unbound-docker/.github/workflows/default.yml

name: default

on: push

env:
  PACKAGE_VERSION: "1.13.1"
  PLATFORMS: "linux/amd64,linux/arm64,linux/arm/v7,linux/arm/v6"

jobs:

  set_output:
    runs-on: ubuntu-20.04
    outputs:
      image_title: ${{ steps.set.outputs.image_title }}
      image_authors: ${{ steps.set.outputs.image_authors }}
      image_name: ${{ steps.set.outputs.image_name }}
      image_created: ${{ steps.set.outputs.image_created }}
      image_version: ${{ steps.set.outputs.image_version }}
      image_branch: ${{ steps.set.outputs.image_branch }}
      image_revision: ${{ steps.set.outputs.image_revision }}
      image_source: ${{ steps.set.outputs.image_source }}
      image_url: ${{ steps.set.outputs.image_url }}
      image_documentation: ${{ steps.set.outputs.image_documentation }}
    steps:
      -
        name: Checkout
        uses: actions/checkout@v2
      - 
        name: Set output
        id: set
        run: |
          echo "::set-output name=image_title::${{ github.repository }}"
          echo "::set-output name=image_authors::${{ github.repository_owner }}"
          echo "::set-output name=image_name::${{ github.repository }}"
          echo "::set-output name=image_created::$(date --iso-8601=seconds)"
          echo "::set-output name=image_version::${{ env.PACKAGE_VERSION }}"
          echo "::set-output name=image_branch::$(git rev-parse --abbrev-ref HEAD)"
          echo "::set-output name=image_revision::${{ github.sha }}"
          echo "::set-output name=image_source::${{ github.server_url }}/${{ github.repository }}"
          echo "::set-output name=image_url::${{ github.server_url }}/${{ github.repository }}"
          echo "::set-output name=image_documentation::${{ github.server_url }}/${{ github.repository }}"

  docker_build:
    runs-on: ubuntu-20.04
    needs: set_output

    steps:
      - 
        name: Free disk space
        run: |
          df --human-readable
          sudo apt clean
          docker rmi $(docker image ls --all --quiet) || true
          rm -rf "${AGENT_TOOLSDIRECTORY}"
          df --human-readable
      # -
      #   name: Maximize build space
      #   uses: easimon/maximize-build-space@master
      #   with:
      #     remove-dotnet: 'true'
      #     remove-android: 'true'
      #     remove-haskell: 'true'
      -
        name: Checkout
        uses: actions/checkout@v2
      -
        name: Set up QEMU
        uses: docker/setup-qemu-action@v1
      -
        name: Set up Docker Buildx
        id: buildx
        uses: docker/setup-buildx-action@v1
        with:
          driver-opts: network=host
      - 
        name: Build and output to OCI
        uses: docker/build-push-action@v2
        with:
          context: .
          file: Dockerfile
          platforms: ${{ env.PLATFORMS }}
          build-args: |
            PACKAGE_VERSION=${{ env.PACKAGE_VERSION }}
          labels: |
            "org.opencontainers.image.authors=${{ needs.set_output.outputs.image_authors }}"
            "org.opencontainers.image.title=${{ needs.set_output.outputs.image_title }}"
            "org.opencontainers.image.created=${{ needs.set_output.outputs.image_created }}"
            "org.opencontainers.image.version=${{ needs.set_output.outputs.image_version }}"
            "org.opencontainers.image.revision=${{ needs.set_output.outputs.image_revision }}"
            "org.opencontainers.image.source=${{ needs.set_output.outputs.image_source }}"
            "org.opencontainers.image.url=${{ needs.set_output.outputs.image_url }}"
            "org.opencontainers.image.url=${{ needs.set_output.outputs.image_documentation }}"
          cache-from: |
            type=gha
            type=registry,ref=ghcr.io/${{ needs.set_output.outputs.image_name }}:latest
            type=registry,ref=ghcr.io/${{ needs.set_output.outputs.image_name }}:${{ needs.set_output.outputs.image_version }}
            type=registry,ref=ghcr.io/${{ needs.set_output.outputs.image_name }}:${{ needs.set_output.outputs.image_branch }}
            type=registry,ref=ghcr.io/${{ needs.set_output.outputs.image_name }}:${{ needs.set_output.outputs.image_revision }}
            type=registry,ref=docker.io/${{ needs.set_output.outputs.image_name }}:latest
            type=registry,ref=docker.io/${{ needs.set_output.outputs.image_name }}:${{ needs.set_output.outputs.image_version }}
            type=registry,ref=docker.io/${{ needs.set_output.outputs.image_name }}:${{ needs.set_output.outputs.image_branch }}
            type=registry,ref=docker.io/${{ needs.set_output.outputs.image_name }}:${{ needs.set_output.outputs.image_revision }}
          cache-to: |
            type=gha,mode=max
          outputs: |
            type=oci,dest=/tmp/oci.tar
      -
        name: Upload artifacts
        uses: actions/upload-artifact@v2
        with:
          name: oci
          path: /tmp/oci.tar

  test:
    runs-on: ubuntu-20.04
    needs: [set_output, docker_build]

    strategy:
      matrix:
        PLATFORM: [linux/amd64,linux/arm64,linux/arm/v7,linux/arm/v6]

