gha-testing/.github/workflows/build.yml at main · BerkeleyLibrary/gha-testing · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
name: Build / Test / Push

on:
  push:
    branches:
      - '*'
  workflow_dispatch:

jobs:
  build:
    runs-on: ubuntu-latest
    outputs:
      build-image: ${{ steps.build-meta.outputs.tags }}
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Login to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Produce the build image tag
        id: build-meta
        uses: docker/metadata-action@v5
        with:
          images: ghcr.io/${{ github.repository }}
          tags: type=sha,suffix=-build-${{ github.run_id }}_${{ github.run_attempt }}

      - name: Build and push the untested image
        uses: docker/build-push-action@v6
        with:
          push: true
          labels: ${{ steps.build-meta.outputs.labels }}
          tags: ${{ steps.build-meta.outputs.tags }}
          provenance: true
          cache-from: type=gha
          cache-to: type=gha

  test:
    runs-on: ubuntu-latest
    needs:
      - build
    env:
      COMPOSE_FILE: docker-compose.yml:docker-compose.ci.yml
      DOCKER_APP_IMAGE: ${{ needs.build.outputs.build-image }}
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3

      - name: Set up Docker Compose
        uses: docker/setup-compose-action@v1

      - name: Login to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Set ARTIFACTS_DIR
        run: echo "ARTIFACTS_DIR=${RUNNER_TEMP}/artifacts" >> $GITHUB_ENV

      - name: Create the artifacts directory
        run: mkdir -p "$ARTIFACTS_DIR"

      - name: Record start time
        run: TEST_START=`date +%s` >> $GITHUB_ENV

      - name: Run the tests
        run: bin/test

      - name: Retain the compose file
        if: ${{ always() }}
        run: docker compose config | tee "${ARTIFACTS_DIR}/docker-compose.yml"

      - name: Retain compose logs
        if: ${{ always() }}
        run: docker compose logs | tee "${ARTIFACTS_DIR}/docker-services.log"

      - name: Retain Docker events
        if: ${{ always() }}
        run: docker events --json --since $TEST_START --until `date +%s` | tee "${ARTIFACTS_DIR}/docker-events.json"

      - name: Upload test report
        if: ${{ always() }}
        uses: actions/upload-artifact@v4
        with:
          name: Test Report (${{ github.sha }}-${{ github.run_id }}-${{ github.run_attempt }})
          path: ${{ env.ARTIFACTS_DIR }}
          if-no-files-found: error

  push:
    runs-on: ubuntu-latest
    needs:
      - build
      - test
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Login to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Produce permanent image tags
        id: branch-meta
        uses: docker/metadata-action@v5
        with:
          images: ghcr.io/${{ github.repository }}
          tags: |
            type=sha
            type=ref,event=branch
            type=raw,value=latest,enable={{is_default_branch}}

      - name: Retag and push the image
        uses: docker/build-push-action@v6
        with:
          push: true
          labels: ${{ steps.branch-meta.outputs.labels }}
          tags: ${{ steps.branch-meta.outputs.tags }}
          cache-from: type=registry,ref=${{ needs.build.outputs.build-image }}