build.yml

name: Publish Docker image

on:
  workflow_dispatch:
    inputs:
      push:
        description: "Push to container registry"
        required: false
        default: false
        type: boolean
  push:
    branches:
      - "**"
    tags:
      - "*"
    paths-ignore:
      - "**.yml"
      - "**.yaml"
      - "**.md"
      - "**.txt"
      - ".gitattribute"
      - ".gitignore"
  pull_request:
    branches:
      - "**"
    paths-ignore:
      - "**.yml"
      - "**.yaml"
      - "**.md"
      - "**.txt"
      - ".gitattribute"
      - ".gitignore"

permissions:
  contents: read
  packages: write

env:
  REGISTRY: ghcr.io
  REPO: ${{ github.repository_owner }}/github_runner

jobs:
  set_vars:
    name: Set variables
    runs-on: [self-hosted, Linux]
    outputs:
      is_workflow_dispatch: ${{ steps.set_outputs.outputs.is_workflow_dispatch }}
    steps:
      - name: Set outputs
        id: set_outputs
        run: |
          is_workflow_dispatch=${{ github.event_name == 'workflow_dispatch' }}
          echo "is_workflow_dispatch=$is_workflow_dispatch" >> $GITHUB_OUTPUT

  push_to_registry:
    name: Build and push image to Container Registry
    needs: set_vars
    strategy:
      fail-fast: false
      matrix:
        year: ["2019", "2022"]
    runs-on: windows-${{ matrix.year }}
    # do not run for pushes of tags
    if: ${{ success() && (!(github.event_name == 'push' && startsWith(github.ref, 'refs/tags/'))) }}
    outputs:
      push_2019: ${{ steps.push_image.outputs[format('push_{0}', matrix.year)] == 'true' }}
      push_2022: ${{ steps.push_image.outputs[format('push_{0}', matrix.year)] == 'true' }}
    steps:
      - name: Check out the repo
        uses: actions/checkout@v2

      - name: Extract metadata (tags, labels) for Docker
        id: meta
        uses: docker/metadata-action@v4
        with:
          images: ${{ env.REGISTRY }}/${{ env.REPO }}
          flavor: |
            latest=false
          tags: |
            type=sha,prefix=,suffix=-windowsservercore-ltsc${{ matrix.year }}

      - name: Build image
        working-directory: ./runner/
        run: |
          $ErrorActionPreference = "Stop"
          Invoke-Expression "docker build --isolation process --build-arg LTSC_YEAR=${{ matrix.year }} --pull $($env:TAGS.Split("`n") | % { '-t "' + $_ + '"' }) $($env:LABELS.Split("`n") | % { '--label "' + $_ + '"' }) ."
          if ($LASTEXITCODE -ne 0) { throw "Docker build failed." }
        env:
          TAGS: ${{ steps.meta.outputs.tags }}
          LABELS: ${{ steps.meta.outputs.labels }}
        if: ${{ success() && (contains(fromJson('["push", "pull_request"]'), github.event_name) || needs.set_vars.outputs.is_workflow_dispatch == 'true') }}

      - name: Docker login
        id: docker_login
        uses: docker/login-action@v2
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
        if: ${{ success() && ((github.event_name == 'push' && github.ref == 'refs/heads/main') || (inputs.push && needs.set_vars.outputs.is_workflow_dispatch == 'true')) }}

      - name: Push image
        id: push_image
        run: |
          $ErrorActionPreference = "Stop"
          $($env:TAGS.Split("`n") | % {
            docker push $_
            if ($LASTEXITCODE -ne 0) { throw "Docker push failed." }
          })
          Write-Output "::set-output name=push_${{ matrix.year }}::true"
        env:
          TAGS: ${{ steps.meta.outputs.tags }}
        if: ${{ success() && ((github.event_name == 'push' && github.ref == 'refs/heads/main') || (inputs.push && needs.set_vars.outputs.is_workflow_dispatch == 'true')) }}

      - name: Docker logout
        run: docker logout ${{ env.REGISTRY }}
        if: ${{ always() && steps.docker_login.outcome != 'skipped' }}

  push_manifest:
    name: Push Docker manifest to Container Registry
    runs-on: windows-latest
    needs: ["push_to_registry", "set_vars"]
    if: ${{ always() && needs.set_vars.outputs.is_schedule != 'true' && ((needs.push_to_registry.result == 'success' && (needs.push_to_registry.outputs.push_2019 == 'true' || needs.push_to_registry.outputs.push_2022 == 'true')) || (needs.push_to_registry.result == 'skipped' && (github.event_name == 'push' && github.ref_type == 'tag'))) }}
    env:
      DOCKER_CLI_EXPERIMENTAL: enabled
    steps:
      - name: Check out the repo
        uses: actions/checkout@v2

      - name: Docker login
        id: docker_login
        uses: docker/login-action@v2
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta
        uses: docker/metadata-action@v4
        with:
          images: ${{ env.REGISTRY }}/${{ env.REPO }}
          flavor: |
            latest=false
          tags: |
            type=ref,event=branch
            type=ref,event=tag

      - name: Push manifest
        run: |
          $ErrorActionPreference = "Stop"
          $sha = $(git rev-parse --short HEAD)
          $repo = "${{ env.REGISTRY }}/${{ env.REPO }}".ToLower()
          $branch = "${{ github.ref_name }}".ToLower()
          
          # Create and push manifest for branch
          docker manifest create "${repo}:${branch}" `
            --amend "${repo}:${sha}-windowsservercore-ltsc2019" `
            --amend "${repo}:${sha}-windowsservercore-ltsc2022"
          docker manifest push "${repo}:${branch}"
          
          # Create and push manifest for SHA
          docker manifest create "${repo}:${sha}" `
            --amend "${repo}:${sha}-windowsservercore-ltsc2019" `
            --amend "${repo}:${sha}-windowsservercore-ltsc2022"
          docker manifest push "${repo}:${sha}"

      - name: Docker logout
        run: docker logout ${{ env.REGISTRY }}
        if: ${{ always() && steps.docker_login.outcome != 'skipped' }}