docker-build.yml

# name: Docker Multi-Architecture Build

# on:
#   push:
#     branches:
#       - main
#       - master
#     tags:
#       - "v*"
#   pull_request:
#     branches:
#       - main
#       - master
#   workflow_dispatch:

# env:
#   REGISTRY: ghcr.io
#   IMAGE_NAME: ${{ github.repository }}

# jobs:
#   build-and-push:
#     name: Build and Push Multi-Arch Docker Image
#     runs-on: ubuntu-latest
#     permissions:
#       contents: read
#       packages: write
#       id-token: write
#       attestations: write

#     steps:
#       - name: Checkout code
#         uses: actions/checkout@v4

#       - name: Set up QEMU
#         uses: docker/setup-qemu-action@v3
#         with:
#           platforms: linux/amd64,linux/arm64

#       - name: Set up Docker Buildx
#         uses: docker/setup-buildx-action@v3
#         with:
#           platforms: linux/amd64,linux/arm64

#       - name: Log in to Container Registry
#         if: github.event_name != 'pull_request'
#         uses: docker/login-action@v3
#         with:
#           registry: ${{ env.REGISTRY }}
#           username: ${{ github.actor }}
#           password: ${{ secrets.GITHUB_TOKEN }}

#       - name: Extract metadata
#         id: meta
#         uses: docker/metadata-action@v5
#         with:
#           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
#           tags: |
#             type=ref,event=branch
#             type=ref,event=pr
#             type=semver,pattern={{version}}
#             type=semver,pattern={{major}}.{{minor}}
#             type=semver,pattern={{major}}
#             type=sha,prefix={{branch}}-
#             type=raw,value=latest,enable={{is_default_branch}}

#       - name: Build and push Docker image
#         id: build
#         uses: docker/build-push-action@v5
#         with:
#           context: .
#           platforms: linux/amd64,linux/arm64
#           push: ${{ github.event_name != 'pull_request' }}
#           tags: ${{ steps.meta.outputs.tags }}
#           labels: ${{ steps.meta.outputs.labels }}
#           cache-from: type=gha
#           cache-to: type=gha,mode=max
#           build-args: |
#             VERSION=${{ github.ref_name }}
#             COMMIT_SHA=${{ github.sha }}
#             BUILD_DATE=${{ github.event.head_commit.timestamp }}

#       - name: Generate artifact attestation
#         if: github.event_name != 'pull_request'
#         uses: actions/attest-build-provenance@v1
#         with:
#           subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
#           subject-digest: ${{ steps.build.outputs.digest }}
#           push-to-registry: true

#   test-images:
#     name: Test Docker Images
#     needs: build-and-push
#     if: github.event_name != 'pull_request'
#     runs-on: ubuntu-latest
#     strategy:
#       matrix:
#         platform: [linux/amd64, linux/arm64]

#     steps:
#       - name: Set up QEMU
#         uses: docker/setup-qemu-action@v3

#       - name: Log in to Container Registry
#         uses: docker/login-action@v3
#         with:
#           registry: ${{ env.REGISTRY }}
#           username: ${{ github.actor }}
#           password: ${{ secrets.GITHUB_TOKEN }}

#       - name: Pull and test image
#         run: |
#           IMAGE="${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.ref_name }}"
#           echo "Testing image: $IMAGE on platform: ${{ matrix.platform }}"

#           docker pull --platform ${{ matrix.platform }} $IMAGE

#           # Test that the binary exists and runs
#           docker run --rm --platform ${{ matrix.platform }} $IMAGE --version

#           # Test that simulator binary exists
#           docker run --rm --platform ${{ matrix.platform }} $IMAGE sh -c "test -f /app/simulator/target/release/erst-sim && echo 'Simulator binary found'"

#           echo "Image test passed for ${{ matrix.platform }}"