build-php.yml

name: Build PHP Images (reusable)

on:
  workflow_call:
    inputs:
      php:
        description: "PHP version short code (e.g. 83, 84, 85)"
        required: true
        type: string
      version:
        description: "Version tag from latest stable php-src release matching installed apk version (e.g. 8.5.4). Leave empty to skip."
        required: false
        type: string
      platforms:
        description: "Target platforms"
        required: false
        type: string
        default: "linux/amd64,linux/arm64"
      skip_tests:
        description: "Skip running tests (faster, less safe)"
        required: false
        type: boolean
        default: false
    secrets:
      DOCKERHUB_USERNAME:
        required: true
      DOCKERHUB_TOKEN:
        required: true

env:
  REGISTRY: skilldlabs/php
  GHCR_REGISTRY: ghcr.io/skilld-labs/php
  COMPOSER_HASH: "c8b085408188070d5f52bcfe4ecfbee5f727afa458b2573b8eaaf77b3419b0bf2768dc67c86944da1544f06fa544fd47"
  DRUSH_VERSION: "8.5.0"

permissions:
  contents: read
  packages: write

jobs:
  build-base:
    runs-on: ubuntu-latest
    outputs:
      image: ${{ steps.tags.outputs.base_tag }}
    steps:
      - uses: actions/checkout@v6
      - uses: docker/setup-qemu-action@v4
      - uses: docker/setup-buildx-action@v4
      - uses: docker/login-action@v4
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}
      - uses: docker/login-action@v4
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Generate tags
        id: tags
        run: |
          TAGS="${{ env.REGISTRY }}:${{ inputs.php }},${{ env.GHCR_REGISTRY }}:${{ inputs.php }}"
          if [ -n "${{ inputs.version }}" ]; then
            TAGS="${TAGS},${{ env.REGISTRY }}:${{ inputs.version }},${{ env.GHCR_REGISTRY }}:${{ inputs.version }}"
          fi
          echo "tags=${TAGS}" >> "$GITHUB_OUTPUT"
          echo "base_tag=${{ env.REGISTRY }}:${{ inputs.php }}" >> "$GITHUB_OUTPUT"

      - uses: docker/build-push-action@v7
        id: build
        with:
          context: php${{ inputs.php }}
          platforms: linux/amd64
          push: false
          load: true
          tags: ${{ steps.tags.outputs.base_tag }}
          build-args: |
            COMPOSER_HASH=${{ env.COMPOSER_HASH }}
            DRUSH_VERSION=${{ env.DRUSH_VERSION }}
            BUILD_DATE=${{ github.event.repository.updated_at }}
            VCS_REF=${{ github.sha }}
          cache-from: type=registry,ref=skilldlabs/php:buildcache
          cache-to: type=registry,ref=skilldlabs/php:buildcache,mode=max

      - name: Test base image
        if: ${{ !inputs.skip_tests }}
        run: |
          PHPV=$(echo "${{ inputs.php }}" | sed 's/^\(.\)\(.\)$/\1.\2/')
          tests/run-test.sh ${{ steps.tags.outputs.base_tag }} ${PHPV} base

      - uses: docker/build-push-action@v7
        with:
          context: php${{ inputs.php }}
          platforms: ${{ inputs.platforms }}
          push: true
          tags: ${{ steps.tags.outputs.tags }}
          build-args: |
            COMPOSER_HASH=${{ env.COMPOSER_HASH }}
            DRUSH_VERSION=${{ env.DRUSH_VERSION }}
            BUILD_DATE=${{ github.event.repository.updated_at }}
            VCS_REF=${{ github.sha }}
          cache-from: type=registry,ref=skilldlabs/php:buildcache
          cache-to: type=registry,ref=skilldlabs/php:buildcache,mode=max

  build-fpm:
    needs: build-base
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
      - uses: docker/setup-qemu-action@v4
      - uses: docker/setup-buildx-action@v4
      - uses: docker/login-action@v4
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}
      - uses: docker/login-action@v4
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Generate tags
        id: tags
        run: |
          TAGS="${{ env.REGISTRY }}:${{ inputs.php }}-fpm,${{ env.GHCR_REGISTRY }}:${{ inputs.php }}-fpm"
          if [ -n "${{ inputs.version }}" ]; then
            TAGS="${TAGS},${{ env.REGISTRY }}:${{ inputs.php }}-fpm-${{ inputs.version }},${{ env.GHCR_REGISTRY }}:${{ inputs.php }}-fpm-${{ inputs.version }}"
          fi
          echo "tags=${TAGS}" >> "$GITHUB_OUTPUT"
          echo "base_tag=${{ env.REGISTRY }}:${{ inputs.php }}-fpm" >> "$GITHUB_OUTPUT"

