ci(github-actions): update workflows and stuff

And again, just copied from the starter-pack, while keeping the repository name btw.

Signed-off-by: Andrei Jiroh Eugenio Halili <[email protected]>

Author: Andrei Jiroh Eugenio Halili

.github/workflows/docker-cicd-develop.yml

@@ -16,9 +16,14 @@ on:
       - ".trigger-rebuild"
       - ".dockerignore"
       - "toolkits/packages/scripts/**"
+      - "toolkits/packages/dotbashrcdir/**"
   pull_request:
     branches: [ main ]
   workflow_dispatch:
+    inputs:
+      force_push:
+        description: Leave it blank to only run test build, otherwise set to true.
+        required: false
 
 jobs:
   test-image-builds:
@@ -30,14 +35,16 @@ jobs:
 
        - name: Install Dive
          run: |
-           wget https://github.com/wagoodman/dive/releases/download/v0.10.0/dive_0.10.0_linux_amd64.deb -O $HOME/work/_temp/dive_linux_amd64.deb
-           sudo apt install $HOME/work/_temp/dive_linux_amd64.deb
+           wget https://github.com/wagoodman/dive/releases/download/v0.10.0/dive_0.10.0_linux_amd64.deb -O /tmp/dive_linux_amd64.deb
+           sudo apt install /tmp/dive_linux_amd64.deb
 
        - name: Build and check for wasted space
+         env:
+           DOCKER_BUILDKIT: 1
          run: |
+            set -eux
             docker build --tag registry.repohub.dev/${{env.namespace}}/${{env.repository}} .
-            # may not work if it's first test build
-            dive registry.repohub.dev/${{env.namespace}}/${{env.repository}} #--source ghcr.io/${{env.namespace}}/${{env.repository}}
+            CI=true dive registry.repohub.dev/${{env.namespace}}/${{env.repository}}
 
   publish-to-dev:
      name: Publish as canary
@@ -62,11 +69,6 @@ jobs:
            flavor: |
              latest=false
 
-       - name: Print out values
-         env:
-           METADATA_OUTPUTS: ${{ toJSON(steps.meta.outputs) }}
-         run: "echo -e $METADATA_OUTPUTS"
-
        # Setup QEMU for multiarch builds
        - name: Set up QEMU
          uses: docker/setup-qemu-action@v1
@@ -87,7 +89,8 @@ jobs:
          uses: docker/login-action@v1
          with:
            registry: ghcr.io
-           # change the username into yours if not using our bot
+           # change the username into yours if not using our bot, might use
+           # an env or secrets way in the future
            username: RecapTimeBot
            # you need to manually add our bot with write access if you use our PAT
            password: ${{ secrets.GH_SERVICE_ACCOUNT_API_KEY }}
@@ -109,4 +112,5 @@ jobs:
            tags: ${{ steps.meta.outputs.tags }}
            labels: ${{ steps.meta.outputs.labels }}
            context: .
-           platforms: linux/amd64,linux/arm64
+           # arm64 can sometimes experience weird GnuTLS errors
+           platforms: linux/amd64

.github/workflows/docker-cicd-release.yml

@@ -1,4 +1,4 @@
-name: "Docker CI (image releaser)"
+name: "Docker CI (image release)"
 
 env:
   # Change this to match GITHUB_REPOSITORY or any name you want.
@@ -11,6 +11,8 @@ env:
 
 on:
   release:
+    # After tagging a release from the command line, you need to create a new release
+    # for the releaser CI to trigger.
     type: [published]
 
 jobs:
@@ -31,17 +33,12 @@ jobs:
              ${{ env.namespace_dockerhub }}/${{ env.repository }}
              quay.io/${{ env.namespace }}/${{ env.repository }}
              ghcr.io/${{ env.namespace }}/${{ env.repository }}
+           # For prereleases, the tag name should be have a suffix, like -betaXX
            tags: |
              type=semver,pattern={{version}}
-             type=raw,value=beta
            flavor: |
              latest=false
 
-       - name: Print out values
-         env:
-           METADATA_OUTPUTS: ${{ toJSON(steps.meta.outputs) }}
-         run: "echo '$METADATA_OUTPUTS'"
-
        # Setup QEMU for multiarch builds
        - name: Set up QEMU
          uses: docker/setup-qemu-action@v1
@@ -62,7 +59,8 @@ jobs:
          uses: docker/login-action@v1
          with:
            registry: ghcr.io
-           # change the username into yours if not using our bot
+           # change the username into yours if not using our bot, might use
+           # an env or secrets way in the future
            username: RecapTimeBot
            # you need to manually add our bot with write access if you use our PAT
            password: ${{ secrets.GH_SERVICE_ACCOUNT_API_KEY }}
@@ -84,6 +82,7 @@ jobs:
            tags: ${{ steps.meta.outputs.tags }}
            labels: ${{ steps.meta.outputs.labels }}
            context: .
+           # arm64 can sometimes experience weird GnuTLS errors
            platforms: linux/amd64
   publish-to-stable:
      name: Release to stable
@@ -103,14 +102,13 @@ jobs:
              ghcr.io/${{ env.namespace }}/${{ env.repository }}
            tags: |
              type=semver,pattern={{version}}
+             # v0.2.x and above
+             type=semver,pattern={{major}}.{{minor}}
+             # disabled if major zero
+             type=semver,pattern={{major}},enable=${{ !startsWith(github.ref, 'refs/tags/v0.') }}
            flavor: |
              latest=true
 
-       - name: Print out values
-         env:
-           METADATA_OUTPUTS: ${{ toJSON(steps.meta.outputs) }}
-         run: "echo '$METADATA_OUTPUTS'"
-
        # Setup QEMU for multiarch builds
        - name: Set up QEMU
          uses: docker/setup-qemu-action@v1
@@ -153,4 +151,5 @@ jobs:
            tags: ${{ steps.meta.outputs.tags }}
            labels: ${{ steps.meta.outputs.labels }}
            context: .
-           platforms: linux/amd64
+           # arm64 can sometimes experience weird GnuTLS errors
+           platforms: linux/amd64