fix(#33711): cross-publish docker images to ghcr.io

Author: a1994sc

.github/workflows/release-nightly.yml

@@ -69,6 +69,7 @@ jobs:
           go-version-file: go.mod
           check-latest: true
       - uses: docker/setup-qemu-action@v3
+      - uses: oras-project/setup-oras@v1
       - uses: docker/setup-buildx-action@v3
       - name: Get cleaned branch name
         id: clean_name
@@ -85,6 +86,12 @@ jobs:
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
+      - name: Login to GHCR using PAT
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
       - name: fetch go modules
         run: make vendor
       - name: build rootful docker image
@@ -94,6 +101,10 @@ jobs:
           platforms: linux/amd64,linux/arm64
           push: true
           tags: gitea/gitea:${{ steps.clean_name.outputs.branch }}
+      - name: copy rootful docker image to ghcr.io
+        # this will also copy both the amd64 and arm64 versions at the same time
+        run: |-
+          oras cp --recursive docker.io/gitea/gitea:${{ steps.meta.outputs.tags }} ghcr.io/gitea/gitea:${{ steps.meta.outputs.tags }}
   nightly-docker-rootless:
     runs-on: namespace-profile-gitea-release-docker
     steps:
@@ -106,6 +117,7 @@ jobs:
           go-version-file: go.mod
           check-latest: true
       - uses: docker/setup-qemu-action@v3
+      - uses: oras-project/setup-oras@v1
       - uses: docker/setup-buildx-action@v3
       - name: Get cleaned branch name
         id: clean_name
@@ -122,6 +134,12 @@ jobs:
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
+      - name: Login to GHCR using PAT
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
       - name: fetch go modules
         run: make vendor
       - name: build rootless docker image
@@ -132,3 +150,7 @@ jobs:
           push: true
           file: Dockerfile.rootless
           tags: gitea/gitea:${{ steps.clean_name.outputs.branch }}-rootless
+      - name: copy rootful docker image to ghcr.io
+        # this will also copy both the amd64 and arm64 versions at the same time
+        run: |-
+          oras cp --recursive docker.io/gitea/gitea:${{ steps.meta.outputs.tags }} ghcr.io/gitea/gitea:${{ steps.meta.outputs.tags }}

.github/workflows/release-tag-rc.yml

@@ -76,6 +76,7 @@ jobs:
       - run: git fetch --unshallow --quiet --tags --force
       - uses: docker/setup-qemu-action@v3
       - uses: docker/setup-buildx-action@v3
+      - uses: oras-project/setup-oras@v1
       - uses: docker/metadata-action@v5
         id: meta
         with:
@@ -90,6 +91,12 @@ jobs:
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
+      - name: Login to GHCR using PAT
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
       - name: build rootful docker image
         uses: docker/build-push-action@v5
         with:
@@ -98,6 +105,10 @@ jobs:
           push: true
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
+      - name: copy rootful docker image to ghcr.io
+        # this will also copy both the amd64 and arm64 versions at the same time
+        run: |-
+          oras cp --recursive docker.io/gitea/gitea:${{ steps.meta.outputs.tags }} ghcr.io/gitea/gitea:${{ steps.meta.outputs.tags }}
   docker-rootless:
     runs-on: namespace-profile-gitea-release-docker
     steps:
@@ -107,6 +118,7 @@ jobs:
       - run: git fetch --unshallow --quiet --tags --force
       - uses: docker/setup-qemu-action@v3
       - uses: docker/setup-buildx-action@v3
+      - uses: oras-project/setup-oras@v1
       - uses: docker/metadata-action@v5
         id: meta
         with:
@@ -123,6 +135,12 @@ jobs:
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
+      - name: Login to GHCR using PAT
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
       - name: build rootless docker image
         uses: docker/build-push-action@v5
         with:
@@ -132,3 +150,7 @@ jobs:
           file: Dockerfile.rootless
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
+      - name: copy rootful docker image to ghcr.io
+        # this will also copy both the amd64 and arm64 versions at the same time
+        run: |-
+          oras cp --recursive docker.io/gitea/gitea:${{ steps.meta.outputs.tags }} ghcr.io/gitea/gitea:${{ steps.meta.outputs.tags }}

.github/workflows/release-tag-version.yml

@@ -78,6 +78,7 @@ jobs:
       - run: git fetch --unshallow --quiet --tags --force
       - uses: docker/setup-qemu-action@v3
       - uses: docker/setup-buildx-action@v3
+      - uses: oras-project/setup-oras@v1
       - uses: docker/metadata-action@v5
         id: meta
         with:
@@ -96,6 +97,12 @@ jobs:
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
+      - name: Login to GHCR using PAT
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
       - name: build rootful docker image
         uses: docker/build-push-action@v5
         with:
@@ -104,6 +111,10 @@ jobs:
           push: true
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
+      - name: copy rootful docker image to ghcr.io
+        # this will also copy both the amd64 and arm64 versions at the same time
+        run: |-
+          oras cp --recursive docker.io/gitea/gitea:${{ steps.meta.outputs.tags }} ghcr.io/gitea/gitea:${{ steps.meta.outputs.tags }}
   docker-rootless:
     runs-on: namespace-profile-gitea-release-docker
     steps:
@@ -113,6 +124,7 @@ jobs:
       - run: git fetch --unshallow --quiet --tags --force
       - uses: docker/setup-qemu-action@v3
       - uses: docker/setup-buildx-action@v3
+      - uses: oras-project/setup-oras@v1
       - uses: docker/metadata-action@v5
         id: meta
         with:
@@ -134,6 +146,12 @@ jobs:
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
+      - name: Login to GHCR using PAT
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
       - name: build rootless docker image
         uses: docker/build-push-action@v5
         with:
@@ -143,3 +161,7 @@ jobs:
           file: Dockerfile.rootless
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
+      - name: copy rootful docker image to ghcr.io
+        # this will also copy both the amd64 and arm64 versions at the same time
+        run: |-
+          oras cp --recursive docker.io/gitea/gitea:${{ steps.meta.outputs.tags }} ghcr.io/gitea/gitea:${{ steps.meta.outputs.tags }}