push-kbs-client-to-ghcr.yml

name: Build and Push kbs-client

on:
  push:
    branches:
      - main

jobs:
  build_and_push:
    strategy:
      fail-fast: false
      matrix:
        arch:
          - x86_64
          - s390x
    env:
      RUSTC_VERSION: 1.76.0
    runs-on: ${{ matrix.arch == 'x86_64' && 'ubuntu-22.04' || 's390x' }}
    permissions:
      contents: read
      packages: write

    steps:
    - name: Check out code
      uses: actions/checkout@v4

    - name: Install Rust toolchain (${{ env.RUSTC_VERSION }})
      run: |
        rustup update --no-self-update ${{ env.RUSTC_VERSION }}
        rustup component add --toolchain ${{ env.RUSTC_VERSION }} rustc
        rustup default ${{ env.RUSTC_VERSION }}

    - name: Log in to ghcr.io
      uses: docker/login-action@v3
      with:
        registry: ghcr.io
        username: ${{ github.actor }}
        password: ${{ secrets.GITHUB_TOKEN }}

    - name: Build a statically linked kbs-client for ${{ matrix.arch }} linux
      working-directory: kbs
      run: |
        make cli-static-linux

    - name: Push to ghcr.io
      working-directory: target/${{ matrix.arch }}-unknown-linux-gnu/release
      run: |
        commit_sha=${{ github.sha }}
        oras push \
          ghcr.io/confidential-containers/staged-images/kbs-client:sample_only-${{ matrix.arch }}-linux-gnu-${commit_sha},latest-${{ matrix.arch }} \
          kbs-client
        if [ "$(uname -m)" = "x86_64" ]; then
          oras push ghcr.io/confidential-containers/staged-images/kbs-client:latest kbs-client
        fi