upstream-seaweedfs/.github/workflows/container_rocksdb_version.yml

name: "docker: build rocksdb image by version"

on:
  workflow_dispatch:
    inputs:
      rocksdb_version:
        description: 'RocksDB git tag or branch to build (e.g. v10.10.1)'
        required: true
        default: 'v10.10.1'
      seaweedfs_ref:
        description: 'SeaweedFS git tag, branch, or commit to build'
        required: true
        default: 'master'
      image_tag:
        description: 'Optional Docker tag suffix (defaults to rocksdb_<rocksdb>_seaweedfs_<ref>)'
        required: false
        default: ''

permissions:
  contents: read

jobs:
  build-rocksdb-image:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write

    steps:
      - name: Checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v2

      - name: Prepare Docker tag
        id: tag
        env:
          ROCKSDB_VERSION_INPUT: ${{ inputs.rocksdb_version }}
          SEAWEEDFS_REF_INPUT: ${{ inputs.seaweedfs_ref }}
          CUSTOM_TAG_INPUT: ${{ inputs.image_tag }}
        run: |
          set -euo pipefail
          sanitize() {
            local value="$1"
            value="${value,,}"
            value="${value// /-}"
            value="${value//[^a-z0-9_.-]/-}"
            value="${value#-}"
            value="${value%-}"
            printf '%s' "$value"
          }
          version="${ROCKSDB_VERSION_INPUT}"
          seaweed="${SEAWEEDFS_REF_INPUT}"
          tag="${CUSTOM_TAG_INPUT}"
          if [ -z "$version" ]; then
            echo "RocksDB version input is required." >&2
            exit 1
          fi
          if [ -z "$seaweed" ]; then
            echo "SeaweedFS ref input is required." >&2
            exit 1
          fi
          sanitized_version="$(sanitize "$version")"
          if [ -z "$sanitized_version" ]; then
            echo "Unable to sanitize RocksDB version '$version'." >&2
            exit 1
          fi
          sanitized_seaweed="$(sanitize "$seaweed")"
          if [ -z "$sanitized_seaweed" ]; then
            echo "Unable to sanitize SeaweedFS ref '$seaweed'." >&2
            exit 1
          fi
          if [ -z "$tag" ]; then
            tag="rocksdb_${sanitized_version}_seaweedfs_${sanitized_seaweed}"
          fi
          tag="${tag,,}"
          tag="${tag// /-}"
          tag="${tag//[^a-z0-9_.-]/-}"
          tag="${tag#-}"
          tag="${tag%-}"
          if [ -z "$tag" ]; then
            echo "Resulting Docker tag is empty." >&2
            exit 1
          fi
          echo "docker_tag=$tag" >> "$GITHUB_OUTPUT"
          echo "full_image=chrislusf/seaweedfs:$tag" >> "$GITHUB_OUTPUT"
          echo "seaweedfs_ref=$seaweed" >> "$GITHUB_OUTPUT"

      - name: Set up QEMU
        uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v1

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v1

      - name: Login to Docker Hub
        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v1
        with:
          username: ${{ secrets.DOCKER_USERNAME }}
          password: ${{ secrets.DOCKER_PASSWORD }}

      - name: Build and push image
        id: build
        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v2
        with:
          context: ./docker
          push: true
          file: ./docker/Dockerfile.rocksdb_large
          build-args: |
            ROCKSDB_VERSION=${{ inputs.rocksdb_version }}
            BRANCH=${{ inputs.seaweedfs_ref }}
          platforms: linux/amd64
          tags: ${{ steps.tag.outputs.full_image }}
          labels: |
            org.opencontainers.image.title=seaweedfs
            org.opencontainers.image.description=SeaweedFS is a distributed storage system for blobs, objects, files, and data lake, to store and serve billions of files fast!
            org.opencontainers.image.vendor=Chris Lu

      - name: Sign
        uses: ./.github/actions/sign-image
        with:
          images: chrislusf/seaweedfs@${{ steps.build.outputs.digest }}