fhevm/.github/workflows/golden-container-images-docker-build-rust.yml at 6c96f196afb4d2da55bb7c595443fcaf93211594 · zama-ai/fhevm · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
name: golden-container-images-docker-build-rust

on:
  workflow_dispatch:
    inputs:
      push_image:
        description: 'Push the image to the registry'
        default: true
        required: true
        type: boolean
      tag:
        description: 'Tag to use for the image'
        default: 'latest'
        required: true
        type: string
  pull_request:

concurrency:
  group: golden-rust-${{ github.ref }}
  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}

jobs:
  check-changes:
    name: golden-container-images-docker-build-rust/check-changes
    permissions:
      actions: read
      contents: read
      pull-requests: read
    runs-on: ubuntu-latest
    outputs:
      changes-golden-rust: ${{ steps.filter.outputs.golden-rust }}
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        with:
          persist-credentials: 'false'
      - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36  # v3.0.2
        id: filter
        with:
          filters: |
            golden-rust:
              - '.github/workflows/golden-container-images-docker-build-rust.yml'
              - 'golden-container-images/rust-glibc/**'
  set-custom-tag:
    permissions:
      actions: read
      contents: read
      pull-requests: read
    runs-on: ubuntu-latest
    if: github.event_name == 'workflow_dispatch'
    outputs:
      DOCKER_TAG_IMAGE: ${{ steps.set-tag.outputs.tag }}
    steps:
      - id: set-tag
        run: echo "tag=${{ github.event.inputs.tag }}" >> "$GITHUB_OUTPUT"
  build:
    name: golden-container-images-docker-build-rust/build
    needs: [check-changes]
    if: ${{ needs.check-changes.outputs.changes-golden-rust == 'true' }}
    uses: zama-ai/ci-templates/.github/workflows/docker_common.yml@44333c96991d6747e0bef6a3308bfd98b20390f8 # main
    secrets:
      GHCR_ACTION_TOKEN: ${{ secrets.BLOCKCHAIN_ACTIONS_TOKEN }}
      GRAVITON_BUILDER_SSH_PRIVATE_KEY: ${{ secrets.GRAVITON_BUILDER_SSH_PRIVATE_KEY }}
    permissions:
      contents: read
      id-token: write
      packages: write
    with:
      working-directory: "."
      push_image: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.push_image == 'true' || github.event_name != 'workflow_dispatch' && true }}
      image-name: "fhevm/gci/rust-glibc"
      docker-file: "golden-container-images/rust-glibc/Dockerfile"
      arm-build: true
      ref: ${{ github.event_name == 'workflow_dispatch' && format('refs/tags/{0}', github.event.inputs.tag) || '' }}