cd.yml

# Copyright 2024 Dotanuki Labs
# SPDX-License-Identifier: MIT

name: CD

on:
  push:
    branches:
      - main

permissions:
  packages: write
  contents: read

jobs:
  build-docker-images:
    runs-on: ${{ matrix.runner }}
    strategy:
      matrix:
        runner: ["ubuntu22-amd64-medium", "ubuntu22-arm64-medium"]

    steps:
      - name: Project Checkout
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - name: Prepare build environment
        id: docker-env
        run: ./docker-build-helper.sh prepare-environment

      - name: Docker metadata
        id: docker-metadata
        uses: docker/metadata-action@369eb591f429131d6889c46b94e711f089e6ca96 # v5
        with:
          images: ghcr.io/${{ github.repository }}

      - name: Set up docker-buildx
        uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3.8.0

      - name: Log in to Github Container Registry
        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Build container Image
        id: build
        uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6.10.0
        with:
          push: true
          provenance: false
          platforms: linux/${{ steps.docker-env.outputs.platform }}
          labels: ${{ steps.docker-metadata.outputs.labels }}
          outputs: type=registry,push=true
          tags: ghcr.io/${{ github.repository }}:${{ github.sha }}-${{ steps.docker-env.outputs.platform }}

  merge-manifests:
    runs-on: ubuntu-24.04
    needs: build-docker-images

    steps:
      - name: Project Checkout
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - name: Log in to Github Container Registry
        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Create and push merged manifest
        run: ./docker-build-helper.sh push-merged-manifest ${{ github.sha }}