planet.yml

name: Planet Builder

on:
  push:
    branches-ignore:
      - l10n_i18n
  release:
    types: [published]
  workflow_dispatch:
    inputs:
      buildtype:
        description: 'Build by "prebuild", "single-language", "planet", or "deploy"'
        required: true
        default: 'single-language'

env:
  DOCKER_ORG: treehouses
  DOCKER_REPO_PRE: planet-base
  DOCKER_REPO_LANG: planet-lang
  DOCKER_REPO_TAG: planet-tags
  DOCKER_REPO: planet

jobs:

  build-prepare:
    name: Preparing
    runs-on: ubuntu-latest
    outputs:
      planet_version: ${{ steps.step1.outputs.version }}
    steps:
      - name: Checkout Code
        uses: actions/checkout@v4
      - name: Setting Env
        id: step1
        run: |
          version=$(jq '.version' package.json | sed -e 's/^"//' -e 's/"$//')
          echo "version=$version" >> "$GITHUB_OUTPUT"

  pre-build:
    name: Pre-Planet build
    needs: [build-prepare]
    runs-on: ubuntu-latest
    env:
      PLANET_VERSION: ${{ needs.build-prepare.outputs.planet_version }}

    steps:
      - name: Checkout Code
        uses: actions/checkout@v4
          
      - name: Set is release
        if: ${{ endsWith(github.ref_name, env.PLANET_VERSION) }}
        run: |
          echo "IS_RELEASE=true" >> $GITHUB_ENV

      - name: Check Package Changes
        run: |
          git fetch origin master --depth 2
          echo "SHOULD_UPDATE_PACKAGES=$(./docker/planet/scripts/check_dependencies.sh)" >> $GITHUB_ENV

      - name: Docker login
        if: ${{ env.SHOULD_UPDATE_PACKAGES == 1 || github.event.inputs.buildtype == 'prebuild' }}
        run: docker login -u ${{ secrets.DOCKERUSERNAME }} -p ${{ secrets.DOCKERAPIKEY }}

      - name: Pre-Build Planet
        if: ${{ env.SHOULD_UPDATE_PACKAGES == 1 || github.event.inputs.buildtype == 'prebuild' }}
        run: |
          BRANCH="${GITHUB_REF_NAME//\//-}"
          BRANCH_HASH="$(printf '%s' "$BRANCH" | sha256sum | cut -c1-8)"
          SAFE_BRANCH="${BRANCH:0:75}-$BRANCH_HASH"
          repo="$DOCKER_ORG/$DOCKER_REPO_PRE:$PLANET_VERSION-$SAFE_BRANCH-${GITHUB_SHA::8}"
          mkdir -p ./ng-app/dist
          docker build -f './docker/planet/pre-builder-Dockerfile' -t $repo .
          docker images
          docker push $repo
      
      - name: Push latest pre-build
        if: ${{ (github.ref == 'refs/heads/master' || env.IS_RELEASE == 'true') && (env.SHOULD_UPDATE_PACKAGES == 1 || github.event.inputs.buildtype == 'prebuild') }}
        run: |
          BRANCH="${GITHUB_REF_NAME//\//-}"
          BRANCH_HASH="$(printf '%s' "$BRANCH" | sha256sum | cut -c1-8)"
          SAFE_BRANCH="${BRANCH:0:75}-$BRANCH_HASH"
          repo="$DOCKER_ORG/$DOCKER_REPO_PRE:$PLANET_VERSION-$SAFE_BRANCH-${GITHUB_SHA::8}"
          latestrepo="$DOCKER_ORG/$DOCKER_REPO_PRE:latest"
          docker tag $repo $latestrepo
          docker push $latestrepo

  deploy-single-language:
    name: Deploy single language build
    needs: [build-prepare, pre-build]
    if: ${{ (github.event.inputs.buildtype == 'prebuild' || ((github.event.inputs.buildtype == 'single-language' || github.event_name != 'workflow_dispatch') && always())) }}
    runs-on: ubuntu-latest 
    env:
      PLANET_VERSION: ${{ needs.build-prepare.outputs.planet_version }}

    steps:
      - name: Checkout Code
        uses: actions/checkout@v4

      - name: Remove Landing Video
        run: |
          rm -rf ./src/assets/landing-page/video/landing.mp4

