docker.yml

name: Containerization

on:
  release:
    types: [published]
  schedule:
    - cron: '0 0 * * 0'
  workflow_dispatch:
    inputs:
      tag:
        description: 'tag to containerize'
        required: false

permissions:
  contents: read
  packages: write

concurrency:
  group: Containerization
  cancel-in-progress: false

jobs:
  Container:
    strategy:
      matrix:
        config:
            - { name: 'cpu',  tag: 'cpu',       runner: 'ubuntu-22.04',     base_image: 'ubuntu:22.04' }
            - { name: 'cpu',  tag: 'cpu',       runner: 'ubuntu-22.04-arm', base_image: 'ubuntu:22.04' }
            - { name: 'gpu',  tag: 'gpu-nvidia', runner: 'ubuntu-22.04',     base_image: 'nvcr.io/nvidia/nvhpc:24.5-devel-cuda_multi-ubuntu22.04', compiler_arch: 'Linux_x86_64' }
            - { name: 'gpu',  tag: 'gpu-nvidia', runner: 'ubuntu-22.04-arm', base_image: 'nvcr.io/nvidia/nvhpc:24.5-devel-cuda_multi-ubuntu22.04', compiler_arch: 'Linux_aarch64' }
    runs-on: ${{ matrix.config.runner }}
    outputs:
      tag: ${{ steps.clone.outputs.tag }}
    steps:
      - name: Free Disk Space
        uses: jlumbroso/free-disk-space@main
        with:
          tool-cache: false
          android: true
          dotnet: true
          haskell: true
          large-packages: true
          docker-images: true
          swap-storage: true

      - name: Login to Docker Hub
        uses: docker/login-action@v3
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_PASSWORD }}

      - name: Login to GHCR
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Setup Buildx
        uses: docker/setup-buildx-action@v3

      - name: Clone
        id: clone
        run: |
          if [ "${{ github.event_name }}" = "schedule" ]; then
            BRANCH="master"
            TAG="nightly"
          else
            BRANCH="${{ github.event.inputs.tag || github.ref_name }}"
            TAG=$(echo "$BRANCH" | tr '/' '-')
          fi
          echo "tag=$TAG" >> $GITHUB_OUTPUT
          echo "TAG=$TAG" >> $GITHUB_ENV
          OWNER="${{ github.repository_owner }}"
          echo "GH_REGISTRY=ghcr.io/${OWNER,,}/mfc" >> $GITHUB_ENV
          git clone --branch "$BRANCH" --depth 1 ${{ github.server_url }}/${{ github.repository }}.git mfc

      - name: Stage
        run: |
          sudo fallocate -l 8G /swapfile
          sudo chmod 600 /swapfile
          sudo mkswap /swapfile
          sudo swapon /swapfile
          sudo mkdir -p /home/runner/tmp
          export TMPDIR=/home/runner/tmp
          free -h
          sudo mkdir -p /mnt/share
          sudo chmod 777 /mnt/share
          cp -r mfc/* /mnt/share/
          cp -r mfc/.git /mnt/share/.git
          cp mfc/.github/Dockerfile /mnt/share/
          cp mfc/.github/.dockerignore /mnt/share/

      - name: Build and push image (cpu)
        if: ${{ matrix.config.name == 'cpu' }}
        uses: docker/build-push-action@v6
        with:
          context: /mnt/share
          file: /mnt/share/Dockerfile
          build-args: |
            BASE_IMAGE=${{ matrix.config.base_image }}
            TARGET=${{ matrix.config.name }}
            CC_COMPILER=${{ 'gcc' }}
            CXX_COMPILER=${{ 'g++' }}
            FC_COMPILER=${{ 'gfortran' }}
            COMPILER_PATH=${{ '/usr/bin' }}
            COMPILER_LD_LIBRARY_PATH=${{ '/usr/lib' }}
          labels: |
            org.opencontainers.image.source=https://github.com/${{ github.repository }}
          tags: |
            ${{ secrets.DOCKERHUB_USERNAME }}/mfc:${{ env.TAG }}-${{ matrix.config.tag }}-${{ matrix.config.runner }}
            ${{ env.GH_REGISTRY }}:${{ env.TAG }}-${{ matrix.config.tag }}-${{ matrix.config.runner }}
          push: true

      - name: Build and push image (gpu)
        if: ${{ matrix.config.name == 'gpu' }}
        uses: docker/build-push-action@v5
        with:
          builder: default
          context: /mnt/share
          file: /mnt/share/Dockerfile
          build-args: |
            BASE_IMAGE=${{ matrix.config.base_image }}
            TARGET=${{ matrix.config.name }}
            CC_COMPILER=${{ 'nvc' }}
            CXX_COMPILER=${{ 'nvc++' }}
            FC_COMPILER=${{ 'nvfortran' }}
            COMPILER_PATH=/opt/nvidia/hpc_sdk/${{ matrix.config.compiler_arch }}/compilers/bin
            COMPILER_LD_LIBRARY_PATH=/opt/nvidia/hpc_sdk/${{ matrix.config.compiler_arch }}/compilers/lib
          labels: |
            org.opencontainers.image.source=https://github.com/${{ github.repository }}
          tags: |
            ${{ secrets.DOCKERHUB_USERNAME }}/mfc:${{ env.TAG }}-${{ matrix.config.tag }}-${{ matrix.config.runner }}
            ${{ env.GH_REGISTRY }}:${{ env.TAG }}-${{ matrix.config.tag }}-${{ matrix.config.runner }}
          push: true

  manifests:
    runs-on: ubuntu-latest
    needs: Container
    environment:
      name: containers
      url: https://hub.docker.com/r/sbryngelson/mfc
    steps:
      - name: Login to Docker Hub
        uses: docker/login-action@v3
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_PASSWORD }}

      - name: Login to GHCR
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Setup Buildx
        uses: docker/setup-buildx-action@v3

      - name: Set GHCR registry (lowercase)
        run: |
          OWNER="${{ github.repository_owner }}"
          echo "GH_REGISTRY=ghcr.io/${OWNER,,}/mfc" >> $GITHUB_ENV

      - name: Create and Push Manifest Lists
        env:
          TAG: ${{ needs.Container.outputs.tag }}
          DH: ${{ secrets.DOCKERHUB_USERNAME }}/mfc
        run: |
          GH="${{ env.GH_REGISTRY }}"
          for R in "$DH" "$GH"; do
            docker buildx imagetools create -t $R:$TAG-cpu        $R:$TAG-cpu-ubuntu-22.04 $R:$TAG-cpu-ubuntu-22.04-arm
            docker buildx imagetools create -t $R:$TAG-gpu-nvidia $R:$TAG-gpu-nvidia-ubuntu-22.04 $R:$TAG-gpu-nvidia-ubuntu-22.04-arm
          done

      - name: Update latest tags
        if: github.event_name == 'release'
        env:
          TAG: ${{ needs.Container.outputs.tag }}
          DH: ${{ secrets.DOCKERHUB_USERNAME }}/mfc
        run: |
          GH="${{ env.GH_REGISTRY }}"
          for R in "$DH" "$GH"; do
            docker buildx imagetools create -t $R:latest-cpu        $R:$TAG-cpu-ubuntu-22.04 $R:$TAG-cpu-ubuntu-22.04-arm
            docker buildx imagetools create -t $R:latest-gpu-nvidia $R:$TAG-gpu-nvidia-ubuntu-22.04 $R:$TAG-gpu-nvidia-ubuntu-22.04-arm
          done