docker.yml

---
name: docker

# Run on push and once a week to keep the images from bit-rotting and to
# identify issues while no commits are being pushed.
on:
  push:
    branches: [master]
  pull_request:
    branches: [master]
  schedule:
    - cron: "52 2 * * 0"

# Cancel old PR builds when pushing new commits.
concurrency:
  group: docker-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: true

env:
  REGISTRY: ghcr.io
  NAMESPACE: toktok

jobs:
  build:
    strategy:
      fail-fast: false
      matrix:
        image:
          - alpine-s390x
          - bazel
          - compcert
          - doxygen
          - flutter-web
          - frama-c
          - freebsd
          - haskell
          - pkgsrc
        include:
          - image: bazel
            has_base: true
    runs-on: ubuntu-latest
    steps:
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
      - name: Login to GitHub Container Registry
        if: ${{ github.event_name == 'push' }}
        uses: docker/login-action@v3
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      - name: Checkout code
        uses: actions/checkout@v6
      - name: Build base image
        if: ${{ matrix.has_base }}
        run: |
          cd ${{ matrix.image }} && ./build.sh
      - name: Build and push
        uses: docker/build-push-action@v6
        with:
          context: "${{ matrix.image }}"
          build-contexts: ${{ matrix.has_base && format('base=oci-layout://{0}/layers:base', matrix.image) || '' }}
          tags: ${{ env.REGISTRY }}/${{ env.NAMESPACE }}/${{ matrix.image }}:latest
          cache-from: type=registry,ref=${{ env.REGISTRY }}/${{ env.NAMESPACE }}/${{ matrix.image }}:latest
          cache-to: type=inline
          push: ${{ github.event_name == 'push' }}

  buildfarm:
    strategy:
      matrix:
        image: [server, worker]
    runs-on: ubuntu-latest
    steps:
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
      - name: Login to GitHub Container Registry
        if: ${{ github.event_name == 'push' }}
        uses: docker/login-action@v3
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      - name: Build and push
        uses: docker/build-push-action@v5
        with:
          context: "{{defaultContext}}:buildfarm"
          file: ${{ matrix.image }}.Dockerfile
          tags: ${{ env.REGISTRY }}/${{ env.NAMESPACE }}/buildfarm-${{ matrix.image }}:latest
          cache-from: type=registry,ref=${{ env.REGISTRY }}/${{ env.NAMESPACE }}/buildfarm-${{ matrix.image }}:latest
          cache-to: type=inline
          push: ${{ github.event_name == 'push' }}

  qtox-host-qt:
    strategy:
      fail-fast: true
      matrix:
        version: [6.2.4, 6.8.1]
    runs-on: ubuntu-latest
    steps:
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
      - name: Login to GitHub Container Registry
        if: ${{ github.event_name == 'push' }}
        uses: docker/login-action@v3
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      - name: Checkout code
        uses: actions/checkout@v6
      - name: Build and push
        uses: docker/build-push-action@v6
        with:
          context: "{{defaultContext}}:qtox"
          file: "docker/Dockerfile.host-qt"
          build-args: |
            QT_VERSION=${{ matrix.version }}
          tags: ${{ env.REGISTRY }}/${{ env.NAMESPACE }}/qtox:host-qt_${{ matrix.version }}
          cache-from: type=registry,ref=${{ env.REGISTRY }}/${{ env.NAMESPACE }}/qtox:host-qt_${{ matrix.version }}
          cache-to: type=inline
          push: ${{ github.event_name == 'push' }}

