chore: [IDE-1660] Use internal goreleaser-cross image (#543)

Author: hoshsadiq

.github/actions/publish/action.yml

@@ -19,6 +19,9 @@ inputs:
   tag:
     description: 'Tag to upload artifacts to.'
     required: true
+  ghcr_token:
+    description: 'Token to log into ghcr.io'
+    required: true
 
 outputs:
   hashes:
@@ -40,21 +43,16 @@ runs:
       # We're using the goreleaser-cross image to facilitate this. See also: https://github.com/goreleaser/goreleaser-cross
       shell: bash
       run: |
-        set -x
+        docker login --username $DOCKER_HUB_USERNAME --password $DOCKER_HUB_TOKEN
+        echo ${{ inputs.ghcr_token }} | docker login ghcr.io -u ${{ github.actor }} --password-stdin
         CONTAINER_ID="$(
           docker run --detach \
             --volume "$PWD:$PWD" \
             --volume /var/run/docker.sock:/var/run/docker.sock \
             --entrypoint tail \
-            ghcr.io/goreleaser/goreleaser-cross:latest \
+            ghcr.io/launchdarkly/goreleaser-cross:v1.24.2  \
               -f /dev/null
         )"
-        docker exec --tty "$CONTAINER_ID" mkdir -p /musl
-        docker exec --tty "$CONTAINER_ID" bash -euo pipefail -c 'curl --retry 5 --retry-all-errors --retry-delay 5 -fsSL https://musl.cc/aarch64-linux-musl-cross.tgz -o- | tar -zxvf - -C /musl --strip-components=1'
-        docker exec --tty "$CONTAINER_ID" bash -euo pipefail -c 'curl --retry 5 --retry-all-errors --retry-delay 5 -fsSL https://musl.cc/i686-linux-musl-cross.tgz -o- | tar -zxvf - -C /musl --strip-components=1'
-        docker exec --tty "$CONTAINER_ID" bash -euo pipefail -c 'curl --retry 5 --retry-all-errors --retry-delay 5 -fsSL https://musl.cc/x86_64-linux-musl-cross.tgz -o- | tar -zxvf - -C /musl --strip-components=1'
-        docker exec --tty "$CONTAINER_ID" git config --global --add safe.directory '*'
-        docker exec --workdir "$PWD" --tty "$CONTAINER_ID" docker login --username $DOCKER_USERNAME --password $DOCKER_TOKEN
         echo "CONTAINER_ID=$CONTAINER_ID" >> "$GITHUB_ENV"
 
     - name: Run Goreleaser

.github/workflows/manual-publish.yml

@@ -23,6 +23,7 @@ jobs:
     permissions:
       id-token: write # Needed to obtain Docker tokens
       contents: write # Needed to upload release artifacts
+      packages: read # Needed to load goreleaser-cross image
     runs-on: ubuntu-latest
     outputs:
       hashes: ${{ steps.publish.outputs.hashes }}
@@ -36,7 +37,9 @@ jobs:
         name: 'Get Docker token'
         with:
           aws_assume_role: ${{ vars.AWS_ROLE_ARN }}
-          ssm_parameter_pairs: '/global/services/docker/public/username = DOCKER_USERNAME, /global/services/docker/public/token = DOCKER_TOKEN'
+          ssm_parameter_pairs: |
+            /global/services/docker/public/username = DOCKER_HUB_USERNAME,
+            /global/services/docker/public/token = DOCKER_HUB_TOKEN
 
       - uses: ./.github/actions/publish
         id: publish
@@ -45,6 +48,7 @@ jobs:
           token: ${{ secrets.GITHUB_TOKEN }}
           homebrew-gh-secret: ${{secrets.HOMEBREW_DEPLOY_KEY}}
           tag: ${{ inputs.tag }}
+          ghcr_token: "${{ secrets.GITHUB_TOKEN }}"
 
   release-ldcli-npm:
     runs-on: ubuntu-latest

.github/workflows/release-please.yml

@@ -23,9 +23,10 @@ jobs:
     permissions:
       id-token: write # Needed to obtain Docker tokens
       contents: write # Needed to upload release artifacts
+      packages: read # Needed to load goreleaser-cross image
     needs: [ release-please ]
     if: always() && (needs.release-please.outputs.release_created == 'true' || github.event_name == 'pull_request')
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04-8core-32gb
     outputs:
       hashes: ${{ steps.publish.outputs.hashes }}
     steps:
@@ -38,7 +39,9 @@ jobs:
         name: 'Get Docker token'
         with:
           aws_assume_role: ${{ vars.AWS_ROLE_ARN }}
-          ssm_parameter_pairs: '/global/services/docker/public/username = DOCKER_USERNAME, /global/services/docker/public/token = DOCKER_TOKEN'
+          ssm_parameter_pairs: |
+            /global/services/docker/public/username = DOCKER_HUB_USERNAME,
+            /global/services/docker/public/token = DOCKER_HUB_TOKEN
 
       - uses: ./.github/actions/publish
         id: publish
@@ -48,6 +51,7 @@ jobs:
           token: ${{ secrets.GITHUB_TOKEN }}
           homebrew-gh-secret: ${{secrets.HOMEBREW_DEPLOY_KEY}}
           tag: ${{ needs.release-please.outputs.tag_name }}
+          ghcr_token: "${{ secrets.GITHUB_TOKEN }}"
 
   release-ldcli-npm:
     runs-on: ubuntu-latest