ci.yml

name: CI Pipeline

on:
  push:
    branches: [dev]
    paths-ignore:
      - '**.md'
  pull_request:
    branches: [dev]
  workflow_dispatch:

permissions:
  contents: write
  packages: write

jobs:
  prepare:
    runs-on: ubuntu-24.04
    # compute a single timestamp, version, and repo metadata for the entire workflow
    outputs:
      repo_owner: ${{ steps.meta.outputs.repo_owner }}
      repo_name: ${{ steps.meta.outputs.repo_name }}
      branch_tag: ${{ steps.meta.outputs.branch_tag }}
      version: ${{ steps.version.outputs.version }}
      timestamp: ${{ steps.timestamp.outputs.timestamp }}

    steps:
      - uses: actions/checkout@v6
        with:
          fetch-depth: 0
          token: ${{ secrets.GITHUB_TOKEN }}

      - name: Generate timestamp for build
        id: timestamp
        run: |
          TIMESTAMP=$(date -u +'%Y%m%d%H%M%S')
          echo "timestamp=${TIMESTAMP}" >> $GITHUB_OUTPUT

      - name: Extract version info
        id: version
        run: |
          VERSION=$(python -c "import version; print(version.__version__)")
          echo "version=${VERSION}" >> $GITHUB_OUTPUT

      - name: Set repository and image metadata
        id: meta
        run: |
          REPO_OWNER=$(echo "${{ github.repository_owner }}" | tr '[:upper:]' '[:lower:]')
          echo "repo_owner=${REPO_OWNER}" >> $GITHUB_OUTPUT

          REPO_NAME=$(echo "${{ github.repository }}" | cut -d '/' -f 2 | tr '[:upper:]' '[:lower:]')
          echo "repo_name=${REPO_NAME}" >> $GITHUB_OUTPUT

          if [[ "${{ github.ref }}" == "refs/heads/main" ]]; then
            echo "branch_tag=latest" >> $GITHUB_OUTPUT
            echo "is_main=true" >> $GITHUB_OUTPUT
          elif [[ "${{ github.ref }}" == "refs/heads/dev" ]]; then
            echo "branch_tag=dev" >> $GITHUB_OUTPUT
            echo "is_main=false" >> $GITHUB_OUTPUT
          else
            BRANCH=$(echo "${{ github.ref }}" | sed 's/refs\/heads\///' | sed 's/[^a-zA-Z0-9]/-/g')
            echo "branch_tag=${BRANCH}" >> $GITHUB_OUTPUT
            echo "is_main=false" >> $GITHUB_OUTPUT
          fi

          if [[ "${{ github.event.pull_request.head.repo.fork }}" == "true" ]]; then
            echo "is_fork=true" >> $GITHUB_OUTPUT
          else
            echo "is_fork=false" >> $GITHUB_OUTPUT
          fi

  docker:
    needs: [prepare]
    strategy:
      fail-fast: false
      matrix:
        platform: [amd64, arm64]
        include:
          - platform: amd64
            runner: ubuntu-24.04
          - platform: arm64
            runner: ubuntu-24.04-arm
    runs-on: ${{ matrix.runner }}
    # no per-job outputs here; shared metadata comes from the `prepare` job
    steps:
      - uses: actions/checkout@v6
        with:
          fetch-depth: 0
          token: ${{ secrets.GITHUB_TOKEN }}

      - name: Configure Git
        run: |
          git config user.name "GitHub Actions"
          git config user.email "actions@github.com"

      - name: Check if commit is from GitHub Actions
        id: check_actor
        run: |
          if [[ "${{ github.actor }}" == "github-actions" ]]; then
            echo "is_bot=true" >> $GITHUB_OUTPUT
          else
            echo "is_bot=false" >> $GITHUB_OUTPUT
          fi

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v4

      - name: Login to GitHub Container Registry
        uses: docker/login-action@v4
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Login to Docker Hub
        if: github.event_name != 'pull_request'
        uses: docker/login-action@v4
        with:
          registry: docker.io
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

