try push by digest

getlago · Aug 9, 2024 · f20816a · f20816a
1 parent 418c5f2
commit f20816a
Showing 1 changed file with 109 additions and 56 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -7,6 +7,8 @@ on:
       version:
         description: Version
         required: true
+env:
+  REGISTRY_IMAGE: getlago/api
 jobs:
   build-arm-image:
     name: Build ARM Image
@@ -15,8 +17,19 @@ jobs:
       - name: Checkout Repository
         uses: actions/checkout@v4
 
+      - name: Docker Meta
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.REGISTRY_IMAGE }}
+          tags: |
+            type=semver,pattern={{raw}},value=${{ github.event_name == 'release' && github.event.release.tag_name || github.event.inputs.version }}
+
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
+        with:
+          version: latest
+          platforms: linux/arm64
 
       - name: Log In to Docker Hub
         uses: docker/login-action@v3
@@ -28,76 +41,116 @@ jobs:
         id: add_version
         run: |
           echo "${{ github.event_name == 'release' && github.event.release.tag_name || github.event.inputs.version }}" > LAGO_VERSION
-          echo "lago_version=${{ github.event_name == 'release' && github.event.release.tag_name || github.event.inputs.version }}" >> "$GITHUB_OUTPUT"
 
       - name: Build and push Docker image
         uses: docker/build-push-action@v6
+        id: build
         with:
           context: .
           platforms: linux/arm64
-          push: true
-          tags: getlago/api:${{ steps.add_version.outputs.lago_version }}-arm64
+          labels: ${{ steps.meta.outputs.labels }}
+          outputs: type=image,name=${{ env.REGISTRY_IMAGE }},push-by-digest=true,name-canonical=true,push=true
           build-args: |
             SEGMENT_WRITE_KEY=${{ secrets.SEGMENT_WRITE_KEY }}
             GOCARDLESS_CLIENT_ID=${{ secrets.PRODUCTION_GOCARDLESS_CLIENT_ID }}
             GOCARDLESS_CLIENT_SECRET=${{ secrets.PRODUCTION_GOCARDLESS_CLIENT_SECRET }}
             LAGO_OAUTH_URL=https://proxy.getlago.com
 
-  build-amd-image:
-    name: Build AMD Image
-    runs-on: lago-runner
-    steps:
-      - name: Checkout Repository
-        uses: actions/checkout@v4
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+      - name: Export Digest
+        run: |
+          mkdir -p /tmp/digests
+          digest="${{ steps.build.outputs.digest }}"
+          touch "/tmp/digests/${digest#sha256:}"
 
-      - name: Log In to Docker Hub
-        uses: docker/login-action@v3
+      - name: Upload Digest
+        uses: actions/upload-artifact@v4
         with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_PASSWORD }}
+          name: digests-arm64
+          path: /tmp/digests/*
+          if-no-files-found: error
+          retention-days: 1
 
-      - name: Add version into docker image
-        id: add_version
-        run: |
-          echo "${{ github.event_name == 'release' && github.event.release.tag_name || github.event.inputs.version }}" > LAGO_VERSION
-          echo "lago_version=${{ github.event_name == 'release' && github.event.release.tag_name || github.event.inputs.version }}" >> "$GITHUB_OUTPUT"
+  # build-amd-image:
+  #   name: Build AMD Image
+  #   runs-on: lago-runner
+  #   steps:
+  #     - name: Checkout Repository
+  #       uses: actions/checkout@v4
 
-      - name: Build and push Docker image
-        uses: docker/build-push-action@v6
-        with:
-          context: .
-          platforms: linux/amd64
-          push: true
-          tags: getlago/api:${{ steps.add_version.outputs.lago_version }}-amd64
-          build-args: |
-            SEGMENT_WRITE_KEY=${{ secrets.SEGMENT_WRITE_KEY }}
-            GOCARDLESS_CLIENT_ID=${{ secrets.PRODUCTION_GOCARDLESS_CLIENT_ID }}
-            GOCARDLESS_CLIENT_SECRET=${{ secrets.PRODUCTION_GOCARDLESS_CLIENT_SECRET }}
-            LAGO_OAUTH_URL=https://proxy.getlago.com
+  #     - name: Set up Docker Buildx
+  #       uses: docker/setup-buildx-action@v3
 
