chore(ci): update ci pipelines to use the proper runners

calebevans · calebevans · commit 5d29e35993fe · 2025-07-29T20:51:39.000Z
diff --git a/.github/release.yml b/.github/release.yml
@@ -4,4 +4,4 @@
      - title: Fixes
        labels: [bug, fix, patch]
      - title: Other
-       labels: [chore]
+       labels: [chore]
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -8,10 +8,15 @@ on:
     branches:
       - main
 
+env:
+  IMAGE_NAME: podmortem-log-parser
+  DOCKERFILE: ./src/main/docker/Dockerfile.native
+  DEP_STAGE: dependencies
+
 jobs:
   warm-cache:
     name: Warm Dependencies Cache
-    runs-on: self-hosted
+    runs-on: [self-hosted, linux]
     permissions:
       contents: read
       packages: write
@@ -34,16 +39,16 @@ jobs:
         uses: docker/build-push-action@v6
         with:
           context: .
-          file: ./src/main/docker/Dockerfile.native
-          target: dependencies
+          file: ${{ env.DOCKERFILE }}
+          target: ${{ env.DEP_STAGE }}
           platforms: linux/amd64
           push: ${{ github.event_name == 'push' }}
           cache-from: type=gha,scope=deps
           cache-to: |
             type=gha,mode=max,scope=deps
-            ${{ github.event_name == 'push' && format('type=registry,ref=ghcr.io/{0}/podmortem-log-parser:deps-cache,mode=max', github.repository_owner) || '' }}
+            ${{ github.event_name == 'push' && format('type=registry,ref=ghcr.io/{0}/{1}:deps-cache,mode=max', github.repository_owner, env.IMAGE_NAME) || '' }}
           tags: |
-            ${{ github.event_name == 'push' && format('ghcr.io/{0}/podmortem-log-parser:deps-cache', github.repository_owner) || '' }}
+            ${{ github.event_name == 'push' && format('ghcr.io/{0}/{1}:deps-cache', github.repository_owner, env.IMAGE_NAME) || '' }}
           build-args: |
             GITHUB_USER=${{ github.actor }}
           secrets: |
@@ -53,7 +58,7 @@ jobs:
     name: Test Build
     if: github.event_name == 'pull_request'
     needs: warm-cache
-    runs-on: self-hosted
+    runs-on: [self-hosted, linux]
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -65,7 +70,7 @@ jobs:
         uses: docker/build-push-action@v6
         with:
           context: .
-          file: ./src/main/docker/Dockerfile.native
+          file: ${{ env.DOCKERFILE }}
           platforms: linux/amd64
           push: false
           cache-from: |
@@ -81,18 +86,19 @@ jobs:
     name: Build ${{ matrix.arch }}
     if: github.event_name == 'push' && github.ref == 'refs/heads/main'
     needs: warm-cache
-    runs-on: self-hosted
+    runs-on: ${{ matrix.runner }}
     permissions:
       contents: read
       packages: write
     strategy:
       matrix:
-        arch: [amd64, arm64]
         include:
           - arch: amd64
             platform: linux/amd64
+            runner: [self-hosted, linux]
           - arch: arm64
             platform: linux/arm64
+            runner: ubuntu-22.04-arm
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -111,15 +117,15 @@ jobs:
         uses: docker/build-push-action@v6
         with:
           context: .
-          file: ./src/main/docker/Dockerfile.native
+          file: ${{ env.DOCKERFILE }}
           platforms: ${{ matrix.platform }}
           push: true
           cache-from: |
             type=gha,scope=deps
             type=gha,scope=build-${{ matrix.arch }}
-          cache-to: type=gha,mode=max,scope=build-${{ matrix.arch }}
+          cache-to: type=gha,mode=max,scope=build-amd64
           tags: |
-            ghcr.io/${{ github.repository_owner }}/podmortem-log-parser:${{ github.sha }}-${{ matrix.arch }}
+            ghcr.io/${{ github.repository_owner }}/${{ env.IMAGE_NAME }}:${{ github.sha }}-${{ matrix.arch }}
           build-args: |
             GITHUB_USER=${{ github.actor }}
           secrets: |
@@ -129,7 +135,7 @@ jobs:
     name: Create Multi-Arch Manifest
     if: github.event_name == 'push' && github.ref == 'refs/heads/main'
     needs: build-arch
-    runs-on: self-hosted
+    runs-on: [self-hosted, linux]
     permissions:
       contents: read
       packages: write
@@ -143,10 +149,10 @@ jobs:
 
