docker.yml

name: Build docker images

on:
  workflow_dispatch:
  pull_request:
    branches: [develop]
  push:
    branches: [develop]
    tags: ["v*"]

# Add permissions block for GitHub Container Registry access
permissions:
  contents: read
  packages: write

env:
  PUSH_CONDITION: ${{ github.event_name == 'push' || (github.event_name == 'workflow_dispatch' && contains(fromJSON('["refs/head/main", "refs/head/develop"]'), github.event.workflow_dispatch.ref)) }}


jobs:
  build-base-image:
    runs-on: ubuntu-latest
    outputs:
      version: ${{ steps.version.outputs.version }}

    steps:
      - uses: actions/checkout@v4
      - name: Login to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.repository_owner }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Generate version info
        id: version
        run: |
            echo "VERSION_INFO<<EOF" >> "$GITHUB_ENV"
            ./docker/version.sh | sed -e '$a\' >> "$GITHUB_ENV"
            echo "EOF" >> "$GITHUB_ENV"
            echo "version=$(git rev-parse --short HEAD)" >> "$GITHUB_OUTPUT"

      - name: Build and export
        uses: docker/build-push-action@v6
        with:
          file: docker/base.Dockerfile
          push: false
          tags: ghcr.io/${{ github.repository_owner }}/aura-base:latest
          outputs: type=docker,dest=${{ runner.temp }}/base.tar
          cache-from: type=gha
          cache-to: type=gha,mode=max
          build-args: |
            VERSION_INFO: ${{ env.VERSION_INFO }}

      - name: Upload artifact
        uses: actions/upload-artifact@v4
        with:
          name: base
          path: ${{ runner.temp }}/base.tar

  build-binary-images:
    runs-on: ubuntu-latest
    needs: [build-base-image]
    strategy:
      fail-fast: true
      matrix:
        binary-name:
          [
            ingester,
            slot_persister,
            backfill,
            api,
            synchronizer,
            rocksdb_backup,
          ]
    steps:
      - name: Login to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.repository_owner }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
        with:
          driver: docker

      - name: Download base image artifact
        uses: actions/download-artifact@v4
        with:
          name: base
          path: ${{ runner.temp }}

      - name: Load base image
        run: |
          docker load --input ${{ runner.temp }}/base.tar

      - name: Docker meta
        id: meta
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/${{ github.repository_owner }}/aura-${{ matrix.binary-name }}
          tags: |
            type=semver,pattern={{version}}
            type=semver,pattern={{major}}.{{minor}}
            type=semver,pattern={{major}}
            type=ref,event=branch
            type=sha

      - name: Build and push
        uses: docker/build-push-action@v6
        with:
          file: docker/app.Dockerfile
          push: ${{ env.PUSH_CONDITION }}
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}
          build-args: |
            BINARY: ${{ matrix.binary-name }}

  dispatch:
    runs-on: ubuntu-latest
    needs: [build-base-image, build-binary-images]
    steps:
      - name: Repository dispatch
        run: |
          curl -X POST \
            -H "Authorization: token ${{ secrets.DISPATCH_TOKEN_DEV }}" \
            -H "Accept: application/vnd.github+json" \
            https://api.github.com/repos/adm-metaex/aura-config-dev/dispatches \
            -d '{
                  "event_type": "deploy",
                  "client_payload": {
                    "services": "${{ env.PUSH_CONDITION && 'ingester,slot_persister,backfill,api,synchronizer,rocksdb_backup' || '' }}",
                    "version": "${{ needs.build-base-image.outputs.version }}"
                  }
                }'