Create docker build GHA

Author: clayrosenthal

.github/workflows/docker-build.yaml

@@ -0,0 +1,68 @@
+name: Docker Build
+
+on:
+  workflow_dispatch:
+    inputs:
+      tag_latest:
+        description: 'Tag as latest'
+        required: true
+        type: choice
+        options:
+          - 'true'
+          - 'false'
+        default: 'true'
+  push:
+    # temp disable branch filter for testing
+    #branches: [main]
+    paths:
+      - 'docker/**'
+      - 'scripts/setup_*.sh'
+      - 'src/holosoma_inference/docker/Dockerfile'
+      - 'src/holosoma_retargeting/docker/Dockerfile'
+
+permissions:
+  contents: read
+
+env:
+  ECR_REPO: 982423663241.dkr.ecr.us-west-2.amazonaws.com
+
+jobs:
+  build:
+    strategy:
+      fail-fast: false # continue on one build failing
+      matrix:
+        environment:
+        # just inference for first version, quickest to build and debug issues in GHA
+        - inference
+        # - holosoma
+        # - retargeting
+        # - isaacsim
+        # - isaacgym
+        # - mujoco
+        #TODO: add mujoco warp
+    name: Build ${{ matrix.environment }} Docker Image
+    continue-on-error: true
+    runs-on: codebuild-holosoma-cpu-build-${{ github.run_id }}-${{ github.run_attempt }}
+    env:
+      # image name should be `holosoma` or `holsoma-${environment}`
+      IMAGE_NAME: ${{ matrix.environment == 'holosoma' && '' || 'holosoma-' }}${{ matrix.environment }}
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v6
+
+      - name: Generate image tag
+        id: tag
+        run: echo "tag=$(date -u +%Y_%m%d_%H%M)" >> "$GITHUB_OUTPUT"
+
+      - name: Build Docker image
+        env:
+          IMAGE_TAG: ${{ steps.tag.outputs.tag }}
+        run: |
+          ./docker/build_and_push.sh "${{ matrix.environment }}" \
+            "${{ inputs.tag_latest == 'true' && '--latest' || '' }}"
+
+      - name: Summary
+        run: |
+          echo "## Docker Build Summary" >> "$GITHUB_STEP_SUMMARY"
+          echo "- **Tag:** \`${{ steps.tag.outputs.tag }}\`" >> "$GITHUB_STEP_SUMMARY"
+          echo "- **Image:** \`${{ env.ECR_REPO }}/${{ env.IMAGE_NAME }}:${{ steps.tag.outputs.tag }}\`" >> "$GITHUB_STEP_SUMMARY"

docker/build_and_push.sh

@@ -5,7 +5,7 @@
 # Usage:
 #   bash docker/build_and_push.sh                  # build & push all images
 #   bash docker/build_and_push.sh mujoco retarget  # only matching images
-#   bash docker/build_and_push.sh --no-push        # build only, skip push
+#   bash docker/build_and_push.sh --latest         # also tag and push as :latest
 #   bash docker/build_and_push.sh --dry-run        # print commands, do nothing
 #
 # Environment variables:
@@ -34,13 +34,13 @@ IMAGES=(
 )
 
 # ── Parse flags ──────────────────────────────────────────────────────
-NO_PUSH=false
+TAG_LATEST=false
 DRY_RUN=false
 FILTERS=()
 
 for arg in "$@"; do
   case "$arg" in
-    --no-push)  NO_PUSH=true ;;
+    --latest)   TAG_LATEST=true ;;
     --dry-run)  DRY_RUN=true ;;
     --help|-h)
       sed -n '2,/^$/{ s/^# \?//; p }' "$0"
@@ -81,32 +81,30 @@ for cmd in docker; do
   fi
 done
 
-if ! $NO_PUSH && ! $DRY_RUN; then
+if ! $DRY_RUN; then
   if ! command -v aws &>/dev/null; then
     echo "Error: aws CLI is not installed (required for push)" >&2; exit 1
   fi
 fi
 
