publish docker on release

Author: lobis

.github/workflows/binder.yaml

@@ -230,13 +230,11 @@ jobs:
             fi
           done
 
-  upload-test-pypi:
-    name: Upload wheels to Test PyPI
+  upload-pypi:
+    name: Upload wheels to PyPI
     needs: [sdist, wheels, check-wheels-size]
     runs-on: ubuntu-latest
-    if:
-      (github.event_name == 'release' && github.event.action == 'published') ||
-      github.event.inputs.publish_to_test_pypi == 'true'
+    if: github.event_name == 'release' && github.event.action == 'published'
 
     steps:
       - name: Setup Python
@@ -250,31 +248,47 @@ jobs:
           name: dist
           path: dist
 
-      - name: Publish to Test PyPI
+      - name: Publish to PyPI
         uses: pypa/[email protected]
         with:
-          password: ${{ secrets.TEST_PYPI_API_TOKEN }}
-          repository-url: https://test.pypi.org/legacy/
+          password: ${{ secrets.PYPI_API_TOKEN }}
 
-  upload-pypi:
-    name: Upload wheels to PyPI
-    needs: [sdist, wheels, check-wheels-size]
+  publish-docker:
+    name: Publish Docker image
+    needs: [upload-pypi]
     runs-on: ubuntu-latest
-    if: github.event_name == 'release' && github.event.action == 'published'
+    permissions:
+      contents: read
+      packages: write
 
     steps:
-      - name: Setup Python
-        uses: actions/setup-python@v5
-        with:
-          python-version: 3.11
+      - uses: actions/checkout@v4
 
-      - name: Download wheels
-        uses: actions/download-artifact@v3
+      - name: Log in to the GitHub Container registry
+        uses: docker/login-action@v3
         with:
-          name: dist
-          path: dist
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.CONTAINER_REGISTRY_GITHUB_TOKEN }}
 
-      - name: Publish to PyPI
-        uses: pypa/[email protected]
+      - name: Build Docker image
+        uses: docker/build-push-action@v5
         with:
-          password: ${{ secrets.PYPI_API_TOKEN }}
+          context: .
+          push: false
+          tags: |
+            ghcr.io/lobis/geant4-python-application:latest
+            ghcr.io/lobis/geant4-python-application:${{ github.event.release.tag_name }}
+
+          labels: |
+            maintainer.name=Luis Antonio Obis Aparicio
+            [email protected]
+            org.opencontainers.image.source=${{ github.repository }}
+
+      - name: Test image
+        run: |
+          docker run --rm ghcr.io/lobis/geant4-python-application:latest -c 'import geant4_python_application; app = geant4_python_application.Application()'
+
+      - name: Publish
+        run: |
+          docker push ghcr.io/lobis/geant4-python-application:latest

.github/workflows/docker.yaml

@@ -1,60 +1,5 @@
-FROM python:3.11-slim-bullseye as builder
+FROM python:3.12-slim-bullseye as builder
 
-RUN apt-get update -qq && apt-get install -q -y --no-install-recommends \
-    build-essential ninja-build git \
-    && apt-get clean \
-    && rm -rf /var/lib/apt/lists/*
-
-# Install a more recent CMake version
-RUN pip install cmake
-
-ARG CMAKE_CXX_STANDARD=20
-ARG GEANT4_VERSION=11.1.3
-ARG XERCES_VERSION=3.2.4
-
-RUN git clone https://github.com/apache/xerces-c.git /tmp/xerces \
-    && git -C /tmp/xerces checkout tags/v${XERCES_VERSION} \
-    && cmake -G Ninja -B /tmp/xerces/build -S /tmp/xerces \
-    -DCMAKE_INSTALL_PREFIX=/opt/xerces \
-    -DCMAKE_CXX_STANDARD=20 \
-    -DCMAKE_BUILD_TYPE=Release \
-    -DBUILD_SHARED_LIBS=OFF \
-    -Dnetwork-accessor=socket \
-    -Dtranscoder=iconv \
-    -DCMAKE_CXX_FLAGS=-fPIC \
-    -DCMAKE_C_FLAGS=-fPIC \
-    && cmake --build /tmp/xerces/build -j$(nproc) --target install \
-    && rm -rf /tmp/xerces
-
-RUN git clone https://github.com/Geant4/geant4.git /tmp/geant4 --branch=v${GEANT4_VERSION} --depth=1 \
-    && cmake -G Ninja -B /tmp/geant4/build -S /tmp/geant4 \
-    -DCMAKE_INSTALL_PREFIX=/opt/geant4 \
-    -DXERCESC_ROOT_DIR=/opt/xerces \
-    -DCMAKE_CXX_STANDARD=20 \
-    -DCMAKE_BUILD_TYPE=Release \
-    -DGEANT4_USE_GDML=ON \
-    -DGEANT4_INSTALL_EXAMPLES=OFF \
-    -DGEANT4_INSTALL_DATA=OFF \
-    -DGEANT4_BUILD_TLS_MODEL=global-dynamic \
-    -DCMAKE_CXX_FLAGS=-fPIC \
-    -DCMAKE_C_FLAGS=-fPIC \
-    -DGEANT4_USE_SYSTEM_EXPAT=OFF \
-    -DBUILD_STATIC_LIBS=ON \
-    -DBUILD_SHARED_LIBS=OFF \
-    && cmake --build /tmp/geant4/build -j$(nproc) --target install \
-    && rm -rf /tmp/geant4
-
-COPY . /source
-
-# Build and install
-RUN bash /opt/geant4/bin/geant4.sh \
-    && pip install /source \
-    && rm -rf /source
-
-# Create the final image
-FROM python:3.11-slim-bullseye
-
-# Copy installed Python package from the builder image
-COPY --from=builder /usr/local/lib/python3.11/site-packages /usr/local/lib/python3.11/site-packages
+RUN python -m pip install --no-cache-dir geant4-python-application
 
 ENTRYPOINT ["python"]