🌱 Create container image in ci

.github/workflows/release.yaml

@@ -4,14 +4,18 @@ on:
   push:
     branches:
       - main
+    tags:
+      - 'v*.*.*'
     paths:
       - 'CHANGELOG/*.md'
 
 permissions:
   contents: write # Allow to push a tag, create a release branch and publish a draft release.
+  packages: write
 
 jobs:
   push_release_tags:
+    if: github.ref == 'refs/heads/main'
     runs-on: ubuntu-latest
     outputs:
       release_tag: ${{ steps.release-version.outputs.release_version }}
@@ -80,6 +84,7 @@ jobs:
           echo "Created tags $RELEASE_VERSION and test/${RELEASE_VERSION}"
   release:
     name: create draft release
+    if: github.ref == 'refs/heads/main'
     runs-on: ubuntu-latest
     needs: push_release_tags
     steps:
@@ -112,3 +117,70 @@ jobs:
           files: out/*
           body_path: ${{ env.RELEASE_TAG }}.md
           tag_name: ${{ env.RELEASE_TAG }}
+  push_release_images:
+    name: build and push ${{ matrix.arch }} images
+    if: startsWith(github.ref, 'refs/tags/v')
+    runs-on: ubuntu-latest
+    timeout-minutes: 90
+    strategy:
+      fail-fast: false
+      matrix:
+        arch: [amd64, arm, arm64, ppc64le, s390x]
+    env:
+      REGISTRY: ghcr.io/syself
+      ALL_DOCKER_BUILD: core
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # tag=v4.2.2
+        with:
+          fetch-depth: 0
+      - name: Calculate go version
+        id: vars
+        run: echo "go_version=$(make go-version)" >> $GITHUB_OUTPUT
+      - name: Set up Go
+        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # tag=v5.5.0
+        with:
+          go-version: ${{ steps.vars.outputs.go_version }}
+      - name: Build images
+        run: |
+          make REGISTRY="${REGISTRY}" TAG="${GITHUB_REF_NAME}" ARCH="${{ matrix.arch }}" ALL_DOCKER_BUILD="${ALL_DOCKER_BUILD}" docker-build
+      - name: Log in to ghcr.io
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # tag=v4.1.0
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ github.token }}
+      - name: Push images
+        run: |
+          make REGISTRY="${REGISTRY}" TAG="${GITHUB_REF_NAME}" ARCH="${{ matrix.arch }}" ALL_DOCKER_BUILD="${ALL_DOCKER_BUILD}" docker-push
+  push_release_image_manifests:
+    name: push multi-arch manifests
+    if: startsWith(github.ref, 'refs/tags/v')
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    needs: push_release_images
+    env:
+      REGISTRY: ghcr.io/syself
+      ALL_DOCKER_BUILD: core
+      ALL_ARCH: amd64 arm arm64 ppc64le s390x
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # tag=v4.2.2
+        with:
+          fetch-depth: 0
+      - name: Calculate go version
+        id: vars
+        run: echo "go_version=$(make go-version)" >> $GITHUB_OUTPUT
+      - name: Set up Go
+        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # tag=v5.5.0
+        with:
+          go-version: ${{ steps.vars.outputs.go_version }}
+      - name: Log in to ghcr.io
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # tag=v4.1.0
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ github.token }}
+      - name: Push multi-arch manifests
+        run: |
+          make REGISTRY="${REGISTRY}" TAG="${GITHUB_REF_NAME}" ALL_ARCH="${ALL_ARCH}" ALL_DOCKER_BUILD="${ALL_DOCKER_BUILD}" docker-push-manifests

Makefile

@@ -1246,6 +1246,10 @@ docker-image-verify: ## Verifies all built images to contain the correct binary
 
 .PHONY: docker-push-all
 docker-push-all: $(addprefix docker-push-,$(ALL_ARCH))  ## Push the docker images to be included in the release for all architectures + related multiarch manifests
+	$(MAKE) ALL_ARCH="$(ALL_ARCH)" docker-push-manifests
+
+.PHONY: docker-push-manifests
+docker-push-manifests: ## Push only the related multiarch manifests for all docker images
 	$(MAKE) ALL_ARCH="$(ALL_ARCH)" $(addprefix docker-push-manifest-,$(ALL_DOCKER_BUILD))
 
 docker-push-%: