deepdata/.github/workflows/docker-images-reusable.yml

name: Docker Image Build & Push

on:
  workflow_call:
    inputs:
      service_name:
        required: true
        type: string
      build_dir:
        required: true
        type: string

jobs:
  build-and-push-amd:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write

    steps:
      - uses: actions/checkout@v4

      - name: Login to GitHub Container Registry
        if: github.event_name != 'pull_request'
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Set Docker Image Tag
        id: set-tag
        run: |
          LOWERCASE_REPO=$(echo "${{ github.repository_owner }}" | tr '[:upper:]' '[:lower:]')
          BASE_IMAGE=ghcr.io/$LOWERCASE_REPO/deepdata-${{ inputs.service_name }}
          if [[ $GITHUB_REF == refs/tags/v* ]]; then
            TAG=${GITHUB_REF#refs/tags/v}
            echo "TAGS=$BASE_IMAGE:amd64-$TAG" >> $GITHUB_OUTPUT
          elif [[ $GITHUB_REF == refs/heads/main ]]; then
            echo "TAGS=$BASE_IMAGE:amd64" >> $GITHUB_OUTPUT
          else
            # 使用分支名作为 tag
            if [[ $GITHUB_REF == refs/heads/* ]]; then
              BRANCH_NAME=${GITHUB_REF#refs/heads/}
              # 清理分支名，将特殊字符替换为连字符
              BRANCH_TAG=$(echo "$BRANCH_NAME" | sed 's/[^a-zA-Z0-9._-]/-/g')
              echo "TAGS=$BASE_IMAGE:amd64-$BRANCH_TAG" >> $GITHUB_OUTPUT
            else
              echo "TAGS=$BASE_IMAGE:amd64-temp" >> $GITHUB_OUTPUT
            fi
          fi

      - name: Build Docker Image
        run: |
          docker build -t deepdata-${{ inputs.service_name }}:amd64 . -f scripts/images/${{ inputs.service_name }}/Dockerfile --platform amd64

      - name: Tag & Push Docker Image
        if: github.event_name != 'pull_request'
        run: |
          docker tag deepdata-${{ inputs.service_name }}:amd64 ${{ steps.set-tag.outputs.TAGS }}
          docker push ${{ steps.set-tag.outputs.TAGS }}

  build-and-push-arm:
    runs-on: ubuntu-24.04-arm
    permissions:
      contents: read
      packages: write

    steps:
      - uses: actions/checkout@v4

      - name: Login to GitHub Container Registry
        if: github.event_name != 'pull_request'
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Set Docker Image Tag
        id: set-tag
        run: |
          LOWERCASE_REPO=$(echo "${{ github.repository_owner }}" | tr '[:upper:]' '[:lower:]')
          BASE_IMAGE=ghcr.io/$LOWERCASE_REPO/deepdata-${{ inputs.service_name }}
          if [[ $GITHUB_REF == refs/tags/v* ]]; then
            TAG=${GITHUB_REF#refs/tags/v}
            echo "TAGS=$BASE_IMAGE:arm64-$TAG" >> $GITHUB_OUTPUT
          elif [[ $GITHUB_REF == refs/heads/main ]]; then
            echo "TAGS=$BASE_IMAGE:arm64" >> $GITHUB_OUTPUT
          else
            # 使用分支名作为 tag
            if [[ $GITHUB_REF == refs/heads/* ]]; then
              BRANCH_NAME=${GITHUB_REF#refs/heads/}
              # 清理分支名，将特殊字符替换为连字符
              BRANCH_TAG=$(echo "$BRANCH_NAME" | sed 's/[^a-zA-Z0-9._-]/-/g')
              echo "TAGS=$BASE_IMAGE:arm64-$BRANCH_TAG" >> $GITHUB_OUTPUT
            else
              echo "TAGS=$BASE_IMAGE:arm64-temp" >> $GITHUB_OUTPUT
            fi
          fi

      - name: Build Docker Image
        run: |
          docker build -t deepdata-${{ inputs.service_name }}:arm64 . -f scripts/images/${{ inputs.service_name }}/Dockerfile --platform arm64

      - name: Tag & Push Docker Image
        if: github.event_name != 'pull_request'
        run: |
          docker tag deepdata-${{ inputs.service_name }}:arm64 ${{ steps.set-tag.outputs.TAGS }}
          docker push ${{ steps.set-tag.outputs.TAGS }}

  manifest:
    runs-on: ubuntu-latest
    if: github.event_name != 'pull_request'
    needs: [ build-and-push-amd, build-and-push-arm ]
    steps:
      - name: Login to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Set Docker Image Tag
        id: set-tag
        run: |
          LOWERCASE_REPO=$(echo "${{ github.repository_owner }}" | tr '[:upper:]' '[:lower:]')
          BASE_IMAGE=ghcr.io/$LOWERCASE_REPO/deepdata-${{ inputs.service_name }}
          if [[ $GITHUB_REF == refs/tags/v* ]]; then
            TAG=${GITHUB_REF#refs/tags/v}
            echo "TAGS=$BASE_IMAGE:$TAG" >> $GITHUB_OUTPUT
            echo "ARM_TAGS=$BASE_IMAGE:arm64-$TAG" >> $GITHUB_OUTPUT
            echo "AMD_TAGS=$BASE_IMAGE:amd64-$TAG" >> $GITHUB_OUTPUT
          elif [[ $GITHUB_REF == refs/heads/main ]]; then
            echo "TAGS=$BASE_IMAGE:latest" >> $GITHUB_OUTPUT
            echo "ARM_TAGS=$BASE_IMAGE:arm64" >> $GITHUB_OUTPUT
            echo "AMD_TAGS=$BASE_IMAGE:amd64" >> $GITHUB_OUTPUT
          else
            # 使用分支名作为 tag
            if [[ $GITHUB_REF == refs/heads/* ]]; then
              BRANCH_NAME=${GITHUB_REF#refs/heads/}
              # 清理分支名，将特殊字符替换为连字符
              BRANCH_TAG=$(echo "$BRANCH_NAME" | sed 's/[^a-zA-Z0-9._-]/-/g')
              echo "TAGS=$BASE_IMAGE:$BRANCH_TAG" >> $GITHUB_OUTPUT
              echo "ARM_TAGS=$BASE_IMAGE:arm64-$BRANCH_TAG" >> $GITHUB_OUTPUT
              echo "AMD_TAGS=$BASE_IMAGE:amd64-$BRANCH_TAG" >> $GITHUB_OUTPUT
            else
              echo "TAGS=$BASE_IMAGE:temp" >> $GITHUB_OUTPUT
              echo "ARM_TAGS=$BASE_IMAGE:arm64-temp" >> $GITHUB_OUTPUT
              echo "AMD_TAGS=$BASE_IMAGE:amd64-temp" >> $GITHUB_OUTPUT
            fi
          fi

      - name: Manifest Docker Image
        run: |
          docker buildx imagetools create -t ${{ steps.set-tag.outputs.TAGS }} \
            ${{ steps.set-tag.outputs.AMD_TAGS }} \
            ${{ steps.set-tag.outputs.ARM_TAGS }}