name: Build and Publish OCI Images

on:
  push:
    tags:
      - 'v*'

env:
  REGISTRY: git.roo.lol
  REGISTRY_USER: ${{ github.actor }}
  REGISTRY_PASSWORD: ${{ secrets.CONTAINER_REGISTRY_TOKEN }}
  IMAGE_NAMESPACE: ${{ github.repository_owner }}

jobs:
  build-and-push:
    runs-on: ubuntu-latest
    permissions:
      packages: write
      contents: read

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Extract Roc version from tag
        id: version
        run: |
          # Strip leading 'v' from tag name: v0.0.0-alpha2 -> 0.0.0-alpha2
          ROC_VERSION="${GITHUB_REF_NAME#v}"
          echo "roc_version=${ROC_VERSION}" >> "$GITHUB_OUTPUT"
          echo "ROC_VERSION=${ROC_VERSION}" >> "$GITHUB_ENV"

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to registry
        run: |
          echo "$REGISTRY_PASSWORD" | docker login $REGISTRY -u $REGISTRY_USER --password-stdin

      - name: Build and push base image
        uses: docker/build-push-action@v6
        with:
          context: .
          target: base
          build-args: ROC_VERSION=${{ steps.version.outputs.roc_version }}
          tags: |
            ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/roc-tools-base:${{ steps.version.outputs.roc_version }}
            ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/roc-tools-base:latest
          push: true
          cache-from: type=gha
          cache-to: type=gha,mode=max

      - name: Build and push dev image
        uses: docker/build-push-action@v6
        with:
          context: .
          target: dev
          build-args: ROC_VERSION=${{ steps.version.outputs.roc_version }}
          tags: |
            ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/roc-tools-dev:${{ steps.version.outputs.roc_version }}
            ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/roc-tools-dev:latest
          push: true
          cache-from: type=gha
          cache-to: type=gha,mode=max

      - name: Build and push ci image
        uses: docker/build-push-action@v6
        with:
          context: .
          target: ci
          build-args: ROC_VERSION=${{ steps.version.outputs.roc_version }}
          tags: |
            ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/roc-tools-ci:${{ steps.version.outputs.roc_version }}
            ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/roc-tools-ci:latest
          push: true
          cache-from: type=gha
          cache-to: type=gha,mode=max