      - name: Extract metadata for Docker
        id: meta
        uses: docker/metadata-action@v6
        with:
          images: |
            ghcr.io/${{ needs.prepare.outputs.repo_owner }}/${{ needs.prepare.outputs.repo_name }}
            docker.io/${{ secrets.DOCKERHUB_ORGANIZATION }}/${{ needs.prepare.outputs.repo_name }}
          labels: |
            org.opencontainers.image.title=${{ needs.prepare.outputs.repo_name }}
            org.opencontainers.image.description=Your ultimate IPTV & stream Management companion.
            org.opencontainers.image.url=https://github.com/${{ github.repository }}
            org.opencontainers.image.source=https://github.com/${{ github.repository }}
            org.opencontainers.image.version=${{ needs.prepare.outputs.version }}-${{ needs.prepare.outputs.timestamp }}
            org.opencontainers.image.created=${{ needs.prepare.outputs.timestamp }}
            org.opencontainers.image.revision=${{ github.sha }}
            org.opencontainers.image.licenses=See repository
            org.opencontainers.image.documentation=https://dispatcharr.github.io/Dispatcharr-Docs/
            org.opencontainers.image.vendor=${{ needs.prepare.outputs.repo_owner }}
            org.opencontainers.image.authors=${{ github.actor }}
            maintainer=${{ github.actor }}
            build_version=Dispatcharr version: ${{ needs.prepare.outputs.version }}-${{ needs.prepare.outputs.timestamp }}

      - name: Build and push Docker image
        uses: docker/build-push-action@v7
        with:
          context: .
          push: ${{ github.event_name != 'pull_request' }}
          # Build only the platform for this matrix job to avoid running amd64
          # stages under qemu on an arm64 runner (and vice-versa). This makes
          # the matrix runner's platform the one built by buildx.
          platforms: linux/${{ matrix.platform }}
          # push arch-specific tags from each matrix job (they will be combined
          # into a multi-arch manifest in a follow-up job)
          tags: |
            ghcr.io/${{ needs.prepare.outputs.repo_owner }}/${{ needs.prepare.outputs.repo_name }}:${{ needs.prepare.outputs.branch_tag }}-${{ matrix.platform }}
            ghcr.io/${{ needs.prepare.outputs.repo_owner }}/${{ needs.prepare.outputs.repo_name }}:${{ needs.prepare.outputs.version }}-${{ needs.prepare.outputs.timestamp }}-${{ matrix.platform }}
            ${{ github.event_name != 'pull_request' && format('docker.io/{0}/{1}:{2}-{3}', secrets.DOCKERHUB_ORGANIZATION, needs.prepare.outputs.repo_name, needs.prepare.outputs.branch_tag, matrix.platform) || '' }}
            ${{ github.event_name != 'pull_request' && format('docker.io/{0}/{1}:{2}-{3}-{4}', secrets.DOCKERHUB_ORGANIZATION, needs.prepare.outputs.repo_name, needs.prepare.outputs.version, needs.prepare.outputs.timestamp, matrix.platform) || '' }}
          labels: ${{ steps.meta.outputs.labels }}
          build-args: |
            REPO_OWNER=${{ needs.prepare.outputs.repo_owner }}
            REPO_NAME=${{ needs.prepare.outputs.repo_name }}
            BASE_TAG=base
            BRANCH=${{ github.ref_name }}
            REPO_URL=https://github.com/${{ github.repository }}
            TIMESTAMP=${{ needs.prepare.outputs.timestamp }}
          file: ./docker/Dockerfile

  create-manifest:
    # wait for prepare and all matrix builds to finish
    needs: [prepare, docker]
    runs-on: ubuntu-24.04
    if: ${{ github.event_name != 'pull_request' }}
    steps:
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v4

      - name: Login to GitHub Container Registry
        uses: docker/login-action@v4
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Login to Docker Hub
        uses: docker/login-action@v4
        with:
          registry: docker.io
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

