build.yml

name: Build

on:
  push:
    branches:
      - main
  pull_request:

env:
  DEFAULT_BASE_IMAGE: ubuntu:jammy

jobs:
  version:
    name: Check if version changed
    runs-on: ubuntu-latest
    outputs:
      push: ${{ steps.push.outputs.push }}
      version-changed: ${{ steps.version-metadata.outputs.changed }}
      new-version: ${{ steps.version-metadata.outputs.newVersion }}
    steps:
      - uses: actions/checkout@v4
      - uses: Quantco/ui-actions/version-metadata@v1
        id: version-metadata
        with:
          file: Dockerfile
          token: ${{ secrets.GITHUB_TOKEN }}
          version-extraction-override: 'regex:ARG PIXI_VERSION=(.*)'
      - name: Determine if pushing images
        id: push
        run: echo push=${{ steps.version-metadata.outputs.changed == 'true' && github.event_name == 'push' && github.ref_name == 'main' }} >> $GITHUB_OUTPUT

  build:
    needs: version
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write
    strategy:
      fail-fast: false
      matrix:
        base-image:
         - debian:bookworm-slim # 12
         - debian:bookworm # 12
         - debian:bullseye-slim # 11
         - debian:bullseye # 11
         - ubuntu:noble # 24.04
         - ubuntu:mantic # 23.10
         - ubuntu:jammy # 22.04
         - ubuntu:focal # 20.04
         - nvidia/cuda:12.3.1-base-ubuntu22.04
         - nvidia/cuda:12.3.1-base-ubuntu20.04
         - nvidia/cuda:12.2.2-base-ubuntu22.04
         - nvidia/cuda:12.2.2-base-ubuntu20.04
         - nvidia/cuda:12.1.1-base-ubuntu22.04
         - nvidia/cuda:12.1.1-base-ubuntu20.04
         - nvidia/cuda:11.8.0-base-ubuntu22.04
         - nvidia/cuda:11.8.0-base-ubuntu20.04
         - nvidia/cuda:11.7.1-base-ubuntu22.04
         - nvidia/cuda:11.7.1-base-ubuntu20.04
         - nvidia/cuda:11.6.2-base-ubuntu20.04
         - nvidia/cuda:11.4.3-base-ubuntu20.04
         - nvidia/cuda:11.3.1-base-ubuntu20.04
         - nvidia/cuda:11.2.2-base-ubuntu20.04
    steps:
    - name: Checkout source
      uses: actions/checkout@v4
    - name: Set image variables
      id: image-variables
      env:
        IMAGE: ${{ matrix.base-image }}
      run: |
        import os

        base_image = "${{ matrix.base-image }}"
        if base_image.startswith("nvidia/cuda"):
            code_names = {
                "22.04": "jammy",
                "20.04": "focal",
                "23.10": "mantic",
                "24.04": "noble",
            }
            ubuntu_version_number = base_image.split("-ubuntu")[-1]
            base_tag = base_image.split(":")[-1]
            cuda_version = base_tag.split("-")[0]
            tag = f"{code_names[ubuntu_version_number]}-cuda-{cuda_version}"
            platforms = "linux/amd64,linux/arm64"
        else:
            tag = base_image.split(":")[-1]
            platforms = "linux/amd64,linux/arm64"
        is_default = "true" if base_image == "${{ env.DEFAULT_BASE_IMAGE }}" else "false"

