Using Docker GitHub action (#3)

* Var username

* new test

* tag

* repo names only

* ${{ needs.docker_merge.outputs.tag }}

* image-tag

* multi-arch-go

Author: AvinZarlez

.github/workflows/image-build.yml

@@ -13,49 +13,100 @@ on:
       - main
 
 env:
-  USER: ${{secrets.DOCKER_USER}}
-  IMAGE_NAME: docker-test
+  IMAGE_NAME: multi-arch-go
 
 jobs:
   docker_build:
     runs-on: ${{ matrix.os }}
     strategy:
+      fail-fast: false
       matrix:
         include:
           - os: ${{vars.BASE_OS}}
-            arch: amd64
+            platform: linux/amd64
           - os: ${{vars.BASE_OS}}-arm
-            arch: arm64
+            platform: linux/arm64
     steps:
-      - name: Checkout
-        uses: actions/checkout@v4
+      - name: Prepare
+        run: |
+          platform=${{ matrix.platform }}
+          echo "PLATFORM_PAIR=${platform//\//-}" >> $GITHUB_ENV
+      - name: Extract Docker image metadata
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ vars.DOCKER_USER }}/${{env.IMAGE_NAME}}
       - name: Log in to Docker Hub
         uses: docker/login-action@v3
         with:
-          username: ${{env.USER}}
+          username: ${{vars.DOCKER_USER}}
           password: ${{secrets.DOCKER_PAT}}
-      - name: Build and push
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+      - name: Build and push by digest
+        id: build
+        uses: docker/build-push-action@v6
+        with:
+          platforms: ${{ matrix.platform }}
+          labels: ${{ steps.meta.outputs.labels }}
+          tags: ${{vars.DOCKER_USER}}/${{env.IMAGE_NAME}}
+          outputs: type=image,push-by-digest=true,name-canonical=true,push=true
+      - name: Export digest
         run: |
-            docker build --tag ${{env.USER}}/${{env.IMAGE_NAME}}:${{matrix.arch}} .
-            docker push ${{env.USER}}/${{env.IMAGE_NAME}}:${{matrix.arch}}
+          mkdir -p ${{ runner.temp }}/digests
+          digest="${{ steps.build.outputs.digest }}"
+          touch "${{ runner.temp }}/digests/${digest#sha256:}"
+      - name: Upload digest
+        uses: actions/upload-artifact@v4
+        with:
+          name: digests-${{ env.PLATFORM_PAIR }}
+          path: ${{ runner.temp }}/digests/*
+          if-no-files-found: error
+          retention-days: 1
+  
 
-  docker_manifest:
+  docker_merge:
     needs: docker_build
     runs-on: ${{vars.BASE_OS}}-arm
     steps:
+      - name: Download digests
+        uses: actions/download-artifact@v4
+        with:
+          path: ${{ runner.temp }}/digests
+          pattern: digests-*
+          merge-multiple: true
       - name: Log in to Docker Hub
         uses: docker/login-action@v3
         with:
-          username: ${{env.USER}}
+          username: ${{vars.DOCKER_USER}}
           password: ${{secrets.DOCKER_PAT}}
-      - name: Create and push manifest
+      - name: Docker meta
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{vars.DOCKER_USER}}/${{env.IMAGE_NAME}}
+          tags: |
+            type=raw,value=latest,enable={{is_default_branch}}
+            type=ref,event=branch
+            type=ref,event=pr
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}.{{minor}}
+
+      - name: Create manifest list and push
+        working-directory: ${{ runner.temp }}/digests
+        run: |
+          docker buildx imagetools create $(jq -cr '.tags | map("-t " + .) | join(" ")' <<< "$DOCKER_METADATA_OUTPUT_JSON") \
+            $(printf '${{vars.DOCKER_USER}}/${{env.IMAGE_NAME}}@sha256:%s ' *)
+
+      - name: Inspect image
         run: |
-            docker manifest create ${{env.USER}}/${{env.IMAGE_NAME}} ${{env.USER}}/${{env.IMAGE_NAME}}:amd64 ${{env.USER}}/${{env.IMAGE_NAME}}:arm64
-            docker manifest push ${{env.USER}}/${{env.IMAGE_NAME}}
+          docker buildx imagetools inspect ${{vars.DOCKER_USER}}/${{env.IMAGE_NAME}}:${{ steps.meta.outputs.version }}
+    outputs:
+      image-tag: ${{ steps.meta.outputs.version }}
 
   docker_test:
     if: ${{github.event.inputs.run_tests == 'true' || github.event.inputs.run_tests == null}}
-    needs: docker_manifest
+    needs: docker_merge
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
@@ -69,7 +120,7 @@ jobs:
         shell: bash
         run: |
           # Run our container
-          docker run -d --name ${{env.IMAGE_NAME}} --rm ${{env.USER}}/${{env.IMAGE_NAME}}:latest
+          docker run -d --name ${{env.IMAGE_NAME}} --rm ${{vars.DOCKER_USER}}/${{env.IMAGE_NAME}}:${{ needs.docker_merge.outputs.image-tag }}
           sleep 5 # Wait for the container to start
 
           # Check the output

README.md

@@ -34,11 +34,11 @@
 3. In the left sidebar, select **Secrets and variables** > **Actions**.
 4. Click the **New repository secret** button.
 5. Add the following secrets:
-    - `DOCKER_USER`: Your Docker username.
     - `DOCKER_PAT`: Your Docker Personal Access Token we generated above.
 6. Move from the **Secrets** tab to the **Variables** tab
 7. Click the **New repository variable** button.
-8. Add the following variable:
+8. Add the following variable:3
+    - `DOCKER_USER`: Your Docker username.
     - `BASE_OS`: `ubuntu-24.04`
 
 ### Run the GitHub Actions Workflow