    steps:
      -
        name: Download artifacts
        uses: actions/download-artifact@v2
        with:
          name: oci
          path: /tmp
      -
        name: Set overrides
        id: set
        run: |
          echo "::set-output name=override_os::$(echo ${{ matrix.PLATFORM }} | awk -F '/' '{print $1}')"
          echo "::set-output name=override_arch::$(echo ${{ matrix.PLATFORM }} | awk -F '/' '{print $2}')"
          echo "::set-output name=override_variant::$(echo ${{ matrix.PLATFORM }} | awk -F '/' '{print $3}')"
      -
        name: Copy from OCI to local Docker daemon
        run: |
          echo ""
          skopeo \
            --override-os '${{ steps.set.outputs.override_os }}' \
            --override-arch '${{ steps.set.outputs.override_arch }}' \
            --override-variant '${{ steps.set.outputs.override_variant }}' \
            copy "oci-archive:/tmp/oci.tar" "docker-daemon:sut-image:latest"
      -
        name: Set up QEMU
        uses: docker/setup-qemu-action@v1
      -
        name: Test ${{ matrix.PLATFORM }}
        run: |
          docker run -d --name sut sut-image:latest
          docker exec sut dig sigok.verteiltesysteme.net @127.0.0.1 +dnssec | tee /dev/stderr | grep -q NOERROR || { docker logs sut ; exit 1 ; }
          docker exec sut dig sigfail.verteiltesysteme.net @127.0.0.1 +dnssec | tee /dev/stderr | grep -q SERVFAIL || { docker logs sut ; exit 1 ; }
          docker logs sut
          docker rm -f sut

  deploy_branch:
    runs-on: ubuntu-20.04
    needs: [set_output, docker_build, test]
    if: github.ref != 'refs/heads/main'

    steps:
      -
        name: Download artifacts
        uses: actions/download-artifact@v2
        with:
          name: oci
          path: /tmp
      - 
        name: Check actor permissions
        uses: actions-cool/check-user-permission@v1.1.0
        id: checkUser
        with:
          require: 'write'
      -
        name: Login to GitHub Container Registry
        if: steps.checkUser.outputs.result == 'true'
        uses: docker/login-action@v1
        with:
          registry: ghcr.io
          username: ${{ github.repository_owner }}
          password: ${{ secrets.GITHUB_TOKEN }}
      -
        name: Login to DockerHub
        if: steps.checkUser.outputs.result == 'true'
        uses: docker/login-action@v1 
        with:
          registry: docker.io
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}
      -
        name: Copy from OCI to DockerHub and GitHub Container Registry
        if: steps.checkUser.outputs.result == 'true'
        run: |
          skopeo copy --format v2s2 --all "oci-archive:/tmp/oci.tar" "docker://ghcr.io/${{ needs.set_output.outputs.image_name }}:${{ needs.set_output.outputs.image_branch }}"
          skopeo copy --format v2s2 --all "oci-archive:/tmp/oci.tar" "docker://docker.io/${{ needs.set_output.outputs.image_name }}:${{ needs.set_output.outputs.image_branch }}"
      -
        name: Inspect image manifests
        run: |
          skopeo inspect "docker://ghcr.io/${{ needs.set_output.outputs.image_name }}:${{ needs.set_output.outputs.image_branch }}"
          skopeo inspect "docker://docker.io/${{ needs.set_output.outputs.image_name }}:${{ needs.set_output.outputs.image_branch }}"

  deploy_release:
    runs-on: ubuntu-20.04
    needs: [set_output, docker_build, test]
    if: github.ref == 'refs/heads/main'

    steps:
      -
        name: Download artifacts
        uses: actions/download-artifact@v2
        with:
          name: oci
          path: /tmp
      - 
        name: Check actor permissions
        uses: actions-cool/check-user-permission@v1.1.0
        id: checkUser
        with:
          require: 'write'
      -
        name: Login to GitHub Container Registry
        if: steps.checkUser.outputs.result == 'true'
        uses: docker/login-action@v1
        with:
          registry: ghcr.io
          username: ${{ github.repository_owner }}
          password: ${{ secrets.GITHUB_TOKEN }}
      -
        name: Login to DockerHub
        if: steps.checkUser.outputs.result == 'true'
        uses: docker/login-action@v1 
        with:
          registry: docker.io
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}
      -
        name: Copy from OCI to DockerHub and GitHub Container Registry
        if: steps.checkUser.outputs.result == 'true'
        run: |
          skopeo copy --format v2s2 --all "oci-archive:/tmp/oci.tar" "docker://ghcr.io/${{ needs.set_output.outputs.image_name }}:${{ needs.set_output.outputs.image_revision }}"
          skopeo copy --format v2s2 --all "oci-archive:/tmp/oci.tar" "docker://ghcr.io/${{ needs.set_output.outputs.image_name }}:${{ needs.set_output.outputs.image_version }}"
          skopeo copy --format v2s2 --all "oci-archive:/tmp/oci.tar" "docker://ghcr.io/${{ needs.set_output.outputs.image_name }}:latest"
          skopeo copy --format v2s2 --all "oci-archive:/tmp/oci.tar" "docker://docker.io/${{ needs.set_output.outputs.image_name }}:${{ needs.set_output.outputs.image_revision }}"
          skopeo copy --format v2s2 --all "oci-archive:/tmp/oci.tar" "docker://docker.io/${{ needs.set_output.outputs.image_name }}:${{ needs.set_output.outputs.image_version }}"
          skopeo copy --format v2s2 --all "oci-archive:/tmp/oci.tar" "docker://docker.io/${{ needs.set_output.outputs.image_name }}:latest"
      -
        name: Inspect image manifests
        run: |
          skopeo inspect "docker://ghcr.io/${{ needs.set_output.outputs.image_name }}:${{ needs.set_output.outputs.image_revision }}"
          skopeo inspect "docker://docker.io/${{ needs.set_output.outputs.image_name }}:${{ needs.set_output.outputs.image_revision }}"
      -
        name: Set DockerHub description
        if: steps.checkUser.outputs.result == 'true'
        uses: peter-evans/dockerhub-description@v2
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_PASSWORD }}
          repository: ${{ needs.set_output.outputs.image_name }}