        GITHUB_OUTPUT = os.environ["GITHUB_OUTPUT"]
        with open(GITHUB_OUTPUT, "a") as f:
            f.write(f"tag={tag}\n")
            f.write(f"platforms={platforms}\n")
            f.write(f"is-default={is_default}\n")
      shell: python
    - name: Get docker metadata
      id: metadata
      uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81
      with:
        images: |-
          ghcr.io/prefix-dev/pixi
        flavor: latest=false
        # latest
        # base-image
        # major.minor.patch
        # major.minor.patch-base-image
        tags: |
            type=raw,value=latest,priority=1000,enable=${{ steps.image-variables.outputs.is-default }}
            type=raw,value=${{ steps.image-variables.outputs.tag }},priority=900
            type=semver,pattern={{version}},enable=${{ steps.image-variables.outputs.is-default }},value=${{ needs.version.outputs.new-version }},priority=800
            type=semver,pattern={{version}}-${{ steps.image-variables.outputs.tag }},value=${{ needs.version.outputs.new-version }},priority=500
    - name: Setup docker buildx
      uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349
    - name: Login to GHCR
      uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567
      with:
        registry: ghcr.io
        username: ${{ github.actor }}
        password: ${{ secrets.GITHUB_TOKEN }}
    - name: Build Docker images
      id: build
      uses: docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75
      with:
        # provenance: false is needed to avoid unkown/unknown os/arch on ghcr
        # see: https://github.com/docker/build-push-action/issues/820
        provenance: false
        platforms: ${{ steps.image-variables.outputs.platforms }}
        push: ${{ needs.version.outputs.push == 'true' }}
        build-args: |-
          BASE_IMAGE=${{ matrix.base-image }}
        tags: ${{ steps.metadata.outputs.tags }}
        labels: ${{ steps.metadata.outputs.labels }}
    - uses: actions/upload-artifact@v4
      with:
        name: ${{ steps.image-variables.outputs.tag }}
        path: ${{ steps.metadata.outputs.bake-file }}
    - name: Run tests
      # buildx does not support outputting the image so we need to pull it and run tests
      if: needs.version.outputs.push == 'true'
      run: |
        docker images
        docker run --rm ghcr.io/prefix-dev/pixi:${{ needs.version.outputs.new-version }}-${{ steps.image-variables.outputs.tag }} pixi --version
        docker run --rm ghcr.io/prefix-dev/pixi:${{ needs.version.outputs.new-version }}-${{ steps.image-variables.outputs.tag }} sh -c "mkdir /app && cd /app && pixi init && pixi add python && pixi run python --version"
    - name: Image digest
      run: echo ${{ steps.build.outputs.digest }}

  build-windows:
    needs: version
    runs-on: windows-latest
    permissions:
      contents: read
      packages: write
    strategy:
      fail-fast: false
      matrix:
        include:
          - dockerfile: Dockerfile.windows
            tag: windows-servercore
          - dockerfile: Dockerfile.windows.nano
            tag: windows-nano
    steps:
    - name: Checkout source
      uses: actions/checkout@v4

    - name: Login to GHCR
      uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567
      with:
        registry: ghcr.io
        username: ${{ github.actor }}
        password: ${{ secrets.GITHUB_TOKEN }}

    - name: Build and push Windows image
      shell: powershell
      env:
        TAG: ${{ needs.version.outputs.new-version }}-${{ matrix.tag }}
      run: |
        docker build `
          --file ${{ matrix.dockerfile }} `
          --tag ghcr.io/prefix-dev/pixi:${{ matrix.tag }} `
          --tag ghcr.io/prefix-dev/pixi:$env:TAG `
          .
        
        if ("${{ needs.version.outputs.push }}" -eq "true") {
          docker push ghcr.io/prefix-dev/pixi:${{ matrix.tag }}
          docker push ghcr.io/prefix-dev/pixi:$env:TAG
        }

    - name: Run tests
      if: needs.version.outputs.push == 'true'
      shell: cmd
      run: |
        docker run --rm ghcr.io/prefix-dev/pixi:${{ needs.version.outputs.new-version }}-${{ matrix.tag }} pixi --version
        docker run --rm ghcr.io/prefix-dev/pixi:${{ needs.version.outputs.new-version }}-${{ matrix.tag }} cmd /C "mkdir app && cd app && pixi init && pixi add python && pixi run python --version"

  release:
    needs: [version, build, build-windows]
    runs-on: ubuntu-22.04
    permissions:
      contents: write
    if: needs.version.outputs.push == 'true'
    steps:
      - uses: actions/checkout@v4
      - name: Push ${{ needs.version.outputs.new-version }} tag
        run: |
          git tag ${{ needs.version.outputs.new-version }}
          git push origin ${{ needs.version.outputs.new-version }}
      - name: Create release
        uses: softprops/action-gh-release@v2
        with:
          generate_release_notes: true
          tag_name: ${{ needs.version.outputs.new-version }}