ci: CI for build/test/publish container

Signed-off-by: Josh Morman <jmorman@gnuradio.org>

Author: mormj

.github/workflows/ci.yml

@@ -0,0 +1,104 @@
+name: CI
+
+on:
+  workflow_dispatch:
+  pull_request:
+  push:
+    branches:
+      - main
+
+permissions:
+  contents: read
+  packages: write
+
+env:
+  IMAGE_NAME: ghcr.io/${{ github.repository_owner }}/gr4-incubator-ci
+
+jobs:
+  qa-tests:
+    runs-on: ubuntu-latest
+    timeout-minutes: 90
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Login to GHCR
+        uses: docker/login-action@v3
+        continue-on-error: true
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build CI image (load for test run)
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: docker/Dockerfile
+          target: ci
+          tags: gr4-incubator-ci:local
+          load: true
+          push: false
+          cache-from: type=registry,ref=${{ env.IMAGE_NAME }}:buildcache
+          cache-to: type=registry,ref=${{ env.IMAGE_NAME }}:buildcache,mode=max
+
+      - name: Configure and build
+        run: |
+          docker run --rm \
+            -v "${{ github.workspace }}:/workspaces/gr4-incubator" \
+            -w /workspaces/gr4-incubator \
+            gr4-incubator-ci:local bash -lc '
+            set -euo pipefail
+            cmake -S . -B build -G Ninja \
+              -DENABLE_TESTING=ON \
+              -DENABLE_EXAMPLES=ON \
+              -DENABLE_GUI_EXAMPLES=OFF
+            cmake --build build -j"$(nproc)"
+          '
+
+      - name: Run QA tests
+        run: |
+          docker run --rm \
+            -v "${{ github.workspace }}:/workspaces/gr4-incubator" \
+            -w /workspaces/gr4-incubator \
+            gr4-incubator-ci:local bash -lc '
+            set -euo pipefail
+            ctest --test-dir build --output-on-failure -R "^qa_"
+          '
+
+  publish-image:
+    runs-on: ubuntu-latest
+    timeout-minutes: 90
+    needs: qa-tests
+    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Login to GHCR
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and push CI image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: docker/Dockerfile
+          target: ci
+          push: true
+          tags: |
+            ${{ env.IMAGE_NAME }}:latest
+            ${{ env.IMAGE_NAME }}:${{ github.sha }}
+          cache-from: type=registry,ref=${{ env.IMAGE_NAME }}:buildcache
+          cache-to: type=registry,ref=${{ env.IMAGE_NAME }}:buildcache,mode=max