ci: speedup docker builds with cache reuse

Author: joemiller

.github/workflows/release.yaml

@@ -31,30 +31,49 @@ jobs:
           fetch-depth: 0
 
       - name: Calculate new version with autotag
+        id: autotag
         run: |
           curl -sL https://git.io/autotag-install | sh -s -- -b "${RUNNER_TEMP}/bin"
           set -x
           version=$(${RUNNER_TEMP}/bin/autotag -n)
-          echo "version=$version" >> $GITHUB_ENV
+          echo "version=${version}" >> $GITHUB_ENV
+          echo "version=${version}" >> $GITHUB_OUTPUT
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3
 
-      - name: Release
-        run: |
-          set -eou pipefail
-          set -x
-
-          image="ghcr.io/planetscale/k8s-node-tagger:v${version}"
+      - name: Cache
+        uses: actions/cache@v3
+        id: cache
+        with:
+          path: |
+            go-pkg-mod
+            go-build
+          key: ${{ runner.os }}-go-cache-${{ hashFiles('**/go.sum') }}-v2
 
-          git reset --hard && git clean -ffdx && git pull
+      - name: inject go caches into docker
+        uses: reproducible-containers/[email protected]
+        with:
+          cache-map: |
+            {
+              "go-pkg-mod": "/go/pkg/mod",
+              "go-build": "/root/.cache/go-build"
+            }
+          skip-extraction: ${{ steps.cache.outputs.cache-hit }}
 
-          docker buildx build \
-            -t "$image" \
-            --platform linux/amd64,linux/arm64 \
-            --push \
-            .
+      - name: Build and push
+        uses: docker/build-push-action@2cdde995de11925a030ce8070c3d77a52ffcf1c0 # v5
+        with:
+          context: .
+          platforms: linux/amd64,linux/arm64
+          push: true
+          tags: ghcr.io/planetscale/k8s-node-tagger:v${{ steps.autotag.outputs.version }}
 
-          gh release create "v${version}" --target main --title "v${version}" --generate-notes
+      - name: Create Release
         env:
-          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh release create "v${version}" \
+            --target main \
+            --title "v${version}" \
+            --generate-notes

Dockerfile

@@ -1,17 +1,23 @@
 # syntax=docker/dockerfile:1.9
 FROM --platform=$BUILDPLATFORM pscale.dev/wolfi-prod/go:1.23 AS builder
-ARG TARGETOS
-ARG TARGETARCH
-
 WORKDIR /work
-COPY . /work
 
+RUN \
+  --mount=type=cache,target=/go/pkg/mod,sharing=locked \
+  --mount=type=bind,source=go.mod,target=go.mod \
+  --mount=type=bind,source=go.sum,target=go.sum \
+  go mod download
+
+COPY . .
 ENV CGO_ENABLED=0
-RUN GOOS=${TARGETOS} GOOARCH=${TARGETARCH} go build -trimpath -v -o ./k8s-node-tagger .
+ARG TARGETOS
+ARG TARGETARCH
 
-# -- runtime image: --
-FROM pscale.dev/wolfi-prod/static:latest
+RUN \
+  --mount=type=cache,target=/root/.cache/go-build,sharing=locked \
+  --mount=type=cache,target=/go/pkg/mod,sharing=locked \
+  GOOS=${TARGETOS} GOARCH=${TARGETARCH} go build -trimpath -v -o ./k8s-node-tagger .
 
+FROM pscale.dev/wolfi-prod/static:latest
 COPY --from=builder /work/k8s-node-tagger /k8s-node-tagger
-
-ENTRYPOINT ["/k8s-node-tagger"]
+ENTRYPOINT ["/k8s-node-tagger"]