checkout before github.sha #30
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "Dependency Image" | |
| on: | |
| push: | |
| workflow_dispatch: | |
| env: | |
| DOCKER_DEPENDENCY_IMAGE_NAME: ghcr.io/genspectrum/lapis-silo-dependencies | |
| jobs: | |
| dependencyImage: | |
| name: Build Docker Image Dependencies | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| platform: | |
| ['linux/amd64', 'linux/arm64'] | |
| permissions: | |
| packages: write | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Generate dependency files hash | |
| id: files-hash | |
| run: | | |
| DIR_HASH=$(echo -n ${{ hashFiles('conanfile.py', 'conanprofile.docker', '.github/workflows/ci.yml', './Dockerfile_dependencies') }}) | |
| echo "DIR_HASH=$DIR_HASH" >> $GITHUB_ENV | |
| - name: Docker metadata | |
| id: dockerMetadata | |
| uses: docker/metadata-action@v5 | |
| with: | |
| images: ${{ env.DOCKER_DEPENDENCY_IMAGE_NAME }} | |
| tags: | | |
| type=ref,event=branch | |
| type=raw,value=latest,enable=${{ github.ref == 'refs/heads/main' }} | |
| type=raw,value=${{ env.DIR_HASH }} | |
| type=sha,format=long,prefix=commit- | |
| - name: Login to GitHub Container Registry | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Check if image exists | |
| run: | | |
| if [[ $(docker manifest inspect ${{ env.DOCKER_DEPENDENCY_IMAGE_NAME }}:${{ env.DIR_HASH }} > /dev/null 2>&1) ]]; then | |
| echo "Cache hit, do not require rebuild of this docker image. Retagging old image instead." | |
| echo "CACHE_HIT=true" >> $GITHUB_ENV | |
| else | |
| echo "CACHE_HIT=false" >> $GITHUB_ENV | |
| fi | |
| - name: Determine platform build necessity | |
| if: env.CACHE_HIT == 'false' | |
| id: platform-check | |
| run: | | |
| if [[ "${{ matrix.platform }}" == "linux/amd64" || "${{ github.event_name }}" == "workflow_dispatch" || "${{ github.ref }}" == "refs/heads/main" ]]; then | |
| echo "PLATFORM_BUILD=true" >> $GITHUB_ENV | |
| else | |
| echo "Skipping build for this platform" | |
| echo "PLATFORM_BUILD=false" >> $GITHUB_ENV | |
| fi | |
| shell: bash | |
| - name: Set up Docker Buildx | |
| if: env.CACHE_HIT == 'false' && env.PLATFORM_BUILD == 'true' | |
| uses: docker/setup-buildx-action@v3 | |
| - name: Build and push image if input files changed | |
| if: env.CACHE_HIT == 'false' && env.PLATFORM_BUILD == 'true' | |
| uses: docker/build-push-action@v6 | |
| with: | |
| context: . | |
| file: Dockerfile_dependencies | |
| push: true | |
| tags: ${{ steps.dockerMetadata.outputs.tags }} | |
| cache-from: type=gha,ref=builder-image-cache-${{ hashFiles('conanfile.py', 'Dockerfile') }} | |
| cache-to: type=gha,mode=min,ref=builder-image-cache-${{ hashFiles('conanfile.py', 'Dockerfile') }} | |
| platforms: ${{ matrix.platform }} | |
| - name: Retag and push existing image if cache hit | |
| if: env.CACHE_HIT == 'true' && env.PLATFORM_BUILD == 'true' | |
| run: | | |
| TAGS=(${{ steps.dockerMetadata.outputs.tags }}) | |
| for TAG in "${TAGS[@]}"; do | |
| docker buildx imagetools create --tag $TAG ${{ env.DOCKER_DEPENDENCY_IMAGE_NAME }}:${{ env.DIR_HASH }} | |
| done |