feat(ci): support multi-architecture builds and manifest creation

- Updates CI pipeline to support multi-platform builds for both amd64 and arm64 architectures.
- Introduces a new job to create and push a multi-architecture Docker manifest.
- Replaces hardcoded platform settings with dynamic matrix strategy.
- Adds scripts for installing AzCopy and Azure CLI with improved architecture detection and package management.
- Removes deprecated installation method for AzCopy and Azure CLI.

Author: winromulus

.claude/settings.local.json

@@ -9,7 +9,8 @@
       "Bash(docker image inspect:*)",
       "Bash(docker inspect:*)",
       "WebFetch(domain:github.com)",
-      "Bash(mv:*)"
+      "Bash(mv:*)",
+      "WebFetch(domain:learn.microsoft.com)"
     ],
     "deny": []
   }

.github/workflows/pipeline.yaml

@@ -26,7 +26,6 @@ concurrency:
 env:
   container_image: "github-actions-runner"
   container_image_build_context: "src"
-  container_image_build_platforms: "linux/amd64,linux/arm64"
   container_image_build_dockerfile: "src/Dockerfile"
   container_image_repository_dockerhub: "emberstack"
   container_image_repository_ghcr: "ghcr.io/emberstack"
@@ -116,7 +115,14 @@ jobs:
     name: build
     if: ${{ needs.discovery.outputs.build == 'true' }}
     needs: [discovery]
-    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        include:
+          - runner: ubuntu-latest
+            platform: linux/amd64
+          - runner: ubuntu-24.04-arm
+            platform: linux/arm64
+    runs-on: ${{ matrix.runner }}
     env:
       build: ${{ needs.discovery.outputs.build }}
       build_push: ${{ needs.discovery.outputs.build_push }}
@@ -143,14 +149,8 @@ jobs:
           username: ${{ secrets.ES_DOCKERHUB_USERNAME }}
           password: ${{ secrets.ES_DOCKERHUB_PAT }}
 
-      - name: tools - docker - register QEMU
-        run: |
-          docker run --rm --privileged multiarch/qemu-user-static --reset -p yes
-
       - name: tools - docker - setup buildx
         uses: docker/setup-buildx-action@v3
-        with:
-          driver: docker-container # REQUIRED for multi-platform builds
 
       - name: docker - build and push
         uses: docker/build-push-action@v6
@@ -161,21 +161,54 @@ jobs:
             BUILD_CONFIGURATION=${{ env.build_configuration }}
           push: ${{ env.build_push == 'true' }}
           provenance: false
-          platforms: ${{ env.container_image_build_platforms }}
+          platforms: ${{ matrix.platform }}
           labels: |
             org.opencontainers.image.source=https://github.com/${{ github.repository }}
             org.opencontainers.image.url=https://github.com/${{ github.repository }}
             org.opencontainers.image.vendor=https://github.com/${{ github.repository_owner }}
             org.opencontainers.image.version=${{ env.gitVersion_SemVer }}
             org.opencontainers.image.revision=${{ github.sha }}
           tags: |
-            ${{ env.container_image_repository_dockerhub }}/${{ env.container_image }}:${{ env.gitVersion_SemVer }}
-            ${{ env.container_image_repository_ghcr }}/${{ env.container_image }}:${{ env.gitVersion_SemVer }}
+            ${{ env.container_image_repository_dockerhub }}/${{ env.container_image }}:${{ env.gitVersion_SemVer }}-${{ matrix.platform == 'linux/amd64' && 'amd64' || 'arm64' }}
+            ${{ env.container_image_repository_ghcr }}/${{ env.container_image }}:${{ env.gitVersion_SemVer }}-${{ matrix.platform == 'linux/amd64' && 'amd64' || 'arm64' }}
+
+  manifest:
+    name: create multi-arch manifest
+    if: ${{ needs.discovery.outputs.build_push == 'true' }}
+    needs: [discovery, build]
+    runs-on: ubuntu-latest
+    env:
+      gitVersion_SemVer: ${{ needs.discovery.outputs.gitVersion_SemVer }}
+    steps:
+      - name: tools - docker - login ghcr.io
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.ES_GITHUB_PAT }}
+
+      - name: tools - docker - login docker.io
+        uses: docker/login-action@v3
+        with:
+          registry: docker.io
+          username: ${{ secrets.ES_DOCKERHUB_USERNAME }}
+          password: ${{ secrets.ES_DOCKERHUB_PAT }}
+
+      - name: tools - docker - setup buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: docker - create and push multi-arch manifest
+        run: |
+          docker buildx imagetools create \
+            --tag ${{ env.container_image_repository_dockerhub }}/${{ env.container_image }}:${{ env.gitVersion_SemVer }} \
+            --tag ${{ env.container_image_repository_ghcr }}/${{ env.container_image }}:${{ env.gitVersion_SemVer }} \
+            ${{ env.container_image_repository_ghcr }}/${{ env.container_image }}:${{ env.gitVersion_SemVer }}-amd64 \
+            ${{ env.container_image_repository_ghcr }}/${{ env.container_image }}:${{ env.gitVersion_SemVer }}-arm64
 