 # ── ECR authentication ──────────────────────────────────────────────
-if ! $NO_PUSH; then
-  echo "==> Configuring ECR credential helper for ${ECR_REPO}"
-  if ! $DRY_RUN; then
-    # Ensure docker config dir exists
-    mkdir -p ~/.docker
-
-    # Add ecr-login credential helper for our registry if not already present
-    if [ ! -f ~/.docker/config.json ]; then
-      echo '{}' > ~/.docker/config.json
-    fi
+echo "==> Configuring ECR credential helper for ${ECR_REPO}"
+if ! $DRY_RUN; then
+  # Ensure docker config dir exists
+  mkdir -p ~/.docker
+
+  # Add ecr-login credential helper for our registry if not already present
+  if [ ! -f ~/.docker/config.json ]; then
+    echo '{}' > ~/.docker/config.json
+  fi
 
-    if ! jq -e ".credHelpers[\"${ECR_REPO}\"]" ~/.docker/config.json &>/dev/null; then
-      tmp=$(mktemp)
-      jq --arg repo "$ECR_REPO" '.credHelpers[$repo] = "ecr-login"' ~/.docker/config.json > "$tmp" \
-        && mv "$tmp" ~/.docker/config.json
-      echo "    Added ecr-login credential helper for ${ECR_REPO}"
-    else
-      echo "    ECR credential helper already configured"
-    fi
+  if ! jq -e ".credHelpers[\"${ECR_REPO}\"]" ~/.docker/config.json &>/dev/null; then
+    tmp=$(mktemp)
+    jq --arg repo "$ECR_REPO" '.credHelpers[$repo] = "ecr-login"' ~/.docker/config.json > "$tmp" \
+      && mv "$tmp" ~/.docker/config.json
+    echo "    Added ecr-login credential helper for ${ECR_REPO}"
+  else
+    echo "    ECR credential helper already configured"
   fi
 fi
 
@@ -125,30 +123,31 @@ for entry in "${IMAGES[@]}"; do
   echo ""
   echo "==> Building ${image_name} from ${dockerfile}"
 
-  # tags: date tag + latest
-  tags=(-t "${full_image}:latest" -t "${full_image}:${TAG}")
+  # tags: always date tag, optionally latest
+  tags=(-t "${full_image}:${TAG}")
+  if $TAG_LATEST; then
+    tags+=(-t "${full_image}:latest")
+  fi
 
   if run env DOCKER_BUILDKIT=1 docker build "${tags[@]}" -f "${dockerfile}" "${ROOT_REPO}"; then
     echo "    Built: ${image_name}"
 
-    if ! $NO_PUSH; then
-      echo "    Pushing ${image_name}..."
-      push_ok=true
+    echo "    Pushing ${image_name}..."
+    push_ok=true
+    if ! run docker push "${full_image}:${TAG}"; then
+      push_ok=false
+    fi
+    if $TAG_LATEST; then
       if ! run docker push "${full_image}:latest"; then
         push_ok=false
       fi
-      if ! run docker push "${full_image}:${TAG}"; then
-        push_ok=false
-      fi
+    fi
 
-      if $push_ok; then
-        SUCCEEDED+=("$image_name")
-      else
-        echo "    FAILED to push: ${image_name}" >&2
-        FAILED+=("$image_name")
-      fi
-    else
+    if $push_ok; then
       SUCCEEDED+=("$image_name")
+    else
+      echo "    FAILED to push: ${image_name}" >&2
+      FAILED+=("$image_name")
     fi
   else
     echo "    FAILED to build: ${image_name}" >&2
@@ -196,6 +195,6 @@ if [[ ${#SUCCEEDED[@]} -eq 0 ]] && [[ ${#FAILED[@]} -eq 0 ]]; then
   exit 1
 fi
 echo "  Tag: ${TAG}"
-$NO_PUSH && echo "  (push skipped — --no-push)"
+$TAG_LATEST && echo "  (also tagged as :latest)"
 $DRY_RUN && echo "  (dry run — nothing was executed)"
 echo "  Done."