chore: add binary caching

.github/workflows/ci-base.yaml

@@ -184,7 +184,27 @@ jobs:
             echo "goreleaser_args=--snapshot --clean --skip=publish,validate --timeout 2h" >> $GITHUB_ENV
           fi
 
+      - name: Generate binary cache key
+        id: generate_binary_key
+        run: |
+          BINARY_HASH="${{ hashFiles(
+            format('distributions/{0}/.goreleaser*.yaml', inputs.distribution),
+            format('distributions/{0}/_build*/*', inputs.distribution)
+          ) }}"
+          ARGS_HASH=$(echo "${{ env.goreleaser_args }}" | sha256sum | cut -d' ' -f1)
+          echo binary_key=goreleaser-build-${{ inputs.distribution }}-${ARGS_HASH}-${BINARY_HASH} >> $GITHUB_OUTPUT
+
+      - name: Cache goreleaser build
+        id: cache-goreleaser
+        if: ${{ env.caching_enabled }}
+        uses: actions/cache@v4
+        with:
+          path: |
+            distributions/${{ inputs.distribution }}/dist
+          key: ${{ steps.generate_binary_key.outputs.binary_key }}
+
       - name: Build binaries & packages with GoReleaser
+        if: steps.cache-goreleaser.outputs.cache-hit != 'true'
         id: goreleaser
         uses: goreleaser/goreleaser-action@v6
         env:
@@ -197,10 +217,72 @@ jobs:
           version: '2.11.2'
           args: ${{ env.goreleaser_args }}
           workdir: distributions/${{ inputs.distribution }}
+
+      - name: Skip GoReleaser build (cached)
+        if: steps.cache-goreleaser.outputs.cache-hit == 'true'
+        run: echo "✅ GoReleaser build skipped - using cached binaries"
+
+      - name: Validate GoReleaser build files exist
+        run: |
+          DIST_PATH="distributions/${{ inputs.distribution }}/dist"
+          if [ ! -d "$DIST_PATH" ]; then
+            echo "❌ $DIST_PATH not found!"
+            exit 1
+          fi
+          cd "$DIST_PATH"
+          echo "📋 Checking for common files..."
+          files=("artifacts.json" "config.yaml" "metadata.json")
+          missing_files=()
+          for file in "${files[@]}"; do
+            if [ ! -f "$file" ]; then
+              missing_files+=("$file")
+            else
+              echo "Found: $file"
+            fi
+          done
+          if [ ${#missing_files[@]} -ne 0 ]; then
+            echo "❌ files not found: ${missing_files[*]}"
+            exit 1
+          else
+            echo "✅ All common build files found!"
+          fi
+          echo "📋 Checking if binaries / executables exist..."
+          binary_dirs=($(find . -name "${{ inputs.distribution }}*_*" -type d))
+          if [ ${#binary_dirs[@]} -eq 0 ]; then
+            echo "❌ No binary directories found!"
+            exit 1
+          fi
+          BINARY_FILE="${{ inputs.distribution }}"
+          if [ ${{ inputs.fips }} = "true" ]; then
+            BINARY_FILE="${BINARY_FILE}-fips"
+          fi
+          missing_binaries=()
+          for dir in "${binary_dirs[@]}"; do
+            binary="$(find $dir -name "${BINARY_FILE}*" -type f)"
+            if [ -z "$binary" ]; then
+              missing_binaries+=("$binary")
+            else
+              echo "Found: $binary"
+            fi
+          done
+          if [ ${#missing_binaries[@]} -ne 0 ]; then
+            echo "❌ Binaries / Executables not found: ${missing_binaries[*]}"
+            exit 1
+          else
+            echo "✅ All found directories contain binaries!"
+          fi
+          echo "binary_file=$BINARY_FILE" >> $GITHUB_ENV
 
       - name: Extract relevant metadata
         run: |
-          VERSION=$(echo '${{ steps.goreleaser.outputs.metadata }}' | jq -r '.version')
+          if [ "${{ steps.cache-goreleaser.outputs.cache-hit }}" = "true" ]; then
+            VERSION=$(jq -r '.version' distributions/${{ inputs.distribution }}/dist/metadata.json)
+            echo "Using cached version: $VERSION"
+          else
+            # Extract from fresh GoReleaser build
+            VERSION=$(echo '${{ steps.goreleaser.outputs.metadata }}' | jq -r '.version')
+            echo "Using fresh build version: $VERSION"
+          fi
           ARCH=$(echo '${{ runner.arch }}' | sed 's/X/amd/g')
           ARCH=${ARCH@L}
           echo "version=$VERSION" >> $GITHUB_ENV
@@ -215,6 +297,34 @@ jobs:
             echo "image_tag=$VERSION-$ARCH" >> $GITHUB_ENV
           fi
 
+      - name: Copy GoReleaser binary to Docker context
+        if: steps.cache-goreleaser.outputs.cache-hit == 'true'
+        run: |
+          cd distributions/${{ inputs.distribution }}
+          BINARY_PATH="$(find dist -name "${{ inputs.distribution }}*_linux_${{ env.arch }}*" -type d)/${{ env.binary_file }}"
+          if [ ! -f "$BINARY_PATH" ]; then
+            echo "❌ Error: Binary not found at $BINARY_PATH"
+            find dist -name "*${{ inputs.distribution }}*" -type f
+            exit 1
+          fi
+          cp "$BINARY_PATH" ./${{ inputs.distribution }}
+          echo "✅ Binary copied: $(ls -la ./${{ inputs.distribution }})"
+
+      - name: Build and load Docker image
+        uses: docker/build-push-action@v5
+        if: steps.cache-goreleaser.outputs.cache-hit == 'true'
+        with:
+          context: distributions/${{ inputs.distribution }}
+          platforms: linux/${{ env.arch }}
+          push: false
+          load: true
+          tags: |
+            ${{ secrets.registry }}/${{ inputs.distribution }}:${{ env.image_tag }}
+
+      - name: Clean up binary file (Act)
+        if: ${{ env.ACT && steps.cache-goreleaser.outputs.cache-hit == 'true' }}
+        run: rm distributions/${{ inputs.distribution }}/${{ inputs.distribution }}
+
       - name: Validate Usage of BoringCrypto
         if: inputs.fips
         run: |