-buildx-action@v3

            - name: Extract platform name
              id: platform
              run: |
                  PLATFORM=${{ matrix.platform }}
                  echo "name=${PLATFORM//\//-}" >> $GITHUB_OUTPUT

            - name: Build and push by digest
              id: build
              uses: docker/build-push-action@v6
              with:
                  context: .
                  platforms: ${{ matrix.platform }}
                  build-args: |
                      BWDC_VERSION=${{ steps.version.outputs.version }}
                  outputs: type=image,name=${{ env.REGISTRY }}/${{ env.IMAGE_NAME }},push-by-digest=true,name-canonical=true,push=true

            - name: Export digest
              run: |
                  mkdir -p /tmp/digests
                  digest="${{ steps.build.outputs.digest }}"
                  touch "/tmp/digests/${digest#sha256:}"

            - name: Upload digest
              uses: actions/upload-artifact@v4
              with:
                  name: digests-${{ steps.platform.outputs.name }}
                  path: /tmp/digests/*
                  if-no-files-found: error
                  retention-days: 1

    merge:
        runs-on: ubuntu-latest
        needs: build

        permissions:
            contents: read
            packages: write

        steps:
            - name: Set version
              id: version
              run: |
                  if [ -n "${{ inputs.BWDC_VERSION }}" ]; then
                    echo "version=${{ inputs.BWDC_VERSION }}" >> $GITHUB_OUTPUT
                  else
                    echo "version=${GITHUB_REF_NAME#v}" >> $GITHUB_OUTPUT
                  fi

            - name: Download digests
              uses: actions/download-artifact@v4
              with:
                  path: /tmp/digests
                  pattern: digests-*
                  merge-multiple: true

            - name: Log in to registry
              uses: docker/login-action@v3
              with:
                  registry: ${{ env.REGISTRY }}
                  username: ${{ github.actor }}
                  password: ${{ secrets.GITHUB_TOKEN }}

            - name: Create manifest list and push
              working-directory: /tmp/digests
              run: |
                  docker buildx imagetools create \
                    -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.version }} \
                    -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest \
                    $(printf '${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}@sha256:%s ' *)

            - name: Inspect image
              run: |
                  docker buildx imagetools inspect ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.version }}