Workflows: Cleaner Docker builds, support for manual exec and pre-release

.github/workflows/docker.yml

@@ -1,36 +1,78 @@
-name: Build docker image
+name: Build and Push Docker Image
 
 on:
   release:
-    types: [published]
+    types:
+      - published
+      - released
+
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: "Docker image version (e.g., v1.2.3):"
+        required: true
+      add_latest_tag:
+        description: "Set to latest"
+        type: boolean
+        default: false
 
 jobs:
-  build-image:
+  build-and-push:
     runs-on: ubuntu-latest
     permissions:
+      contents: read
       packages: write
+
     steps:
-      - uses: actions/checkout@v4
+      - name: Set repository and image name to lowercase
+        env:
+          IMAGE_NAME: "${{ github.repository }}"
+        run: |
+          echo "IMAGE_NAME=${IMAGE_NAME,,}" >>${GITHUB_ENV}
+          echo "FULL_IMAGE_NAME=ghcr.io/${IMAGE_NAME,,}" >>${GITHUB_ENV}
 
-      - name: Docker metadata
+      - name: Validate and extract version tag
-        id: meta
+        run: |
-        uses: docker/metadata-action@v5
+          SOURCE_TAG="${{ github.event.inputs.tag }}"
-        with:
+          if [[ -z "$SOURCE_TAG" ]]; then
-          images: ghcr.io/${{ github.repository_owner }}/xray-core
+            SOURCE_TAG="${{ github.ref_name }}"
-          flavor: latest=auto
+          fi
-          tags: |
-            type=semver,pattern={{version}}
 
-      - name: Docker metadata (unsupported architectures)
+          if [[ -z "$SOURCE_TAG" ]]; then
-        id: metausa
+            echo "Error: Could not determine a valid tag source. Input tag and context tag (github.ref_name) are both empty."
-        uses: docker/metadata-action@v5
+            exit 1
-        with:
+          fi
-          images: ghcr.io/${{ github.repository_owner }}/xray-core
+
-          flavor: |
+          if [[ "$SOURCE_TAG" != v* ]]; then
-            latest=auto
+            echo "Error: Tag '$SOURCE_TAG' must start with 'v'. Aborting."
-            suffix=-usa,onlatest=true
+            exit 1
-          tags: |
+          fi
-            type=semver,pattern={{version}}
+
+          APP_VERSION=${SOURCE_TAG#v}
+          if [[ -z "$APP_VERSION" ]]; then
+            echo "Error: Tag '$SOURCE_TAG' starts with 'v' but has no version number following it."
+            exit 1
+          fi
+
+          echo "Application version: $APP_VERSION"
+          echo "APP_VERSION=$APP_VERSION" >>${GITHUB_ENV}
+
+          LATEST=false
+          if [[ "${{ github.event_name }}" == "release" && "${{ github.event.release.prerelease }}" == "false" ]] || [[ "${{ github.event_name }}" == "workflow_dispatch" && "${{ github.event.inputs.add_latest_tag }}" == "true" ]]; then
+            LATEST=true
+          fi
+
+          echo "Latest: $LATEST"
+          echo "LATEST=$LATEST" >>${GITHUB_ENV}
+
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
 
       - name: Login to GitHub Container Registry
         uses: docker/login-action@v3
@@ -39,13 +81,12 @@ jobs:
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Set up Docker Buildx
+      - name: Build Docker image (main architectures)
-        uses: docker/setup-buildx-action@v3
+        id: build_main_arches
-
-      - name: Build and push
         uses: docker/build-push-action@v6
         with:
           context: .
+          file: .github/docker/Dockerfile
           platforms: |
             linux/amd64
             linux/arm/v7
@@ -53,39 +94,41 @@ jobs:
             linux/ppc64le
             linux/s390x
           provenance: false
-          file: .github/docker/Dockerfile
+          outputs: type=image,name=${{ env.FULL_IMAGE_NAME }},push-by-digest=true,name-canonical=true,push=true
-          push: true
-          tags: ${{ steps.meta.outputs.tags }}
 
-      - name: Build and push (unsupported architectures)
+      - name: Build Docker image (additional architectures)
+        id: build_additional_arches
         uses: docker/build-push-action@v6
         with:
           context: .
+          file: .github/docker/Dockerfile.usa
           platforms: |
             linux/386
             linux/arm/v6
             linux/riscv64
             linux/loong64
           provenance: false
-          file: .github/docker/Dockerfile.usa
+          outputs: type=image,name=${{ env.FULL_IMAGE_NAME }},push-by-digest=true,name-canonical=true,push=true
-          push: true
-          tags: ${{ steps.metausa.outputs.tags }}
 
-      - name: Merge Multi-Arch Manifests
+      - name: Create manifest list and push
         run: |
-          echo "Starting to merge multi-architecture manifests..."
+          echo "Creating multi-arch manifest with version tag: ${{ env.FULL_IMAGE_NAME }}:${{ env.APP_VERSION }}"
+          docker buildx imagetools create \
+            --tag ${{ env.FULL_IMAGE_NAME }}:${{ env.APP_VERSION }} \
+            ${{ env.FULL_IMAGE_NAME }}@${{ steps.build_main_arches.outputs.digest }} \
+            ${{ env.FULL_IMAGE_NAME }}@${{ steps.build_additional_arches.outputs.digest }}
 
-          # Convert newlines to spaces and split into array
+          if [[ "${{ env.LATEST }}" == "true" ]]; then
-          TAGS=($(echo "${{ steps.meta.outputs.tags }}" | tr '\n' ' '))
+            echo "Adding 'latest' tag to manifest: ${{ env.FULL_IMAGE_NAME }}:latest"
-
+            docker buildx imagetools create \
-          echo "Total tags to process: ${#TAGS[@]}"
+            --tag ${{ env.FULL_IMAGE_NAME }}:latest \
-          for tag in "${TAGS[@]}"; do
+            ${{ env.FULL_IMAGE_NAME }}:${{ env.APP_VERSION }}
-            echo "Merging tag: $tag with unsupported architectures ($tag-usa)"
-            docker buildx imagetools create --append --tag "$tag" "$tag-usa"
-            if [ $? -ne 0 ]; then
-              echo "Error: Failed to merge $tag-usa into $tag"
-              exit 1
           fi
-          done
 
-          echo "Multi-architecture manifest merge completed successfully."
+      - name: Inspect image
+        run: |
+          docker buildx imagetools inspect ${{ env.FULL_IMAGE_NAME }}:${{ env.APP_VERSION }}
+
+          if [[ "${{ env.LATEST }}" == "true" ]]; then
+            docker buildx imagetools inspect ${{ env.FULL_IMAGE_NAME }}:latest
+          fi