image.yml

on:
  pull_request:
  push:
    branches: [master]
jobs:
  build:
    strategy:
      matrix:
        arch: [amd64, arm64]
    runs-on: ubuntu-latest
    env:
      IMG_CACHE: ghcr.io/getsentry/cdc:${{ matrix.arch }}-latest
      IMG_VERSIONED: ghcr.io/getsentry/cdc:${{ matrix.arch }}-${{ github.sha }}
    steps:
    - uses: actions/checkout@v3
    - run: docker run --rm --privileged tonistiigi/binfmt --install arm64
      if: matrix.arch == 'arm64'
    - name: build
      run: |
        set -euxo pipefail
        args=()
        if docker pull -q "$IMG_CACHE"; then
          args+=(--cache-from "$IMG_CACHE")
        fi
        docker buildx build \
            "${args[@]}" \
            --build-arg BUILDKIT_INLINE_CACHE=1 \
            --platform linux/${{ matrix.arch }} \
            --tag "$IMG_VERSIONED" \
            --target application \
            .
        docker tag "$IMG_VERSIONED" "$IMG_CACHE"
    - name: push
      run: |
        set -euxo pipefail
        docker login --username '${{ github.actor }}' --password '${{ secrets.GITHUB_TOKEN }}' ghcr.io
        docker push "$IMG_VERSIONED"
        docker push "$IMG_CACHE"
      if: github.event_name != 'pull_request'

  multiarch:
    if: github.event_name != 'pull_request'
    needs: [build]
    runs-on: ubuntu-latest
    steps:
    - run: |
        set -euxo pipefail
        docker login --username '${{ github.actor }}' --password '${{ secrets.GITHUB_TOKEN }}' ghcr.io
        docker manifest create ghcr.io/getsentry/cdc:latest \
          ghcr.io/getsentry/cdc:arm64-latest \
          ghcr.io/getsentry/cdc:amd64-latest
        docker manifest push ghcr.io/getsentry/cdc:latest