Publish multi-arch images automatically with docker/github-builder

Switch from manual Docker image building and Docker Hub pushing to an automated workflow that also provides ARM64 builds on each release.

It requires releases being created from now on at https://github.com/wiktorn/overpass-api/releases/new.

It also uses the DOCKERHUB_TOKEN repository secret and DOCKERHUB_USERNAME repository variable. Both should be set manually first.

Detailed changes:

- Rename Dockerfile.template to Dockerfile to make it usable for the GitHub Action
- ARG OVERPASS_VERSION instead of {version} Python field formatting
- Remove curly bracket Python format field escaping from ENV declarations
- Create docker-publish.yml which uses the new docker/github-builder GitHub action that makes configuring builds fairly simple

Author: gy-mate

.github/workflows/docker-publish.yml

@@ -0,0 +1,27 @@
+name: Publish multi-arch Docker image
+
+on:
+  release:
+    types: [published]
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    uses: docker/github-builder/.github/workflows/build.yml@v1
+    permissions:
+      contents: read
+      id-token: write
+    with:
+      output: image
+      push: true
+      platforms: linux/amd64,linux/arm64
+      build-args: OVERPASS_VERSION=${{ github.event.release.tag_name }}
+      meta-images: ${{ vars.DOCKERHUB_USERNAME }}/overpass-api
+      meta-tags: type=semver,pattern={{version}}
+    secrets:
+      registry-auths: |
+        - registry: docker.io
+          username: ${{ vars.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}

Dockerfile.template DockerfileDockerfile.template renamed to Dockerfile

@@ -26,7 +26,8 @@ RUN apt-get update \
         zlib1g \
         zlib1g-dev
 
-ADD http://dev.overpass-api.de/releases/osm-3s_v{version}.tar.gz /app/src.tar.gz
+ARG OVERPASS_VERSION
+ADD http://dev.overpass-api.de/releases/osm-3s_v${OVERPASS_VERSION}.tar.gz /app/src.tar.gz
 
 RUN  mkdir -p /app/src \
     && cd /app/src \
@@ -91,9 +92,9 @@ COPY docker-entrypoint.sh docker-healthcheck.sh /app/
 RUN chmod a+rx /app/docker-entrypoint.sh /app/bin/update_overpass.sh /app/bin/rules_loop.sh /app/bin/dispatcher_start.sh \
     /app/bin/oauth_cookie_client.py /app/bin/start_fcgiwarp.sh
 
-ENV OVERPASS_RULES_LOAD=${{OVERPASS_RULES_LOAD:-1}}
-ENV OVERPASS_USE_AREAS=${{OVERPASS_USE_AREAS:-true}}
-ENV OVERPASS_ALLOW_DUPLICATE_QUERIES=${{OVERPASS_ALLOW_DUPLICATE_QUERIES:-no}}
+ENV OVERPASS_RULES_LOAD=${OVERPASS_RULES_LOAD:-1}
+ENV OVERPASS_USE_AREAS=${OVERPASS_USE_AREAS:-true}
+ENV OVERPASS_ALLOW_DUPLICATE_QUERIES=${OVERPASS_ALLOW_DUPLICATE_QUERIES:-no}
 
 EXPOSE 80
 

update.py

@@ -28,7 +28,7 @@ def main():
     response = urllib.request.urlopen(url)
     data = response.read().decode(response.headers.get_content_charset())
     parser.feed(data)
-    with open("Dockerfile.template") as f:
+    with open("Dockerfile") as f:
         template = f.read()
     for ver in parser.versions:
         if any((ver.startswith(x) for x in ('0.6', 'eta', '0.7.1', '0.7.2', '0.7.3', '0.7.4', '0.7.50', '0.7.52',
@@ -42,7 +42,7 @@ def main():
             shutil.rmtree(ver)
         os.mkdir(ver)
         with open(pathlib.Path(ver) / "Dockerfile", "w+") as f:
-            f.write(template.format(version=ver))
+            f.write(template.replace("${OVERPASS_VERSION}", ver))
         #for i in ("etc", "bin"):
         #    shutil.copytree(i, pathlib.Path(ver) / i)
         #shutil.copyfile("docker-entrypoint.sh", pathlib.Path(ver) / "docker-entrypoint.sh")