ci: build and push multi platform image

- change image.yml github action to build and push an
  OCI compatible multi-platform image

Author: detj

.github/workflows/image.yml

@@ -15,21 +15,26 @@ jobs:
   build-image:
     permissions:
       packages: write
-    strategy:
-      matrix:
-        arch: ["amd64", "arm64"]
+    # strategy:
+    #   matrix:
+    #     arch: ["amd64", "arm64"]
 
-    runs-on: |-
-      ${{fromJson('{
-        "amd64": "ubuntu-20.04",
-        "arm64": "ubuntu-22.04-arm"
-      }')[matrix.arch] }}
+    # runs-on: |-
+    #   ${{fromJson('{
+    #     "amd64": "ubuntu-20.04",
+    #     "arm64": "ubuntu-22.04-arm"
+    #   }')[matrix.arch] }}
+    runs-on: ubuntu-24.04
 
     env:
       # IMG_CACHE: ghcr.io/measure-sh/symbolicator:${{ matrix.arch }}-latest
-      IMG_VERSIONED: ghcr.io/measure-sh/symbolicator:${{ matrix.arch }}-${{ github.sha }}
-      NIGHTLY_IMG_CACHE: ghcr.io/measure-sh/symbolicator:${{ matrix.arch }}-nightly
-      BUILDER_IMG_CACHE: ghcr.io/measure-sh/symbolicator:${{ matrix.arch }}-builder
+      # IMG_VERSIONED: ghcr.io/measure-sh/symbolicator:${{ matrix.arch }}-${{ github.sha }}
+      # NIGHTLY_IMG_CACHE: ghcr.io/measure-sh/symbolicator:${{ matrix.arch }}-nightly
+      # BUILDER_IMG_CACHE: ghcr.io/measure-sh/symbolicator:${{ matrix.arch }}-builder
+      IMG_VERSIONED: ghcr.io/measure-sh/symbolicator:${{ github.sha }}
+      NIGHTLY_IMG_CACHE: ghcr.io/measure-sh/symbolicator:nightly
+      BUILDER_IMG_CACHE: ghcr.io/measure-sh/symbolicator:builder
+
     steps:
       - uses: actions/checkout@v4
         with:
@@ -38,45 +43,73 @@ jobs:
       - name: Docker Login
         run: docker login --username '${{ github.actor }}' --password '${{ secrets.GITHUB_TOKEN }}' ghcr.io
 
-      - name: build builder img
+      # - name: build builder img
+      #   run: |
+      #     set -euxo pipefail
+      #     args=()
+      #     if docker pull -q "$BUILDER_IMG_CACHE"; then
+      #       args+=(--cache-from "$BUILDER_IMG_CACHE")
+      #     fi
+      #     docker buildx build \
+      #         "${args[@]}" \
+      #         --build-arg BUILDKIT_INLINE_CACHE=1 \
+      #         --platform linux/${{ matrix.arch }} \
+      #         --tag "$BUILDER_IMG_CACHE" \
+      #         --target symbolicator-build \
+      #         .
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      # - name: build nightly img
+      #   run: |
+      #     set -euxo pipefail
+      #     args=()
+      #     if docker pull -q "$NIGHTLY_IMG_CACHE"; then
+      #       args+=(--cache-from "$NIGHTLY_IMG_CACHE")
+      #     fi
+      #     docker buildx build \
+      #         "${args[@]}" \
+      #         --build-arg BUILDKIT_INLINE_CACHE=1 \
+      #         --platform linux/${{ matrix.arch }} \
+      #         --tag "$NIGHTLY_IMG_CACHE" \
+      #         --tag "$IMG_VERSIONED" \
+      #         --cache-from "${BUILDER_IMG_CACHE}" \
+      #         --cache-from "${NIGHTLY_IMG_CACHE}" \
+      #         .
+
+      # - name: push all images
+      #   if: github.event_name != 'pull_request'
+      #   run: |
+      #     docker push "$BUILDER_IMG_CACHE"
+      #     docker push "$NIGHTLY_IMG_CACHE"
+      #     docker push "$IMG_VERSIONED"
+
+      #     # for now arm64 is too slow so just retag this as latest
+      #     docker tag "$IMG_VERSIONED" ghcr.io/measure-sh/symbolicator:latest
+      #     docker push ghcr.io/measure-sh/symbolicator:latest
+
+      - name: Build and push OCI multi-platform image
         run: |
           set -euxo pipefail
           args=()
           if docker pull -q "$BUILDER_IMG_CACHE"; then
             args+=(--cache-from "$BUILDER_IMG_CACHE")
           fi
-          docker buildx build \
-              "${args[@]}" \
-              --build-arg BUILDKIT_INLINE_CACHE=1 \
-              --platform linux/${{ matrix.arch }} \
-              --tag "$BUILDER_IMG_CACHE" \
-              --target symbolicator-build \
-              .
-
-      - name: build nightly img
-        run: |
-          set -euxo pipefail
-          args=()
           if docker pull -q "$NIGHTLY_IMG_CACHE"; then
             args+=(--cache-from "$NIGHTLY_IMG_CACHE")
           fi
           docker buildx build \
-              "${args[@]}" \
-              --build-arg BUILDKIT_INLINE_CACHE=1 \
-              --platform linux/${{ matrix.arch }} \
-              --tag "$NIGHTLY_IMG_CACHE" \
-              --tag "$IMG_VERSIONED" \
-              --cache-from "${BUILDER_IMG_CACHE}" \
-              --cache-from "${NIGHTLY_IMG_CACHE}" \
-              .
+            "${args[@]}" \
+            --build-arg BUILD_KIT_INLINE_CACHE=1 \
+            --platform linux/amd64,linux/arm64 \
+            --tag "$NIGHTLY_IMG_CACHE" \
+            --tag "$IMG_VERSIONED" \
+            --push .
 
-      - name: push all images
+      - name: Retag as latest and push
         if: github.event_name != 'pull_request'
         run: |
-          docker push "$BUILDER_IMG_CACHE"
-          docker push "$NIGHTLY_IMG_CACHE"
-          docker push "$IMG_VERSIONED"
-
-          # for now arm64 is too slow so just retag this as latest
+          docker pull "$IMG_VERSIONED"
           docker tag "$IMG_VERSIONED" ghcr.io/measure-sh/symbolicator:latest
           docker push ghcr.io/measure-sh/symbolicator:latest