build-node-image.yaml

name: Build and Push Node Image

on:
  push:
    branches: [main]
    paths:
      - 'node-images/fedora/**'
  pull_request:
    paths:
      - 'node-images/fedora/**'
  workflow_dispatch:
    inputs:
      push:
        description: 'Push image to registry'
        required: false
        default: 'false'
        type: boolean

env:
  PUSH_REGISTRY: ghcr.io/alicefr/bink
  PUSH_IMAGE: node

jobs:
  build:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write
    container:
      image: quay.io/fedora/fedora:43
      options: --privileged --device /dev/kvm -v /var/lib/containers
    steps:
      - name: Install dependencies
        run: dnf install -y --setopt=install_weak_deps=0 podman git make

      - name: Checkout
        uses: actions/checkout@v4

      - name: Log in to GHCR
        if: github.event_name == 'push' || (github.event_name == 'workflow_dispatch' && inputs.push)
        run: podman login -u ${{ github.actor }} -p ${{ secrets.GITHUB_TOKEN }} ghcr.io

      - name: Build bootc image
        working-directory: node-images/fedora
        run: make build-bootc-image

      - name: Build disk image
        working-directory: node-images/fedora
        run: make build-disk-image

      - name: Determine image tag
        id: meta
        working-directory: node-images/fedora
        run: |
          TAG=$(make -s print-image-tag)
          echo "tag=${TAG}" >> "$GITHUB_OUTPUT"
          echo "Image tag: ${TAG}"

      - name: Tag and push
        if: github.event_name == 'push' || (github.event_name == 'workflow_dispatch' && inputs.push)
        working-directory: node-images/fedora
        run: |
          TAG=${{ steps.meta.outputs.tag }}
          BOOTC_SRC=$(make -s print-bootc-image)
          DISK_SRC=$(make -s print-node-image)
          PUSH_DEST=${{ env.PUSH_REGISTRY }}/${{ env.PUSH_IMAGE }}

          # push bootc image under both :latest and versioned tags
          podman tag ${BOOTC_SRC} ${PUSH_DEST}:${TAG}
          podman push ${PUSH_DEST}:${TAG}
          podman tag ${BOOTC_SRC} ${PUSH_DEST}:latest
          podman push ${PUSH_DEST}:latest

          # push disk image under both :latest-disk and versioned tags
          podman tag ${DISK_SRC} ${PUSH_DEST}:${TAG}-disk
          podman push ${PUSH_DEST}:${TAG}-disk
          podman tag ${DISK_SRC} ${PUSH_DEST}:latest-disk
          podman push ${PUSH_DEST}:latest-disk