ci: use registry cache on ghcr.io

Author: mayeut

.github/workflows/build.yml

@@ -11,6 +11,7 @@ on:
   push:
     branches:
       - main
+      - "ghcr-cache"
     paths:
       - ".github/workflows/build.yml"
       - "docker/**"
@@ -67,7 +68,8 @@ jobs:
     needs: build_matrix
     runs-on: ${{ matrix.runner }}
     permissions:
-      actions: write # this permission is needed to delete cache
+      packages: write
+      contents: read
     strategy:
       fail-fast: false
       matrix:
@@ -94,9 +96,9 @@ jobs:
         if: github.event_name == 'push' && github.ref == 'refs/heads/main' && github.repository == 'pypa/manylinux'
         uses: docker/login-action@v3
         with:
-          registry: quay.io
-          username: ${{ secrets.QUAY_USERNAME }}
-          password: ${{ secrets.QUAY_PASSWORD }}
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Restore cache
         if: github.event_name != 'workflow_dispatch' || fromJSON(github.event.inputs.useCache)

build.sh

@@ -97,12 +97,12 @@ elif [ "${MANYLINUX_BUILD_FRONTEND}" == "podman" ]; then
 elif [ "${MANYLINUX_BUILD_FRONTEND}" == "docker-buildx" ]; then
 	USE_LOCAL_CACHE=1
 	CACHE_STORE=("--cache-to=type=local,dest=$(pwd)/.buildx-cache-staging-${POLICY}_${PLATFORM},mode=max,compression=zstd,compression-level=22,force-compression=true")
-	if [ "${GITHUB_REPOSITORY:-}_${GITHUB_EVENT_NAME:-}_${GITHUB_REF:-}" == "pypa/manylinux_push_refs/heads/main" ]; then
-		CACHE_STORE+=("--cache-to=type=registry,ref=quay.io/pypa/manylinux_cache:${POLICY}_${PLATFORM}_main,mode=max,compression=zstd,compression-level=22,force-compression=true")
+	if [ "${GITHUB_REPOSITORY:-}_${GITHUB_EVENT_NAME:-}_${GITHUB_REF:-}" == "pypa/manylinux_push_refs/heads/ghcr-cache" ]; then
+		CACHE_STORE+=("--cache-to=type=registry,ref=ghcr.io/pypa/manylinux-cache:${POLICY}_${PLATFORM}_main,mode=max,compression=zstd,compression-level=22,force-compression=true")
 	fi
 	docker buildx build \
 		--load \
-		"--cache-from=type=registry,ref=quay.io/pypa/manylinux_cache:${POLICY}_${PLATFORM}_main" \
+		"--cache-from=type=registry,ref=ghcr.io/pypa/manylinux-cache:${POLICY}_${PLATFORM}_main" \
 		"--cache-from=type=local,src=$(pwd)/.buildx-cache-${POLICY}_${PLATFORM}" \
 		"${CACHE_STORE[@]}" \
 		"${BUILD_ARGS_COMMON[@]}"