docker-nginx-boringssl/.github/workflows/docker-image.yml at main · nginx-modules/docker-nginx-boringssl · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
name: Docker Image CI (BoringSSL)

on:
  push:
    branches: [ main ]
    paths-ignore:
      - 'README.md'

env:
  GHCR_IMAGE: ghcr.io/${{ github.repository_owner }}/nginx-boringssl
  DHUB_IMAGE: docker.io/denji/nginx-boringssl

jobs:
  build:
    runs-on: ${{ matrix.runner }}
    strategy:
      fail-fast: false
      matrix:
        include:
          # --- native runners (no QEMU) ---
          - { platforms: linux/amd64,   build_dir: mainline, dockerfile: Dockerfile,             tag: mainline-amd64-alpine,    runner: ubuntu-latest     }
          - { platforms: linux/arm64,   build_dir: mainline, dockerfile: Dockerfile,             tag: mainline-aarch64-alpine,  runner: ubuntu-24.04-arm  }
          - { platforms: linux/amd64,   build_dir: stable,   dockerfile: Dockerfile,             tag: stable-amd64-alpine,      runner: ubuntu-latest     }
          - { platforms: linux/arm64,   build_dir: stable,   dockerfile: Dockerfile,             tag: stable-aarch64-alpine,    runner: ubuntu-24.04-arm  }

          # --- QEMU on arm64 runner ---
          # arm/v7 and arm/v6: kernel compat layer (no TCG at all)
          - { platforms: linux/arm/v7,  build_dir: mainline, dockerfile: Dockerfile,             tag: mainline-armv7-alpine,    runner: ubuntu-24.04-arm  }
          - { platforms: linux/arm/v6,  build_dir: mainline, dockerfile: Dockerfile,             tag: mainline-armv6-alpine,    runner: ubuntu-24.04-arm  }
          #- { platforms: linux/ppc64le, build_dir: mainline, dockerfile: Dockerfile,             tag: mainline-ppc64le-alpine,  runner: ubuntu-24.04-arm  }
          - { platforms: linux/riscv64, build_dir: mainline, dockerfile: Dockerfile,             tag: mainline-riscv64-alpine,  runner: ubuntu-24.04-arm  }
          #- { platforms: linux/loong64, build_dir: mainline, dockerfile: Dockerfile.loongarch64, tag: mainline-loong64-alpine,  runner: ubuntu-24.04-arm  }
          #- { platforms: linux/mips64le, build_dir: mainline, dockerfile: Dockerfile.mips64le,  tag: mainline-mips64le-alpine, runner: ubuntu-24.04-arm  }
          - { platforms: linux/arm/v7,  build_dir: stable,   dockerfile: Dockerfile,             tag: stable-armv7-alpine,      runner: ubuntu-24.04-arm  }
          - { platforms: linux/arm/v6,  build_dir: stable,   dockerfile: Dockerfile,             tag: stable-armv6-alpine,      runner: ubuntu-24.04-arm  }
          #- { platforms: linux/ppc64le, build_dir: stable,   dockerfile: Dockerfile,             tag: stable-ppc64le-alpine,    runner: ubuntu-24.04-arm  }
          - { platforms: linux/riscv64, build_dir: stable,   dockerfile: Dockerfile,             tag: stable-riscv64-alpine,    runner: ubuntu-24.04-arm  }
          #- { platforms: linux/loong64, build_dir: stable,   dockerfile: Dockerfile.loongarch64, tag: stable-loong64-alpine,    runner: ubuntu-24.04-arm  }
          #- { platforms: linux/mips64le, build_dir: stable,  dockerfile: Dockerfile.mips64le,   tag: stable-mips64le-alpine,   runner: ubuntu-24.04-arm  }

