Advanced

Signed-off-by: Andreas Heinrich <[email protected]>

.github/workflows/deploy-docker-images.yml

@@ -108,6 +108,8 @@ jobs:
       depends_on_paths: |
         ${{ needs.env-setup.outputs.path_to_deploy_single_docker_image_workflow }}
         ${{ needs.env-setup.outputs.path_to_deploy_docker_images_workflow }}
+      build_args: |
+        BASE_IMAGE_TAG=${{ needs.run-env-base.outputs.one_image_tag }}
         
   dev-env-base:
     needs:
@@ -129,6 +131,8 @@ jobs:
       depends_on_paths: |
         ${{ needs.env-setup.outputs.path_to_deploy_single_docker_image_workflow }}
         ${{ needs.env-setup.outputs.path_to_deploy_docker_images_workflow }}
+      build_args: |
+        BASE_IMAGE_TAG=${{ needs.build-env-base.outputs.one_image_tag }}
   build-kit:
     needs:
       - env-setup
@@ -149,6 +153,8 @@ jobs:
       depends_on_paths: |
         ${{ needs.env-setup.outputs.path_to_deploy_single_docker_image_workflow }}
         ${{ needs.env-setup.outputs.path_to_deploy_docker_images_workflow }}
+      build_args: |
+        BASE_IMAGE_TAG=${{ needs.build-env-base.outputs.one_image_tag }}
   # Include deprecated images for backwards compatibility
   deprecated-everest-clang-format:
     if: ${{ needs.env-setup.outputs.build_deprecated_images == 'true' }}

.github/workflows/deploy-single-docker-image.yml

@@ -44,10 +44,20 @@ on:
         description: 'Directories that need to be checked for changes before building this image'
         required: false
         type: string
+      build_args:
+        description: 'Build arguments for the Dockerfile'
+        required: false
+        type: string
     outputs:
       rebuild:
         description: 'Whether the image is rebuilt or not'
         value: ${{ jobs.check.outputs.rebuild }}
+      image_tags:
+        description: 'Tags of the deployed image'
+        value: ${{ jobs.build-and-push.outputs.image_tags }}
+      one_image_tag:
+        description: 'One tag of the deployed image'
+        value: ${{ jobs.build-and-push.outputs.one_image_tag }}
     secrets:
       SA_GITHUB_PAT:
         description: 'Github PAT with access to the repository'
@@ -146,6 +156,9 @@ jobs:
     needs: check
     if: ${{ needs.check.outputs.rebuild == 'true' || inputs.force_rebuild }}
     runs-on: ubuntu-22.04
+    outputs:
+      image_tags: ${{ steps.meta.outputs.tags }}
+      one_image_tag: ${{ steps.extract-one-tag.outputs.tag }}
     steps:
     - name: Checkout Dockerfile
       uses: actions/checkout@v3
@@ -178,6 +191,7 @@ jobs:
       id: meta
       uses: docker/metadata-action@v3
       with:
+        sep-tags: ','
         images: |
           ${{ inputs.docker_registry }}/${{ github.repository_owner }}/${{ inputs.image_name }}
     - name: Set up QEMU
@@ -204,3 +218,31 @@ jobs:
         platforms: ${{ steps.parse-platforms.outputs.platforms }}
         cache-from: type=gha
         cache-to: type=gha,mode=max
+        build-args: ${{ inputs.build_args }}
+    - name: Extract one image tag
+      id: extract-one-tag
+      shell: python3 {0}
+      run: |
+        import os
+        tags = "${{ steps.meta.outputs.tags }}".split(",")
+        if len(tags) == 0:
+          print("No tags found!❌")
+          exit(1)
+        tag = None
+        for t in tags:
+          if t.startswith("v"):
+            tag = t
+            break
+        if tag is None:
+          for t in tags:
+            if not t.startswith("latest"):
+              tag = t
+              break
+        if tag is None:
+          tag = tags[0]
+        if tag is None:
+          print("No tag found!❌")
+          exit(1)
+        with open(os.environ["GITHUB_OUTPUT"], "a") as f:
+          f.write(f"tag={tag}\n")
+        print(f"Set tag={tag}")

docker/images/build-env-base/Dockerfile

@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1
-# LTODO: pin version
-FROM ghcr.io/everest/everest-ci/run-env-base:refactor-docker-images
+ARG BASE_IMAGE_TAG=latest
+FROM ghcr.io/everest/everest-ci/run-env-base:${BASE_IMAGE_TAG}
 
 RUN apt update \
     && apt install --no-install-recommends -y \

docker/images/build-kit/Dockerfile

@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1
-# LTODO: pin version
-FROM ghcr.io/everest/everest-ci/build-env-base:refactor-docker-images
+ARG BASE_IMAGE_TAG=latest
+FROM ghcr.io/everest/everest-ci/build-env-base:${BASE_IMAGE_TAG}
 
 
 ENV WORKSPACE_PATH=/workspace

docker/images/dev-env-base/Dockerfile

@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1
-# LTODO: pin version
-FROM ghcr.io/everest/everest-ci/build-env-base:refactor-docker-images
+ARG BASE_IMAGE_TAG=latest
+FROM ghcr.io/everest/everest-ci/build-env-base:${BASE_IMAGE_TAG}
 
 ARG USERNAME=docker
 ARG USER_UID=1000