on: [tag] env: REGISTRY_IMAGE: asonix/pictrs jobs: clippy: runs-on: docker container: image: docker.io/asonix/rust-builder:latest-linux-amd64 steps: - run: | git clone ${{ env.github_server_url }}/${{ env.github_repository }} . git checkout ${{ env.github_sha }} rustup component add clippy cargo clippy --no-default-features -- -D warnings cargo clippy --no-default-features --features io-uring -- -D warnings tests: runs-on: docker container: image: docker.io/asonix/rust-builder:latest-linux-amd64 steps: - run: | git clone ${{ env.github_server_url }}/${{ env.github_repository }} . git checkout ${{ env.github_sha }} cargo test build: needs: - clippy - tests strategy: matrix: include: - tag: latest-linux-amd64 artifact: linux-amd64 target: x86_64-unknown-linux-musl - tag: latest-linux-arm32v7 target: armv7-unknown-linux-musleabihf artifact: linux-arm32v7 - tag: latest-linux-arm64v8 artifact: linux-arm64v8 target: aarch64-unknown-linux-musl runs-on: docker container: image: docker.io/asonix/rust-builder:${{ matrix.tag }} steps: - run: | git clone ${{ env.github_server_url }}/${{ env.github_repository }} . git checkout ${{ env.github_sha }} cargo build --target=${{ matrix.target }} --release mkdir artifacts cp target/${{ matrix.target }}/release/pict-rs artifacts/pict-rs - uses: actions/upload-artifact@v4 with: name: ${{ matrix.artifact }} path: artifacts/ prepare-docker: needs: - build strategy: matrix: fail-fast: false include: - platform: linux/amd64 artifact: linux-amd64 - platform: linux/arm/v7 artifact: linux-arm32v7 - platform: linux/arm64 artifact: linux-arm64v8 runs-on: docker container: image: docker.io/ubuntu:latest steps: - name: Prepare run: | platform=${{ matrix.platform }} echo "PLATFORM_PAIR=${platform//\//-}" >> $GITHUB_ENV - name: Docker meta id: meta uses: docker/metadata-action@v5 with: images: ${{ env.REGISTRY_IMAGE }} - name: Set up QEMU uses: docker/setup-qemu-action@v3 - name: Set up Docker Buildx uses: docker/setup-buildx-action@v3 - name: Docker login uses: docker/login-action@v3 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} - name: Download binaries uses: actions/download-artifact@v4 with: name: ${{ matrix.artifact }} path: artifacts/ - name: Build and push ${{ matrix.platform }} docker image uses: docker/build-push-action@v5 with: context: ./docker/forgejo" platforms: ${{ matrix.platform }} labels: ${{ steps.meta.outputs.labels }} outputs: type=image,name=${{ env.REGISTRY_IMAGE }},push-by-digest=true,name-canonical=true,push=true - name: Export digest run: | mkdir -p /tmp/digests digest="${{ steps.build.outputs.digest }}" touch "/tmp/digests/${digest#sha256:}" - name: Upload ${{ matrix.platform }} digest uses: actions/upload-artifact@v4 with: name: digests path: /tmp/digests/* if-no-files-found: error retention-days: 1 publish-docker: runs-on: docker container: image: docker.io/ubuntu:latest needs: - prepare-docker steps: - name: Download digests uses: actions/download-artifact@v4 with: name: digests path: /tmp/digests pattern: digests-* merge-multiple: true - name: Set up Docker Buildx uses: docker/setup-buildx-action@v3 - name: Docker meta id: meta uses: docker/metadata-action@v5 with: images: ${{ env.REGISTRY_IMAGE }} tags: | type=semver,pattern={{version}} type=semver,pattern={{major}}.{{minor}} type=semver,pattern={{major}} - name: Docker login uses: docker/login-action@v3 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} - name: Create manifest list and push working-directory: /tmp/digests run: | docker buildx imagetools create $(jq -cr '.tags | map("-t " + .) | join(" ")' <<< "$DOCKER_METADATA_OUTPUT_JSON") \ $(printf '${{ env.REGISTRY_IMAGE }}@sha256:%s ' *) - name: Inspect Image run: | docker buildx imagetools inspect ${{ env.REGISTRY_IMAGE }}:${{ steps.meta.outputs.version }} upload-release: needs: - build-amd64 - build-arm32v7 - build-arm64v8 runs-on: docker steps: - uses: actions/download-artifact@v4 - uses: actions/forgejo-release@v1 with: direction: upload release-dir: artifacts/ publish-crate: needs: - build-amd64 - build-arm32v7 - build-arm64v8 runs-on: docker steps: - run: cargo publish --token ${{ secrets.CRATES_IO_TOKEN }}