Move to GitHub Container Registry

Docker Hub was planning to sunset their free plan: https://www.docker.com/developers/free-team-faq/. Although they have backed down from doing this, it still seems better to centralize our infrastructure dependencies on GitHub.

Author: domenic

.github/workflows/build.yml

@@ -1,17 +1,22 @@
-name: Build
+name: html-build CI
 on:
   pull_request:
-    branches:
-    - main
+    branches: ['main']
   push:
-    branches:
-    - main
+    branches: ['main']
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: ${{ github.repository }}
+
+
 jobs:
   build:
     name: Build
-    runs-on: ubuntu-22.04
-    env:
-      IMAGE_NAME: whatwg/html-build
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
     steps:
     - name: Checkout whatwg/html-build
       uses: actions/checkout@v3
@@ -37,12 +42,13 @@ jobs:
       if: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}
       uses: docker/login-action@v2
       with:
-        username: ${{ secrets.DOCKER_HUB_USERNAME }}
-        password: ${{ secrets.DOCKER_HUB_TOKEN }}
+        registry: ${{ env.REGISTRY }}
+        username: ${{ github.actor }}
+        password: ${{ secrets.GITHUB_TOKEN }}
     - name: Docker push
       if: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}
       run: |
-        docker tag "$IMAGE_NAME" "$IMAGE_NAME:$GITHUB_SHA"
-        docker tag "$IMAGE_NAME" "$IMAGE_NAME:latest"
-        docker push "$IMAGE_NAME:$GITHUB_SHA"
-        docker push "$IMAGE_NAME:latest"
+        docker tag "$REGISTRY/$IMAGE_NAME" "$REGISTRY/$IMAGE_NAME:$GITHUB_SHA"
+        docker tag "$REGISTRY/$IMAGE_NAME" "$REGISTRY/$IMAGE_NAME:latest"
+        docker push "$REGISTRY/$IMAGE_NAME:$GITHUB_SHA"
+        docker push "$REGISTRY/$IMAGE_NAME:latest"

ci-build/docker-build.sh

@@ -22,13 +22,13 @@ function main {
   cd "$TMP_DIR"
   trap cleanTemp EXIT
 
-  local docker_hub_repo="whatwg/html-build"
+  local ghcr_repo="ghcr.io/whatwg/html-build"
 
-  # Build the Docker image, using Docker Hub as a cache. (This will be fast if nothing has changed
+  # Build the Docker image, using GHCR as a cache. (This will be fast if nothing has changed
   # in html-build or its dependencies).
   docker pull ghcr.io/whatwg/wattsi
-  docker pull "$docker_hub_repo" || true
-  docker build --cache-from "$docker_hub_repo" --tag "$docker_hub_repo" .
+  docker pull "$ghcr_repo" || true
+  docker build --cache-from "$ghcr_repo" --tag "$ghcr_repo" .
 }
 
 function cleanTemp {

ci-build/docker-run.sh

@@ -11,4 +11,4 @@ docker run --rm --mount "type=bind,source=$HTML_SOURCE,destination=/whatwg/html,
                 --env "HTML_SOURCE=/whatwg/html" \
                 --mount "type=bind,source=$HTML_OUTPUT,destination=/whatwg/output" \
                 --env "HTML_OUTPUT=/whatwg/output" \
-                whatwg/html-build
+                ghcr.io/whatwg/html-build