release.yml

name: Release

on:
  push:
    tags:
      - "v*"
  workflow_dispatch:
    inputs:
      version:
        description: "Release version (e.g., v1.2.3). Defaults to the ref name."
        required: false

permissions:
  contents: write
  packages: write

jobs:
  release:
    runs-on: self-hosted
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Check Go installation
        id: check-go
        run: |
          if command -v go &> /dev/null; then
            echo "exists=true" >> $GITHUB_OUTPUT
            echo "Go already installed: $(go version)"
            GO_BIN_DIR=$(dirname $(command -v go))
            echo "${GO_BIN_DIR}" >> $GITHUB_PATH
            echo "$(go env GOPATH)/bin" >> $GITHUB_PATH
          else
            echo "exists=false" >> $GITHUB_OUTPUT
            echo "Go not found"
          fi

      - name: Set up Go
        if: steps.check-go.outputs.exists != 'true'
        uses: actions/setup-go@v5
        with:
          go-version-file: go.mod
          cache: true

      - name: Check Task installation
        id: check-task
        run: |
          if command -v task &> /dev/null; then
            echo "exists=true" >> $GITHUB_OUTPUT
            echo "Task already installed: $(task --version)"
          else
            echo "exists=false" >> $GITHUB_OUTPUT
            echo "Task not found"
          fi

      - name: Set up Task
        if: steps.check-task.outputs.exists != 'true'
        uses: go-task/setup-task@v1

      - name: Setup BuildKit cache
        run: task setup:cache

      - name: Check Docker Buildx
        id: check-buildx
        run: |
          if command -v docker &> /dev/null && docker buildx version &> /dev/null; then
            echo "exists=true" >> $GITHUB_OUTPUT
            echo "Docker Buildx already available: $(docker buildx version)"
          else
            echo "exists=false" >> $GITHUB_OUTPUT
            echo "Docker Buildx not found"
          fi

      - name: Set up Docker Buildx
        if: steps.check-buildx.outputs.exists != 'true'
        uses: docker/setup-buildx-action@v3
        with:
          driver: docker-container
          use: true
          name: spinbox-builder
          driver-opts: |
            image=moby/buildkit:latest
            network=host
          buildkitd-flags: --allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host
          buildkitd-config-inline: |
            [worker.oci]
              max-parallelism = 4
            [worker.containerd]
              gc = true
              gckeepstorage = 50000000000
              [[worker.containerd.gcpolicy]]
                keepBytes = 50000000000
                keepDuration = 1209600
                filters = [ "type==source.local", "type==exec.cachemount", "type==source.git.checkout"]

      - name: Login to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Build release tarball
        env:
          VERSION: ${{ inputs.version || github.ref_name }}
        run: task release

      - name: Push sandbox image
        env:
          VERSION: ${{ inputs.version || github.ref_name }}
          GITHUB_REPOSITORY: ${{ github.repository }}
        run: task release:image

      - name: Upload release assets
        if: startsWith(github.ref, 'refs/tags/')
        uses: softprops/action-gh-release@v2
        with:
          files: _output/release/*.tar.gz

      - name: Cleanup BuildKit cache
        if: always()
        run: |
          find /var/lib/spinbox-buildkit-cache -type f -mtime +60 -delete || true
          echo "BuildKit cache cleanup complete"