clio/.github/workflows/update-docker-ci.yml

name: Update CI docker image

on:
  pull_request:
    paths:
      - .github/workflows/update-docker-ci.yml

      - ".github/actions/build-docker-image/**"

      - "docker/**"
      - "!docker/clio/**"
      - "!docker/develop/**"
  push:
    branches: [develop]
    paths:
      - .github/workflows/update-docker-ci.yml

      - ".github/actions/build-docker-image/**"

      - "docker/**"
      - "!docker/clio/**"
      - "!docker/develop/**"
  workflow_dispatch:

concurrency:
  # Only matches runs for the current workflow - matches against branch & tags
  group: ${{ github.workflow }}-${{ github.ref }}
  # We want to execute all builds sequentially in develop
  cancel-in-progress: false

env:
  CLANG_MAJOR_VERSION: 19
  GCC_MAJOR_VERSION: 15
  GCC_VERSION: 15.2.0

jobs:
  repo:
    name: Calculate repo name
    runs-on: ubuntu-latest
    outputs:
      GHCR_REPO: ${{ steps.set-ghcr-repo.outputs.GHCR_REPO }}

    steps:
      - name: Set GHCR_REPO
        id: set-ghcr-repo
        run: |
          echo "GHCR_REPO=$(echo ghcr.io/${{ github.repository_owner }} | tr '[:upper:]' '[:lower:]')" >> ${GITHUB_OUTPUT}

  gcc-amd64:
    name: Build and push GCC docker image (amd64)
    runs-on: heavy
    needs: repo

    steps:
      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: Get changed files
        id: changed-files
        uses: tj-actions/changed-files@24d32ffd492484c1d75e0c0b894501ddb9d30d62 # v47.0.0
        with:
          files: "docker/compilers/gcc/**"

      - uses: ./.github/actions/build-docker-image
        if: ${{ steps.changed-files.outputs.any_changed == 'true' }}
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          DOCKERHUB_USER: ${{ secrets.DOCKERHUB_USER }}
          DOCKERHUB_PW: ${{ secrets.DOCKERHUB_PW }}
        with:
          images: |
            ${{ needs.repo.outputs.GHCR_REPO }}/clio-gcc
            ${{ github.repository_owner == 'XRPLF' && 'rippleci/clio_gcc' || '' }}
          push_image: ${{ github.event_name != 'pull_request' }}
          directory: docker/compilers/gcc
          tags: |
            type=raw,value=amd64-latest
            type=raw,value=amd64-${{ env.GCC_MAJOR_VERSION }}
            type=raw,value=amd64-${{ env.GCC_VERSION }}
            type=raw,value=amd64-${{ github.sha }}
          platforms: linux/amd64
          build_args: |
            GCC_MAJOR_VERSION=${{ env.GCC_MAJOR_VERSION }}
            GCC_VERSION=${{ env.GCC_VERSION }}
          dockerhub_repo: ${{ github.repository_owner == 'XRPLF' && 'rippleci/clio_gcc' || '' }}
          dockerhub_description: GCC compiler for XRPLF/clio.

  gcc-arm64:
    name: Build and push GCC docker image (arm64)
    runs-on: heavy-arm64
    needs: repo

    steps:
      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: Get changed files
        id: changed-files
        uses: tj-actions/changed-files@ed68ef82c095e0d48ec87eccea555d944a631a4c # v46.0.5
        with:
          files: "docker/compilers/gcc/**"

      - uses: ./.github/actions/build-docker-image
        if: ${{ steps.changed-files.outputs.any_changed == 'true' }}
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          DOCKERHUB_USER: ${{ secrets.DOCKERHUB_USER }}
          DOCKERHUB_PW: ${{ secrets.DOCKERHUB_PW }}
        with:
          images: |
            ${{ needs.repo.outputs.GHCR_REPO }}/clio-gcc
            ${{ github.repository_owner == 'XRPLF' && 'rippleci/clio_gcc' || '' }}
          push_image: ${{ github.event_name != 'pull_request' }}
          directory: docker/compilers/gcc
          tags: |
            type=raw,value=arm64-latest
            type=raw,value=arm64-${{ env.GCC_MAJOR_VERSION }}
            type=raw,value=arm64-${{ env.GCC_VERSION }}
            type=raw,value=arm64-${{ github.sha }}
          platforms: linux/arm64
          build_args: |
            GCC_MAJOR_VERSION=${{ env.GCC_MAJOR_VERSION }}
            GCC_VERSION=${{ env.GCC_VERSION }}
          dockerhub_repo: ${{ github.repository_owner == 'XRPLF' && 'rippleci/clio_gcc' || '' }}
          dockerhub_description: GCC compiler for XRPLF/clio.

