Docker build CI triggered from @sduchesneau of #73
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Docker build CI | |
| run-name: Docker build CI triggered from @${{ github.actor }} of ${{ github.head_ref }} | |
| on: | |
| workflow_dispatch: | |
| pull_request: | |
| push: | |
| tags: | |
| - '*' | |
| branches: | |
| - release/* | |
| env: | |
| REGISTRY: ghcr.io | |
| IMAGE_NAME: ${{ github.repository }} | |
| jobs: | |
| docker: | |
| name: Docker build | |
| runs-on: ubuntu-20.04 | |
| permissions: | |
| contents: read | |
| packages: write | |
| steps: | |
| - name: Delete files | |
| shell: bash | |
| run: | | |
| df -h | |
| sudo rm -rf /usr/share/dotnet | |
| sudo rm -rf /usr/local/lib/android | |
| sudo rm -rf /opt/ghc | |
| sudo rm -rf /opt/hostedtoolcache/CodeQL | |
| df -h | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| with: | |
| submodules: recursive | |
| - name: Log in to the Container registry | |
| uses: docker/login-action@v2 | |
| with: | |
| registry: ${{ env.REGISTRY }} | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Generate docker tags/labels from github build context | |
| id: meta | |
| uses: docker/metadata-action@v4 | |
| with: | |
| images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} | |
| # We tag latest only release of the form <variant>-v<major>.<minor>.<patch>-fh2.1 so "rc/beta" version are not flagged as latest | |
| # - 2 docker tags: `{geth|bsc|...}-latest` and `{git-tag}` | |
| tags: | | |
| type=ref,event=tag,priority=1000,prefix=nitro- | |
| type=ref,enable=true,priority=600,prefix=nitro-,suffix=,event=branch | |
| - name: Build and push Docker image | |
| uses: docker/build-push-action@v4 | |
| with: | |
| context: . | |
| file: ./Dockerfile | |
| push: true | |
| tags: ${{ steps.meta.outputs.tags }} | |
| labels: ${{ steps.meta.outputs.labels }} | |
| cache-from: type=local,src=/tmp/.buildx-cache | |
| cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max | |
| - name: Start background nitro-testnode | |
| shell: bash | |
| run: | | |
| cd nitro-testnode | |
| ./test-node.bash --init --dev & | |
| - name: Wait for rpc to come up | |
| shell: bash | |
| run: | | |
| ${{ github.workspace }}/.github/workflows/waitForNitro.sh | |
| - name: Print WAVM module root | |
| id: module-root | |
| run: | | |
| # Unfortunately, `docker cp` seems to always result in a "permission denied" | |
| # We work around this by piping a tarball through stdout | |
| docker run --rm --entrypoint tar localhost:5000/nitro-node-dev:latest -cf - target/machines/latest | tar xf - | |
| module_root="$(cat "target/machines/latest/module-root.txt")" | |
| echo "module-root=$module_root" >> "$GITHUB_OUTPUT" | |
| echo -e "\x1b[1;34mWAVM module root:\x1b[0m $module_root" | |
| - name: Upload WAVM machine as artifact | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: wavm-machine-${{ steps.module-root.outputs.module-root }} | |
| path: target/machines/latest/* | |
| if-no-files-found: error | |
| - name: Move cache | |
| # Temp fix | |
| # https://github.com/docker/build-push-action/issues/252 | |
| # https://github.com/moby/buildkit/issues/1896 | |
| run: | | |
| rm -rf /tmp/.buildx-cache | |
| mv /tmp/.buildx-cache-new /tmp/.buildx-cache | |
| - name: Clear cache on failure | |
| if: failure() | |
| run: | | |
| keys=(${{ runner.os }}-buildx- ${{ runner.os }}-buildx-${{ hashFiles('Dockerfile') }}) | |
| for key in "${keys[@]}"; do | |
| curl -X DELETE -H "Accept: application/vnd.github.v3+json" -H "Authorization: token ${{ secrets.GITHUB_TOKEN }}" "https://api.github.com/repos/${{ github.repository }}/actions/caches/$key" | |
| done |