docker-publish.yml

name: Docker Image Publish

on:
  push:
    branches:
      - master
    paths:
      - ".env/**"
      - ".github/workflows/docker-publish.yml"
  pull_request:
    branches:
      - master
    paths:
      - ".env/**"
      - ".github/workflows/docker-publish.yml"

env:
  IMAGE_LOWERCASE_NAME: fl-bench
  IMAGE_LOWERCASE_OWNER: karhoutam
  GITHUB_REGISTRY: ghcr.io
  ALIYUN_REGISTRY: registry.cn-hangzhou.aliyuncs.com
  IMAGE_TAG: master

jobs:
  build-image:
    name: Build Docker Image
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write
      id-token: write

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      # https://github.com/docker/build-push-action
      - name: Build Docker image
        uses: docker/build-push-action@v6
        with:
          context: .
          file: .env/Dockerfile
          push: false
          tags: |
            ${{ env.GITHUB_REGISTRY }}/${{ env.IMAGE_LOWERCASE_OWNER }}/${{ env.IMAGE_LOWERCASE_NAME }}:${{ env.IMAGE_TAG }}
            ${{ env.ALIYUN_REGISTRY }}/${{ env.IMAGE_LOWERCASE_OWNER }}/${{ env.IMAGE_LOWERCASE_NAME }}:${{ env.IMAGE_TAG }}
          cache-to: type=gha,mode=max

  push-ghcr:
    name: Push to ghcr
    needs: build-image
    runs-on: ubuntu-latest

    permissions:
      contents: read
      packages: write
      id-token: write

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log into ghcr.io
        uses: docker/login-action@v3
        with:
          registry: ${{ env.GITHUB_REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Push image to ghcr.io
        uses: docker/build-push-action@v6
        with:
          context: .
          file: .env/Dockerfile
          push: true
          tags: |
            ${{ env.GITHUB_REGISTRY }}/${{ env.IMAGE_LOWERCASE_OWNER }}/${{ env.IMAGE_LOWERCASE_NAME }}:${{ env.IMAGE_TAG }}
          cache-from: type=gha

  # push-aliyun:
  #   name: Push to aliyun
  #   needs: build-image
  #   runs-on: ubuntu-latest

  #   permissions:
  #     contents: read
  #     packages: write
  #     id-token: write

  #   steps:
  #     - name: Checkout repository
  #       uses: actions/checkout@v4

  #     - name: Set up Docker Buildx
  #       uses: docker/setup-buildx-action@v3

  #     - name: Log into aliyun
  #       uses: docker/login-action@v3
  #       with:
  #         registry: ${{ env.ALIYUN_REGISTRY }}
  #         username: ${{ secrets.ALIYUN_USERNAME }}
  #         password: ${{ secrets.ALIYUN_TOKEN }}

  #     - name: Push image to aliyun
  #       uses: docker/build-push-action@v6
  #       with:
  #         context: .
  #         file: .env/Dockerfile
  #         push: true
  #         tags: |
  #           ${{ env.ALIYUN_REGISTRY }}/${{ env.IMAGE_LOWERCASE_OWNER }}/${{ env.IMAGE_LOWERCASE_NAME }}:${{ env.IMAGE_TAG }}
  #         cache-from: type=gha