pr-check-ubi10.yaml

#
# Copyright (c) 2021-2025 Red Hat, Inc.
# This program and the accompanying materials are made
# available under the terms of the Eclipse Public License 2.0
# which is available at https://www.eclipse.org/legal/epl-2.0/
#
# SPDX-License-Identifier: EPL-2.0
#

name: Pull Request Check UBI 10

# Trigger the workflow on pull request
on: [pull_request]

env:
  # Use repository variable if set, otherwise fallback to default registry
  REGISTRY: ${{ vars.REGISTRY || 'quay.io/devfile' }}

jobs:
  build-base-image:
    name: Build base image (UBI10)
    strategy:
      fail-fast: false
      matrix:
        include:
          - name: amd64-build
            runner: ubuntu-22.04
            arch: amd64
          - name: arm64-build
            runner: ubuntu-22.04-arm
            arch: arm64
          - name: ppc64le-build
            runner: ubuntu-22.04
            arch: ppc64le
    runs-on: ${{ matrix.runner }}
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          ref: ${{ github.event.pull_request.head.sha }}
      - name: Set arch environment variable
        run: echo "arch=${{ matrix.arch }}" >> $GITHUB_ENV
      - name: Free runner space
        run: sudo rm -rf /usr/local/lib/android
      - name: Cleanup docker images
        run: docker system prune -af
      - name: Add expiration label to base Dockerfile (UBI10)
        run: sed -i '/^FROM/a LABEL quay.expires-after=4w' base/ubi10/Dockerfile
      - name: Set up QEMU
        uses: docker/setup-qemu-action@v2
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
        with:
          driver: docker-container
          platforms: linux/amd64,linux/arm64,linux/ppc64le
      - name: Login to Registry
        uses: docker/login-action@v3
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ secrets.QUAY_USERNAME }}
          password: ${{ secrets.QUAY_PASSWORD }}
      - name: Build base image (UBI10)
        run: |
            echo "=========================================="
            echo "Building UBI10 base image for ${{env.arch}}"
            echo "=========================================="
            cd base/ubi10 && docker buildx build \
            --platform linux/${{env.arch}} \
            --progress=plain \
            --push \
            -t ${{ env.REGISTRY }}/base-developer-image:${{env.arch}}-ubi10-pr-${{github.event.number}} .
      - name: Verify base image is available (UBI10)
        run: |
            echo "Verifying base image is available in registry..."
            for i in {1..5}; do
              if docker manifest inspect ${{ env.REGISTRY }}/base-developer-image:${{env.arch}}-ubi10-pr-${{github.event.number}} >/dev/null 2>&1; then
                echo "Base image is available!"
                exit 0
              fi
              echo "Waiting for image to be available... ($i/5)"
              sleep 10
            done
            echo "ERROR: Base image not available after 5 attempts"
            exit 1
      - name: Display docker images
        run: docker images


  build-udi:
    name: Build udi (UDI10)
    strategy:
      fail-fast: false
      matrix:
        include:
          - name: amd64-build
            runner: ubuntu-22.04
            arch: amd64
          - name: arm64-build
            runner: ubuntu-22.04-arm
            arch: arm64
          - name: ppc64le-build
            runner: ubuntu-22.04
            arch: ppc64le
    runs-on: ${{ matrix.runner }}
    needs: build-base-image
    steps:
      - name: Set arch environment variable
        run: echo "arch=${{ matrix.arch }}" >> $GITHUB_ENV
      - name: Checkout
        uses: actions/checkout@v4
        with:
          ref: ${{ github.event.pull_request.head.sha }}
      - name: Free runner space
        run: sudo rm -rf /usr/local/lib/android
      - name: Cleanup docker images
        run: docker system prune -af
      - name: Set up QEMU
        uses: docker/setup-qemu-action@v2
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
        with:
          driver: docker-container
          platforms: linux/amd64,linux/arm64,linux/ppc64le
      - name: Login to Registry
        uses: docker/login-action@v3
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ secrets.QUAY_USERNAME }}
          password: ${{ secrets.QUAY_PASSWORD }}
      - name: Verify base image exists before UDI build (UDI10)
        run: |
            echo "Verifying base image exists in registry..."
            docker manifest inspect ${{ env.REGISTRY }}/base-developer-image:${{env.arch}}-ubi10-pr-${{github.event.number}} || {
              echo "ERROR: Base image not found: ${{ env.REGISTRY }}/base-developer-image:${{env.arch}}-ubi10-pr-${{github.event.number}}"
              exit 1
            }
            echo "Base image verified successfully!"
      - name: Update UDI Dockerfile (UDI10)
        run: sed "s|quay.io/devfile/base-developer-image:ubi10-latest|${{ env.REGISTRY }}/base-developer-image:${{env.arch}}-ubi10-pr-${{github.event.number}}|" -i "universal/ubi10/Dockerfile"
      - name: Add expiration label to UDI Dockerfile (UDI10)
        run: sed -i '/^FROM/a LABEL quay.expires-after=4w' universal/ubi10/Dockerfile
      - name: Build udi (UDI10)
        run: |
          echo "=========================================="
          echo "Building UDI10 image for ${{env.arch}}"
          echo "=========================================="
          cd universal/ubi10 && docker buildx build \
            --platform linux/${{env.arch}} \
            --progress=plain \
            --push \
            -t ${{ env.REGISTRY }}/universal-developer-image:${{env.arch}}-ubi10-pr-${{github.event.number}} .

