manticoresearch/dist/test_kit_docker_push.sh

#!/bin/bash
set -e

[ -n "$GHCR_USER" ] && echo "$GHCR_PASSWORD" | docker login -u"$GHCR_USER" --password-stdin ghcr.io

if ! (docker info | grep Username) > /dev/null 2>&1; then
  echo "Can't authorise to GHCR docker registry"
  exit 1
fi

# Helper to fix tag naming from branch -> docker tag allowance
sanitize_tag() {
    local name=$1
    # Replace / with _
    name=$(echo "$name" | tr '/' '_')
    # Remove all characters that are not allowed in Docker tags
    # Docker tag rules: https://docs.docker.com/engine/reference/commandline/tag/
    # Tags can only contain lowercase and uppercase letters, digits, underscores, periods, and dashes
    name=$(echo "$name" | sed 's/[^a-zA-Z0-9_.-]//g')
    echo "$name"
}

# Current branch name
if [ "$GITHUB_EVENT_NAME" == "pull_request" ]; then
	current_branch="$GITHUB_HEAD_REF"
else
	current_branch="$GITHUB_REF_NAME"
fi

should_push_main=0
if [ "$TEST_RESULT" != "failure" ]; then
	should_push_main=1
fi

hub_repo="ghcr.io/${REPO_OWNER}/manticoresearch"
img_url="${hub_repo}:test-kit-${BUILD_COMMIT}"
images=("$img_url")
[[ $current_branch == "master" ]] \
  && img_url_latest="${hub_repo}:test-kit-latest" \
  && images+=("$img_url_latest") \
  || img_url_latest=""

# Get the latest tag from the git references
# Check if any tag exists
latest_tag=$(git describe --abbrev=0 --tags 2>/dev/null || echo "")

# Assign the current branch or tag to the appropriate variable
if [ -n "$latest_tag" ]; then
	img_url_tag="${hub_repo}:test-kit-$(sanitize_tag "$latest_tag")"
	images+=("$img_url_tag")
fi

if [ "$current_branch" != "master" ]; then
	img_url_branch="${hub_repo}:test-kit-$(sanitize_tag "$current_branch")"
	images+=("$img_url_branch")
fi

img_url_hash=
if [ "${HASH_TAG_OK}" == "true" ] && [ -n "${SOURCE_HASH}" ]; then
	if [ -n "${BRANCH_TAG}" ]; then
		hash_branch_tag="${BRANCH_TAG}"
	else
		hash_branch_tag="$(sanitize_tag "$current_branch")"
	fi
	img_url_hash="${hub_repo}:test-kit-${hash_branch_tag}-${SOURCE_HASH}"
	images+=("$img_url_hash")
fi

# if we should skip pushing main branch and only commit, we reset latest tag
if [ "$should_push_main" -eq 0 ]; then
	img_url_latest=
fi

echo "Going to push to '$img_url' and ('$img_url_latest', '$img_url_tag', '$img_url_branch', '$img_url_hash') (if not empty) if there's access to the registry"

# exporting the image, it also squashes all the layers into one
docker import ./manticore_test_kit.img "$img_url"
[ -n "$img_url_latest" ] && docker tag "$img_url" "$img_url_latest"
[ -n "$img_url_tag" ] && docker tag "$img_url" "$img_url_tag"
[ -n "$img_url_branch" ] && docker tag "$img_url" "$img_url_branch"
[ -n "$img_url_hash" ] && docker tag "$img_url" "$img_url_hash"

# pusing to ghcr.io
[ -n "$GHCR_USER" ] && for img in "${images[@]}"; do
	docker push "$img" \
	  && echo "❗ Pushed the image to $img" \
      && echo "Pushed test-kit to $img" >> "$GITHUB_STEP_SUMMARY" \
	  || echo "❗ Couldn't push the image to $img"
done || echo "Skipped pushing to repo, because GHCR_USER is not set"