          # --- QEMU on x86 runner ---
          # s390x: strong memory model (TSO-like) → needs x86 host for MTTCG
          # Pinned to ubuntu-22.04: QEMU segfault regression in ubuntu-24.04 >= 20250202.1.0
          # Track: https://github.com/actions/runner-images/issues/11662
          #- { platforms: linux/s390x, build_dir: mainline, dockerfile: Dockerfile, tag: mainline-s390x-alpine, runner: ubuntu-22.04 }
          #- { platforms: linux/s390x, build_dir: stable,   dockerfile: Dockerfile, tag: stable-s390x-alpine,   runner: ubuntu-22.04 }

    permissions:
      contents: read
      packages: write

    steps:
      - name: Check Out Repo
        uses: actions/checkout@v6

      - name: Set up QEMU
        if: matrix.platforms != 'linux/amd64' && matrix.platforms != 'linux/arm64'
        uses: docker/setup-qemu-action@v4
        with:
          # qemu-v9.2.0-51+ required for loong64 support
          image: tonistiigi/binfmt:qemu-v10.2.1-65

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v4

      - name: Login to GHCR
        uses: docker/login-action@v4
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Login to DockerHub
        uses: docker/login-action@v4
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

      - name: Build and push ${{ matrix.tag }}
        uses: docker/build-push-action@v7
        with:
          context: ${{ matrix.build_dir }}
          file: ${{ matrix.build_dir }}/${{ matrix.dockerfile }}
          platforms: ${{ matrix.platforms }}
          push: true
          tags: |
            ${{ env.GHCR_IMAGE }}:${{ matrix.tag }}
            ${{ env.DHUB_IMAGE }}:${{ matrix.tag }}
          #cache-from: type=registry,ref=${{ env.GHCR_IMAGE }}:cache-${{ matrix.tag }}
          #cache-to: type=registry,ref=${{ env.GHCR_IMAGE }}:cache-${{ matrix.tag }},mode=max
          cache-from: type=gha,scope=${{ matrix.tag }}
          cache-to: type=gha,mode=max,scope=${{ matrix.tag }}

  merge:
    runs-on: ubuntu-latest
    needs: build
    permissions:
      contents: read
      packages: write
    steps:
      - name: Login to GHCR
        uses: docker/login-action@v4
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Login to DockerHub
        uses: docker/login-action@v4
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v4

      - name: Merge and push mainline-alpine manifest
        run: |
          docker buildx imagetools create -t ${{ env.GHCR_IMAGE }}:mainline-alpine \
            ${{ env.GHCR_IMAGE }}:mainline-amd64-alpine \
            ${{ env.GHCR_IMAGE }}:mainline-aarch64-alpine \
            ${{ env.GHCR_IMAGE }}:mainline-armv7-alpine \
            ${{ env.GHCR_IMAGE }}:mainline-armv6-alpine \
            ${{ env.GHCR_IMAGE }}:mainline-riscv64-alpine \
          #  ${{ env.GHCR_IMAGE }}:mainline-loong64-alpine
          #  ${{ env.GHCR_IMAGE }}:mainline-ppc64le-alpine
          #  ${{ env.GHCR_IMAGE }}:mainline-s390x-alpine
          #  ${{ env.GHCR_IMAGE }}:mainline-mips64le-alpine

          docker buildx imagetools create -t ${{ env.DHUB_IMAGE }}:mainline-alpine \
            ${{ env.GHCR_IMAGE }}:mainline-alpine

      - name: Merge and push stable-alpine manifest
        run: |
          docker buildx imagetools create -t ${{ env.GHCR_IMAGE }}:stable-alpine \
            ${{ env.GHCR_IMAGE }}:stable-amd64-alpine \
            ${{ env.GHCR_IMAGE }}:stable-aarch64-alpine \
            ${{ env.GHCR_IMAGE }}:stable-armv7-alpine \
            ${{ env.GHCR_IMAGE }}:stable-armv6-alpine \
            ${{ env.GHCR_IMAGE }}:stable-riscv64-alpine \
          #  ${{ env.GHCR_IMAGE }}:stable-loong64-alpine
          #  ${{ env.GHCR_IMAGE }}:stable-ppc64le-alpine
          #  ${{ env.GHCR_IMAGE }}:stable-s390x-alpine
          #  ${{ env.GHCR_IMAGE }}:stable-mips64le-alpine

          docker buildx imagetools create -t ${{ env.DHUB_IMAGE }}:stable-alpine \
            ${{ env.GHCR_IMAGE }}:stable-alpine