onbuild.yaml

---
name: Onbuild

on:
  push:
  pull_request:

concurrency:
  # don't run on commits in quick succession on the same branch
  group: ${{ github.ref }}
  # ... except for main, where we want a full record of CI
  cancel-in-progress: ${{ github.ref_name != 'main' }}

jobs:
  build-onbuild:
    name: "Build Images with ONBUILD Instructions"
    runs-on: ubuntu-22.04
    steps:
      - name: "Checkout"
        uses: actions/checkout@v3
      - name: "Set up QEMU"
        uses: docker/setup-qemu-action@v2
        with:
          platforms: "linux/amd64, linux/arm64"
      - name: "Set up Docker Buildx"
        uses: docker/setup-buildx-action@v2
        with:
          version: v0.10.4
          install: true
      - name: "Log in to GHCR"
        uses: docker/login-action@v2
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
          logout: false
      - name: Extract Metadata for Docker
        id: meta
        uses: docker/metadata-action@v4
        with:
          # image names and tags are actually defined in the bakefile
          # TODO this should done by metadata-action,
          # but is currently unsupported, tracked in #220
          images: "i-am-ignored"
      - name: "Build and Push Images"
        # cache-to is disabled below because of #218
        run: |
          make bake \
            tag_from_git_sha="${{ github.sha }}" \
            git_ref_name="${{ github.ref_name }}" \
            can_push=true \
            bake_args="--set=*.cache-to='type=inline'"
  # workaround for missing multi-node registry cache, tracked in #218
  build-onbuild-cache-multiarch:
    name: "Build Multiarch Cache"
    # helps to avoid concurrency issues with GHCR
    needs: build-onbuild
    runs-on: ubuntu-22.04
    # this is just caching after all
    continue-on-error: true
    strategy:
      fail-fast: false
      # avoid more concurrency
      max-parallel: 1
      matrix:
        arch: [
          linux/arm64,
          linux/amd64
        ]
    steps:
      - name: "Checkout"
        uses: actions/checkout@v3
      - name: "Set up QEMU"
        uses: docker/setup-qemu-action@v2
        with:
          platforms: "${{ matrix.arch }}"
      - name: "Set up Docker Buildx"
        uses: docker/setup-buildx-action@v2
        with:
          version: v0.10.4
          install: true
      - name: "Log in to GHCR"
        uses: docker/login-action@v2
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
          logout: false
      - name: Extract Metadata for Docker
        id: meta
        uses: docker/metadata-action@v4
        with:
          # image names and tags are actually defined in the bakefile
          # TODO this should done by metadata-action,
          # but is currently unsupported, tracked in #220
          images: "i-am-ignored"
      - name: "Build and Push Arch Image Cache"
        run: |
          ARCH="${{ matrix.arch }}" \
            make bake-multiarch-cache \
              tag_from_git_sha="${{ github.sha }}" \
              git_ref_name="${{ github.ref_name }}"