build-publish.yml

name: Build and Publish to Docker

on:
  schedule:
    - cron: "0 12 * * *"
  push:
    paths-ignore:
      - "*.md"
      - "*.txt"
      - "*.png"
    branches:
      - "master"
  pull_request:
    branches:
      - "master"

jobs:
  build-and-publish:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0 # for proper signature verification
          submodules: true # for shunit2
      - name: Run ShellCheck
        uses: ludeeus/action-shellcheck@master
        with:
          ignore_paths: tests/shunit2
      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
      - name: Login to Docker Hub
        uses: docker/login-action@v3
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}
      - name: Login to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      - name: Build Debian Image for Testing
        uses: docker/build-push-action@v6
        with:
          context: .
          load: true
          tags: |
            ${{ github.repository }}:debian
      - name: Test Debian Image
        run: tests/run ${{ github.repository }}:debian
      - name: Build Alpine Image for Testing
        uses: docker/build-push-action@v6
        with:
          context: .
          file: Dockerfile-alpine
          load: true
          tags: |
            ${{ github.repository }}:alpine
      - name: Test Alpine Image
        run: tests/run ${{ github.repository }}:alpine
      - name: Build & Push Debian Image to Docker Hub
        uses: docker/build-push-action@v6
        with:
          context: .
          platforms: linux/amd64,linux/arm64,linux/arm/v7
          push: true
          tags: |
            ${{ github.repository }}:latest
            ${{ github.repository }}:debian
          labels: |
            org.opencontainers.image.source=$GITHUB_SERVER_URL/${{ github.repository }}
            org.opencontainers.image.revision=$GITHUB_SHA
            org.opencontainers.image.created=$(date --rfc-3339=seconds)
      - name: Build & Push Alpine Image to Docker Hub
        uses: docker/build-push-action@v6
        with:
          context: .
          file: Dockerfile-alpine
          platforms: linux/amd64,linux/arm64,linux/arm/v7
          push: true
          tags: |
            ${{ github.repository }}:alpine
          labels: |
            org.opencontainers.image.source=$GITHUB_SERVER_URL/${{ github.repository }}
            org.opencontainers.image.revision=$GITHUB_SHA
            org.opencontainers.image.created=$(date --rfc-3339=seconds)
      - name: Build & Push Debian Image to GitHub Container Registry
        uses: docker/build-push-action@v6
        with:
          context: .
          platforms: linux/amd64,linux/arm64,linux/arm/v7
          push: true
          tags: |
            ghcr.io/${{ github.repository }}:latest
            ghcr.io/${{ github.repository }}:debian
          labels: |
            org.opencontainers.image.source=$GITHUB_SERVER_URL/${{ github.repository }}
            org.opencontainers.image.revision=$GITHUB_SHA
            org.opencontainers.image.created=$(date --rfc-3339=seconds)
      - name: Build & Push Alpine Image to GitHub Container Registry
        uses: docker/build-push-action@v6
        with:
          context: .
          file: Dockerfile-alpine
          platforms: linux/amd64,linux/arm64,linux/arm/v7
          push: true
          tags: |
            ghcr.io/${{ github.repository }}:alpine
          labels: |
            org.opencontainers.image.source=$GITHUB_SERVER_URL/${{ github.repository }}
            org.opencontainers.image.revision=$GITHUB_SHA
            org.opencontainers.image.created=$(date --rfc-3339=seconds)