docker-compose-docker/.gitea/workflows/release-latest.yaml

name: Release latest

on:
  push:
    branches: [ "master" ]
  workflow_dispatch: {}

jobs:
  push-arm64:
    runs-on: ubuntu-latest-arm64
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

      - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
        with:
          registry: git.cryptic.systems
          username: ${{ github.repository_owner }}
          password: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}

      - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
        with:
          registry: harbor.cryptic.systems
          username: ${{ secrets.HARBOR_CRYPTIC_SYSTEMS_USERNAME }}
          password: ${{ secrets.HARBOR_CRYPTIC_SYSTEMS_PASSWORD }}

      - uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4.3.0
        with:
          image: harbor.cryptic.systems/docker/tonistiigi/binfmt:qemu-v10.2.1 # renovate: datasource=docker registryUrl=https://docker.io depName=tonistiigi/binfmt extractVersion='qemu-(?<version>v\d+\.\d+\.\d+)$'

      - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0

      - name: Build and push image
        run: |
          docker buildx build \
            --build-arg BUILD_DATE="$(date -u +"%Y-%m-%dT%H:%M:%SZ")" \
            --file Dockerfile \
            --platform linux/arm64 \
            --provenance false \
            --push \
            --tag git.cryptic.systems/volker.raschek/docker-compose:latest-arm64 \
            .

  push-amd64:
    runs-on: ubuntu-latest-amd64
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

      - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
        with:
          registry: git.cryptic.systems
          username: ${{ github.repository_owner }}
          password: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}

      - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
        with:
          registry: harbor.cryptic.systems
          username: ${{ secrets.HARBOR_CRYPTIC_SYSTEMS_USERNAME }}
          password: ${{ secrets.HARBOR_CRYPTIC_SYSTEMS_PASSWORD }}

      - uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4.3.0
        with:
          image: harbor.cryptic.systems/docker/tonistiigi/binfmt:qemu-v10.2.1 # renovate: datasource=docker registryUrl=https://docker.io depName=tonistiigi/binfmt extractVersion='qemu-(?<version>v\d+\.\d+\.\d+)$'

      - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0

      - name: Build and push image
        run: |
          docker buildx build \
            --build-arg BUILD_DATE="$(date -u +"%Y-%m-%dT%H:%M:%SZ")" \
            --file Dockerfile \
            --platform linux/amd64 \
            --provenance false \
            --push \
            --tag git.cryptic.systems/volker.raschek/docker-compose:latest-amd64 \
            .

  push-manifest:
    runs-on: ubuntu-latest
    needs:
    - push-arm64
    - push-amd64
    steps:
      - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
        with:
          registry: git.cryptic.systems
          username: ${{ github.repository_owner }}
          password: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}

      - name: Create and push manifest
        run: |
          docker manifest create git.cryptic.systems/volker.raschek/docker-compose:latest \
            --amend git.cryptic.systems/volker.raschek/docker-compose:latest-amd64 \
            --amend git.cryptic.systems/volker.raschek/docker-compose:latest-arm64

          docker manifest push git.cryptic.systems/volker.raschek/docker-compose:latest

  sync-to-hub-docker-io:
    needs:
    - push-manifest
    runs-on: ubuntu-latest
    steps:
      - name: Copy images to docker.io
        run: |
          apt-get update --yes
          apt-get install --yes skopeo
          skopeo copy \
            --all \
            --dest-password ${{ secrets.DOCKER_IO_PASSWORD }} \
            --dest-username ${{ secrets.DOCKER_IO_USERNAME }} \
            --src-password ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }} \
            --src-username volker.raschek \
              docker://git.cryptic.systems/volker.raschek/docker-compose:latest \
              docker://docker.io/volkerraschek/docker-compose:latest