  gcc-merge:
    name: Merge and push multi-arch GCC docker image
    runs-on: heavy
    needs: [repo, gcc-amd64, gcc-arm64]

    steps:
      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: Get changed files
        id: changed-files
        uses: tj-actions/changed-files@24d32ffd492484c1d75e0c0b894501ddb9d30d62 # v47.0.0
        with:
          files: "docker/compilers/gcc/**"

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1

      - name: Login to GitHub Container Registry
        if: ${{ github.event_name != 'pull_request' }}
        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
        with:
          registry: ghcr.io
          username: ${{ github.repository_owner }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Login to DockerHub
        if: ${{ github.repository_owner == 'XRPLF' && github.event_name != 'pull_request' }}
        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
        with:
          username: ${{ secrets.DOCKERHUB_USER }}
          password: ${{ secrets.DOCKERHUB_PW }}

      - name: Create and push multi-arch manifest
        if: ${{ github.event_name != 'pull_request' && steps.changed-files.outputs.any_changed == 'true' }}
        run: |
          push_image() {
            image=$1

            docker buildx imagetools create \
                -t $image:latest \
                -t $image:${{ env.GCC_MAJOR_VERSION }} \
                -t $image:${{ env.GCC_VERSION }} \
                -t $image:${{ github.sha }} \
                $image:arm64-latest \
                $image:amd64-latest
          }
          push_image ${{ needs.repo.outputs.GHCR_REPO }}/clio-gcc
          if [[ ${{ github.repository_owner }} == 'XRPLF' ]]; then
            push_image rippleci/clio_clang
          fi

  clang:
    name: Build and push Clang docker image
    runs-on: heavy
    needs: repo

    steps:
      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: Get changed files
        id: changed-files
        uses: tj-actions/changed-files@24d32ffd492484c1d75e0c0b894501ddb9d30d62 # v47.0.0
        with:
          files: "docker/compilers/clang/**"

      - uses: ./.github/actions/build-docker-image
        if: ${{ steps.changed-files.outputs.any_changed == 'true' }}
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          DOCKERHUB_USER: ${{ secrets.DOCKERHUB_USER }}
          DOCKERHUB_PW: ${{ secrets.DOCKERHUB_PW }}
        with:
          images: |
            ${{ needs.repo.outputs.GHCR_REPO }}/clio-clang
            ${{ github.repository_owner == 'XRPLF' && 'rippleci/clio_clang' || '' }}
          push_image: ${{ github.event_name != 'pull_request' }}
          directory: docker/compilers/clang
          tags: |
            type=raw,value=latest
            type=raw,value=${{ env.CLANG_MAJOR_VERSION }}
            type=raw,value=${{ github.sha }}
          platforms: linux/amd64,linux/arm64
          build_args: |
            CLANG_MAJOR_VERSION=${{ env.CLANG_MAJOR_VERSION }}
          dockerhub_repo: ${{ github.repository_owner == 'XRPLF' && 'rippleci/clio_clang' || '' }}
          dockerhub_description: Clang compiler for XRPLF/clio.

  tools-amd64:
    name: Build and push tools docker image (amd64)
    runs-on: heavy
    needs: [repo, gcc-merge]

    steps:
      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: Get changed files
        id: changed-files
        uses: tj-actions/changed-files@24d32ffd492484c1d75e0c0b894501ddb9d30d62 # v47.0.0
        with:
          files: "docker/tools/**"