  publish-base-image:
    name: Publish base image (UBI10)
    runs-on: ubuntu-22.04
    needs: build-base-image
    steps:
      - name: Login to Registry
        uses: docker/login-action@v3
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ secrets.QUAY_USERNAME }}
          password: ${{ secrets.QUAY_PASSWORD }}
      - name: Publish UBI10 base image manifest
        run: |
          echo "=========================================="
          echo "Publishing UBI10 base image manifest"
          echo "=========================================="

          docker buildx imagetools create \
            -t ${{ env.REGISTRY }}/base-developer-image:ubi10-pr-${{github.event.number}} \
            ${{ env.REGISTRY }}/base-developer-image:amd64-ubi10-pr-${{github.event.number}} \
            ${{ env.REGISTRY }}/base-developer-image:arm64-ubi10-pr-${{github.event.number}} \
            ${{ env.REGISTRY }}/base-developer-image:ppc64le-ubi10-pr-${{github.event.number}}

          docker buildx imagetools inspect \
            ${{ env.REGISTRY }}/base-developer-image:ubi10-pr-${{github.event.number}}

  publish-udi:
    name: Publish udi (UDI10)
    runs-on: ubuntu-22.04
    needs: build-udi
    steps:
      - name: Login to Registry
        uses: docker/login-action@v3
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ secrets.QUAY_USERNAME }}
          password: ${{ secrets.QUAY_PASSWORD }}
      - name: Publish UDI10 manifest
        run: |
          echo "=========================================="
          echo "Publishing UDI10 manifest"
          echo "=========================================="

          docker buildx imagetools create \
            -t ${{ env.REGISTRY }}/universal-developer-image:ubi10-pr-${{github.event.number}} \
            ${{ env.REGISTRY }}/universal-developer-image:amd64-ubi10-pr-${{github.event.number}} \
            ${{ env.REGISTRY }}/universal-developer-image:arm64-ubi10-pr-${{github.event.number}} \
            ${{ env.REGISTRY }}/universal-developer-image:ppc64le-ubi10-pr-${{github.event.number}}

          docker buildx imagetools inspect \
            ${{ env.REGISTRY }}/universal-developer-image:ubi10-pr-${{github.event.number}}
      - name: 'Comment PR'
        uses: actions/github-script@v7
        with:
          script: |
            const { repo: { owner, repo } } = context;
            await github.rest.issues.createComment({
               issue_number: ${{github.event.number}},
               owner: context.repo.owner,
               repo: context.repo.repo,
               body: `Pull Request UBI 10 images published ✨\n\nBase: [${{ env.REGISTRY }}/base-developer-image:ubi10-pr-${{github.event.number}}](https://${{ env.REGISTRY }}/base-developer-image:ubi10-pr-${{github.event.number}})\nUDI: [${{ env.REGISTRY }}/universal-developer-image:ubi10-pr-${{github.event.number}}](https://${{ env.REGISTRY }}/universal-developer-image:ubi10-pr-${{github.event.number}})`
             })