container-release.yml

name: Container Release
on:
  push:
    paths:
      - containers/labs344/**
      - .github/workflows/container-release.yml # Self-trigger
  workflow_dispatch:
    inputs:
      publish:
        description: "Publish to the container registry"
        required: false
        default: false
        type: boolean

env:
  REGISTRY: ghcr.io/${{ github.repository_owner }}
  IMAGE_NAME: labs344
  HOSTARCH: amd64
  PLATFORM: linux-amd64
  CONTAINER_VERSION: latest
  CONTAINER_LATEST_VERSION: latest
  CONTAINERS_ROOT: /home/runner/.local/share/containers
  TMPDIR: /home/runner/.local/share/containers/tmp

permissions:
  contents: read
  packages: write

jobs:
  buildah-build:
    name: Build container images
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-24.04, ubuntu-24.04-arm]
    runs-on: ${{ matrix.os }}
    concurrency:
      group: ${{ github.workflow }}-${{ github.ref }}-${{ matrix.os }}
      cancel-in-progress: true

    steps:
      - name: Install container tools
        run: sudo apt-get install podman buildah jq

      - name: Maximize build space
        uses: easimon/maximize-build-space@v10
        with:
          root-reserve-mb: 2048 # Reserve disk space for repository
          remove-dotnet: "true"
          remove-android: "true"
          remove-haskell: "true"
          remove-codeql: "true"
          remove-docker-images: "true"
          build-mount-path: ${{ env.CONTAINERS_ROOT }} # The remaining space only for container build
          
      - run: mkdir -p $TMPDIR

      - name: Prepare environment variables
        run: |
          echo "HOSTARCH=$(podman info --format='{{.Host.Arch}}')" >> $GITHUB_ENV
          echo "PLATFORM=$(podman info --format='{{.Version.OsArch}}' | sed 's/\//-/g')" >> $GITHUB_ENV
          echo "CONTAINER_VERSION=$(date +'%Y%m%d')" >> $GITHUB_ENV

      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Log in to the GitHub Container registry
        uses: redhat-actions/podman-login@v1
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Build runtime container image
        id: build-runtime
        uses: redhat-actions/buildah-build@v2
        with:
          context: .
          image: labs344
          tags: ${{ env.CONTAINER_VERSION }}-runtime ${{ env.CONTAINER_VERSION }}-runtime-${{ env.HOSTARCH }}
          layers: true
          oci: true
          build-args: |
            CONTAINER_VERSION=${{ env.CONTAINER_VERSION }}
            CONTAINER_IMAGE_REGISTRY_REMOTE=${{ env.REGISTRY }}
          extra-args: |
            --target labs344-runtime
          containerfiles: |
            ./containers/labs344/Dockerfile

      - name: Push to GitHub Container Repository
        if: github.event_name == 'workflow_dispatch' && github.event.inputs.publish
        id: push-runtime-ghcr
        uses: redhat-actions/push-to-registry@v2
        with:
          registry: ${{ env.REGISTRY }}
          image: ${{ steps.build-runtime.outputs.image }}
          tags: ${{ env.CONTAINER_VERSION }}-runtime-${{ env.HOSTARCH }}
          digestfile: ${{ runner.temp }}/digest-labs344-runtime-${{ env.CONTAINER_VERSION }}-${{ env.PLATFORM }}

      - name: Upload digests
        if: github.event_name == 'workflow_dispatch' && github.event.inputs.publish
        uses: actions/upload-artifact@v4
        with:
          name: digest-labs344-${{ env.CONTAINER_VERSION }}-${{ env.PLATFORM }}
          path: ${{ runner.temp }}/digest-*
          if-no-files-found: error
          retention-days: 1
          compression-level: 0 # no compression

  buildah-merge:
    name: Merge container images
    runs-on: ubuntu-24.04
    needs: buildah-build
    if: always() && github.event_name == 'workflow_dispatch' && github.event.inputs.publish
    steps:
      - name: Download digests
        uses: actions/download-artifact@v4
        with:
          path: ${{ runner.temp }}/digests
          pattern: digest-*
          merge-multiple: true

      - name: Log in to the GitHub Container registry
        uses: redhat-actions/podman-login@v1
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.repository_owner }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Prepare environment variables
        run: |
          if [ "${{ env.CONTAINER_VERSION }}" == "latest" ]; then
            echo "CONTAINER_VERSION=$(date +'%Y%m%d')" >> $GITHUB_ENV
          fi
          echo "CONTAINER_LATEST_VERSION=$(date +'%Y%m%d')" >> $GITHUB_ENV

      - name: Create and push manifest list for labs344-runtime
        run: |
          MANIFEST=labs344-runtime
          FULL_IMAGE_NAME=${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
          buildah manifest create $MANIFEST
          for digest in ${{ runner.temp }}/digests/digest-labs344-runtime-*; do
            echo "Adding $(cat $digest)"
            buildah manifest add $MANIFEST $FULL_IMAGE_NAME@$(cat $digest)
          done
          buildah manifest push --all $MANIFEST docker://$FULL_IMAGE_NAME:${{ env.CONTAINER_VERSION }}-runtime
          if [ "${{ env.CONTAINER_VERSION }}" == "${{ env.CONTAINER_LATEST_VERSION }}" ]; then
            buildah manifest push --all $MANIFEST docker://$FULL_IMAGE_NAME:latest
            buildah manifest push --all $MANIFEST docker://$FULL_IMAGE_NAME:latest-runtime
          fi