   release:
     name: release
     if: ${{ needs.discovery.outputs.release == 'true' && github.ref == 'refs/heads/main' }}
-    needs: [discovery, build]
+    needs: [discovery, manifest]
     runs-on: ubuntu-latest
     env:
       gitVersion_SemVer: ${{ needs.discovery.outputs.gitVersion_SemVer }}
@@ -203,8 +236,6 @@ jobs:
           docker buildx imagetools create \
             --tag ${{ env.container_image_repository_dockerhub }}/${{ env.container_image }}:latest \
             --tag ${{ env.container_image_repository_ghcr }}/${{ env.container_image }}:latest \
-            --tag ${{ env.container_image_repository_dockerhub }}/${{ env.container_image }}:${{ env.gitVersion_SemVer }} \
-            --tag ${{ env.container_image_repository_ghcr }}/${{ env.container_image }}:${{ env.gitVersion_SemVer }} \
             ${{ env.container_image_repository_ghcr }}/${{ env.container_image }}:${{ env.gitVersion_SemVer }}
 
       - name: github - release - create

src/scripts/install-azcopy.sh

@@ -1,8 +1,36 @@
 #!/bin/bash
 
-wget -O azcopy.tar.gz https://aka.ms/downloadazcopy-v10-linux
-tar zxvf azcopy.tar.gz --strip-components=1 -C /usr/local/bin
+# Detect architecture and set download URL
+ARCH=$(uname -m)
+if [ "$ARCH" = "x86_64" ]; then
+    AZCOPY_ARCH="amd64"
+elif [ "$ARCH" = "aarch64" ]; then
+    AZCOPY_ARCH="arm64"
+else
+    echo "Unsupported architecture: $ARCH"
+    exit 1
+fi
+
+# Get the latest release info from GitHub API
+echo "Fetching latest AzCopy release info..."
+RELEASE_INFO=$(curl -s https://api.github.com/repos/Azure/azure-storage-azcopy/releases/latest)
+DOWNLOAD_URL=$(echo "$RELEASE_INFO" | grep -o "https://[^\"]*azcopy_linux_${AZCOPY_ARCH}_[^\"]*\.tar\.gz" | head -1)
+
+if [ -z "$DOWNLOAD_URL" ]; then
+    echo "Failed to find download URL for architecture: $AZCOPY_ARCH"
+    exit 1
+fi
+
+echo "Downloading AzCopy from: $DOWNLOAD_URL"
+wget -O azcopy.tar.gz "$DOWNLOAD_URL"
+
+# Extract directly to /usr/local/bin
+tar zxf azcopy.tar.gz --strip-components=1 -C /usr/local/bin --wildcards "*/azcopy"
+chmod +x /usr/local/bin/azcopy
 ln -sf /usr/local/bin/azcopy /usr/local/bin/azcopy10
 
+# Cleanup
+rm -f azcopy.tar.gz
+
 azcopy10 --version
 azcopy --version

src/scripts/install-azure-cli.sh

@@ -1,6 +1,35 @@
 #!/bin/bash
 
-curl -fsSL https://aka.ms/InstallAzureCLIDeb | bash
+# Install Azure CLI following official documentation
+# https://learn.microsoft.com/en-us/cli/azure/install-azure-cli-linux
 
-rm -f /etc/apt/sources.list.d/azure-cli.list
-rm -f /etc/apt/sources.list.d/azure-cli.list.save
+# Update packages and install required dependencies
+apt-get update
+apt-get install -y --no-install-recommends \
+    apt-transport-https \
+    ca-certificates \
+    curl \
+    gnupg \
+    lsb-release
+
+# Download and install Microsoft signing key
+mkdir -p /etc/apt/keyrings
+curl -sLS https://packages.microsoft.com/keys/microsoft.asc | \
+    gpg --dearmor | tee /etc/apt/keyrings/microsoft.gpg > /dev/null
+chmod go+r /etc/apt/keyrings/microsoft.gpg
+
+# Add Azure CLI repository using the new DEB822 format
+AZ_DIST=$(lsb_release -cs)
+echo "Types: deb
+URIs: https://packages.microsoft.com/repos/azure-cli/
+Suites: ${AZ_DIST}
+Components: main
+Architectures: $(dpkg --print-architecture)
+Signed-by: /etc/apt/keyrings/microsoft.gpg" | tee /etc/apt/sources.list.d/azure-cli.sources
+
+# Install Azure CLI
+apt-get update
+apt-get install -y azure-cli
+
+# Verify installation
+az --version