ci: fxxk github action, gpt, gemini, docker and myself

.github/workflows/build-docker.yml

@@ -18,35 +18,28 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: read
-      packages: write
-
     outputs:
-      tags: ${{ steps.meta.outputs.tags }}
-      labels: ${{ steps.meta.outputs.labels }}
-      version: ${{ steps.args.outputs.version }}
-      git_commit: ${{ steps.args.outputs.git_commit }}
-      build_time: ${{ steps.args.outputs.build_time }}
-
+      version: ${{ steps.vars.outputs.version }}
+      major_minor: ${{ steps.vars.outputs.major_minor }}
+      short_sha: ${{ steps.vars.outputs.short_sha }}
+      build_time: ${{ steps.vars.outputs.build_time }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
-      - name: Extract metadata for Docker
-        id: meta
-        uses: docker/metadata-action@v5
-        with:
-          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
-          tags: |
-            type=semver,pattern={{version}}
-            type=semver,pattern={{major}}.{{minor}}
-            type=sha
-            type=raw,value=latest
-
-      - name: Extract Dockerfile args
-        id: args
+      - name: Extract Version Components
+        id: vars
         run: |
-          echo "git_commit=$(git rev-parse --short HEAD)" >> "$GITHUB_OUTPUT"
-          echo "build_time=$(git show -s --format=%cI)" >> "$GITHUB_OUTPUT"
+          VERSION=${GITHUB_REF#refs/tags/v}
+
+          MAJOR_MINOR=$(echo "$VERSION" | cut -d. -f1,2)
+
+          SHORT_SHA=$(git rev-parse --short HEAD)
+
+          echo "version=$VERSION" >> "$GITHUB_OUTPUT"
+          echo "major_minor=$MAJOR_MINOR" >> "$GITHUB_OUTPUT"
+          echo "short_sha=$SHORT_SHA" >> "$GITHUB_OUTPUT"
+          echo "build_time=$(date -u +'%Y-%m-%dT%H:%M:%SZ')" >> "$GITHUB_OUTPUT"
 
   build:
     needs: prepare
@@ -58,7 +51,6 @@ jobs:
         arch: [amd64, arm64]
         type: [default, micro, pico]
       fail-fast: false
-
     runs-on: ${{ matrix.arch == 'amd64' && 'ubuntu-latest' || 'ubuntu-24.04-arm' }}
 
     steps:
@@ -75,47 +67,63 @@ jobs:
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Set Dockerfile path
-        id: dockerfile
-        run: |
-          if [ "${{ matrix.type }}" == "default" ]; then
-            echo "DOCKERFILE=./Dockerfile" >> "$GITHUB_OUTPUT"
-          elif [ "${{ matrix.type }}" == "micro" ]; then
-            echo "DOCKERFILE=./Dockerfile.micro" >> "$GITHUB_OUTPUT"
-          else
-            echo "DOCKERFILE=./Dockerfile.pico" >> "$GITHUB_OUTPUT"
-          fi
-
-      - name: Set image tags
-        id: tags
-        run: |
-          if [ "${{ matrix.type }}" == "default" ]; then
-            TAGS="${{ needs.prepare.outputs.tags }}"
-          elif [ "${{ matrix.type }}" == "micro" ]; then
-            TAGS="${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:micro ${{
-              env.REGISTRY }}/${{ env.IMAGE_NAME }}:micro-latest ${{
-              env.REGISTRY }}/${{ env.IMAGE_NAME }}:micro-${{ needs.prepare.outputs.version }}"
-          else
-            TAGS="${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:pico ${{
-              env.REGISTRY }}/${{ env.IMAGE_NAME }}:pico-latest ${{
-              env.REGISTRY }}/${{ env.IMAGE_NAME }}:pico-${{ needs.prepare.outputs.version }}"
-          fi
-          echo "TAGS=$TAGS" >> $GITHUB_OUTPUT
-
-      - name: Build and push Docker image
+      - name: Build and push (Temporary Tags)
         uses: docker/build-push-action@v6
         with:
           context: .
-          file: ${{ steps.dockerfile.outputs.DOCKERFILE }}
+          # 根据类型选择 Dockerfile
+          file: ${{ matrix.type == 'default' && './Dockerfile' || format('./Dockerfile.{0}', matrix.type) }}
+          # 仅构建当前架构
           platforms: ${{ matrix.arch == 'amd64' && 'linux/amd64' || 'linux/arm64' }}
-          push: ${{ github.event_name != 'pull_request' }}
-          tags: ${{ steps.tags.outputs.TAGS }}
-          labels: ${{ needs.prepare.outputs.labels }}
-          cache-from: |
-            type=registry,ref=${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ matrix.type }}-latest
-            type=gha
-          cache-to: type=gha,mode=max
+          push: true
+          # 推送带有架构后缀的临时标签，供后续合并使用
+          tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:tmp-${{ matrix.type }}-${{ matrix.arch }}
           build-args: |
             VERSION=${{ needs.prepare.outputs.version }}
-            GitCommit=${{ needs.prepare.outputs.git_commit }}
+            GitCommit=${{ needs.prepare.outputs.short_sha }}
             BuildTime=${{ needs.prepare.outputs.build_time }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+  create-manifest:
+    needs: [prepare, build]
+    runs-on: ubuntu-latest
+    permissions:
+      packages: write
+    strategy:
+      matrix:
+        type: [default, micro, pico]
+    steps:
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Create and push manifest lists
+        run: |
+          REPO="${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}"
+          VERSION="${{ needs.prepare.outputs.version }}"
+          MAJOR_MINOR="${{ needs.prepare.outputs.major_minor }}"
+          SHA="${{ needs.prepare.outputs.short_sha }}"
+          TYPE="${{ matrix.type }}"
+          TAGS=()
+
+          if [ "$TYPE" == "default" ]; then
+            TAGS+=("$REPO:latest")
+            TAGS+=("$REPO:$VERSION")
+            TAGS+=("$REPO:$MAJOR_MINOR")
+            TAGS+=("$REPO:sha-$SHA")
+          else
+            TAGS+=("$REPO:$TYPE")
+            TAGS+=("$REPO:$TYPE-latest")
+            TAGS+=("$REPO:$TYPE-$VERSION")
+          fi
+
+          SRC_AMD64="$REPO:tmp-$TYPE-amd64"
+          SRC_ARM64="$REPO:tmp-$TYPE-arm64"
+
+          for TAG in "${TAGS[@]}"; do
+            docker buildx imagetools create -t "$TAG" "$SRC_AMD64" "$SRC_ARM64"
+          done