Adds GHC compilation CI stage

Author: jkachmar

.github/workflows/ghc.yaml

@@ -0,0 +1,63 @@
+name: "GHC images"
+
+on:
+  # FIXME: Remove this before merging!
+  # pull_request: { branches: [ "master" ] }
+  # push: { branches: [ "release" ] }
+
+env:
+  alpine_ver: "3.14"
+
+jobs:
+  build:
+    runs-on: "ubuntu-20.04"
+
+    strategy:
+      matrix:
+        ghc_ver: [ "8.10.7" ]
+        numeric: [ "gmp" ]
+
+    steps:
+      - name: "Check this repository out."
+        uses: "actions/checkout@v2"
+
+      - name: "Pull `ghcup` image."
+        run: |
+          buildah pull docker://ghcr.io/jkachmar/ghcup
+
+      - name: "Compile GHC and publish an image from the resulting container."
+        id: "build-image"
+        run: |
+          image_id=$(
+            ./ghc/builder.sh \
+              -a "${{ env.alpine_ver }}" \
+              -g "${{ matrix.ghc_ver }}" \
+              -n "${{ matrix.numeric }}" \
+            | tail -n 1
+          )
+
+          image_name=$(
+            buildah images --format "{{.Name}}" ${image_id}
+          )
+          # NOTE: This parameter expansion drops the leading `localhost/` that
+          # `buildah` (and other OCI tools) prepend to local image names.
+          echo "::set-output name=image_name::${image_name#*/}"
+
+          image_tags=$(
+            buildah images --format "{{.Tag}}" ${image_id}
+          )
+          echo "::set-output name=image_tags::${image_tags}"
+
+      - name: "Push compiled GHC image to the GitHub Container Registry."
+        id: "push-to-ghcr"
+        uses: "redhat-actions/push-to-registry@v2"
+        with:
+          image: "${{ steps.build-image.outputs.image_name }}"
+          tags: "${{ steps.build-image.outputs.image_tags }}"
+          registry: "ghcr.io/${{ github.repository_owner }}"
+          username: "${{ github.actor }}"
+          password: "${{ github.token }}"
+
+      - name: "Print image URL."
+        run: |
+          echo "Image pushed to ${{ steps.push-to-ghcr.outputs.registry-paths }}"

.github/workflows/ghcup.yaml

@@ -1,5 +1,6 @@
 name: "`ghcup` image"
 
+# FIXME: Re-enable this workflow before merging!
 on:
   # FIXME: Remove this before merging!
   pull_request: { branches: [ "master" ] }
@@ -16,8 +17,8 @@ jobs:
       - name: "Check this repository out."
         uses: "actions/checkout@v2"
 
-      - name: "Build `ghcup` image."
-        id: "build-ghcup-image"
+      - name: "Download `ghcup` and publish an image containing it."
+        id: "build-image"
         run: |
           image_id=$(
             ./ghcup/builder.sh \
@@ -29,7 +30,6 @@ jobs:
           image_name=$(
             buildah images --format "{{.Name}}" ${image_id}
           )
-
           # NOTE: This parameter expansion drops the leading `localhost/` that
           # `buildah` (and other OCI tools) prepend to local image names.
           echo "::set-output name=image_name::${image_name#*/}"
@@ -40,15 +40,15 @@ jobs:
           echo "::set-output name=image_tags::${image_tags}"
 
       - name: "Push `ghcup` image to the GitHub Container Registry"
-        id: "push-ghcup-to-ghcr"
+        id: "push-to-ghcr"
         uses: "redhat-actions/push-to-registry@v2"
         with:
-          image: "${{ steps.build-ghcup-image.outputs.image_name }}"
-          tags: "${{ steps.build-ghcup-image.outputs.image_tags }}"
+          image: "${{ steps.build-image.outputs.image_name }}"
+          tags: "latest ${{ steps.build-image.outputs.image_tags }}"
           registry: "ghcr.io/${{ github.repository_owner }}"
           username: "${{ github.actor }}"
           password: "${{ github.token }}"
 
       - name: "Print image URL."
         run: |
-          echo "Image pushed to ${{ steps.push-ghcup-to-ghcr.outputs.registry-paths }}"
+          echo "Image pushed to ${{ steps.push-to-ghcr.outputs.registry-paths }}"

policy.json

@@ -2,7 +2,8 @@
     "default": [{"type": "reject"}],
     "transports": {
         "docker": {
-            "docker.io/library/alpine": [{"type": "insecureAcceptAnything"}]
+            "docker.io/library/alpine": [{"type": "insecureAcceptAnything"}],
+            "ghcr.io/jkachmar/ghcup": [{"type": "insecureAcceptAnything"}]
         },
         "dir": {
             "": [{"type": "insecureAcceptAnything"}]