publish-docker.yml

# SPDX-FileCopyrightText: 2025 Nextcloud GmbH and Nextcloud contributors
# SPDX-License-Identifier: AGPL-3.0-or-later

name: Publish Docker Images

on:
  push:
    tags:
      - v*
  workflow_dispatch:

permissions:
  packages: write
  contents: read

jobs:
  push_to_registry:
    name: Build ${{ matrix.variant }} image
    runs-on: ubuntu-22.04
    if: ${{ github.repository_owner == 'nextcloud' }}
    strategy:
      fail-fast: false
      matrix:
        variant: [cuda, rocm, cpu]
    steps:
      - name: Set app env
        run: |
          # Split and keep last
          echo "APP_NAME=${GITHUB_REPOSITORY##*/}" >> $GITHUB_ENV
          echo "APP_VERSION=${GITHUB_REF##*/}" >> $GITHUB_ENV

      - name: Checkout
        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
          path: ${{ env.APP_NAME }}

      - name: Read package.json node and npm engines version
        uses: skjnldsv/read-package-engines-version-actions@06d6baf7d8f41934ab630e97d9e6c0bc9c9ac5e4 # v3
        id: versions
        # Continue if no package.json
        continue-on-error: true
        with:
          path: ${{ env.APP_NAME }}
          fallbackNode: '^20'
          fallbackNpm: '^10'

      - name: Set up node ${{ steps.versions.outputs.nodeVersion }}
        # Skip if no package.json
        if: ${{ steps.versions.outputs.nodeVersion }}
        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
        with:
          node-version: ${{ steps.versions.outputs.nodeVersion }}

      - name: Set up npm ${{ steps.versions.outputs.npmVersion }}
        # Skip if no package.json
        if: ${{ steps.versions.outputs.npmVersion }}
        run: npm i -g 'npm@${{ steps.versions.outputs.npmVersion }}'

      - name: Build ${{ env.APP_NAME }}
        # Skip if no package.json
        if: ${{ steps.versions.outputs.nodeVersion }}
        env:
          CYPRESS_INSTALL_BINARY: 0
        run: |
          cd ${{ env.APP_NAME }}
          npm ci
          npm run build --if-present

      - name: Set up QEMU
        uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0

      - name: Log in to GitHub Container Registry
        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Available platforms
        run: echo ${{ steps.buildx.outputs.platforms }}

      - name: Install xmlstarlet
        run: sudo apt-get update && sudo apt-get install -y xmlstarlet

      - name: Extract version from XML
        id: extract_version
        run: |
          cd ${{ env.APP_NAME }}
          VERSION=$(xmlstarlet sel -t -v "//image-tag" appinfo/info.xml)
          echo "VERSION=$VERSION" >> $GITHUB_ENV

      - name: Log version
        run: |
          echo "Extracted version: ${{ env.VERSION }}"

      # AppAPI selects ExApp images by tag suffix per the deploy daemon's computeDevice:
      # CPU is the unsuffixed default (`<image>:<version>`), CUDA is `<image>:<version>-cuda`,
      # ROCm is `<image>:<version>-rocm`.
      - name: Compute image tags
        id: tags
        run: |
          if [ "${{ matrix.variant }}" = "cpu" ]; then
            SUFFIX=""
          else
            SUFFIX="-${{ matrix.variant }}"
          fi
          {
            echo "tags<<EOF"
            echo "ghcr.io/nextcloud/${{ env.APP_NAME }}:${{ env.VERSION }}${SUFFIX}"
            echo "ghcr.io/nextcloud/${{ env.APP_NAME }}:latest${SUFFIX}"
            echo "EOF"
          } >> "$GITHUB_OUTPUT"

      - name: Build container image
        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
        with:
          push: true
          context: ./${{ env.APP_NAME }}
          file: ./${{ env.APP_NAME }}/Dockerfile.${{ matrix.variant }}
          platforms: linux/amd64
          tags: ${{ steps.tags.outputs.tags }}