MassGen/.github/workflows/docker-publish.yml at main · massgen/MassGen · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
name: Publish Docker Images

on:
  workflow_dispatch:  # Manual trigger for testing
  release:
    types: [published]

env:
  REGISTRY: ghcr.io
  IMAGE_BASE: ghcr.io/massgen

jobs:
  build-and-push:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write
    strategy:
      matrix:
        variant: [standard, sudo]
        platform: [linux/amd64, linux/arm64]
      fail-fast: false

    steps:
      - name: Free disk space
        run: |
          echo "=== Before cleanup ==="
          df -h /
          sudo rm -rf /usr/share/dotnet
          sudo rm -rf /usr/local/lib/android
          sudo rm -rf /opt/ghc
          sudo rm -rf /opt/hostedtoolcache/CodeQL
          sudo docker system prune -af
          echo "=== After cleanup ==="
          df -h /

      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Login to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract version tag
        id: version
        run: |
          if [[ "${{ github.event_name }}" == "release" ]]; then
            echo "tag=${{ github.event.release.tag_name }}" >> $GITHUB_OUTPUT
          else
            echo "tag=latest" >> $GITHUB_OUTPUT
          fi

      - name: Set image name and dockerfile
        id: image-config
        run: |
          if [[ "${{ matrix.variant }}" == "sudo" ]]; then
            echo "dockerfile=massgen/docker/Dockerfile.sudo" >> $GITHUB_OUTPUT
            echo "image_name=${{ env.IMAGE_BASE }}/mcp-runtime-sudo" >> $GITHUB_OUTPUT
          else
            echo "dockerfile=massgen/docker/Dockerfile" >> $GITHUB_OUTPUT
            echo "image_name=${{ env.IMAGE_BASE }}/mcp-runtime" >> $GITHUB_OUTPUT
          fi

      - name: Build and push image (${{ matrix.variant }}, ${{ matrix.platform }})
        uses: docker/build-push-action@v5
        with:
          context: .
          file: ${{ steps.image-config.outputs.dockerfile }}
          push: true
          platforms: ${{ matrix.platform }}
          cache-from: type=gha,scope=${{ matrix.variant }}-${{ matrix.platform }}
          cache-to: type=gha,mode=max,scope=${{ matrix.variant }}-${{ matrix.platform }}
          tags: |
            ${{ steps.image-config.outputs.image_name }}:latest-${{ matrix.platform == 'linux/amd64' && 'amd64' || 'arm64' }}
            ${{ steps.image-config.outputs.image_name }}:${{ steps.version.outputs.tag }}-${{ matrix.platform == 'linux/amd64' && 'amd64' || 'arm64' }}

  create-manifests:
    needs: build-and-push
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write
    strategy:
      matrix:
        variant: [standard, sudo]

    steps:
      - name: Login to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract version tag
        id: version
        run: |
          if [[ "${{ github.event_name }}" == "release" ]]; then
            echo "tag=${{ github.event.release.tag_name }}" >> $GITHUB_OUTPUT
          else
            echo "tag=latest" >> $GITHUB_OUTPUT
          fi

      - name: Set image name
        id: image-config
        run: |
          if [[ "${{ matrix.variant }}" == "sudo" ]]; then
            echo "image_name=${{ env.IMAGE_BASE }}/mcp-runtime-sudo" >> $GITHUB_OUTPUT
          else
            echo "image_name=${{ env.IMAGE_BASE }}/mcp-runtime" >> $GITHUB_OUTPUT
          fi

      - name: Create and push multi-arch manifest for latest
        run: |
          docker buildx imagetools create -t ${{ steps.image-config.outputs.image_name }}:latest \
            ${{ steps.image-config.outputs.image_name }}:latest-amd64 \
            ${{ steps.image-config.outputs.image_name }}:latest-arm64

      - name: Create and push multi-arch manifest for version tag
        run: |
          docker buildx imagetools create -t ${{ steps.image-config.outputs.image_name }}:${{ steps.version.outputs.tag }} \
            ${{ steps.image-config.outputs.image_name }}:${{ steps.version.outputs.tag }}-amd64 \
            ${{ steps.image-config.outputs.image_name }}:${{ steps.version.outputs.tag }}-arm64