build_bootstrap_images_aarch64.yaml

name: 🐬 Push Bootstrap Images (aarch64) 🐬
concurrency:
  group: "${{ github.workflow }}-${{ github.ref }}"
  cancel-in-progress: true

on:
  workflow_dispatch:
  schedule:
   - cron: "0 */8 * * *"  # Every 08 Hrs
jobs:
  push-aarch64:
    #runs-on: ubuntu-latest
    runs-on: ubuntu-24.04-arm
    timeout-minutes: 200
    permissions:
      attestations: write  
      contents: write
      id-token: write
      packages: write
      statuses: read
    strategy:
      matrix:
        include:
          - image: "alpine-base"
            script: "${GITHUB_WORKSPACE}/main/Github/Runners/bootstrap/alpine.sh"
            arch: "aarch64"
            file: "/tmp/rootfs.tar"

          - image: "archlinux-base"
            script: "${GITHUB_WORKSPACE}/main/Github/Runners/bootstrap/archlinux.sh"
            arch: "aarch64"
            file: "/tmp/rootfs.tar"

          #- image: "artix-base"
          #  script: "${GITHUB_WORKSPACE}/main/Github/Runners/bootstrap/artix.sh"
          #  arch: "aarch64"
          #  file: "/tmp/rootfs.tar"

          #- image: "cachyos-base"
          #  script: "${GITHUB_WORKSPACE}/main/Github/Runners/bootstrap/cachyos.sh"
          #  arch: "aarch64"
          #  file: "/tmp/rootfs.tar"

          - image: "debian-base"
            script: "${GITHUB_WORKSPACE}/main/Github/Runners/bootstrap/debian.sh"
            arch: "aarch64"
            file: "/tmp/rootfs.tar"

          - image: "eweos-base"
            script: "${GITHUB_WORKSPACE}/main/Github/Runners/bootstrap/eweos.sh"
            arch: "aarch64"
            file: "/tmp/rootfs.tar"

          - image: "ubuntu-base"
            script: "${GITHUB_WORKSPACE}/main/Github/Runners/bootstrap/ubuntu.sh"
            arch: "aarch64"
            file: "/tmp/rootfs.tar"

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          path: main
          filter: "blob:none"

      - name: Debloat Runner
        run: |
          #Presets
          set +x ; set +e
          #--------------#
          bash <(curl -qfsSL "https://raw.githubusercontent.com/pkgforge/devscripts/main/Github/Runners/debloat_ubuntu.sh") --force
        continue-on-error: true

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
        continue-on-error: true

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
        continue-on-error: true

      - name: Login to Docker Hub
        uses: docker/login-action@v3
        with:
          username: "${{ secrets.DOCKERHUB_USERNAME }}"
          password: "${{ secrets.DOCKERHUB_TOKEN }}"
        continue-on-error: true

      - name: Login to GHCR
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: "${{ github.actor }}"
          password: "${{ secrets.GITHUB_TOKEN }}"
        continue-on-error: true

      - name: Install Addons
        run: |
          #presets
          set +x ; set +e
          #-------------#
          bash <(curl -qfsSL "https://raw.githubusercontent.com/pkgforge/devscripts/refs/heads/main/Linux/install_bins_curl.sh")
        continue-on-error: true

      - name: Setup Env
        run: |
          #presets
          set +x ; set +e
          #-------------#
          #tmp
          SYSTMP="$(dirname $(mktemp -u))" && export SYSTMP="${SYSTMP}"
          echo "SYSTMP=${SYSTMP}" >> "${GITHUB_ENV}"
          #-------------#
          ##User-Agent
          USER_AGENT="$(curl -qfsSL 'https://github.com/pkgforge/devscripts/raw/refs/heads/main/Misc/User-Agents/ua_chrome_macos_latest.txt')" && export USER_AGENT="${USER_AGENT}"
          echo "USER_AGENT=${USER_AGENT}" >> "${GITHUB_ENV}"
        continue-on-error: true

      - name: Push (${{ matrix.image }}/${{ matrix.arch }})
        env:
          DOCKERHUB_USERNAME: "${{ secrets.DOCKERHUB_USERNAME }}"
        run: |
          #presets
          set +x ; set +e
          #-------------#
          dos2unix --quiet "${{ matrix.script }}"
          chmod +x "${{ matrix.script }}"
          bash "${{ matrix.script }}"
        continue-on-error: true

      - name: Check
        run: |
          #presets
          set +x ; set +e
          #-------------#
          if [[ -s "${{ matrix.file }}" ]] && [[ $(stat -c%s "${{ matrix.file }}") -gt 10000 ]]; then
           export HAS_IMAGE="TRUE"
           echo "HAS_IMAGE=${HAS_IMAGE}" >> "${GITHUB_ENV}"
           UTC_TIME="$(TZ='UTC' date +'%Y_%m_%d')"
           echo "UTC_TIME=${UTC_TIME}" >> "${GITHUB_ENV}"
          else
           export HAS_IMAGE="FALSE"
           echo "HAS_IMAGE=${HAS_IMAGE}" >> "${GITHUB_ENV}"
          fi
        continue-on-error: true

      - name: Fail (If Push Failed)
        if: env.HAS_IMAGE == 'FALSE'
        run: |
          #presets
          set +x ; set +e
          #-------------#
          exit 1
        continue-on-error: false

      #Artifacts
      - name: Upload (Build) Artifacts
        if: env.HAS_IMAGE == 'TRUE'
        uses: actions/upload-artifact@v4
        with:
            name: "ARTIFACTS-${{ matrix.image }}_${{ matrix.arch }}"
            path: |
              ${{ matrix.file }}
            compression-level: 0 #no compression, [Default: 6 (GNU Gzip)]
            retention-days: 90 #max
            overwrite: true
        continue-on-error: true

     #continuous
      - name: Releaser (Continuous)
        if: env.HAS_IMAGE == 'TRUE'
        uses: softprops/action-gh-release@v2.3.2
        with:
          name: "Continuous ${{ matrix.image }}_${{ matrix.arch }}"
          tag_name: "${{ matrix.image }}_${{ matrix.arch }}"
          prerelease: true
          draft: false
          generate_release_notes: false
          files: |
            ${{ matrix.file }}
        continue-on-error: true

     #Snapshot
      - name: Releaser (Snapshot)
        if: env.HAS_IMAGE == 'TRUE'
        uses: softprops/action-gh-release@v2.3.2
        with:
          name: "Snapshot-(${{ matrix.image }}_${{ matrix.arch }}_${{ env.UTC_TIME }}"
          tag_name: "${{ matrix.image }}_${{ matrix.arch }}_${{ env.UTC_TIME }}"
          prerelease: false
          draft: false
          generate_release_notes: false
          make_latest: false
          files: |
            ${{ matrix.file }}
        continue-on-error: true

     #Build Provenance
      - name: Attest Build Provenance
        if: env.HAS_IMAGE == 'TRUE'
        uses: actions/attest-build-provenance@v4.1.0
        with:
          subject-name: "image-${{ matrix.image }}-${{ matrix.arch }}"
          subject-path: ${{ matrix.file }}
          show-summary: true
        continue-on-error: true