dash/.github/workflows/release_docker_hub.yml at develop · dashpay/dash · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
name: Release to Docker Hub

on:
  release:
    types: [published]

permissions:
  contents: read

env:
  RELEASE_TAG: ${{ github.event.release.tag_name }}

jobs:
  release:
    name: Release to Docker Hub
    runs-on: ${{ vars.RUNNER_DOCKER_RELEASE || 'ubuntu-22.04' }}
    steps:
    - name: Checkout
      uses: actions/checkout@v6
      with:
        persist-credentials: false

    - name: Set up QEMU
      uses: docker/setup-qemu-action@v4
      with:
        image: tonistiigi/binfmt:qemu-v7.0.0-28

    - name: Set up Docker Buildx
      uses: docker/setup-buildx-action@v4

    - name: Login to DockerHub
      uses: docker/login-action@v4
      with:
        username: ${{ secrets.DOCKERHUB_USERNAME }}
        password: ${{ secrets.DOCKERHUB_TOKEN }}

    - name: Set raw tag
      id: get_tag
      run: |
        echo "build_tag=${RELEASE_TAG#v}" >> "$GITHUB_OUTPUT"

    # Download with the workflow token rather than inside the image build
    - name: Download release binaries
      env:
        GH_TOKEN: ${{ github.token }}
        BUILD_TAG: ${{ steps.get_tag.outputs.build_tag }}
      run: |
        gh release download "$RELEASE_TAG" --repo "$GITHUB_REPOSITORY" \
          --dir ./contrib/containers/deploy/release \
          --pattern "dashcore-${BUILD_TAG}-x86_64-linux-gnu.tar.gz" \
          --pattern "dashcore-${BUILD_TAG}-aarch64-linux-gnu.tar.gz"
        ls -l ./contrib/containers/deploy/release

    - name: Set suffix
      uses: actions/github-script@v8
      id: suffix
      with:
        result-encoding: string
        script: |
          const fullTag = process.env.RELEASE_TAG;
          if (fullTag.includes('-')) {
            const [, fullSuffix] = fullTag.split('-');
            const [suffix] = fullSuffix.split('.');
            return `-${suffix}`;
          } else {
            return '';
          }

    - name: Set Docker tags and labels
      id: docker_meta
      uses: docker/metadata-action@v6
      with:
        images: dashpay/dashd
        tags: |
          type=match,pattern=v(\d+),group=1
          type=match,pattern=v(\d+.\d+),group=1
          type=match,pattern=v(\d+.\d+.\d+),group=1
          type=match,pattern=v(.*),group=1,suffix=
        flavor: |
          suffix=${{ steps.suffix.outputs.result }},onlatest=true

    - name: Build and push
      id: docker_build
      uses: docker/build-push-action@v7
      with:
        context: ./contrib/containers/deploy
        file: ./contrib/containers/deploy/Dockerfile.GitHubActions.Release
        push: true
        provenance: mode=max
        sbom: true
        tags: ${{ steps.docker_meta.outputs.tags }}
        labels: ${{ steps.docker_meta.outputs.labels }}
        build-args: |
          TAG=${{ steps.get_tag.outputs.build_tag }}
        cache-from: type=gha
        cache-to: type=gha,mode=max
        platforms: linux/amd64,linux/arm64

    - name: Image digest
      env:
        DIGEST: ${{ steps.docker_build.outputs.digest }}
      run: echo "${DIGEST}"