      - uses: docker/build-push-action@v7
        id: build
        with:
          context: php${{ inputs.php }}-fpm
          platforms: linux/amd64
          push: false
          load: true
          tags: ${{ steps.tags.outputs.base_tag }}
          build-args: |
            BUILD_DATE=${{ github.event.repository.updated_at }}
            VCS_REF=${{ github.sha }}
          cache-from: type=registry,ref=skilldlabs/php:buildcache
          cache-to: type=registry,ref=skilldlabs/php:buildcache,mode=max

      - name: Test FPM image
        if: ${{ !inputs.skip_tests }}
        run: |
          PHPV=$(echo "${{ inputs.php }}" | sed 's/^\(.\)\(.\)$/\1.\2/')
          tests/run-test.sh ${{ steps.tags.outputs.base_tag }} ${PHPV} fpm

      - uses: docker/build-push-action@v7
        with:
          context: php${{ inputs.php }}-fpm
          platforms: ${{ inputs.platforms }}
          push: true
          tags: ${{ steps.tags.outputs.tags }}
          build-args: |
            BUILD_DATE=${{ github.event.repository.updated_at }}
            VCS_REF=${{ github.sha }}
          cache-from: type=registry,ref=skilldlabs/php:buildcache
          cache-to: type=registry,ref=skilldlabs/php:buildcache,mode=max

  build-unit:
    needs: build-base
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
      - uses: docker/setup-qemu-action@v4
      - uses: docker/setup-buildx-action@v4
      - uses: docker/login-action@v4
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}
      - uses: docker/login-action@v4
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Generate tags
        id: tags
        run: |
          TAGS="${{ env.REGISTRY }}:${{ inputs.php }}-unit,${{ env.GHCR_REGISTRY }}:${{ inputs.php }}-unit"
          if [ -n "${{ inputs.version }}" ]; then
            TAGS="${TAGS},${{ env.REGISTRY }}:${{ inputs.php }}-unit-${{ inputs.version }},${{ env.GHCR_REGISTRY }}:${{ inputs.php }}-unit-${{ inputs.version }}"
          fi
          echo "tags=${TAGS}" >> "$GITHUB_OUTPUT"
          echo "base_tag=${{ env.REGISTRY }}:${{ inputs.php }}-unit" >> "$GITHUB_OUTPUT"

      - uses: docker/build-push-action@v7
        id: build
        with:
          context: php${{ inputs.php }}-unit
          platforms: linux/amd64
          push: false
          load: true
          tags: ${{ steps.tags.outputs.base_tag }}
          build-args: |
            BUILD_DATE=${{ github.event.repository.updated_at }}
            VCS_REF=${{ github.sha }}
          cache-from: type=registry,ref=skilldlabs/php:buildcache
          cache-to: type=registry,ref=skilldlabs/php:buildcache,mode=max

      - name: Test Unit image
        if: ${{ !inputs.skip_tests }}
        run: |
          PHPV=$(echo "${{ inputs.php }}" | sed 's/^\(.\)\(.\)$/\1.\2/')
          tests/run-test.sh ${{ steps.tags.outputs.base_tag }} ${PHPV} unit

      - uses: docker/build-push-action@v7
        with:
          context: php${{ inputs.php }}-unit
          platforms: ${{ inputs.platforms }}
          push: true
          tags: ${{ steps.tags.outputs.tags }}
          build-args: |
            BUILD_DATE=${{ github.event.repository.updated_at }}
            VCS_REF=${{ github.sha }}
          cache-from: type=registry,ref=skilldlabs/php:buildcache
          cache-to: type=registry,ref=skilldlabs/php:buildcache,mode=max

  build-unit-dev:
    needs: build-unit
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
      - uses: docker/setup-qemu-action@v4
      - uses: docker/setup-buildx-action@v4
      - uses: docker/login-action@v4
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}
      - uses: docker/login-action@v4
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Generate tags
        id: tags
        run: |
          echo "tags=${{ env.REGISTRY }}:${{ inputs.php }}-unit-dev,${{ env.GHCR_REGISTRY }}:${{ inputs.php }}-unit-dev" >> "$GITHUB_OUTPUT"

      - uses: docker/build-push-action@v7
        with:
          context: unit-php-builder/dev
          platforms: ${{ inputs.platforms }}
          push: true
          tags: ${{ steps.tags.outputs.tags }}
          build-args: |
            PHPV=${{ inputs.php }}
            BUILD_DATE=${{ github.event.repository.updated_at }}
            VCS_REF=${{ github.sha }}
          cache-from: type=registry,ref=skilldlabs/php:buildcache
          cache-to: type=registry,ref=skilldlabs/php:buildcache,mode=max