      - name: Docker login
        run: docker login -u ${{ secrets.DOCKERUSERNAME }} -p ${{ secrets.DOCKERAPIKEY }}

      - name: Tag prebuild as latest
        continue-on-error: true # If there are no package changes, the commit specific image will not be built so an error is expected here
        run: |
          BRANCH="${GITHUB_REF_NAME//\//-}"
          BRANCH_HASH="$(printf '%s' "$BRANCH" | sha256sum | cut -c1-8)"
          SAFE_BRANCH="${BRANCH:0:75}-$BRANCH_HASH"
          prerepo="$DOCKER_ORG/$DOCKER_REPO_PRE:$PLANET_VERSION-$SAFE_BRANCH-${GITHUB_SHA::8}"
          latestprerepo="$DOCKER_ORG/$DOCKER_REPO_PRE:latest"
          docker pull $prerepo
          docker tag $prerepo $latestprerepo

      - name: Build single language build
        run: |
          BRANCH="${GITHUB_REF_NAME//\//-}"
          BRANCH_HASH="$(printf '%s' "$BRANCH" | sha256sum | cut -c1-8)"
          SAFE_BRANCH="${BRANCH:0:75}-$BRANCH_HASH"
          repo="$DOCKER_ORG/$DOCKER_REPO_LANG:$PLANET_VERSION-$SAFE_BRANCH-${GITHUB_SHA::8}"
          branchrepo="$DOCKER_ORG/$DOCKER_REPO_LANG:$PLANET_VERSION-$SAFE_BRANCH"
          export NODE_OPTIONS=--max_old_space_size=4096
          mkdir -p ./ng-app/dist
          docker build -f './docker/planet/builder-Dockerfile' -t $repo .
          docker images
          docker push $repo
          docker tag $repo $branchrepo
          docker push $branchrepo

  build:
    name: Planet build
    needs: [build-prepare, deploy-single-language]
    if: ${{ (github.event.inputs.buildtype != 'deploy' || (github.event.inputs.buildtype == 'planet' && always())) }}
    runs-on: ubuntu-latest
    env:
      PLANET_VERSION: ${{ needs.build-prepare.outputs.planet_version }}
      BUILDX_NO_DEFAULT_ATTESTATIONS: 1

    strategy:
      matrix:
        include:
          - arch: amd64
            base_image: treehouses/nginx
          - arch: arm
            base_image: treehouses/nginx-tags:arm
          - arch: arm64
            base_image: treehouses/nginx-tags:arm64

    steps:
      - name: Checkout Code
        uses: actions/checkout@v4

      - name: Docker login
        run: docker login -u ${{ secrets.DOCKERUSERNAME }} -p ${{ secrets.DOCKERAPIKEY }}

      - name: Build image
        run: |
          BRANCH="${GITHUB_REF_NAME//\//-}"
          BRANCH_HASH="$(printf '%s' "$BRANCH" | sha256sum | cut -c1-8)"
          SAFE_BRANCH="${BRANCH:0:75}-$BRANCH_HASH"
          repo="$DOCKER_ORG/$DOCKER_REPO_TAG:${{ matrix.arch }}-$PLANET_VERSION-$SAFE_BRANCH-${GITHUB_SHA::8}"
          branchrepo="$DOCKER_ORG/$DOCKER_REPO_TAG:${{ matrix.arch }}-$PLANET_VERSION-$SAFE_BRANCH"
          LANGUAGES=( 'eng' 'ara' 'fra' 'spa' 'nep' 'som')
          mkdir -p ./ng-app/dist
          mkdir -p ./ng-app/langbuild
          docker create --name langbuild "$DOCKER_ORG/$DOCKER_REPO_LANG:$PLANET_VERSION-$SAFE_BRANCH"
          docker export langbuild > langbuild.tar
          tar -xf langbuild.tar -C ./ng-app/langbuild
          for LANGUAGE in "${LANGUAGES[@]}"; do
            case $LANGUAGE in
              eng) : "en" ;;
              ara) : "ar" ;;
              fra) : "fr" ;;
              spa) : "es" ;;
              nep) : "ne" ;;
              som) : "so" ;;
            esac
            lang2="$_"
            cp -ar ./ng-app/langbuild/ng-app/dist/$lang2 ./ng-app/dist/
            mv ./ng-app/dist/$lang2 ./ng-app/dist/$LANGUAGE
          done
          docker run --rm --privileged multiarch/qemu-user-static --reset -p yes
          docker build \
            -f './docker/planet/Dockerfile' \
            --build-arg BASE_IMAGE='${{ matrix.base_image }}' \
            -t $repo .
          docker images
          docker tag $repo $branchrepo
          docker push $repo
          docker push $branchrepo