  qtox:
    # Only windows needs it, but this dependency doesn't harm much, as host-qt
    # doesn't get changed often.
    needs: [qtox-host-qt]
    strategy:
      fail-fast: false
      matrix:
        image:
          - alpine
          - alpine-appimage
          - alpine-static
          - debian
          - fedora
          - flatpak-builder
          - ubuntu-lts
          - wasm-builder
          - windows-builder.i686
          - windows-builder.x86_64
        include:
          - image: windows-builder.i686
            file: windows-builder
            args: |
              ARCH=i686
              WINEARCH=win32
          - image: windows-builder.x86_64
            file: windows-builder
            args: |
              ARCH=x86_64
              WINEARCH=win64
    runs-on: ubuntu-latest
    steps:
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
      - name: Login to GitHub Container Registry
        if: ${{ github.event_name == 'push' }}
        uses: docker/login-action@v3
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      - name: Checkout code
        uses: actions/checkout@v6
      - name: Build and push
        uses: docker/build-push-action@v6
        with:
          context: "{{defaultContext}}:qtox"
          file: "docker/Dockerfile.${{ matrix.file || matrix.image }}"
          build-args: ${{ matrix.args }}
          tags: ${{ env.REGISTRY }}/${{ env.NAMESPACE }}/qtox:${{ matrix.image }}
          cache-from: type=registry,ref=${{ env.REGISTRY }}/${{ env.NAMESPACE }}/qtox:${{ matrix.image }}
          cache-to: type=inline
          push: ${{ github.event_name == 'push' }}

  qtox-android:
    needs: [qtox-host-qt]
    strategy:
      fail-fast: true
      matrix:
        arch: [armeabi-v7a, arm64-v8a]
        build_type: [debug, release]
        version: [6.2.4, 6.8.1]
        include:
          - version: 6.2.4
            ndk_version: 21.3.6528147
            android_api: 24
          - version: 6.8.1
            ndk_version: 26.1.10909125
            android_api: 26
          - arch: armeabi-v7a
            abi_args: |
              ANDROID_ABI=armeabi-v7a
              ANDROID_FFMPEG_ABI=armv7a
              ANDROID_OPENSSL_ABI=arm
              ANDROID_OPENSSL_ASM=-no-asm
              ANDROID_TRIPLE=armv7a-linux-androideabi
              ANDROID_VPX_ABI=armv7-android-gcc
          - arch: arm64-v8a
            abi_args: |
              ANDROID_ABI=arm64-v8a
              ANDROID_FFMPEG_ABI=arm64
              ANDROID_OPENSSL_ABI=arm64
              ANDROID_OPENSSL_ASM=
              ANDROID_TRIPLE=aarch64-linux-android
              ANDROID_VPX_ABI=arm64-android-gcc
    runs-on: ubuntu-latest
    steps:
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
      - name: Login to GitHub Container Registry
        if: ${{ github.event_name == 'push' }}
        uses: docker/login-action@v3
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      - name: Checkout code
        uses: actions/checkout@v6
      - name: Build and push
        uses: docker/build-push-action@v6
        with:
          context: "{{defaultContext}}:qtox"
          file: "docker/Dockerfile.android-builder"
          build-args: |
            ${{ matrix.abi_args }}
            ANDROID_API=${{ matrix.android_api }}
            NDK_VERSION=${{ matrix.ndk_version }}
            QT_BUILD_TYPE=${{ matrix.build_type }}
            QT_VERSION=${{ matrix.version }}
          tags: ${{ env.REGISTRY }}/${{ env.NAMESPACE }}/qtox:android-builder.${{ matrix.arch }}.${{ matrix.build_type }}_${{ matrix.version }}
          cache-from: type=registry,ref=${{ env.REGISTRY }}/${{ env.NAMESPACE }}/qtox:android-builder.${{ matrix.arch }}.${{ matrix.build_type }}_${{ matrix.version }}
          cache-to: type=inline
          push: ${{ github.event_name == 'push' }}

  update-nightly-tag:
    runs-on: ubuntu-24.04
    permissions:
      contents: write
    steps:
      - uses: actions/checkout@v6
      - name: Move nightly tag to head for nightly release
        if: github.event_name == 'push' && github.ref == 'refs/heads/master'
        run: git tag -f nightly && git push origin nightly -f

