ci.yml

name: CI

on:
  push:
    paths:
    - 'dockerfiles/**'
    - 'scripts/deploy.py'
    - 'scripts/create-layer.sh'
    - 'tests/*'
    - '.github/workflows/ci.yml'
    branches:
    - master
    tags:
    - '*'
  pull_request:

env:
  GDAL_VERSION_AL2: 3.8.3
  GDAL_VERSION_TAG_AL2: 3.8
  GDAL_VERSION_AL2023: 3.11.5
  GDAL_VERSION_TAG_AL2023: 3.11

jobs:
  build-al2:
    runs-on: ubuntu-latest
    if: "!contains(github.event.head_commit.message, '[skip ci]')"
    steps:
      - uses: actions/checkout@v4

      - name: Set registry owner
        run: |
          owner="${{ github.repository_owner }}"
          echo "REGISTRY_OWNER=${owner,,}" >> $GITHUB_ENV

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: '3.13'

      - name: Install dependencies
        run: |
          python -m pip install --upgrade pip
          python -m pip install boto3 click

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Login to Github
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.repository_owner }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Build AL2
        uses: docker/build-push-action@v6
        with:
          platforms: linux/amd64
          context: .
          load: true
          file: dockerfiles/Dockerfile
          build-args: |
            GDAL_VERSION=${{ env.GDAL_VERSION_AL2 }}
          tags: ghcr.io/${{ env.REGISTRY_OWNER }}/lambda-gdal:${{ env.GDAL_VERSION_TAG_AL2 }}-al2
          cache-from: type=gha,scope=al2
          cache-to: type=gha,mode=max,scope=al2

      - name: Test AL2
        run: |
          docker run \
            --platform=linux/amd64 \
            --entrypoint bash \
            -v ${{ github.workspace }}:/local \
            --rm ghcr.io/${{ env.REGISTRY_OWNER }}/lambda-gdal:${{ env.GDAL_VERSION_TAG_AL2 }}-al2 \
            /local/tests/tests.sh

  build-al2023:
    runs-on: ubuntu-latest
    if: "!contains(github.event.head_commit.message, '[skip ci]')"
    steps:
      - uses: actions/checkout@v4

      - name: Set registry owner
        run: |
          owner="${{ github.repository_owner }}"
          echo "REGISTRY_OWNER=${owner,,}" >> $GITHUB_ENV

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: '3.13'

      - name: Install dependencies
        run: |
          python -m pip install --upgrade pip
          python -m pip install boto3 click

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Login to Github
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.repository_owner }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Build AL2023
        uses: docker/build-push-action@v6
        with:
          platforms: linux/amd64
          context: .
          load: true
          file: dockerfiles/Dockerfile.al2023
          build-args: |
            GDAL_VERSION=${{ env.GDAL_VERSION_AL2023 }}
          tags: ghcr.io/${{ env.REGISTRY_OWNER }}/lambda-gdal:${{ env.GDAL_VERSION_TAG_AL2023 }}-al2023
          cache-from: type=gha,scope=al2023
          cache-to: type=gha,mode=max,scope=al2023

      - name: Test AL2023
        run: |
          docker run \
            --platform=linux/amd64 \
            --entrypoint bash \
            -v ${{ github.workspace }}:/local \
            --rm ghcr.io/${{ env.REGISTRY_OWNER }}/lambda-gdal:${{ env.GDAL_VERSION_TAG_AL2023 }}-al2023 \
            /local/tests/tests.sh

  deploy:
    needs: [build-al2, build-al2023]
    runs-on: ubuntu-latest
    if: contains(github.ref, 'tags') && github.event_name == 'push'
    steps:
      - uses: actions/checkout@v4

      - name: Set registry owner
        run: |
          owner="${{ github.repository_owner }}"
          echo "REGISTRY_OWNER=${owner,,}" >> $GITHUB_ENV

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: '3.13'

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Login to Github
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.repository_owner }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          aws-region: us-east-1

      - name: Publish AL2 docker image
        uses: docker/build-push-action@v6
        with:
          platforms: linux/amd64
          context: .
          file: dockerfiles/Dockerfile
          build-args: |
            GDAL_VERSION=${{ env.GDAL_VERSION_AL2 }}
          push: true
          cache-from: type=gha,scope=al2
          tags: |
            ghcr.io/${{ env.REGISTRY_OWNER }}/lambda-gdal:${{ env.GDAL_VERSION_TAG_AL2 }}-al2
            ghcr.io/${{ env.REGISTRY_OWNER }}/lambda-gdal:${{ env.GDAL_VERSION_TAG_AL2 }}