  multiarch:
    name: Manifest build
    needs: [ build-prepare, build ]
    env:
      PLANET_VERSION: ${{ needs.build-prepare.outputs.planet_version }}
    if: ${{ always() }}
    runs-on: ubuntu-latest

    steps:
      - name: Docker login
        run: docker login -u ${{ secrets.DOCKERUSERNAME }} -p ${{ secrets.DOCKERAPIKEY }}

      - name: Multiarch Deploy
        run: |
          BRANCH="${GITHUB_REF_NAME//\//-}"
          BRANCH_HASH="$(printf '%s' "$BRANCH" | sha256sum | cut -c1-8)"
          SAFE_BRANCH="${BRANCH:0:75}-$BRANCH_HASH"
          manifesttag="$DOCKER_ORG/$DOCKER_REPO_TAG:$PLANET_VERSION-$SAFE_BRANCH-${GITHUB_SHA::8}"
          amd64tag="$DOCKER_ORG/$DOCKER_REPO_TAG:amd64-$PLANET_VERSION-$SAFE_BRANCH-${GITHUB_SHA::8}"
          armtag="$DOCKER_ORG/$DOCKER_REPO_TAG:arm-$PLANET_VERSION-$SAFE_BRANCH-${GITHUB_SHA::8}"
          arm64tag="$DOCKER_ORG/$DOCKER_REPO_TAG:arm64-$PLANET_VERSION-$SAFE_BRANCH-${GITHUB_SHA::8}"
          docker manifest create $manifesttag $amd64tag $armtag $arm64tag
          docker manifest annotate $manifesttag $amd64tag --os linux --arch amd64
          docker manifest annotate $manifesttag $armtag --os linux --arch arm
          docker manifest annotate $manifesttag $arm64tag --os linux --arch arm64
          docker manifest push $manifesttag

      - name: Multiarch Deploy Versioned
        if: ${{ github.event_name == 'release' }}
        run: |
          BRANCH="${GITHUB_REF_NAME//\//-}"
          BRANCH_HASH="$(printf '%s' "$BRANCH" | sha256sum | cut -c1-8)"
          SAFE_BRANCH="${BRANCH:0:75}-$BRANCH_HASH"
          amd64tag="$DOCKER_ORG/$DOCKER_REPO_TAG:amd64-$PLANET_VERSION-$SAFE_BRANCH-${GITHUB_SHA::8}"
          armtag="$DOCKER_ORG/$DOCKER_REPO_TAG:arm-$PLANET_VERSION-$SAFE_BRANCH-${GITHUB_SHA::8}"
          arm64tag="$DOCKER_ORG/$DOCKER_REPO_TAG:arm64-$PLANET_VERSION-$SAFE_BRANCH-${GITHUB_SHA::8}"
          for tag in "$DOCKER_ORG/$DOCKER_REPO:$PLANET_VERSION" "$DOCKER_ORG/$DOCKER_REPO:latest"; do
            docker manifest create $tag $amd64tag $armtag $arm64tag
            docker manifest annotate $tag $amd64tag --os linux --arch amd64
            docker manifest annotate $tag $armtag --os linux --arch arm
            docker manifest annotate $tag $arm64tag --os linux --arch arm64
            docker manifest push $tag
          done