fedora-containers.yml

name: "Fedora 🐳 Mirror"

on:
  workflow_dispatch:
  schedule:
    - cron: "0 0 * * *"
  push:
    branches:
      - '*'
    paths:
      - containers.yml
      - '.github/workflows/fedora-containers.yml'
      - 'mirrors/fedora/*'
  pull_request:
    paths:
      - containers.yml
      - '.github/workflows/fedora-containers.yml'
      - 'mirrors/fedora/*'

env:
  PATH_IN_REPO: mirrors/fedora


concurrency:
  # Concurrency is defined in a way that concurrent builds against branches do
  # not cancel previous builds.
  # However, for every new build against the same pull request source branch,
  # all older builds against that same branch get canceled.
  group: mirrors/fedora-${{ github.workflow }}-${{ github.event_name }}-${{ github.head_ref || github.run_id }}
  cancel-in-progress: true

jobs:
  matrix-generator:
    name: "Mirror Matrix Generator"
    runs-on: ubuntu-latest
    outputs:
      dockerinfo: ${{ steps.set-matrix.outputs.dockerinfo }}
    steps:
      - name: "Throttle Builds"
        run: |
          t=$(shuf -i 5-30 -n 1); echo "Sleeping $t seconds"; sleep $t

      - name: "Fetching Repository Contents"
        uses: actions/checkout@v4

      - name: Setup Python
        uses: actions/setup-python@v4
        with:
          python-version: '3.9'

      - name: Install Requirements
        run: |
          python -m pip install -r requirements.txt

      - name: "Generate Matrix Data"
        id: set-matrix
        run: |
          inv containers.matrix --from-workflow ${{ env.PATH_IN_REPO }}

  mirror-image:
    runs-on: ubuntu-latest
    needs: matrix-generator
    name: "${{ matrix.dockerinfo.name }}"
    strategy:
      fail-fast: false
      max-parallel: 4
      matrix:
        dockerinfo: ${{ fromJson(needs.matrix-generator.outputs.dockerinfo) }}

    permissions:
      actions: read
      checks: write
      issues: read
      packages: write
      pull-requests: read
      repository-projects: read
      statuses: read

    steps:
      - name: "Fetching Repository Contents"
        uses: actions/checkout@v4

      - name: Setup Python
        uses: actions/setup-python@v4
        with:
          python-version: '3.9'

      - name: Install Requirements
        run: |
          python -m pip install -r requirements.txt

      - name: "Throttle concurrent pushes"
        run: |
          t=$(shuf -i 5-30 -n 1); echo "Sleeping $t seconds"; sleep $t

      - name: "Setup DockerFile"
        run: |
          echo " " >> ./${{matrix.dockerinfo.file}}
          echo "LABEL org.opencontainers.image.source=\"https://github.com/${GITHUB_REPOSITORY}/\"" >> ${{matrix.dockerinfo.file}}
          echo "LABEL org.opencontainers.image.url=\"https://github.com/${GITHUB_REPOSITORY}/\"" >> ${{matrix.dockerinfo.file}}
          echo "LABEL org.opencontainers.image.documentation=\"https://github.com/${GITHUB_REPOSITORY}/\"" >> ${{matrix.dockerinfo.file}}
          echo "LABEL org.opencontainers.image.vendor=\"Unofficial Docker Hub Mirror\"" >> ${{matrix.dockerinfo.file}}
          cat ./${{matrix.dockerinfo.file}}

      - name: "Docker QEMU"
        uses: docker/setup-qemu-action@v2

      - name: "Docker BuildX"
        id: buildx
        uses: docker/setup-buildx-action@v2

      - name: Inspect builder
        run: |
          echo "Name:      ${{ steps.buildx.outputs.name }}"
          echo "Endpoint:  ${{ steps.buildx.outputs.endpoint }}"
          echo "Status:    ${{ steps.buildx.outputs.status }}"
          echo "Flags:     ${{ steps.buildx.outputs.flags }}"
          echo "Platforms: ${{ steps.buildx.outputs.platforms }}"

      - name: Inspect Source Image
        run: |
          docker buildx imagetools inspect fedora:38 | tee -a source-container-inspect.txt

      - name: Define Build Platforms
        id: define-platforms
        run: |
          inv containers.platforms --exclude=linux/s390x,linux/mips64le source-container-inspect.txt

      - name: "Log into GitHub Container Registry"
        uses: docker/login-action@v2
        with:
          registry: ghcr.io
          username: ${{ github.repository_owner }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: "Build & Publish"
        uses: docker/build-push-action@v5
        with:
          file: ${{ matrix.dockerinfo.file }}
          context: ${{ env.PATH_IN_REPO }}
          pull: true
          sbom: true
          provenance: true
          platforms: ${{ steps.define-platforms.outputs.platforms }}
          push: ${{ github.repository == 'saltstack/salt-ci-containers' && (github.event_name == 'push' || github.event_name == 'workflow_dispatch' || github.event_name == 'schedule' ) }}
          tags: |
            ghcr.io/${{ github.repository }}/${{ matrix.dockerinfo.name }}