Bump the gh-actions group with 2 updates (#59) #87
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build | |
| on: | |
| push: | |
| branches: | |
| - main | |
| pull_request: | |
| env: | |
| DEFAULT_BASE_IMAGE: ubuntu:jammy | |
| jobs: | |
| version: | |
| name: Check if version changed | |
| runs-on: ubuntu-latest | |
| outputs: | |
| push: ${{ steps.push.outputs.push }} | |
| version-changed: ${{ steps.version-metadata.outputs.changed }} | |
| new-version: ${{ steps.version-metadata.outputs.newVersion }} | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: Quantco/ui-actions/version-metadata@v1 | |
| id: version-metadata | |
| with: | |
| file: Dockerfile | |
| token: ${{ secrets.GITHUB_TOKEN }} | |
| version-extraction-override: 'regex:ARG PIXI_VERSION=(.*)' | |
| - name: Determine if pushing images | |
| id: push | |
| run: echo push=${{ steps.version-metadata.outputs.changed == 'true' && github.event_name == 'push' && github.ref_name == 'main' }} >> $GITHUB_OUTPUT | |
| build: | |
| needs: version | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| packages: write | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| base-image: | |
| - debian:bookworm-slim # 12 | |
| - debian:bookworm # 12 | |
| - debian:bullseye-slim # 11 | |
| - debian:bullseye # 11 | |
| - ubuntu:noble # 24.04 | |
| - ubuntu:mantic # 23.10 | |
| - ubuntu:jammy # 22.04 | |
| - ubuntu:focal # 20.04 | |
| - nvidia/cuda:12.3.1-base-ubuntu22.04 | |
| - nvidia/cuda:12.3.1-base-ubuntu20.04 | |
| - nvidia/cuda:12.2.2-base-ubuntu22.04 | |
| - nvidia/cuda:12.2.2-base-ubuntu20.04 | |
| - nvidia/cuda:12.1.1-base-ubuntu22.04 | |
| - nvidia/cuda:12.1.1-base-ubuntu20.04 | |
| - nvidia/cuda:11.8.0-base-ubuntu22.04 | |
| - nvidia/cuda:11.8.0-base-ubuntu20.04 | |
| - nvidia/cuda:11.7.1-base-ubuntu22.04 | |
| - nvidia/cuda:11.7.1-base-ubuntu20.04 | |
| - nvidia/cuda:11.6.2-base-ubuntu20.04 | |
| - nvidia/cuda:11.4.3-base-ubuntu20.04 | |
| - nvidia/cuda:11.3.1-base-ubuntu20.04 | |
| - nvidia/cuda:11.2.2-base-ubuntu20.04 | |
| steps: | |
| - name: Checkout source | |
| uses: actions/checkout@v4 | |
| - name: Set image variables | |
| id: image-variables | |
| env: | |
| IMAGE: ${{ matrix.base-image }} | |
| run: | | |
| import os | |
| base_image = "${{ matrix.base-image }}" | |
| if base_image.startswith("nvidia/cuda"): | |
| code_names = { | |
| "22.04": "jammy", | |
| "20.04": "focal", | |
| "23.10": "mantic", | |
| "24.04": "noble", | |
| } | |
| ubuntu_version_number = base_image.split("-ubuntu")[-1] | |
| base_tag = base_image.split(":")[-1] | |
| cuda_version = base_tag.split("-")[0] | |
| tag = f"{code_names[ubuntu_version_number]}-cuda-{cuda_version}" | |
| platforms = "linux/amd64,linux/arm64" | |
| else: | |
| tag = base_image.split(":")[-1] | |
| platforms = "linux/amd64,linux/arm64" | |
| is_default = "true" if base_image == "${{ env.DEFAULT_BASE_IMAGE }}" else "false" | |
| GITHUB_OUTPUT = os.environ["GITHUB_OUTPUT"] | |
| with open(GITHUB_OUTPUT, "a") as f: | |
| f.write(f"tag={tag}\n") | |
| f.write(f"platforms={platforms}\n") | |
| f.write(f"is-default={is_default}\n") | |
| shell: python | |
| - name: Get docker metadata | |
| id: metadata | |
| uses: docker/metadata-action@369eb591f429131d6889c46b94e711f089e6ca96 | |
| with: | |
| images: |- | |
| ghcr.io/prefix-dev/pixi | |
| flavor: latest=false | |
| # latest | |
| # base-image | |
| # major.minor.patch | |
| # major.minor.patch-base-image | |
| tags: | | |
| type=raw,value=latest,priority=1000,enable=${{ steps.image-variables.outputs.is-default }} | |
| type=raw,value=${{ steps.image-variables.outputs.tag }},priority=900 | |
| type=semver,pattern={{version}},enable=${{ steps.image-variables.outputs.is-default }},value=${{ needs.version.outputs.new-version }},priority=800 | |
| type=semver,pattern={{version}}-${{ steps.image-variables.outputs.tag }},value=${{ needs.version.outputs.new-version }},priority=500 | |
| - name: Setup docker buildx | |
| uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 | |
| - name: Login to GHCR | |
| uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Build Docker images | |
| id: build | |
| uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 | |
| with: | |
| # provenance: false is needed to avoid unkown/unknown os/arch on ghcr | |
| # see: https://github.com/docker/build-push-action/issues/820 | |
| provenance: false | |
| platforms: ${{ steps.image-variables.outputs.platforms }} | |
| push: ${{ needs.version.outputs.push == 'true' }} | |
| build-args: |- | |
| BASE_IMAGE=${{ matrix.base-image }} | |
| tags: ${{ steps.metadata.outputs.tags }} | |
| labels: ${{ steps.metadata.outputs.labels }} | |
| - uses: actions/upload-artifact@v4 | |
| with: | |
| name: ${{ steps.image-variables.outputs.tag }} | |
| path: ${{ steps.metadata.outputs.bake-file }} | |
| - name: Run tests | |
| # buildx does not support outputting the image so we need to pull it and run tests | |
| if: needs.version.outputs.push == 'true' | |
| run: | | |
| docker images | |
| docker run --rm ghcr.io/prefix-dev/pixi:${{ needs.version.outputs.new-version }}-${{ steps.image-variables.outputs.tag }} pixi --version | |
| docker run --rm ghcr.io/prefix-dev/pixi:${{ needs.version.outputs.new-version }}-${{ steps.image-variables.outputs.tag }} sh -c "mkdir /app && cd /app && pixi init && pixi add python && pixi run python --version" | |
| - name: Image digest | |
| run: echo ${{ steps.build.outputs.digest }} | |
| release: | |
| needs: [version, build] | |
| runs-on: ubuntu-22.04 | |
| permissions: | |
| contents: write | |
| if: needs.version.outputs.push == 'true' | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Push ${{ needs.version.outputs.new-version }} tag | |
| run: | | |
| git tag ${{ needs.version.outputs.new-version }} | |
| git push origin ${{ needs.version.outputs.new-version }} | |
| - name: Create release | |
| uses: softprops/action-gh-release@v2 | |
| with: | |
| generate_release_notes: true | |
| tag_name: ${{ needs.version.outputs.new-version }} |