build-base.yml

---
name: "Build base"
on:
  push:
    paths:
      - '.github/workflows/build-base.yml'
      - 'base/Dockerfile'
    branches:
      - main
  pull_request:
    paths:
      - '.github/workflows/build-base.yml'
      - 'base/Dockerfile'
  workflow_dispatch:
    inputs:
      stackTag:
        description: 'Science Pipelines tag (default: d_latest)'
        required: true
        default: 'd_latest'
        type: string
      makeLatest:
        description: 'Push container with "latest" tag'
        required: false
        type: boolean


permissions:
  packages: write

jobs:
  update-base-image:
    name: Update base image
    runs-on: ubuntu-latest
    env:
      IMAGE_NAME: prompt-base
      STACK_TAG: ${{ inputs.stackTag }}
    steps:
      - name: Checkout code
        uses: actions/checkout@v3
      - name: Login to GitHub Container Registry
        uses: docker/login-action@v2
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      - name: Determine base image eups tag
        working-directory: base
        run: |
          if [[ -n "$STACK_TAG" ]]; then
            if [[ "$STACK_TAG" == "*_latest" ]]; then
              echo "$STACK_TAG" > lsst.docker.tag
            else
              echo "7-stack-lsst_distrib-$STACK_TAG" > lsst.docker.tag
            fi
            echo "$STACK_TAG" > stack.tag
          else
            echo "d_latest" > lsst.docker.tag
            echo "d_latest" > stack.tag
          fi
          docker run lsstsqre/centos:"$(< lsst.docker.tag)" bash -c "cat stack/miniconda*/ups_db/global.tags" > eups.tag
          echo "Eups tag = $(< eups.tag)"
      - name: Build image
        # Context-free build
        working-directory: base
        run: |
          docker build - \
            --build-arg "STACK_TAG=$(< lsst.docker.tag)" \
            --tag $IMAGE_NAME \
            --label "runnumber=${GITHUB_RUN_ID}" \
            --label "stacktag=$(< stack.tag)" \
            --label "eupstag=$(< eups.tag)" \
            < Dockerfile
      - name: Push image to registries
        run: |
          MAKE_LATEST="${{ inputs.makeLatest }}"
          [[ -n "$MAKE_LATEST" ]] || MAKE_LATEST="false"
          BRANCH=$(echo "${{ github.ref }}" | sed -e 's,.*/\(.*\),\1,')
          [ "$BRANCH" == "merge" ] && BRANCH=$(echo "${{ github.head_ref }}" | sed -e 's,.*/\(.*\),\1,')

          for IMAGE_ID in "ghcr.io/${{ github.repository_owner }}/$IMAGE_NAME"; do

            STACK_TAG="$(< stack.tag)"
            if [ "$BRANCH" == "main" ]; then
              VERSION="$STACK_TAG"
            else
              VERSION="${BRANCH}-$STACK_TAG"
            fi
            echo IMAGE_ID=$IMAGE_ID
            echo VERSION=$VERSION
            docker tag $IMAGE_NAME $IMAGE_ID:$VERSION
            docker push $IMAGE_ID:$VERSION

            EUPS_TAG=$(< eups.tag)
            if [ "$STACK_TAG" != "$EUPS_TAG" ]; then
              # Also push actual eups tag if not the same (e.g. d_latest)
              if [ "$BRANCH" == "main" ]; then
                VERSION="$EUPS_TAG"
              else
                VERSION="${BRANCH}-$EUPS_TAG"
              fi
              echo VERSION=$VERSION
              docker tag $IMAGE_NAME $IMAGE_ID:$VERSION
              docker push $IMAGE_ID:$VERSION
            fi
            if [ "$MAKE_LATEST" == "true" ]; then
              # Push latest if requested
              if [ "$BRANCH" == "main" ]; then
                VERSION="latest"
              else
                VERSION="${BRANCH}-latest"
              fi
              echo VERSION=$VERSION
              docker tag $IMAGE_NAME $IMAGE_ID:$VERSION
              docker push $IMAGE_ID:$VERSION
            fi
          done