add build-devcontainer.yaml workflow

Author: trxcllnt

.github/workflows/build-devcontainer.yaml

@@ -0,0 +1,135 @@
+on:
+  workflow_call:
+    inputs:
+      push:
+        type: string
+        default: true
+        description: "Whether to push the image."
+      repo:
+        type: string
+        required: true
+        description: "Devcontainer image repository."
+      tag:
+        type: string
+        required: true
+        description: "Devcontainer image tag."
+      workspace-dir:
+        type: string
+        default: '.'
+        description: "Devcontainer workspace directory."
+      devcontainer-json:
+        type: string
+        required: true
+        description: "Path to the devcontainer.json file."
+      timeout-minutes:
+        type: number
+        default: 360
+        description: "Maximum time (in minutes) allowed for a run of this workflow."
+      retries:
+        type: string
+        default: '10'
+        description: "Number of times to retry the image build"
+      registry:
+        default: ""
+        required: false
+        description: "URL of container registry to login to. Only required if push=true."
+      username:
+        default: ""
+        required: false
+        description: "Username used to log in to the container registry. Only required if push=true."
+      password:
+        default: ""
+        required: false
+        description: "Password used to log in to the container registry. Only required if push=true."
+      runs-on:
+        type: string
+        default: "ubuntu-latest"
+        description: "GHA runner label."
+
+permissions:
+  actions: read
+  checks: none
+  contents: read
+  deployments: none
+  discussions: none
+  id-token: write
+  issues: none
+  packages: write
+  pages: none
+  pull-requests: read
+  repository-projects: none
+  security-events: none
+  statuses: none
+
+jobs:
+  build:
+    timeout-minutes: ${{ inputs.timeout-minutes }}
+    strategy:
+      fail-fast: false
+      matrix:
+        arch: [amd64, arm64]
+    runs-on: ${{ inputs.runs-on }}
+    name: "Build ${{ inputs.repo }}:${{ inputs.tag }} (${{ matrix.arch }})"
+    outputs:
+      hash_amd64: ${{ steps.build.outputs.hash_amd64 }}
+      hash_arm64: ${{ steps.build.outputs.hash_arm64 }}
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+          persist-credentials: false
+
+      - name: Setup proxy cache
+        uses: nv-gha-runners/setup-proxy-cache@main
+        continue-on-error: true
+        with:
+          enable-apt: true
+
+      - name: Login to ${{ inputs.registry }}
+        if: inputs.push == 'true'
+        uses: docker/login-action@v4
+        with:
+          registry: "${{ inputs.registry }}"
+          username: "${{ inputs.username }}"
+          password: "${{ inputs.password }}"
+
+      - id: build
+        name: Build devcontainer (${{ matrix.arch }})
+        uses: rapidsai/shared-actions/build-devcontainer@fea/build-devcontainer
+        with:
+          arch: "${{ matrix.arch }}"
+          repo: "${{ inputs.repo }}"
+          push: "${{ inputs.push }}"
+          retries: "${{ inputs.retries }}"
+          tag: "${{ inputs.tag }}"
+          workspace-dir: "${{ inputs.workspace-dir }}"
+          devcontainer-json: "${{ inputs.devcontainer-json }}"
+
+  push:
+    if: inputs.push == 'true'
+    name: Push to ${{ inputs.registry }}
+    needs: [build]
+    runs-on: ubuntu-latest
+    steps:
+      - name: Login to ${{ inputs.registry }}
+        uses: docker/login-action@v4
+        with:
+          registry: "${{ inputs.registry }}"
+          username: "${{ inputs.username }}"
+          password: "${{ inputs.password }}"
+
+      - name: Push manifest to ${{ inputs.registry }}
+        shell: bash --noprofile --norc -x -eo pipefail {0}
+        env:
+          hash_amd64: "${{ needs.build.outputs.hash_amd64 }}"
+          hash_arm64: "${{ needs.build.outputs.hash_arm64 }}"
+          repo: "${{ inputs.repo }}"
+          tag: "${{ inputs.tag }}"
+        run: |
+          # Ensure repo is lowercase
+          repo="${repo,,}";
+          name="${repo}:${tag}";
+          docker manifest rm "${name}" || true;
+          sleep 5;
+          # Create and push the multiarch manifest
+          docker buildx imagetools create --tag "${name}" "${hash_amd64}" "${hash_arm64}";