      - name: Publish AL2023 docker image
        uses: docker/build-push-action@v6
        with:
          platforms: linux/amd64
          context: .
          file: dockerfiles/Dockerfile.al2023
          build-args: |
            GDAL_VERSION=${{ env.GDAL_VERSION_AL2023 }}
          push: true
          cache-from: type=gha,scope=al2023
          tags: ghcr.io/${{ env.REGISTRY_OWNER }}/lambda-gdal:${{ env.GDAL_VERSION_TAG_AL2023 }}-al2023

      - name: Build and Deploy layers (AL2)
        run: |
          python -m pip install boto3 click
          docker run \
            --platform=linux/amd64 \
            --entrypoint bash \
            -v ${{ github.workspace }}:/local \
            --rm ghcr.io/${{ env.REGISTRY_OWNER }}/lambda-gdal:${{ env.GDAL_VERSION_TAG_AL2 }}-al2 \
            /local/scripts/create-layer.sh
          python scripts/deploy.py ${{ env.GDAL_VERSION_TAG_AL2 }} --deploy

      - name: Build and Deploy layers (AL2023)
        run: |
          docker run \
            --platform=linux/amd64 \
            --entrypoint bash \
            -v ${{ github.workspace }}:/local \
            --rm ghcr.io/${{ env.REGISTRY_OWNER }}/lambda-gdal:${{ env.GDAL_VERSION_TAG_AL2023 }}-al2023 \
            /local/scripts/create-layer.sh
          python scripts/deploy.py ${{ env.GDAL_VERSION_TAG_AL2023 }}-al2023 --deploy

      - name: Build Runtime and Push Python 3.10-3.11 (AL2)
        run: |
          runtimes='3.10 3.11'
          for runtime in ${runtimes}; do
            docker build \
              --platform=linux/amd64 \
              --build-arg GDAL_VERSION_TAG=${{ env.GDAL_VERSION_TAG_AL2 }}-al2 \
              --build-arg RUNTIME_VERSION=${runtime} \
              --build-arg NUMPY_VERSION=1.25 \
              --build-arg PKG_INSTALLER=yum \
              -f dockerfiles/runtimes/python \
              -t ghcr.io/${{ env.REGISTRY_OWNER }}/lambda-gdal:${{ env.GDAL_VERSION_TAG_AL2 }}-python${runtime} .
            docker push ghcr.io/${{ env.REGISTRY_OWNER }}/lambda-gdal:${{ env.GDAL_VERSION_TAG_AL2 }}-python${runtime}
          done

      - name: Build Runtime and Push Python 3.12-3.14 (AL2023)
        run: |
          runtimes='3.12 3.13 3.14'
          for runtime in ${runtimes}; do
            docker build \
              --platform=linux/amd64 \
              --build-arg GDAL_VERSION_TAG=${{ env.GDAL_VERSION_TAG_AL2023 }}-al2023 \
              --build-arg RUNTIME_VERSION=${runtime} \
              --build-arg NUMPY_VERSION=2.3.5 \
              --build-arg PKG_INSTALLER=dnf \
              -f dockerfiles/runtimes/python \
              -t ghcr.io/${{ env.REGISTRY_OWNER }}/lambda-gdal:${{ env.GDAL_VERSION_TAG_AL2023 }}-python${runtime} .
            docker push ghcr.io/${{ env.REGISTRY_OWNER }}/lambda-gdal:${{ env.GDAL_VERSION_TAG_AL2023 }}-python${runtime}
          done

  update-layer:
    needs: [deploy]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: '3.10'

      - uses: actions/setup-node@v4

      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          aws-region: us-east-1

      - name: List layers
        run: |
          python -m pip install boto3
          python scripts/list.py | jq > layer.json

      - name: Update resources
        uses: test-room-7/action-update-file@v2.0.0
        with:
            file-path: layer.json
            commit-msg: Update layer [skip ci]
            github-token: ${{ secrets.GITHUB_TOKEN }}