       - name: Create and push multi-arch manifest
         run: |
-          docker buildx imagetools create -t ghcr.io/${{ github.repository_owner }}/podmortem-log-parser:latest \
-            ghcr.io/${{ github.repository_owner }}/podmortem-log-parser:${{ github.sha }}-amd64 \
-            ghcr.io/${{ github.repository_owner }}/podmortem-log-parser:${{ github.sha }}-arm64
+          docker buildx imagetools create -t ghcr.io/${{ github.repository_owner }}/${{ env.IMAGE_NAME }}:latest \
+            ghcr.io/${{ github.repository_owner }}/${{ env.IMAGE_NAME }}:${{ github.sha }}-amd64 \
+            ghcr.io/${{ github.repository_owner }}/${{ env.IMAGE_NAME }}:${{ github.sha }}-arm64
 
-          docker buildx imagetools create -t ghcr.io/${{ github.repository_owner }}/podmortem-log-parser:${{ github.sha }} \
-            ghcr.io/${{ github.repository_owner }}/podmortem-log-parser:${{ github.sha }}-amd64 \
-            ghcr.io/${{ github.repository_owner }}/podmortem-log-parser:${{ github.sha }}-arm64
+          docker buildx imagetools create -t ghcr.io/${{ github.repository_owner }}/${{ env.IMAGE_NAME }}:${{ github.sha }} \
+            ghcr.io/${{ github.repository_owner }}/${{ env.IMAGE_NAME }}:${{ github.sha }}-amd64 \
+            ghcr.io/${{ github.repository_owner }}/${{ env.IMAGE_NAME }}:${{ github.sha }}-arm64
diff --git a/.github/workflows/cleanup-images.yml b/.github/workflows/cleanup-images.yml
@@ -0,0 +1,27 @@
+name: Cleanup Old Development Images
+
+on:
+  schedule:
+    - cron: '0 3 * * 1'
+  workflow_dispatch:
+
+env:
+  IMAGE_NAME: podmortem-log-parser
+
+jobs:
+  cleanup:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - name: Delete old development images
+        uses: actions/delete-package-versions@v5
+        with:
+          owner: podmortem
+          package-name: ${{ env.IMAGE_NAME }}
+          package-type: 'container'
+          min-versions-to-keep: 20
+          # Ignore release tags (v1.2.3 pattern), latest, and deps-cache
+          ignore-versions: '^(v\d+\.\d+\.\d+.*|latest|deps-cache)$'
+          token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -11,7 +11,7 @@ env:
 
 jobs:
   warm-cache:
-    runs-on: self-hosted
+    runs-on: [self-hosted, linux]
     permissions: {contents: read, packages: write}
     steps:
       - uses: actions/checkout@v4
@@ -42,16 +42,17 @@ jobs:
 
   build-arch:
     needs: warm-cache
-    runs-on: self-hosted
+    runs-on: ${{ matrix.runner }}
     permissions: {contents: read, packages: write}
     strategy:
       matrix:
-        arch: [amd64, arm64]
         include:
           - arch: amd64
             platform: linux/amd64
+            runner: [self-hosted, linux]
           - arch: arm64
             platform: linux/arm64
+            runner: ubuntu-22.04-arm
     steps:
       - uses: actions/checkout@v4
       - uses: docker/setup-buildx-action@v3
@@ -79,7 +80,7 @@ jobs:
 
   manifest:
     needs: build-arch
-    runs-on: self-hosted
+    runs-on: [self-hosted, linux]
     permissions: {contents: read, packages: write}
     steps:
       - uses: docker/login-action@v3
@@ -99,11 +100,11 @@ jobs:
 
   release-notes:
     needs: manifest
-    runs-on: self-hosted
+    runs-on: [self-hosted, linux]
     permissions: {contents: write}
     steps:
       - name: Generate GitHub Release
         uses: softprops/action-gh-release@v1
         with:
           tag_name: ${{ github.ref_name }}
-          generate_release_notes: true
+          generate_release_notes: true