      - name: Create multi-arch manifest tags
        run: |
          set -euo pipefail
          OWNER=${{ needs.prepare.outputs.repo_owner }}
          REPO=${{ needs.prepare.outputs.repo_name }}
          BRANCH_TAG=${{ needs.prepare.outputs.branch_tag }}
          VERSION=${{ needs.prepare.outputs.version }}
          TIMESTAMP=${{ needs.prepare.outputs.timestamp }}

          echo "Creating multi-arch manifest for ${OWNER}/${REPO}"

          # ghcr.io: both the branch tag (e.g. dev) and the version+timestamp tag
          # point to the same manifest by using multiple --tag flags in one call,
          # which prevents orphaned untagged images on each new build
          docker buildx imagetools create \
            --annotation "index:org.opencontainers.image.title=${{ needs.prepare.outputs.repo_name }}" \
            --annotation "index:org.opencontainers.image.description=Your ultimate IPTV & stream Management companion." \
            --annotation "index:org.opencontainers.image.url=https://github.com/${{ github.repository }}" \
            --annotation "index:org.opencontainers.image.source=https://github.com/${{ github.repository }}" \
            --annotation "index:org.opencontainers.image.version=${VERSION}-${TIMESTAMP}" \
            --annotation "index:org.opencontainers.image.created=${TIMESTAMP}" \
            --annotation "index:org.opencontainers.image.revision=${{ github.sha }}" \
            --annotation "index:org.opencontainers.image.licenses=See repository" \
            --annotation "index:org.opencontainers.image.documentation=https://dispatcharr.github.io/Dispatcharr-Docs/" \
            --annotation "index:org.opencontainers.image.vendor=${OWNER}" \
            --annotation "index:org.opencontainers.image.authors=${{ github.actor }}" \
            --annotation "index:maintainer=${{ github.actor }}" \
            --annotation "index:build_version=Dispatcharr version: ${VERSION}-${TIMESTAMP}" \
            --tag ghcr.io/${OWNER}/${REPO}:${BRANCH_TAG} \
            --tag ghcr.io/${OWNER}/${REPO}:${VERSION}-${TIMESTAMP} \
            ghcr.io/${OWNER}/${REPO}:${BRANCH_TAG}-amd64 ghcr.io/${OWNER}/${REPO}:${BRANCH_TAG}-arm64

          # Docker Hub: same single call with both tags
          docker buildx imagetools create \
            --annotation "index:org.opencontainers.image.title=${{ needs.prepare.outputs.repo_name }}" \
            --annotation "index:org.opencontainers.image.description=Your ultimate IPTV & stream Management companion." \
            --annotation "index:org.opencontainers.image.url=https://github.com/${{ github.repository }}" \
            --annotation "index:org.opencontainers.image.source=https://github.com/${{ github.repository }}" \
            --annotation "index:org.opencontainers.image.version=${VERSION}-${TIMESTAMP}" \
            --annotation "index:org.opencontainers.image.created=${TIMESTAMP}" \
            --annotation "index:org.opencontainers.image.revision=${{ github.sha }}" \
            --annotation "index:org.opencontainers.image.licenses=See repository" \
            --annotation "index:org.opencontainers.image.documentation=https://dispatcharr.github.io/Dispatcharr-Docs/" \
            --annotation "index:org.opencontainers.image.vendor=${OWNER}" \
            --annotation "index:org.opencontainers.image.authors=${{ github.actor }}" \
            --annotation "index:maintainer=${{ github.actor }}" \
            --annotation "index:build_version=Dispatcharr version: ${VERSION}-${TIMESTAMP}" \
            --tag docker.io/${{ secrets.DOCKERHUB_ORGANIZATION }}/${REPO}:${BRANCH_TAG} \
            --tag docker.io/${{ secrets.DOCKERHUB_ORGANIZATION }}/${REPO}:${VERSION}-${TIMESTAMP} \
            docker.io/${{ secrets.DOCKERHUB_ORGANIZATION }}/${REPO}:${BRANCH_TAG}-amd64 docker.io/${{ secrets.DOCKERHUB_ORGANIZATION }}/${REPO}:${BRANCH_TAG}-arm64