Docker #684
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Docker | |
| on: | |
| push: | |
| branches: | |
| - docker** | |
| # https://help.github.com/en/actions/automating-your-workflow-with-github-actions/workflow-syntax-for-github-actions#onschedule | |
| schedule: | |
| - cron: "0 3 * * 1-5" # every work night (delayed 1 hr) | |
| repository_dispatch: | |
| types: | |
| - all | |
| # Trigger with `shinycoreci::trigger_docker()` | |
| - docker | |
| jobs: | |
| config: | |
| uses: ./.github/workflows/apps-config.yml | |
| docker: | |
| needs: config | |
| name: ${{ matrix.docker.type }}-${{ matrix.r_version }}${{ matrix.flavor.extra_base_tag }} | |
| runs-on: ubuntu-latest | |
| strategy: | |
| max-parallel: 5 | |
| fail-fast: false | |
| matrix: | |
| flavor: | |
| # - shinycoreci_sha: main | |
| - shinycoreci_sha: main | |
| extra_base_tag: "" | |
| # - shinycoreci_sha: shiny-1.4.0.1 | |
| # extra_base_tag: "-rc_v1.4.0.1" | |
| r_version: | |
| - ${{ needs.config.outputs.release }} | |
| - ${{ needs.config.outputs.oldrel1 }} | |
| - ${{ needs.config.outputs.oldrel2 }} | |
| - ${{ needs.config.outputs.oldrel3 }} | |
| - ${{ needs.config.outputs.oldrel4 }} | |
| docker: | |
| # - workdir: inst/Docker/centos | |
| # type: centos7 | |
| - workdir: inst/Docker/ubuntu | |
| type: jammy | |
| - workdir: inst/Docker/ubuntu | |
| type: focal | |
| steps: | |
| - name: Short R version and SHA | |
| id: short | |
| run: | | |
| # keep only the major.minor values | |
| RVERSION=`echo '${{ matrix.r_version }}' | sed 's/\([0-9]\.[0-9]\).*/\1/'` | |
| echo "r-version: $RVERSION" | |
| echo "r-version=$RVERSION" >> $GITHUB_OUTPUT | |
| SHA="${{github.event.pull_request.head.sha}}${{ github.sha }}" | |
| if [[ -z "$SHA" ]]; then | |
| SHA=${{ github.sha }} | |
| fi | |
| SHORT_SHA=${SHA:0:7} | |
| echo "sha: $SHORT_SHA" | |
| echo "sha=$SHORT_SHA" >> $GITHUB_OUTPUT | |
| - uses: actions/checkout@v4 | |
| if: steps.can-build.conclusion != 'skipped' | |
| - name: Log in to the Container registry | |
| if: steps.can-build.conclusion != 'skipped' | |
| uses: docker/login-action@v1 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Build Base | |
| if: steps.can-build.conclusion != 'skipped' | |
| uses: docker/build-push-action@v3 | |
| with: | |
| context: ${{ matrix.docker.workdir }} | |
| push: true | |
| tags: | | |
| ghcr.io/${{ github.repository }}:base-${{ steps.short.outputs.r-version }}-${{ matrix.docker.type }}${{ matrix.flavor.extra_base_tag }} | |
| build-args: | | |
| R_VERSION=${{ steps.short.outputs.r-version }} | |
| RELEASE=${{ matrix.docker.type }} | |
| SHINYCORECI_SHA=${{ matrix.flavor.shinycoreci_sha }} | |
| GITHUB_PAT=${{ secrets.GITHUB_TOKEN }} | |
| - name: Build SSO | |
| if: steps.can-build.conclusion != 'skipped' | |
| uses: docker/build-push-action@v2 | |
| with: | |
| context: "${{ matrix.docker.workdir }}_sso" | |
| push: true | |
| tags: | | |
| ghcr.io/${{ github.repository }}:sso-${{ steps.short.outputs.r-version }}-${{ matrix.docker.type }}${{ matrix.flavor.extra_base_tag }} | |
| build-args: | | |
| R_VERSION=${{ steps.short.outputs.r-version }} | |
| RELEASE=${{ matrix.docker.type }} | |
| EXTRA_BASE_TAG=${{ matrix.flavor.extra_base_tag }} | |
| - name: Build SSP | |
| if: steps.can-build.conclusion != 'skipped' | |
| uses: docker/build-push-action@v2 | |
| with: | |
| context: "${{ matrix.docker.workdir }}_ssp" | |
| push: true | |
| tags: | | |
| ghcr.io/${{ github.repository }}:ssp-${{ steps.short.outputs.r-version }}-${{ matrix.docker.type }}${{ matrix.flavor.extra_base_tag }} | |
| build-args: | | |
| R_VERSION=${{ steps.short.outputs.r-version }} | |
| RELEASE=${{ matrix.docker.type }} | |
| EXTRA_BASE_TAG=${{ matrix.flavor.extra_base_tag }} | |
| docker-cleanup: | |
| if: success() || failure() | |
| needs: [docker] | |
| runs-on: ubuntu-latest | |
| name: Cleanup images | |
| steps: | |
| # Inspiration: https://github.com/jcansdale-test/ghcr-delete-untagged-images/blob/36e56b47bfb6ee9208b4061959f6d0c615e3c5cc/.github/workflows/delete.yml | |
| - name: Delete untagged images | |
| uses: actions/github-script@v6 | |
| with: | |
| github-token: ${{ secrets.DOCKER_DELETE_IMAGES }} | |
| script: | | |
| // const response_list = await github.request("GET /orgs/rstudio/packages?package_type=container&visibility=public"); | |
| // console.log(JSON.stringify(response_list, null, " ")) | |
| let found = true | |
| // Don't try forever if something goes wrong | |
| let retryCount = 0 | |
| let n = 100 | |
| n = Math.min(100, n) // API has max of 100 | |
| while (found && retryCount < 10) { | |
| found = false | |
| retryCount += 1 | |
| // GET /orgs/{org}/packages/{package_type}/{package_name}/versions | |
| const response = await github.request("GET /orgs/rstudio/packages/container/shinycoreci/versions", | |
| { per_page: n } | |
| ); | |
| // console.log(JSON.stringify(response, null, " ")) | |
| console.log("\n\nRequest count: ", retryCount, "\nVersion count: ", response.data.length, "\n") | |
| for(version of response.data) { | |
| if (version.metadata.container.tags.length == 0) { | |
| console.log("delete " + version.id) | |
| // DELETE /orgs/{org}/packages/{package_type}/{package_name}/versions/{package_version_id} | |
| const deleteResponse = await github.request("DELETE /orgs/rstudio/packages/container/shinycoreci/versions/" + version.id, { }); | |
| console.log("status " + deleteResponse.status) | |
| if (deleteResponse.status == 204) { | |
| // We have less than `n` tags | |
| // If `n` versions are returned, then try again | |
| found = response.data.length == n | |
| } | |
| } | |
| } | |
| } |