exist/.github/workflows/ci-container.yml at develop · eXist-db/exist · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
name: Publish Container
on:
  push:
    branches:
      - develop
      - master
    tags:
      - 'eXist-*'
      - '!eXist-*-oidc-smoke'
  pull_request:
  schedule:
      - cron: "0 6 * * *"
  workflow_dispatch:

jobs:
  build:
    name: Test and Publish Container Images
    runs-on: ubuntu-latest
    timeout-minutes: 60
    # Publish on develop (latest) and eXist-* tags (versioned + release); test on PRs against these branches.
    if: >
      github.ref == 'refs/heads/develop' ||
      github.ref == 'refs/heads/master' ||
      startsWith(github.ref, 'refs/tags/eXist-') ||
      github.base_ref == 'develop' ||
      github.base_ref == 'master'
    steps:
      - uses: actions/checkout@v7
        with:
          fetch-depth: 1
      - name: Set up JDK 21
        uses: actions/setup-java@v5
        with:
          distribution: temurin
          java-version: '21'
      - name: Set up QEMU
        uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3  # v4
        with:
          platforms: linux/amd64,linux/arm64
      - name: Make buildkit default
        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5  # v4
        id: buildx
      - uses: ./.github/actions/maven-cache
      - uses: ./.github/actions/maven-github-settings
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
      - name: Install bats
        run: sudo apt-get install bats
        # Hack around #5450
      - name: pull base image
        run: |
          docker pull --platform linux/amd64 --platform linux/arm64 gcr.io/distroless/java21-debian13:latest
      - name: Build images
        timeout-minutes: 35
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          REVISION_ARG=""
          if [[ "${{ github.ref }}" == refs/tags/eXist-* ]]; then
            VERSION="${{ github.ref_name }}"
            REVISION_ARG="-Drevision=${VERSION#eXist-}"
          fi
          mvn -V -B --no-transfer-progress -q \
            -Pdocker,skip-build-dist-archives \
            -DskipTests -Ddependency-check.skip=true \
            $REVISION_ARG \
            clean package
      - name: Check local images
        run: docker image ls
      - name: Check license headers
        run: mvn --no-transfer-progress license:check
        working-directory: exist-docker
      - name: Start exist-ci container
        run: |
          docker run -dit -p 8080:8080 --name exist-ci --rm existdb/existdb:latest
          sleep 35s
      - name: Run tests
        run: bats --tap exist-docker/src/test/bats/*.bats

      - name: debug logs
        if: failure()
        run: docker logs exist-ci | grep 'ERROR'

      - name: Capture container logs on failure
        if: failure()
        run: |
          echo "Capturing container stdout/stderr..."
          docker logs exist-ci > exist.log 2>&1 || true

      - name: Upload logs artifact
        if: failure()
        uses: actions/upload-artifact@v7
        with:
          name: exist-core-failed-log
          path: exist.log

      - name: Publish latest images
        if: github.repository == 'eXist-db/exist' && github.ref == 'refs/heads/develop'
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}
          DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
        run: mvn --no-transfer-progress -q -Ddocker.tag=latest -Ddocker.username=$DOCKER_USERNAME -Ddocker.password=$DOCKER_PASSWORD docker:build docker:push
        working-directory: ./exist-docker

      - name: Publish versioned release images
        if: github.repository == 'eXist-db/exist' && startsWith(github.ref, 'refs/tags/eXist-')
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}
          DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
        run: |
          VERSION="${{ github.ref_name }}"
          VERSION="${VERSION#eXist-}"
          mvn --no-transfer-progress -q \
            -Drevision="$VERSION" \
            -Ddocker.tag=release \
            -Ddocker.username=$DOCKER_USERNAME \
            -Ddocker.password=$DOCKER_PASSWORD \
            docker:build docker:push
        working-directory: ./exist-docker

      # NOTE (DP): This is for debugging, publishes an experimental image from inside PRs against develop
      # - name: Publish experimental images
      #   if: github.base_ref == 'develop'
      #   env:
      #     GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      #     DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}
      #     DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
      #   run: mvn -q -Ddocker.tag=experimental -Ddocker.username=$DOCKER_USERNAME -Ddocker.password=$DOCKER_PASSWORD docker:build docker:push
      #   working-directory: ./exist-docker