-  create-manifest:
-    runs-on: lago-runner
-    needs: [build-arm-image, build-amd-image]
-    steps:
-      - uses: actions/checkout@v4
-      - name: Setup QEMU
-        uses: docker/setup-qemu-action@v3
-      - name: Login to Docker Hub
-        uses: docker/login-action@v3
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_PASSWORD }}
-      - name: Add version into docker image
-        id: add_version
-        run: |
-          echo "lago_version=${{ github.event_name == 'release' && github.event.release.tag_name || github.event.inputs.version }}" >> "$GITHUB_OUTPUT"
-      - name: Create version manifest and Push
-        run: |
-          docker manifest create \
-            getlago/api:${{ steps.add_version.outputs.lago_version }} \
-            --amend getlago/api:${{ steps.add_version.outputs.lago_version }}-amd64 \
-            --amend getlago/api:${{ steps.add_version.outputs.lago_version }}-arm64
-          docker manifest push getlago/api:${{ steps.add_version.outputs.lago_version }}
+  #     - name: Log In to Docker Hub
+  #       uses: docker/login-action@v3
+  #       with:
+  #         username: ${{ secrets.DOCKERHUB_USERNAME }}
+  #         password: ${{ secrets.DOCKERHUB_PASSWORD }}
+
+  #     - name: Add version into docker image
+  #       id: add_version
+  #       run: |
+  #         echo "${{ github.event_name == 'release' && github.event.release.tag_name || github.event.inputs.version }}" > LAGO_VERSION
+  #         echo "lago_version=${{ github.event_name == 'release' && github.event.release.tag_name || github.event.inputs.version }}" >> "$GITHUB_OUTPUT"
+
+  #     - name: Build and push Docker image
+  #       uses: docker/build-push-action@v6
+  #       with:
+  #         context: .
+  #         platforms: linux/amd64
+  #         push: true
+  #         tags: getlago/api:${{ steps.add_version.outputs.lago_version }}-amd64
+  #         build-args: |
+  #           SEGMENT_WRITE_KEY=${{ secrets.SEGMENT_WRITE_KEY }}
+  #           GOCARDLESS_CLIENT_ID=${{ secrets.PRODUCTION_GOCARDLESS_CLIENT_ID }}
+  #           GOCARDLESS_CLIENT_SECRET=${{ secrets.PRODUCTION_GOCARDLESS_CLIENT_SECRET }}
+  #           LAGO_OAUTH_URL=https://proxy.getlago.com
+
+  # merge:
+  #   runs-on: lago-runner
+  #   needs: [build-arm-image, build-amd-image]
+  #   steps:
+  #     - name: Download Digests
+  #       uses: actions/download-artifact@v2
+  #       with:
+  #         path: /tmp/digests
+  #         pattern: digests-*
+  #         merge-multiple: true
+
+  #     - name: Set up Docker buildx
+  #       uses: docker/setup-buildx-action@v3
+
+  #     - name: Log in to Docker Hub
+  #       uses: docker/login-action@v3
+  #       with:
+  #         username: ${{ secrets.DOCKERHUB_USERNAME }}
+  #         password: ${{ secrets.DOCKERHUB_PASSWORD }}
+
+  #     - name: Create manifest and push
+  #       working-directory: /tmp/digests
+  #       run: |
+  #         docker buildx imagetools create $(jq -cr '.tags | map("-t " + .) | join(" ")' <<< "$DOCKER_METADATA_OUTPUT_JSON") \
+  #           $(printf
+
+  # create-manifest:
+  #   runs-on: lago-runner
+  #   needs: [build-arm-image, build-amd-image]
+  #   steps:
+  #     - uses: actions/checkout@v4
+  #     - name: Setup QEMU
+  #       uses: docker/setup-qemu-action@v3
+  #     - name: Login to Docker Hub
+  #       uses: docker/login-action@v3
+  #       with:
+  #         username: ${{ secrets.DOCKERHUB_USERNAME }}
+  #         password: ${{ secrets.DOCKERHUB_PASSWORD }}
+  #     - name: Add version into docker image
+  #       id: add_version
+  #       run: |
+  #         echo "lago_version=${{ github.event_name == 'release' && github.event.release.tag_name || github.event.inputs.version }}" >> "$GITHUB_OUTPUT"
+  #     - name: Create version manifest and Push
+  #       run: |
+  #         docker manifest create \
+  #           getlago/api:${{ steps.add_version.outputs.lago_version }} \
+  #           --amend getlago/api:${{ steps.add_version.outputs.lago_version }}-amd64 \
+  #           --amend getlago/api:${{ steps.add_version.outputs.lago_version }}-arm64
+  #         docker manifest push getlago/api:${{ steps.add_version.outputs.lago_version }}