docker-build.yml

name: Docker Build & Release

on:
  push:
    branches:
      - develop
    paths-ignore:
      - ".github/**"
      - "src/Readarr.Api.*/openapi.json"
  workflow_dispatch:

env:
  DOTNET_VERSION: "6.0.x"
  NODE_VERSION: "20.x"

jobs:
  build_meta:
    runs-on: ubuntu-latest
    outputs:
      readarr_version: ${{ steps.semantic.outputs.new_release_version }}
      should_release: ${{ steps.semantic.outputs.new_release_published }}
      release_type: ${{ steps.semantic.outputs.release_type }}
    steps:
      - name: Checkout Code
        uses: actions/checkout@v4
        with:
          fetch-depth: 100
          fetch-tags: true

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: ${{ env.NODE_VERSION }}

      - name: Semantic Release
        id: semantic
        uses: cycjimmy/semantic-release-action@v4
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          semantic_version: 21
          branches: |
            [
              'develop'
            ]

  build_docker_image:
    runs-on: ubuntu-latest
    needs: build_meta
    if: needs.build_meta.outputs.should_release == 'true'
    outputs:
      image_repo: ${{ steps.set_lowercase_repo.outputs.image_repo }}
      digest: ${{ steps.build_and_push.outputs.digest }}
    permissions:
      contents: read
      packages: write

    steps:
      - name: Checkout Code
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Set Lowercase Repository Name
        id: set_lowercase_repo
        run: |
          LOWERCASE_REPO=$(echo "${{ github.repository }}" | tr '[:upper:]' '[:lower:]')
          echo "image_repo=${LOWERCASE_REPO}" >> $GITHUB_OUTPUT
          echo "IMAGE_REPO=${LOWERCASE_REPO}" >> $GITHUB_ENV

      - name: Build and Push Docker Image to GHCR
        uses: docker/build-push-action@v5
        id: build_and_push
        with:
          context: .
          file: ./Dockerfile
          push: true
          tags: |
            ghcr.io/${{ env.IMAGE_REPO }}:latest
            ghcr.io/${{ env.IMAGE_REPO }}:${{ needs.build_meta.outputs.readarr_version }}
          platforms: linux/amd64
          build-args: |
            VERSION=${{ needs.build_meta.outputs.readarr_version }}
            VENDOR=${{ github.repository_owner }}
            BRANCH=develop
          labels: |
            org.opencontainers.image.source=https://github.com/${{ github.repository }}
            org.opencontainers.image.version=${{ needs.build_meta.outputs.readarr_version }}
            org.opencontainers.image.revision=${{ github.sha }}

  build_and_upload_release_assets:
    runs-on: ubuntu-latest
    needs: build_meta
    if: needs.build_meta.outputs.should_release == 'true'
    permissions:
      contents: write
    steps:
      - name: Checkout Code
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Setup .NET SDK
        uses: actions/setup-dotnet@v4
        with:
          dotnet-version: ${{ env.DOTNET_VERSION }}

      - name: Build Release Artifacts
        run: |
          ./build.sh --backend --frontend --packages
        env:
          READARRVERSION: ${{ needs.build_meta.outputs.readarr_version }}

      - name: Create linux-musl-x64 tarball
        run: |
          tar -czf Readarr.develop.${{ needs.build_meta.outputs.readarr_version }}.linux-musl-x64.tar.gz -C _artifacts/linux-musl-x64/net6.0 Readarr

      - name: Compute SHA256 hash
        run: |
          sha256sum Readarr.develop.${{ needs.build_meta.outputs.readarr_version }}.linux-musl-x64.tar.gz > Readarr.develop.${{ needs.build_meta.outputs.readarr_version }}.linux-musl-x64.tar.gz.sha256

      - name: Get Release
        id: get_release
        run: |
          echo "upload_url=$(gh release view v${{ needs.build_meta.outputs.readarr_version }} --json uploadUrl --jq .uploadUrl)" >> $GITHUB_OUTPUT
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Upload Release Asset (tarball)
        uses: actions/upload-release-asset@v1
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          upload_url: ${{ steps.get_release.outputs.upload_url }}
          asset_path: Readarr.develop.${{ needs.build_meta.outputs.readarr_version }}.linux-musl-x64.tar.gz
          asset_name: Readarr.develop.${{ needs.build_meta.outputs.readarr_version }}.linux-musl-x64.tar.gz
          asset_content_type: application/gzip

      - name: Upload Release Asset (sha256)
        uses: actions/upload-release-asset@v1
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          upload_url: ${{ steps.get_release.outputs.upload_url }}
          asset_path: Readarr.develop.${{ needs.build_meta.outputs.readarr_version }}.linux-musl-x64.tar.gz.sha256
          asset_name: Readarr.develop.${{ needs.build_meta.outputs.readarr_version }}.linux-musl-x64.tar.gz.sha256
          asset_content_type: text/plain

  attenstation:
    runs-on: ubuntu-latest
    needs: build_docker_image
    if: needs.build_docker_image.outputs.digest != ''
    permissions:
      id-token: write
      contents: read
      attestations: write
      packages: write

    steps:
      - name: Log in to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Generate docker image attestation
        uses: actions/attest-build-provenance@v2
        with:
          subject-name: ghcr.io/${{ needs.build_docker_image.outputs.image_repo }}
          subject-digest: ${{ needs.build_docker_image.outputs.digest }}
          push-to-registry: true