      - uses: ./.github/actions/build-docker-image
        if: ${{ steps.changed-files.outputs.any_changed == 'true' }}
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          images: |
            ${{ needs.repo.outputs.GHCR_REPO }}/clio-tools
          push_image: ${{ github.event_name != 'pull_request' }}
          directory: docker/tools
          tags: |
            type=raw,value=amd64-latest
            type=raw,value=amd64-${{ github.sha }}
          platforms: linux/amd64
          build_args: |
            GHCR_REPO=${{ needs.repo.outputs.GHCR_REPO }}
            GCC_VERSION=${{ env.GCC_VERSION }}

  tools-arm64:
    name: Build and push tools docker image (arm64)
    runs-on: heavy-arm64
    needs: [repo, gcc-merge]

    steps:
      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: Get changed files
        id: changed-files
        uses: tj-actions/changed-files@ed68ef82c095e0d48ec87eccea555d944a631a4c # v46.0.5
        with:
          files: "docker/tools/**"

      - uses: ./.github/actions/build-docker-image
        if: ${{ steps.changed-files.outputs.any_changed == 'true' }}
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          images: |
            ${{ needs.repo.outputs.GHCR_REPO }}/clio-tools
          push_image: ${{ github.event_name != 'pull_request' }}
          directory: docker/tools
          tags: |
            type=raw,value=arm64-latest
            type=raw,value=arm64-${{ github.sha }}
          platforms: linux/arm64
          build_args: |
            GHCR_REPO=${{ needs.repo.outputs.GHCR_REPO }}
            GCC_VERSION=${{ env.GCC_VERSION }}

  tools-merge:
    name: Merge and push multi-arch tools docker image
    runs-on: heavy
    needs: [repo, tools-amd64, tools-arm64]

    steps:
      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: Get changed files
        id: changed-files
        uses: tj-actions/changed-files@24d32ffd492484c1d75e0c0b894501ddb9d30d62 # v47.0.0
        with:
          files: "docker/tools/**"

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1

      - name: Login to GitHub Container Registry
        if: ${{ github.event_name != 'pull_request' }}
        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
        with:
          registry: ghcr.io
          username: ${{ github.repository_owner }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Create and push multi-arch manifest
        if: ${{ github.event_name != 'pull_request' && steps.changed-files.outputs.any_changed == 'true' }}
        run: |
          image=${{ needs.repo.outputs.GHCR_REPO }}/clio-tools
          docker buildx imagetools create \
            -t $image:latest \
            -t $image:${{ github.sha }} \
            $image:arm64-latest \
            $image:amd64-latest

  pre-commit:
    name: Build and push pre-commit docker image
    runs-on: heavy
    needs: [repo, tools-merge]

    steps:
      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - uses: ./.github/actions/build-docker-image
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          images: |
            ${{ needs.repo.outputs.GHCR_REPO }}/clio-pre-commit
          push_image: ${{ github.event_name != 'pull_request' }}
          directory: docker/pre-commit
          tags: |
            type=raw,value=latest
            type=raw,value=${{ github.sha }}
          platforms: linux/amd64,linux/arm64
          build_args: |
            GHCR_REPO=${{ needs.repo.outputs.GHCR_REPO }}

  ci:
    name: Build and push CI docker image
    runs-on: heavy
    needs: [repo, gcc-merge, clang, tools-merge]

    steps:
      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - uses: ./.github/actions/build-docker-image
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          DOCKERHUB_USER: ${{ secrets.DOCKERHUB_USER }}
          DOCKERHUB_PW: ${{ secrets.DOCKERHUB_PW }}
        with:
          images: |
            ${{ needs.repo.outputs.GHCR_REPO }}/clio-ci
            ${{ github.repository_owner == 'XRPLF' && 'rippleci/clio_ci' || '' }}
          push_image: ${{ github.event_name != 'pull_request' }}
          directory: docker/ci
          tags: |
            type=raw,value=latest
            type=raw,value=gcc_${{ env.GCC_MAJOR_VERSION }}_clang_${{ env.CLANG_MAJOR_VERSION }}
            type=raw,value=${{ github.sha }}
          platforms: linux/amd64,linux/arm64
          build_args: |
            GHCR_REPO=${{ needs.repo.outputs.GHCR_REPO }}
            CLANG_MAJOR_VERSION=${{ env.CLANG_MAJOR_VERSION }}
            GCC_MAJOR_VERSION=${{ env.GCC_MAJOR_VERSION }}
            GCC_VERSION=${{ env.GCC_VERSION }}
          dockerhub_repo: ${{ github.repository_owner == 'XRPLF' && 'rippleci/clio_ci' || '' }}
          dockerhub_description: CI image for XRPLF/clio.