docke dryrun in parallel

Author: wxiaoguang

.github/workflows/part-docker-dryrun.yml

@@ -0,0 +1,34 @@
+# Reusable workflow that performs the container build steps for a single platform.
+# Used by `pull-docker-dryrun.yml` to run builds in parallel per-platform.
+on:
+  workflow_call:
+    inputs:
+      platform:
+        description: 'The target platform(s) to build for (e.g. linux/amd64)'
+        required: true
+        type: string
+      dockerfile:
+        description: 'Path to the Dockerfile to use (e.g. Dockerfile or Dockerfile.rootless)'
+        required: false
+        type: string
+      cache_from:
+        description: 'The cache-from value to pass to docker/build-push-action'
+        required: false
+        type: string
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
+      - uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
+      - name: Build container image
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
+        with:
+          context: .
+          platforms: ${{ inputs.platform }}
+          push: false
+          file: ${{ inputs.dockerfile }}
+          cache-from: ${{ inputs.cache_from }}

.github/workflows/pull-docker-dryrun.yml

@@ -7,34 +7,70 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+
+env:
+  CACHE_ROOTFUL: "type=registry,ref=ghcr.io/go-gitea/gitea:buildcache-rootful"
+  CACHE_ROOTLESS: "type=registry,ref=ghcr.io/go-gitea/gitea:buildcache-rootless"
+
 jobs:
   files-changed:
     uses: ./.github/workflows/files-changed.yml
     permissions:
       contents: read
 
-  container:
+  # dryrun build is slow, so run them parallelly per-platform
+  container-amd64-rootful:
     if: needs.files-changed.outputs.docker == 'true'
     needs: files-changed
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
-      - uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
-      - name: Build regular container image
-        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
-        with:
-          context: .
-          platforms: linux/amd64,linux/arm64,linux/riscv64
-          push: false
-          cache-from: type=registry,ref=ghcr.io/go-gitea/gitea:buildcache-rootful
-      - name: Build rootless container image
-        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
-        with:
-          context: .
-          push: false
-          platforms: linux/amd64,linux/arm64,linux/riscv64
-          file: Dockerfile.rootless
-          cache-from: type=registry,ref=ghcr.io/go-gitea/gitea:buildcache-rootless
+    uses: ./.github/workflows/part-docker-dryrun.yml
+    with:
+      platform: linux/amd64
+      dockerfile: Dockerfile
+      cache_from: ${{ env.CACHE_ROOTFUL }}
+
+  container-amd64-rootless:
+    if: needs.files-changed.outputs.docker == 'true'
+    needs: files-changed
+    uses: ./.github/workflows/part-docker-dryrun.yml
+    with:
+      platform: linux/amd64
+      dockerfile: Dockerfile.rootless
+      cache_from: ${{ env.CACHE_ROOTLESS }}
+
+  container-arm64-rootful:
+    if: needs.files-changed.outputs.docker == 'true'
+    needs: files-changed
+    uses: ./.github/workflows/part-docker-dryrun.yml
+    with:
+      platform: linux/arm64
+      dockerfile: Dockerfile
+      cache_from: ${{ env.CACHE_ROOTFUL }}
+
+  container-arm64-rootless:
+    if: needs.files-changed.outputs.docker == 'true'
+    needs: files-changed
+    uses: ./.github/workflows/part-docker-dryrun.yml
+    with:
+      platform: linux/arm64
+      dockerfile: Dockerfile.rootless
+      cache_from: ${{ env.CACHE_ROOTLESS }}
+
+  container-riscv64-rootful:
+    if: needs.files-changed.outputs.docker == 'true'
+    needs: files-changed
+    uses: ./.github/workflows/part-docker-dryrun.yml
+    with:
+      platform: linux/riscv64
+      dockerfile: Dockerfile
+      cache_from: ${{ env.CACHE_ROOTFUL }}
+
+  container-riscv64-rootless:
+    if: needs.files-changed.outputs.docker == 'true'
+    needs: files-changed
+    uses: ./.github/workflows/part-docker-dryrun.yml
+    with:
+      platform: linux/riscv64
+      dockerfile: Dockerfile.rootless
+      cache_from: ${{ env.CACHE_ROOTLESS }}