_container.yml

name: Container Release

on:
  workflow_call:
    inputs:
      worker:
        description: 'Worker name (folder)'
        required: true
        type: string
      version:
        description: 'Semver version (e.g., 1.2.3)'
        required: true
        type: string
      registry_tag:
        description: 'Registry tag to also push (latest, next, ...)'
        required: false
        type: string
        default: latest
      dockerfile:
        description: 'Dockerfile path relative to <worker>/'
        required: false
        type: string
        default: Dockerfile
      dry_run:
        description: 'Build only, do not push'
        required: false
        type: boolean
        default: false
    outputs:
      image_tag:
        description: 'Fully-qualified versioned image reference (ghcr.io/...:<version>)'
        value: ${{ jobs.build.outputs.image_tag }}

permissions:
  contents: read
  packages: write

jobs:
  build:
    name: Build & push (${{ inputs.worker }})
    runs-on: ubuntu-latest
    outputs:
      image_tag: ${{ steps.refs.outputs.image_tag }}
    steps:
      - uses: actions/checkout@v4

      - name: Compute image refs
        id: refs
        env:
          WORKER: ${{ inputs.worker }}
          VERSION: ${{ inputs.version }}
          REGISTRY_TAG: ${{ inputs.registry_tag }}
        run: |
          OWNER="${GITHUB_REPOSITORY_OWNER,,}"
          BASE="ghcr.io/${OWNER}/${WORKER}"
          echo "base=${BASE}" >> "$GITHUB_OUTPUT"
          echo "image_tag=${BASE}:${VERSION}" >> "$GITHUB_OUTPUT"
          {
            echo "tags<<EOF"
            echo "${BASE}:${VERSION}"
            echo "${BASE}:${REGISTRY_TAG}"
            echo "EOF"
          } >> "$GITHUB_OUTPUT"
          echo "::notice::image=${BASE}:${VERSION} (also :${REGISTRY_TAG})"

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3

      - name: Set up Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to ghcr.io
        if: inputs.dry_run != true
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Build and push
        uses: docker/build-push-action@v6
        with:
          context: ${{ inputs.worker }}
          file: ${{ inputs.worker }}/${{ inputs.dockerfile }}
          platforms: linux/amd64,linux/arm64
          push: ${{ inputs.dry_run != true }}
          tags: ${{ steps.refs.outputs.tags }}
          labels: |
            org.opencontainers.image.source=https://github.com/${{ github.repository }}
            org.opencontainers.image.version=${{ inputs.version }}
            org.opencontainers.image.revision=${{ github.sha }}
            org.opencontainers.image.title=${{ inputs.worker }}
          cache-from: type=gha,scope=${{ inputs.worker }}
          cache-to: type=gha,mode=max,scope=${{ inputs.worker }}