release-manager.yml

# 推送 tag v*.*.* 时：构建 Manager 二进制与镜像，并创建 GitHub Release
name: Release (Manager)

on:
  push:
    tags:
      - 'v*.*.*'

concurrency:
  group: release-manager-${{ github.ref }}
  cancel-in-progress: false

env:
  GO_VERSION: "1.26.0"
  REGISTRY: ghcr.io
  IMAGE_NAME: ${{ github.repository }}

jobs:
  release:
    name: Release
    runs-on: ubuntu-latest
    timeout-minutes: 45
    permissions:
      contents: write
      packages: write

    steps:
      - name: Checkout code
        uses: actions/checkout@v6
        with:
          fetch-depth: 0

      - name: Set up Go
        uses: actions/setup-go@v6
        with:
          go-version: ${{ env.GO_VERSION }}
          cache-dependency-path: go.sum

      - name: Run tests
        run: go test -v ./cmd/runner-manager/... ./internal/...

      - name: Extract version from tag
        id: version
        run: |
          VERSION=${GITHUB_REF#refs/tags/}
          VERSION=${VERSION#v}
          COMMIT=$(git rev-parse --short HEAD)
          BUILD_DATE=$(date -u +%FT%T%z)
          echo "version=$VERSION" >> $GITHUB_OUTPUT
          echo "tag=${GITHUB_REF#refs/tags/}" >> $GITHUB_OUTPUT
          echo "commit=$COMMIT" >> $GITHUB_OUTPUT
          echo "build_date=$BUILD_DATE" >> $GITHUB_OUTPUT

      - name: Build Manager binaries
        run: |
          mkdir -p dist
          VERSION=${{ steps.version.outputs.version }}
          LDFLAGS="-s -w -X main.Version=v${VERSION}"
          GOOS=linux GOARCH=amd64 CGO_ENABLED=0 go build -ldflags "${LDFLAGS}" -o dist/runner-manager-linux-amd64 ./cmd/runner-manager
          GOOS=linux GOARCH=arm64 CGO_ENABLED=0 go build -ldflags "${LDFLAGS}" -o dist/runner-manager-linux-arm64 ./cmd/runner-manager
          GOOS=darwin GOARCH=amd64 CGO_ENABLED=0 go build -ldflags "${LDFLAGS}" -o dist/runner-manager-darwin-amd64 ./cmd/runner-manager
          GOOS=darwin GOARCH=arm64 CGO_ENABLED=0 go build -ldflags "${LDFLAGS}" -o dist/runner-manager-darwin-arm64 ./cmd/runner-manager

      - name: Generate checksums
        run: |
          cd dist
          sha256sum * > checksums.txt

      # Dockerfile 内已 COPY config.yaml.example 为 config/config.yaml 并 sed，无需在 workflow 中准备

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to Container Registry
        uses: docker/login-action@v3
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Compute canonical image name (lowercase for GHCR)
        id: vars
        shell: bash
        run: |
          set -eu
          CANONICAL="${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}"
          echo "canonical=${CANONICAL,,}" >> "$GITHUB_OUTPUT"

      - name: Extract metadata (Manager image)
        id: meta
        uses: docker/metadata-action@v5
        with:
          images: ${{ steps.vars.outputs.canonical }}
          tags: |
            type=ref,event=tag
            type=semver,pattern={{version}}
            type=semver,pattern={{major}}.{{minor}}
            type=semver,pattern={{major}}
            type=raw,value=latest,enable=true

      - name: Build and push Manager Docker image
        uses: docker/build-push-action@v6
        with:
          context: ${{ github.workspace }}
          file: ${{ github.workspace }}/Dockerfile
          push: true
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}
          build-args: |
            VERSION=${{ steps.version.outputs.tag }}
          cache-from: type=gha
          cache-to: type=gha,mode=max
          platforms: linux/amd64,linux/arm64

      - name: Create Release
        uses: softprops/action-gh-release@v2
        with:
          files: dist/*
          name: Release ${{ steps.version.outputs.tag }}
          body: |
            ## Changes

            详见提交历史与变更说明。

            ## 使用方式

            ### Docker 镜像 (GHCR)

            - Manager（管理服务）:
            ```bash
            docker pull ${{ steps.vars.outputs.canonical }}:${{ steps.version.outputs.tag }}
            ```
            - Runner 容器镜像（容器模式，同镜像名，tag 带 -runner 后缀，由 Release (Runner) 工作流推送）:
            ```bash
            docker pull ${{ steps.vars.outputs.canonical }}:${{ steps.version.outputs.tag }}-runner
            ```

            ### 二进制

            - Linux AMD64: `runner-manager-linux-amd64`
            - Linux ARM64: `runner-manager-linux-arm64`
            - macOS AMD64: `runner-manager-darwin-amd64`
            - macOS ARM64: `runner-manager-darwin-arm64`

            ### 校验和

            见 `checksums.txt` 中的 SHA256。
          draft: false
          prerelease: false