ci(container): publish fork images to GHCR

Author: tiekoetter

.github/workflows/build-nightly-container.yml

@@ -15,6 +15,10 @@ on:
       - .github/ISSUE_TEMPLATE/*
       - kubernetes/**
 
+permissions:
+  contents: read
+  packages: write
+
 jobs:
   release:
     strategy:
@@ -41,25 +45,23 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v4
 
-      - name: Login to registry
+      - name: Login to GHCR
         uses: docker/login-action@v4
         with:
-          registry: quay.io
-          username: ${{ secrets.QUAY_USERNAME }}
-          password: ${{ secrets.QUAY_PASSWORD }}
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Docker meta
         id: meta
         uses: docker/metadata-action@v6
         with:
-          images: quay.io/invidious/invidious
+          images: ghcr.io/${{ github.repository }}
           flavor: |
             suffix=${{ matrix.tag_suffix }}
           tags: |
             type=sha,format=short,prefix={{date 'YYYY.MM.DD'}}-,enable=${{ github.ref == format('refs/heads/{0}', 'master') }}
             type=raw,value=master,enable=${{ github.ref == format('refs/heads/{0}', 'master') }}
-          labels: |
-            quay.expires-after=12w
 
       - name: Build and push Docker ${{ matrix.name }} image for Push Event
         uses: docker/build-push-action@v7
@@ -80,16 +82,15 @@ jobs:
       - name: Login to registry
         uses: docker/login-action@v4
         with:
-          registry: quay.io
-          username: ${{ secrets.QUAY_USERNAME }}
-          password: ${{ secrets.QUAY_PASSWORD }}
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
 
-      # https://github.com/marketplace/actions/docker-manifest-create-action
       - name: Create and push manifest
         uses: int128/docker-manifest-create-action@v2.20.0
         with:
           push: true
-          tags: quay.io/invidious/invidious:master
+          tags: ghcr.io/${{ github.repository_owner }}/invidious:master
           sources: |
-            quay.io/invidious/invidious:master
-            quay.io/invidious/invidious:master-arm64
+            ghcr.io/${{ github.repository_owner }}/invidious:master
+            ghcr.io/${{ github.repository_owner }}/invidious:master-arm64

.github/workflows/build-stable-container.yml

@@ -6,6 +6,10 @@ on:
     tags:
       - "v*"
 
+permissions:
+  contents: read
+  packages: write
+
 jobs:
   release:
     strategy:
@@ -35,23 +39,21 @@ jobs:
       - name: Login to registry
         uses: docker/login-action@v4
         with:
-          registry: quay.io
-          username: ${{ secrets.QUAY_USERNAME }}
-          password: ${{ secrets.QUAY_PASSWORD }}
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Docker meta
         id: meta
         uses: docker/metadata-action@v6
         with:
-          images: quay.io/invidious/invidious
+          images: ghcr.io/${{ github.repository }}
           flavor: |
             latest=false
             suffix=${{ matrix.tag_suffix }}
           tags: |
             type=semver,pattern={{version}}
             type=raw,value=latest
-          labels: |
-            quay.expires-after=12w
 
       - name: Build and push Docker ${{ matrix.name }} image for Push Event
         uses: docker/build-push-action@v7
@@ -72,16 +74,15 @@ jobs:
       - name: Login to registry
         uses: docker/login-action@v4
         with:
-          registry: quay.io
-          username: ${{ secrets.QUAY_USERNAME }}
-          password: ${{ secrets.QUAY_PASSWORD }}
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
 
-      # https://github.com/marketplace/actions/docker-manifest-create-action
       - name: Create and push manifest
         uses: int128/docker-manifest-create-action@v2.20.0
         with:
           push: true
-          tags: quay.io/invidious/invidious:latest
+          tags: ghcr.io/${{ github.repository_owner }}/invidious:master
           sources: |
-            quay.io/invidious/invidious:latest
-            quay.io/invidious/invidious:latest-arm64
+            ghcr.io/${{ github.repository_owner }}/invidious:master
+            ghcr.io/${{ github.repository_owner }}/invidious:master-arm64