build-containers.yml

name: build-containers

on:
  push:
    tags:
      - "v*"
    paths-ignore:
      - '.github/workflows/build-containers.yml'
  pull_request:
    paths-ignore:
      - '.github/workflows/build-containers.yml'
  workflow_dispatch:
  workflow_run:
    workflows: ["add-tag"]
    types:
      - completed

concurrency:
  group: '${{ github.workflow }}-${{ github.job }}-${{ github.head_ref || github.ref_name }}'
  cancel-in-progress: true

jobs:
  build-amd64-containers:
    name: ${{ matrix.container }}
    runs-on: ubuntu-20.04
    permissions:
      contents: read
      packages: write
    strategy:
      fail-fast: false
      matrix:
        container:
          - 'ubuntu-20.04'
          - 'alpine-3.17'

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Get latest tag
        if: github.event_name == 'workflow_run'
        id: get_latest_tag
        uses: actions/github-script@v7
        with:
          script: |
            const latestTag = await github.repos.listTags({
              owner: context.repo.owner,
              repo: context.repo.repo,
              per_page: 1
            });
            core.setOutput('latest_tag', latestTag.data[0].name);

      - name: Set GITHUB_REF
        if: github.event_name == 'workflow_run'
        run: echo "GITHUB_REF=refs/tags/${{ steps.get_latest_tag.outputs.latest_tag }}" >> $GITHUB_ENV

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: tamatebako
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Docker meta
        id: meta
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/tamatebako/tebako-${{ matrix.container }}
          tags: |
            type=semver,pattern={{version}}
            type=semver,pattern={{major}}.{{minor}}
            type=semver,pattern={{major}}
            type=sha
          labels: |
            org.opencontainers.image.vendor=Ribose Inc.
            org.opencontainers.image.licenses=BSD-3-Clause
            org.opencontainers.image.documentation=https://www.tamatebako.org
            org.opencontainers.image.source==${{ github.repositoryUrl }}

      - name: Build and push Docker image
        uses: docker/build-push-action@v6
        with:
          context: .
          file: ./${{ matrix.container }}.Dockerfile
          push: ${{ contains(github.ref, 'refs/tags/v') || github.event_name == 'workflow_run' }}
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}

      - name: Purge old versions
        if: contains(github.ref, 'refs/tags/v')
        continue-on-error: true
        uses: actions/delete-package-versions@v5
        with:
          package-name: tebako-${{ matrix.container }}-amd64
          package-type: container
          min-versions-to-keep: 10
          delete-only-untagged-versions: false

  test-packaging-in-container:
    name: Package ${{ matrix.gem }} in ${{ matrix.container }} with Ruby ${{ matrix.package_ruby_ver }}
    if: contains(github.ref, 'refs/tags/v') || github.event_name == 'workflow_run'
    runs-on: ubuntu-20.04
    needs: build-amd64-containers
    strategy:
      fail-fast: false
      matrix:
        gem:
          - 'fontist'
        container:
          - 'ubuntu-20.04'
          - 'alpine-3.17'
        package_ruby_ver:
          - '3.2.6'
          - '3.3.6'
    container:
      image: ghcr.io/tamatebako/tebako-${{ matrix.container }}:latest

    steps:
    - name: Checkout fontist
      uses: actions/checkout@v4
      with:
        repository: fontist/fontist
        path: ${{github.workspace}}/fontist

    - name: Package fontist
      run: tebako press --root=fontist --entry-point=fontist --output=fontist-package --Ruby=${{ matrix.package_ruby_ver }}

    - name: Run smoke test
      run: ./fontist-package help

  test-packaging-by-container:
    name: Package ${{ matrix.gem }} by ${{ matrix.container }} container with Ruby ${{ matrix.package_ruby_ver }}
    if: contains(github.ref, 'refs/tags/v') || github.event_name == 'workflow_run'
    runs-on: ubuntu-20.04
    needs: build-amd64-containers
    strategy:
      fail-fast: false
      matrix:
        gem:
          - 'fontist'
        container:
          - 'ubuntu-20.04'
          - 'alpine-3.17'
        package_ruby_ver:
          - '3.2.6'
          - '3.3.6'

    steps:
    - name: Checkout fontist
      uses: actions/checkout@v4
      with:
        repository: fontist/fontist
        path: ${{github.workspace}}/fontist

    - name: Package fontist
      run: |
        docker run -v ${{github.workspace}}:/mnt/w -t ghcr.io/tamatebako/tebako-${{ matrix.container }}:latest \
                   tebako press --root=/mnt/w/fontist --entry-point=fontist --output=/mnt/w/fontist-package --Ruby=${{ matrix.package_ruby_ver }}

    - name: Run smoke test Ubuntu
      if: contains(matrix.container, 'ubuntu')
      run: ${{github.workspace}}/fontist-package help

    - name: Run smoke test Alpine
      if: contains(matrix.container, 'alpine')
      run:  docker run  -v ${{github.workspace}}:/mnt/w -t alpine:latest /bin/sh -c "apk add --no-cache libstdc++; /mnt/w/fontist-package help"