feat: 添加多平台构建

Author: dengbinbox

.github/workflows/build.yml

@@ -9,11 +9,22 @@ on:
       - master
       - feature/tree-sitter-markdown
 
+permissions:
+  contents: read
+  packages: write
+
 jobs:
   build-and-push:
     name: Build And Push
-    runs-on: ubuntu-latest
-    needs: []
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - platform: linux/amd64
+            runner: ubuntu-latest
+          - platform: linux/arm64
+            runner: ubuntu-24.04-arm
+    runs-on: ${{ matrix.runner }}
     steps:
       - name: Checkout
         uses: actions/checkout@v3
@@ -66,26 +77,118 @@ jobs:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v2
-
-      - name: Set up buildx
+      - name: Set up Docker Buildx
         id: buildx
-        uses: docker/setup-buildx-action@v2
-        with:
-          version: latest
+        uses: docker/setup-buildx-action@v3
 
       - name: Log in to Docker Hub
-        uses: docker/login-action@v1
+        uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
-      - name: Push to Docker Hub
-        uses: docker/build-push-action@v3
+      - name: Log in to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and push by digest
+        id: build
+        uses: docker/build-push-action@v6
         with:
           context: .
+          file: ./Dockerfile
           target: STANDARD
-          platforms: linux/amd64
+          platforms: ${{ matrix.platform }}
           push: true
-          tags: ${{ secrets.DOCKERHUB_REPOSITORY }}/codebase-embedder:${{ steps.version.outputs.version }},${{ secrets.DOCKERHUB_REPOSITORY }}/codebase-embedder:latest 
+          provenance: false
+          outputs: type=image,"name=${{ secrets.DOCKERHUB_REPOSITORY }}/codebase-embedder,ghcr.io/${{ github.repository }}",push-by-digest=true,name-canonical=true
+          build-args: |
+            VERSION=${{ steps.version.outputs.version }}
+
+      - name: Export digest
+        run: |
+          mkdir -p /tmp/digests
+          digest="${{ steps.build.outputs.digest }}"
+          touch "/tmp/digests/${digest#sha256:}"
+
+      - name: Upload digest
+        uses: actions/upload-artifact@v4
+        with:
+          name: digests-${{ matrix.platform == 'linux/amd64' && 'amd64' || 'arm64' }}
+          path: /tmp/digests/*
+          if-no-files-found: error
+          retention-days: 1
+
+  merge:
+    name: Merge Multi-Arch Manifests
+    runs-on: ubuntu-latest
+    needs:
+      - build-and-push
+    steps:
+      - name: Download digests
+        uses: actions/download-artifact@v4
+        with:
+          path: /tmp/digests
+          pattern: digests-*
+          merge-multiple: true
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Log in to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Get version
+        id: version
+        run: |
+          if [[ $GITHUB_REF == refs/tags/* ]]; then
+            CURRENT_VERSION=${GITHUB_REF#refs/tags/}
+            echo "version=$CURRENT_VERSION" >> $GITHUB_OUTPUT
+          else
+            LATEST_TAG=$(git tag -l "v*.*.*" | sort -V | tail -n1)
+            if [ -z "$LATEST_TAG" ]; then
+              NEW_VERSION="v1.0.0"
+            else
+              VERSION_PART=$(echo $LATEST_TAG | sed 's/v//')
+              MAJOR=$(echo $VERSION_PART | cut -d. -f1)
+              MINOR=$(echo $VERSION_PART | cut -d. -f2)
+              PATCH=$(echo $VERSION_PART | cut -d. -f3)
+              PATCH=$((PATCH + 1))
+              NEW_VERSION="v${MAJOR}.${MINOR}.${PATCH}"
+            fi
+            echo "version=$NEW_VERSION" >> $GITHUB_OUTPUT
+          fi
+
+      - name: Create manifest list and push to Docker Hub
+        working-directory: /tmp/digests
+        run: |
+          docker buildx imagetools create \
+            -t ${{ secrets.DOCKERHUB_REPOSITORY }}/codebase-embedder:${{ steps.version.outputs.version }} \
+            -t ${{ secrets.DOCKERHUB_REPOSITORY }}/codebase-embedder:latest \
+            $(printf '${{ secrets.DOCKERHUB_REPOSITORY }}/codebase-embedder@sha256:%s ' *)
+
+      - name: Create manifest list and push to GHCR
+        working-directory: /tmp/digests
+        run: |
+          docker buildx imagetools create \
+            -t ghcr.io/${{ github.repository }}:${{ steps.version.outputs.version }} \
+            -t ghcr.io/${{ github.repository }}:latest \
+            $(printf 'ghcr.io/${{ github.repository }}@sha256:%s ' *)
+
+      - name: Inspect image
+        run: |
+          docker buildx imagetools inspect ${{ secrets.DOCKERHUB_REPOSITORY }}/codebase-embedder:${{ steps.version.outputs.version }}
+          docker buildx imagetools inspect ghcr.io/${{ github.repository }}:${{ steps.version.outputs.version }}