  qt-static-macos:
    needs: [update-nightly-tag]
    strategy:
      matrix:
        arch: [arm64, x86_64]
        macos: ["10.15", "12.0"]
    runs-on: ${{ matrix.arch == 'arm64' && 'macos-14' || 'macos-15-intel' }}
    permissions:
      contents: write
    steps:
      - uses: actions/checkout@v6
      - name: Cache Qt
        id: cache-qt
        uses: actions/cache@v5
        with:
          path: |
            /Users/runner/work/deps/qt
          key: ${{ github.job }}-${{ matrix.arch }}-${{ matrix.macos }}-qt
      - name: Homebrew dependencies to build dependencies
        run: brew bundle --file qtox/deps/Brewfile-static
      - name: Build Qt
        if: steps.cache-qt.outputs.cache-hit != 'true'
        run: qtox/deps/local_install_deps.sh
          --arch ${{ matrix.arch }}
          --macos-version ${{ matrix.macos }}
          --dep-file qtox/deps/qt.depfile
          --dep-prefix /Users/runner/work/deps
      - name: Build tarball
        run: tar -zcf qt-static-macos-${{ matrix.arch }}-${{ matrix.macos }}.tar.gz -C /Users/runner/work/deps qt
      - name: Upload artifact
        uses: actions/upload-artifact@v6
        with:
          name: qt-static-macos-${{ matrix.arch }}-${{ matrix.macos }}-qt
          path: qt-static-macos-${{ matrix.arch }}-${{ matrix.macos }}.tar.gz
      - name: Upload tarball to nightly release
        if: github.event_name == 'push'
        uses: ncipollo/release-action@v1
        with:
          allowUpdates: true
          tag: nightly
          omitBodyDuringUpdate: true
          omitNameDuringUpdate: true
          prerelease: true
          replacesArtifacts: true
          artifacts: qt-static-macos-${{ matrix.arch }}-${{ matrix.macos }}.tar.gz

  qt-static-ios:
    needs: [update-nightly-tag, qt-static-macos]
    strategy:
      matrix:
        arch: [ios-arm64, iphonesimulator-arm64, iphonesimulator-x86_64]
        include:
          - arch: ios-arm64
            host_arch: arm64
          - arch: iphonesimulator-arm64
            host_arch: arm64
          - arch: iphonesimulator-x86_64
            host_arch: x86_64
    runs-on: ${{ matrix.host_arch == 'arm64' && 'macos-14' || 'macos-15-intel' }}
    permissions:
      contents: write
    steps:
      - uses: actions/checkout@v6
      - name: Download host Qt
        uses: actions/download-artifact@v7
        with:
          name: qt-static-macos-${{ matrix.host_arch }}-12.0-qt
      - name: Extract host Qt
        run: |
          mkdir -p /Users/runner/work/host-qt
          tar -zxf qt-static-macos-${{ matrix.host_arch }}-12.0.tar.gz --strip-components=1 -C /Users/runner/work/host-qt
      - name: Cache Qt
        id: cache-qt
        uses: actions/cache@v5
        with:
          path: |
            /Users/runner/work/deps/qt
          key: ${{ github.job }}-${{ matrix.arch }}-qt
      - name: Homebrew dependencies to build dependencies
        run: brew bundle --file qtox/deps/Brewfile-static
      - name: Build Qt
        if: steps.cache-qt.outputs.cache-hit != 'true'
        run: qtox/deps/local_install_deps.sh
          --arch ${{ matrix.arch }}
          --dep-file qtox/deps/qt.depfile
          --dep-prefix /Users/runner/work/deps
          --host-path /Users/runner/work/host-qt
      - name: Build tarball
        run: tar -zcf qt-static-${{ matrix.arch }}.tar.gz -C /Users/runner/work/deps qt
      - name: Upload tarball to nightly release
        if: github.event_name == 'push'
        uses: ncipollo/release-action@v1
        with:
          allowUpdates: true
          tag: nightly
          omitBodyDuringUpdate: true
          omitNameDuringUpdate: true
          prerelease: true
          replacesArtifacts: true
          artifacts: qt-static-${{ matrix.arch }}.tar.gz