Merge pull request #5342 from input-output-hk/hkm/upload-to-ghcr-2

Upload to ghcr.io

Author: andreabedini

.github/workflows/release-ghcr.yaml

@@ -0,0 +1,54 @@
+name: Upload to ghci.io
+
+on:
+  push:
+    tags:
+      - '**'
+
+env:
+  # Only to avoid some repetition
+  FLAKE_REF: github:${{ github.repository }}/${{ github.ref_name }}
+  # We need to tell skopeo where to write the authentication token
+  REGISTRY_AUTH_FILE: ./skopeo-registry-auth-file.json
+
+jobs:
+  build:
+    name: "Upload to ghcr.io"
+    runs-on: ubuntu-latest
+    steps:
+    - name: Install Nix
+      uses: input-output-hk/install-nix-action@v20
+
+    - name: Display flake metadata
+      id: flake-metadata
+      run: |
+        nix flake metadata ${{ env.FLAKE_REF }}
+        nix flake metadata ${{ env.FLAKE_REF }} --json | jq -r '"LOCKED_URL=\(.url)"' >> "$GITHUB_OUTPUT"
+
+    - name: Login to GitHub Container Registry
+      run: skopeo login --username ${{ github.actor }} --password ${{ secrets.GITHUB_TOKEN }} ghcr.io
+
+    # NOTE We assume that hydra has already built the image, this is
+    # reasonable since, before applying the tag, we must have already
+    # pushed the tagged commit somewhere, and Hydra will have had the
+    # change to build the image.
+
+    - name: Uploading input-output-hk/cardano-node
+      run: |
+        echo "::group::Downloading from cache"
+        nix build --accept-flake-config --print-out-paths --builders "" --max-jobs 0 ${{ steps.flake-metadata.outputs.LOCKED_URL }}#dockerImage/node
+        echo "::endgroup::"
+
+        echo "::group::Uploading to registry"
+        skopeo copy docker-archive:./result docker://ghcr.io/input-output-hk/cardano-node:$GITHUB_REF_NAME
+        echo "::endgroup::"
+
+    - name: Uploading input-output-hk/cardano-submit-api
+      run: |
+        echo "::group::Downloading from cache"
+        nix build --accept-flake-config --print-out-paths --builders "" --max-jobs 0 ${{ steps.flake-metadata.outputs.LOCKED_URL }}#dockerImage/submit-api
+        echo "::endgroup::"
+
+        echo "::group::Uploading to registry"
+        skopeo copy docker-archive:./result docker://ghcr.io/input-output-hk/cardano-submit-api:$GITHUB_REF_NAME
+        echo "::endgroup::"

flake.nix

@@ -366,18 +366,14 @@
             inherit config system overlays;
           };
           inherit (mkFlakeAttrs pkgs) environments packages checks apps project ciJobs devShells workbench;
-          # We use a generic gitrev for PR CI to avoid unecessary rebuilds:
-          ciJobsPrs = (mkFlakeAttrs (pkgs.extend (prev: final: { gitrev = "0000000000000000000000000000000000000000"; }))).ciJobs;
         in
         {
 
-          inherit environments checks project ciJobsPrs devShells workbench;
+          inherit environments checks project ciJobs devShells workbench;
 
           legacyPackages = pkgs // {
             # allows access to hydraJobs without specifying <arch>:
-            hydraJobs = ciJobs // {
-              pr = ciJobsPrs;
-            };
+            hydraJobs = ciJobs;
           };
 
           packages = packages // {
@@ -394,11 +390,11 @@
       );
 
     in
-    removeAttrs flake [ "ciJobsPrs" ] // {
+    removeAttrs flake [ "ciJobs" ] // {
 
-      hydraJobs = flake.ciJobsPrs // (let pkgs = self.legacyPackages.${defaultSystem}; in {
+      hydraJobs = flake.ciJobs // (let pkgs = self.legacyPackages.${defaultSystem}; in {
         inherit (pkgs.callPackages iohkNix.utils.ciJobsAggregates {
-          ciJobs = lib.mapAttrs (_: lib.getAttr "required") flake.ciJobsPrs // {
+          ciJobs = lib.mapAttrs (_: lib.getAttr "required") flake.ciJobs // {
             # ensure hydra notify:
             gitrev = pkgs.writeText "gitrev" pkgs.gitrev;
           };