147 lines
4.2 KiB
YAML
147 lines
4.2 KiB
YAML
name: Release
|
|
|
|
on:
|
|
push:
|
|
tags:
|
|
- "*"
|
|
|
|
permissions:
|
|
contents: write
|
|
packages: write
|
|
|
|
jobs:
|
|
check:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Install Nix
|
|
uses: cachix/install-nix-action@v31
|
|
with:
|
|
nix_path: nixpkgs=channel:nixos-unstable
|
|
|
|
- name: Use Cachix
|
|
uses: cachix/cachix-action@v16
|
|
with:
|
|
name: trevstack
|
|
authToken: "${{ secrets.CACHIX_AUTH_TOKEN }}"
|
|
|
|
- name: Check
|
|
run: nix flake check
|
|
|
|
release:
|
|
runs-on: ubuntu-latest
|
|
needs: check
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Install Nix
|
|
uses: cachix/install-nix-action@v31
|
|
with:
|
|
nix_path: nixpkgs=channel:nixos-unstable
|
|
|
|
- name: Use Cachix
|
|
uses: cachix/cachix-action@v16
|
|
with:
|
|
name: trevstack
|
|
authToken: "${{ secrets.CACHIX_AUTH_TOKEN }}"
|
|
|
|
- name: Build
|
|
run: >
|
|
nix build
|
|
.#trevstack-linux-amd64
|
|
.#trevstack-linux-arm64
|
|
.#trevstack-linux-arm
|
|
.#trevstack-windows-amd64
|
|
.#trevstack-darwin-amd64
|
|
.#trevstack-darwin-arm64
|
|
|
|
- name: Release
|
|
uses: softprops/action-gh-release@v2
|
|
with:
|
|
generate_release_notes: true
|
|
files: |-
|
|
result*/bin/*
|
|
|
|
# https://docs.docker.com/build/ci/github-actions/manage-tags-labels/
|
|
package:
|
|
runs-on: ubuntu-latest
|
|
needs: release # Wait for binary cache to propagate
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Install Nix
|
|
uses: cachix/install-nix-action@v31
|
|
with:
|
|
nix_path: nixpkgs=channel:nixos-unstable
|
|
|
|
- name: Use Cachix
|
|
uses: cachix/cachix-action@v16
|
|
with:
|
|
name: trevstack
|
|
authToken: "${{ secrets.CACHIX_AUTH_TOKEN }}"
|
|
|
|
- name: Set env
|
|
run: |
|
|
TAG=${{ github.event.release.tag_name }}
|
|
VERSION=${TAG#v}
|
|
|
|
NAME="trevstack:${VERSION}"
|
|
|
|
REPOSITORY=${{ github.repository }}
|
|
REGISTRY="ghcr.io/${REPOSITORY}"
|
|
|
|
echo "VERSION=${VERSION}" >> $GITHUB_ENV
|
|
echo "NAME=${NAME}" >> $GITHUB_ENV
|
|
echo "REGISTRY=${REGISTRY}" >> $GITHUB_ENV
|
|
|
|
- name: Login to GitHub Container Registry
|
|
uses: docker/login-action@v3
|
|
with:
|
|
registry: ghcr.io
|
|
username: ${{ github.actor }}
|
|
password: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
- name: Build & Load Images
|
|
run: |
|
|
nix build .#trevstack-linux-amd64-image && ./result | docker load
|
|
nix build .#trevstack-linux-arm64-image && ./result | docker load
|
|
nix build .#trevstack-linux-arm-image && ./result | docker load
|
|
|
|
- name: Push Images
|
|
run: |
|
|
docker image tag ${NAME}-amd64 ${REGISTRY}/${NAME}-amd64
|
|
docker push ${REGISTRY}/${NAME}-amd64
|
|
|
|
docker image tag ${NAME}-arm64 ${REGISTRY}/${NAME}-arm64
|
|
docker push ${REGISTRY}/${NAME}-arm64
|
|
|
|
docker image tag ${NAME}-arm ${REGISTRY}/${NAME}-arm
|
|
docker push ${REGISTRY}/${NAME}-arm
|
|
|
|
- name: Push Manifest
|
|
run: |
|
|
docker manifest create ${REGISTRY}/${NAME} \
|
|
${REGISTRY}/${NAME}-amd64 \
|
|
${REGISTRY}/${NAME}-arm64 \
|
|
${REGISTRY}/${NAME}-arm
|
|
|
|
docker manifest annotate ${REGISTRY}/${NAME} ${REGISTRY}/${NAME}-amd64 --arch amd64
|
|
docker manifest annotate ${REGISTRY}/${NAME} ${REGISTRY}/${NAME}-arm64 --arch arm64
|
|
docker manifest annotate ${REGISTRY}/${NAME} ${REGISTRY}/${NAME}-arm --arch arm
|
|
|
|
docker manifest create ${REGISTRY}/trevstack:latest \
|
|
${REGISTRY}/${NAME}-amd64 \
|
|
${REGISTRY}/${NAME}-arm64 \
|
|
${REGISTRY}/${NAME}-arm
|
|
|
|
docker manifest annotate ${REGISTRY}/trevstack:latest ${REGISTRY}/${NAME}-amd64 --arch amd64
|
|
docker manifest annotate ${REGISTRY}/trevstack:latest ${REGISTRY}/${NAME}-arm64 --arch arm64
|
|
docker manifest annotate ${REGISTRY}/trevstack:latest ${REGISTRY}/${NAME}-arm --arch arm
|
|
|
|
docker manifest push ${REGISTRY}/${NAME}
|
|
docker manifest push ${REGISTRY}/trevstack:latest
|