Docker CI/CD #71
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Docker CI/CD | |
| on: | |
| push: | |
| branches: [ "master" ] | |
| pull_request: | |
| branches: [ "master" ] | |
| merge_group: | |
| branches: [ "master" ] | |
| workflow_dispatch: | |
| inputs: | |
| copter: | |
| description: 'Copter Version (#.#.#)' | |
| required: false | |
| default: '' | |
| type: string | |
| plane: | |
| description: 'Plane Version (#.#.#)' | |
| required: false | |
| default: '' | |
| type: string | |
| # For pull request validation, build a default version of each vehicle | |
| env: | |
| COPTER_VERSION: '4.5.1' | |
| PLANE_VERSION: '4.5.0' | |
| jobs: | |
| configure-matrix: | |
| name: Configure Matrix | |
| runs-on: ubuntu-latest | |
| if: ${{ github.event_name == 'pull_request' || inputs.copter || inputs.plane }} | |
| outputs: | |
| matrix: ${{ steps.set-matrix.outputs.matrix }} | |
| steps: | |
| - name: Set Matrix | |
| id: set-matrix | |
| run: | | |
| array=() | |
| if [[ ${{ github.event_name }} == 'pull_request' || -n "${{ inputs.copter }}" ]]; then | |
| array+=("{\"vehicle\": \"copter\", \"arch\": \"x86\"}" "{\"vehicle\": \"copter\", \"arch\": \"arm\"}") | |
| fi | |
| if [[ ${{ github.event_name }} == 'pull_request' || -n "${{ inputs.plane }}" ]]; then | |
| array+=("{\"vehicle\": \"plane\", \"arch\": \"x86\"}" "{\"vehicle\": \"plane\", \"arch\": \"arm\"}") | |
| fi | |
| matrix=$(jq -c -n '$ARGS.positional' --jsonargs "${array[@]}") | |
| echo "matrix={\"include\":$(echo $matrix)}" >> $GITHUB_OUTPUT | |
| build-push: | |
| name: Build and Push | |
| runs-on: ubuntu-latest | |
| if: ${{ github.event_name == 'pull_request' || inputs.copter || inputs.plane }} | |
| needs: configure-matrix | |
| strategy: | |
| matrix: ${{fromJSON(needs.configure-matrix.outputs.matrix)}} | |
| permissions: | |
| id-token: write | |
| attestations: write | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| - name: Copy Shared Libraries | |
| run: bash ${GITHUB_WORKSPACE}/configure.sh | |
| - name: Set up QEMU | |
| if: ${{ matrix.arch == 'arm' }} | |
| uses: docker/setup-qemu-action@v3 | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@v3 | |
| - name: Login to Docker Hub | |
| if: ${{ github.event_name != 'pull_request' }} | |
| uses: docker/login-action@v3 | |
| with: | |
| username: ${{ secrets.DOCKER_HUB_USER }} | |
| password: ${{ secrets.DOCKER_HUB_PASSWORD }} | |
| - name: Configure Version | |
| run: | | |
| if [[ ${{ matrix.vehicle }} == 'copter' ]]; then | |
| echo "VERSION=${{ inputs.copter || env.COPTER_VERSION }}" >> $GITHUB_ENV | |
| else | |
| echo "VERSION=${{ inputs.plane || env.PLANE_VERSION }}" >> $GITHUB_ENV | |
| fi | |
| - name: Build and Push | |
| id: build-push | |
| uses: docker/build-push-action@v5 | |
| with: | |
| context: ${{ matrix.arch }}/ | |
| platforms: ${{ (matrix.arch == 'x86' && 'linux/amd64') || 'linux/arm/v7,linux/arm64' }} | |
| push: ${{ github.event_name != 'pull_request' }} | |
| tags: ubcuas/uasitl:${{ matrix.vehicle }}${{ matrix.arch == 'arm' && '-arm' || '' }}-${{ env.VERSION }} | |
| build-args: | | |
| VERSION=${{ env.VERSION }} | |
| ${{ matrix.vehicle == 'plane' && 'VEHICLE_TYPE=1' || '' }} | |
| cache-from: type=gha | |
| cache-to: type=gha,mode=max | |
| - name: Attest Build Provenance | |
| if: ${{ github.event_name != 'pull_request' }} | |
| uses: actions/attest-build-provenance@v1 | |
| with: | |
| subject-name: index.docker.io/ubcuas/uasitl | |
| subject-digest: ${{ steps.build-push.outputs.digest }} |