publish.yml

name: Create and publish a Docker image

on:
  push:
    branches: ['main']
    paths:
      - 'ai-horde/**'

env:
  REGISTRY: ghcr.io

jobs:
  changed:
    runs-on: ubuntu-latest
    outputs:
      postgres: ${{ steps.filter.outputs.postgres }}
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
      - name: Filter paths
        uses: dorny/paths-filter@v3
        id: filter
        with:
          filters: |
            postgres:
              - 'ai-horde/postgres/**'

  # Keep the pg_version matrix in sync with PG_VERSIONS in ai-horde/postgres/docker-bake.hcl
  build-postgres:
    needs: changed
    if: needs.changed.outputs.postgres == 'true'
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write
      attestations: write
      id-token: write
    strategy:
      fail-fast: false
      matrix:
        pg_version: ['14', '15', '16', '17', '18']
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Get upstream base image digest
        id: digest
        run: |
          UPSTREAM=$(skopeo inspect --raw docker://docker.io/library/postgres:${{ matrix.pg_version }} | \
            jq -r '.manifests[] | select(.platform.architecture == "amd64" and .platform.os == "linux") | .digest')
          echo "upstream=${UPSTREAM}" >> "$GITHUB_OUTPUT"

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Build and push Docker image
        uses: docker/bake-action@v6
        with:
          files: ai-horde/postgres/docker-bake.hcl
          targets: ai-horde-postgres-pg${{ matrix.pg_version }}
          push: true
        env:
          BASE_DIGEST: ${{ steps.digest.outputs.upstream }}